New Posts
Live Radio
Welcome guest, is this your first visit?
  • Login:
CakePoker.com Affiliate Program
+ Reply to Thread
Page 1 of 3 1 2 3 LastLast
Results 1 to 10 of 21
  1. #1
    MPC
    MPC is offline
    Senior Member
    My Status
     

    Add as a friend
    Join Date
    Nov 2008
    Location
    Canada Eh?
    Posts
    1,377
    Blog Entries
    20
    Feedback Score
    8 (100%)

    Default Site hacked or affected by virus

    My luck as run out. It's my turn!
    xxhttp://www.mypokercorner.com
    Parse error: syntax error, unexpected '<' in /home/thejudge/public_html/wp-includes/default-filters.php on line 231

    A quick search seems to point to a hack. Since there's a lot of WP users here, I'm sure someone must have had this problem before. If so, can you explain how to resolve. I'm unable to fix this for a while. Getting in a car and driving for 3 hours now... So it is what it is I guess. But if someone can be of assistance, please post. This is WP 2.9. I never upgraded to 3.0 after reading some of the horro stories that were posted.
    Last edited by MPC; 08-05-2010 at 07:14 AM.

  2. #2
    PAL's Glenn Beck
    My Status
     

    Add as a friend
    Join Date
    Nov 2008
    Location
    Chillin' in the Ozarks
    Posts
    2,807
    Blog Entries
    18
    Feedback Score
    22 (100%)

    Default

    I'll have Eric check it out ASAP

  3. #3
    Senior Member
    My Status
     

    Add as a friend
    Join Date
    Dec 2008
    Location
    Canada
    Posts
    865
    Blog Entries
    6
    Feedback Score
    30 (100%)

    Default

    Same happened to my 5 sites! i was able to clean up 3 sites from virus and trojan but 2 of them was impossible, so i just update wordpress and worked fine. so you just need to make sure you have your database user and password saved. then have your theme back up, that's all you need for the update.

    good luck.

  4. #4
    MPC
    MPC is offline
    Senior Member
    My Status
     

    Add as a friend
    Join Date
    Nov 2008
    Location
    Canada Eh?
    Posts
    1,377
    Blog Entries
    20
    Feedback Score
    8 (100%)

    Default

    Yeah, this is much worse than I thought. All my sites are affected, including non WP sites. Fuck...

  5. #5
    MPC
    MPC is offline
    Senior Member
    My Status
     

    Add as a friend
    Join Date
    Nov 2008
    Location
    Canada Eh?
    Posts
    1,377
    Blog Entries
    20
    Feedback Score
    8 (100%)

    Default

    I found out that if you visited any of my non WP sites, the trojan tries to install itself on your PC. Had to shut them all down.

    Now we'll see just how good my host support is.

  6. #6
    MPC
    MPC is offline
    Senior Member
    My Status
     

    Add as a friend
    Join Date
    Nov 2008
    Location
    Canada Eh?
    Posts
    1,377
    Blog Entries
    20
    Feedback Score
    8 (100%)

    Default

    As usual with this company, support kicks ass. They responded to my ticket within 15 minutes. They have several backups, listed the dates and asked me to pick one. insiderhosting.com if anyone cares. I've been with them since day one. Never failed me once.

  7. #7
    MPC
    MPC is offline
    Senior Member
    My Status
     

    Add as a friend
    Join Date
    Nov 2008
    Location
    Canada Eh?
    Posts
    1,377
    Blog Entries
    20
    Feedback Score
    8 (100%)

    Default

    I really don't know what to do anymore. I've restored my sites 4 times now. I even did a clean WP install on multiple sites and used the import feature to get the content back in. A few days later, I get hacked again. I just can't keep up. I get the sites back up, the go down in a matter of days after. I even have a new site that I reinstalled from scratch. It has 2 posts. It's still getting infected with the same crap that's hitting MPC.

    All my js files, index.php and a couple of specific php files get modified. I am fucking feed up and I really dont' know what the next step is. I mean, if a clean install doesn't cut it, what the hell am I suppose to do?

    Anywya, I'm going to *try* to enjoy the rest of my vacation and not worry about this POS for now.

  8. #8
    Fabulous Beyond Compare
    My Status
     

    Add as a friend
    Join Date
    Nov 2008
    Location
    America
    Posts
    1,486
    Blog Entries
    1
    Feedback Score
    31 (100%)

    Default

    Is it something u use across the bored on all sites? A script.. ?

    If you move one site to a new host .. reinstall and all that.. does the problem still come back on that site?
    I write about:
    • Poker
    • Sportsbetting
    • Bingo
    • Casinos
    • Forex
    • Online Dating
    • Real Estate

    MSG ME FOR INFO!

    For the latest LadyHoldem Content Specials, Like me on Facebook!

  9. #9
    d[-_-]b
    My Status
     

    Add as a friend
    Join Date
    Apr 2009
    Location
    (◣_◢)
    Posts
    890
    Blog Entries
    2
    Feedback Score
    16 (100%)

    Default

    I had something like this happen before maybe its your ftp that is hacked? I would use a different one do a clean install and lock everything using chmode that is not in use.

    Get Malware Bytes and scan everything on your computer including all your website files it should find anything thats bad the free version will do and if your computer is anything like mine it will take about 4hrs to do a complete scan.
    Diversify with Shareasale & if your a developer its the place to Sell your Stuff.
    Awesome Wordpress themes & html templates from $20 - $50 | Premium plugins & useful scripts form $5

  10. #10
    Member
    My Status
     

    Add as a friend
    Join Date
    Oct 2009
    Location
    US
    Posts
    52
    Feedback Score
    1 (100%)

    Default

    As the above poster said, it could be an issue with your computer that is allowing the FTP to be hacked. Did you change the password for FTP access? Use a password generator from a program like keepass.

    Run the MBAM that pokerworx suggested and see if it comes up with anything.

    Make sure that any file that connects to the DB is properly secured (assuming that you have the password in that file).

    Personally I would uninstall any FTP client that you currently have on your computer (do this before you change your ftp password) using revo uninstaller. Then try just using the host ftp for a few days or so until you know that you are in the clear.

    As was mentioned before you should probably take out any 3rd party scripts that you are running and possibly have someone take a look at them for malicious code.

    Unfortunately, I think that all of this must be done in order to narrow down where the issue is as it seems to be very persistent.


 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

     

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
Powered by vBulletin® Version 4.1.5
Copyright © 2012 vBulletin Solutions, Inc. All rights reserved.
SEO by vBSEO 3.6.0
Affiliate Program Consultant