• Resolved Bunglegirl

    (@bunglegirl)


    My site was hacked and I’m trying to get as much backed up as possible before I reinstall. I’m planning on deleting everything, including the databases because this is all over all of my sites (which are hosted together), not just hose running WordPress. I would like to backup the post and comments and grab a screenshot of my subscribers before I delete.

    I have gone through all of the files and stripped out all of the extra code that I saw—just an iframe with some site address in it at the bottom of all of the .html files and a few others.

    My site has a splash page up now that says it has malicious content. I tell it to ignore and open the page. Now when I try to login to the admin area I put in my name and password, click through the warning pages and it just takes me back to the login page again with no error messages.

    1. My last backup is from 8 months ago and I will lose a ton of work if I go from that. If I can manage to get into my panel and create a backup will it be compromised? If I delete literally everything and go with a fresh install of WP and a fresh database can I still use the backup copy I’ve made? I’ve never installed from a backup before.

    2. I’ve spent hours looking through these forums for solutions to the login problem. I’ve tried changing passwords, clearing cache and cookies, deleting plugins and going into the database directly but nothing works.

    3. When I go into phpMyAdmin I can see my database but when I click on the browse icon (or anything, really) to go in and change users/passwords etc. the page just reloads. I can’t get further in to make changes. I worry that the hacking is even further than I thought.

    Any ideas?

    I’m not sure what version I’m running, only that its quite old, probably from 2006. I know, I know! I was out of the country for a long time without adequate access to upgrade then I resisted updating because it would break my theme.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter Bunglegirl

    (@bunglegirl)

    I should add that I’m not get a “wrong password” message. I have tried saying “I forgot my password” but nothing is emailed to me. I also have used the emergency password retrieval file (and since deleted it!) but that didn’t send me an email or seem to change the password anywhere either.

    All you need is just to get your database ( allegedly infected ) as a backup file. Then you could restore your entire blog.

    Try https://codex.www.ads-software.com/Backing_Up_Your_Database

    If you can’t

    When I go into phpMyAdmin I can see my database but when I click on the browse icon (or anything, really) to go in and change users/passwords etc. the page just reloads.

    try to perform this on another computer.

    If you manage to get backup file, get clean WP 2.8.5 install in the new sub-folder on your site.

    Import your database there but make sure to change “siteURL” and “Home” links in that database.

    Do that by unzipping .sql file and open it in the plain test editor, even MS Notepad would work.

    Type in search

    siteURL

    when it’s highlighted in search, just add your sub-folder where you are going to install test blog,

    like https://www.yoursite.com change to https://www.yoursite.com/test

    then save it

    do the same with “home” and save it.

    Zip that file back, it uploads faster when zipped.

    Use 7-zip free app for that.

    Let us know how it works that we would think what next.

    Also use this link for your reference https://codex.www.ads-software.com/Moving_WordPress

    Thread Starter Bunglegirl

    (@bunglegirl)

    Thanks for the detailed response. I’ll get to work on this and let you know how it goes.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Hacked – Trying to backup’ is closed to new replies.