Topic: Site hacked :S? · BuddyPress.org

Site hacked :S?

nickmy
Participant

@nickmy

13 years, 7 months ago

Hello

I’m using the newest version of BP & WordPress and I think my site is hacked

during a backup I found a file called 29.php a folder called .log with lots of html files and my index.php file now has a code snippet which the original wordpress index.php file dont have:
¸``

how could that happen ?

Viewing 7 replies - 1 through 7 (of 7 total)

nickmy
Participant

@nickmy

13 years, 7 months ago

hello again

I just noticed that every index.php file has this at the end:
`¸`

modemlooper
Moderator

@modemlooper

13 years, 7 months ago

You most likely have a trojan on your computer that stole your FTP passwords. If you are on a windows PC take a sledge hammer to it and get a MAC. <– just kidding. You should run some anti-virus and change all your passwords ASAP.

https://codex.wordpress.org/FAQ_My_site_was_hacked
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/

nickmy
Participant

@nickmy

13 years, 7 months ago

I’m using linux

modemlooper
Moderator

@modemlooper

13 years, 7 months ago

Only way your files can get written to is by someone getting your FTP passwords or has access to server. That is easily done if you get a virus/malware on your computer. Is somebody else accessing the FTP on another computer? Also, bad themes and plugins can do this as well. NEVER use a plugin or theme that was not from a reputable developer or from the WordPress repo.

nickmy
Participant

@nickmy

13 years, 7 months ago

It is a shared hosting.. .

plugins :
akismet,bp-album,buddypress,buddypress-links,buddypress-registration-groups,buddypress-sliding login panel,category-post,exlude-pages,inbox-widget,post-highlihts,private-buddypress & wp-fb-autoconnect

I dont thinkt that this plugins can do this.

nickmy
Participant

@nickmy

13 years, 7 months ago

@modemlooper is this just a virus for accessing the ftp passwort?

A friend told me that he 1 times used windows on hic pc to connect to that site.

louie5055
Member

@louie5055

13 years, 7 months ago

the log file on your sharing server, my guess shared sever is your problem.