mistral7-wporg

More information to answer a2hostingrj’s query re hackers.

These gentle people not only wrecked my websites but also majorly invaded my laptop.

I fixed the laptop by doing a full re-install of windows 10
Description of process runs from the lead-in page https://besthow-to.com/cm/hacked-off/ to the full process https://besthow-to.com/cm/computer-recovery/

Presently working on what I did to recover my websites (not finished yet)
https://besthow-to.com/cm/site-recovery/

Hope that answers you query.
Regards

OK, just changed network on my machine with HMA!
I now get a redirect to sweetblogspot.com

Dunno what is happening here!

Hello a2hostingrj and Pioneer Web Design

Thank you for your responses.

Firstly, the basic site is protected with wordfence, and a scan does not show any errors.

Second, I would include screenshots if I could but there does not seem any way to attach them.

third. I have checked the site link https://affiliatemarketingreviews.sweetblogspot.com
on another machine and the site redirects to https://sweetblogspot.com

Ummm – a question to Pioneer Web Design – As my hosting seems to have stopped communicating with me, what should I be looking for in internal setup?

If I put the screenshots on a page, would you be able to view them – other recourse is to email them to you.
Thank you

XXXX

OK, dumbo, here, forgot to engage brain and superadmin login.
I now have site, but another issue arises – fresh topic – privacy error

Hello
Yes, that is the correct title info. Problem I have is that I get a residual text being a remnant of the hacker in the info associated with the website updater I am using. It now seems the problem is particular to the website updater, and since posting, I discover my ISP has blocked the website updater. I am now sure that is where the problem lays. ie. the website updater cannot refresh and correct.
Hi ho, hi ho, to the ISP I go…
Thank you for your interest in helping.
Regards

Thank you, email report sent.

Hi t-p
Tried your suggestions.
Access via cpanel works so renamed all plugins, renamed all but wp seventeen, themes, renamed .htaccess, all with no improvement.

What I have noticed whilst checking another site via cpanel this morning, is this particular site I have the problem with suddenly came up in the file manager address line, but files were correct for the site I was checking.
Methinks there is a fundamental problem with the server.

Now, if I could just get the ISP to talk with me ….

Appreciate your assistance with this.

Regards

Thank you Josiah and Caleb.

I now have a much better idea of the issues.
It is significant that when I comment out the three lines referred to but leave in-place the wp-config.php entry of “define(‘FORCE_SSL_ADMIN’, true);” I still get a redirect to https, and websiteremote can access the site. The websiteremote access url is set as https.
I think I need some answers from the websiteremote support team as to why the redirect instruction in the .htaccess fails them.

Thank you very much for your enlightenment and prompt response.

I have had several sites hacked and destroyed by these vermin we call hackers.
My problem I could not resolve was the permalinks setting page entry for the website.

I did then remove all but wp-content, .htaccess, and wp-config.php
This removal was, to my limited understanding, to remove any contaminated files and enable a fresh install. Problem now is when I try to go to the site (https://sweetblogspot.com) I get a blank screen. At my wits end and the ISP is not responding.
I have changed the dbase password, just in case that was altered.
Anyone with ideas other than turning the system off ???

Perhaps the real solution is to delete the wp and re-install

Hi, the source of the problem I believe, is in the locked changes to the permalinks page settings. I can’t send an image of the page to better describe this, and to give a link to it would require disclosing the password.

The Common Settings entry is https://redirect4.xyz/?p=123

Even as super admin I cannot change this.

Hi nnikolov, resolved the problem when I removed a well-disguised “foreign” file. Our hacker excuses for human beings had been busy.
Site now stable, thank you.

Regards
Ken

OK, removed instalation, created new database, adjusted wp-config.php to point to new dbase.
Uploaded wp files.
used wp-admin/install.php
Then:
Tried to upload theme using wp theme upload zip file routine.
Got this response:
Unable to create directory wp-content/uploads/2016/07. Is its parent directory writable by the server?

File permissions for subdomain, wp-content, all set to 755.

Not giving up, but crawling to the back of the cave is an option, right now.

Finally!
Changed all permissions from subdomain to wp-content to 777 – feeling a bit apprehensive but this is working, right now. Shall winnow the settings down until path fails.

Hi Keith, Thanks for your prompt reply.
Yes, have been about for a bit and that is why I am scratching my head.
I am using the “upload file” link within WP – in the plugins page area.

I can see the media that has been uploaded via the “wp-content/uploads/2016/07” – all media.

Maybe there is a switch somewhere – clutching at straws, here. Should I remove the “upload” folder I placed under wp-contents.
I used a fresh database to avoid any cross-over problems.
Lost in the wilderness.