Hacked

  • Resolved nezi123

    (@nezi123)


    7 years, 5 months ago

    Hey Guy’s,
    Our site (crosswalkcounseling.net) was hacked. I have spent the last several days trying to clean everything up and I keep running into issues.

    1. The theme is not showing up correctly. I customized it originally so Im not sure what re-uploading it would do.
    2. When I run a traceroute on our site it show that it is routing to europe. We are a small town US based business so this is the hackers fix. I need to remove it.
    3. I would like to re-upload the WP core files to see if it fixes some of my other issues, however, I am not sure what exactly the core files are.

    Your assistance would be much appreciated.

    Thanks

Viewing 11 replies - 1 through 11 (of 11 total)

  • Hi,

    Our recommendation is to install WordFence Security and scan your WordPress installation. It will audit your website for security issues so you can address them.

    Remain calm and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures

    • This reply was modified 7 years, 5 months ago by luckychingi.

    3. WodrPress core files are those files (and folders) contained in a latest.zip file you can download from https://www.ads-software.com/latest.zip

    Regarding traceroute to your website, you can’t really do anything about it. It goes as it goes and the fact that it goes to Europe doesn’t have anything to do with hacking. Here’s traceroute from my place (Europe) to your website

    C:\Users\sinip>tracert crosswalkcounseling.net

    Tracing route to crosswalkcounseling.net [74.208.236.238]
    over a maximum of 30 hops:

    1 2 ms 1 ms 1 ms 192.168.1.1
    2 2 ms 2 ms 2 ms 192.168.2.1
    3 * * * Request timed out.
    4 11 ms 10 ms 10 ms 100.71.0.1
    5 11 ms 11 ms 11 ms 100.64.255.254
    6 * * * Request timed out.
    7 * * * Request timed out.
    8 23 ms 29 ms 30 ms 212.200.7.84
    9 * * * Request timed out.
    10 27 ms 26 ms 45 ms xe-3-0-0.cr0-vie2.ip4.gtt.net [77.67.95.93]
    11 161 ms 161 ms 161 ms et-10-1-0.cr3-dal3.ip4.gtt.net [89.149.182.238]
    12 176 ms 174 ms 174 ms 1u1-internet-gw.ip4.gtt.net [173.205.60.174]
    13 172 ms 176 ms 171 ms ae-7.bb-c.ws.mkc.us.oneandone.net [74.208.1.65]
    14 170 ms 169 ms 170 ms 74-208-236-238.elastic-ssl.ui-r.com [74.208.236.238]

    Trace complete.

    Thread Starter nezi123

    (@nezi123)

    Thanks Guys….

    One more question: when setting up wordpress originally, I remember having to do something to get the domain name to point to my index.php file that opened my actual page. Can you remind me what that process was?

    Thanks…

    It goes by adjusting your domain name servers (at your domain registrar) to those provided by your hosting company. Also you need to set up your domain in hosting cPanel (or equivalent) to point to a folder where WordPress is installed, usually (but not mandatory) to public_html.

    Thread Starter nezi123

    (@nezi123)

    Alright guys, my admin page is no longer accessible. I have followed the instructions located here: https://goo.gl/x4rrLw as well as updated all db passwords.

    I am able login to the site. but the admin panel doesn’t show up.

    Ok, so you get to yourwebsite.com/wp-admin.php, the usual WP login form shows up, you enter user/pass and it appears that you’ll get logged but then you end up with the white screen? What’s the url in the address bar at that moment?

    Thread Starter nezi123

    (@nezi123)

    when I type the wp-login, I get the log in screen with the right url. However, when I log in, it just places the black bar at the top showing that I’m logged in but it doesn’t show the admin panel link.

    If I type the wp-admin, i get a “Sorry, you are not allowed to access this page.” message and it is showing the correct url.

    Ok, you can try to disable all plugins and revert the theme back to Twentysixteen or so.
    You’ll need FTP program or cPanel access to navigate to /wp-content/plugins/ and rename /plugins/ to anything you want. Also navigate to /wp-content/themes/currently-active-theme/ (I suppose you know which one is that) and again rename /currently-active-theme/ to anything you want. See what happens after that.

    Thread Starter nezi123

    (@nezi123)

    Ok Guys, I have done everything that my hosting company advised, everything that you guys have advised, as well as a few other things to test and nothing seems to be fixing this issue.

    So, I have decided to just start over from scratch with a clean install. I have set up a WAMP server on my local pc. I installed wordpress without any plugins and my theme. One thing I noticed right off the bat is that my template does not work as expected in the updated version of WP. The customize screen isn’t the original screen from my template. I can’t even get the background image to show up. I also have an extra Home button showing up.

    Anyone know how I can fix this?

    thanks…

    [ No bumping please. ]

    Thread Starter nezi123

    (@nezi123)

    Ok Guy’s I will start a new thread for my unresolved issues.

    Thanks for your assistance…

Viewing 11 replies - 1 through 11 (of 11 total)
  • The topic ‘Hacked’ is closed to new replies.