will426

Hey guys, I checked my website again tonight and the .htaccess files have been rewritten again with that damn url ?? I changed my cpanel password as well, and my joomla passwords. I don’t know what else to do? As mudandroutes said there must be some script running these somewhere ?? Anyone have any ideas? I’d really like to get it fixed!

I also found that my templates folder had been renamed templates_back, and another folder called templates had been made with fewer templates in it. I don’t know what’s going on, any ideas??? Thanks.

Hey mudandroutes, yeah I think my file permission had changed on the file located above public_html folder. I just deleted it and copied another one there with a list of ip addresses I banned, hopefully most relating to that website. My host also said that I should change all my passwords to be sure, including cpanel, joomla (or wordpress if you guys case) and ftp.

Make sure you get every single affect file, especially at the very root of your account, above public_html.

Sorry to hear everyone is having problems, hope you can all manage to solve it. Thanks again Lewis for starting this post, a real life saver, and thank you google for directing me here ??

Ah thanks! I missed that one as well, everything seems to be more or less back to normal now. ?? Glad you could sort yours out as well!

Hey Lewis, I’m having exactly the same problem as you at exactly the same time. I tried to load my website about 4 or 5 hours ago and was getting exactly the same url you have tacked on to the end of mine, and the page wont load. The only difference is that I am using joomla and not wordpress.

I have still not resolved it, but I have found some things out. If I type my domain-name the problems occurs, but if I type my domain-name and add /index.php then the website loads as normal.

I checked my visitor logs and seems like I have an awful lot of ips connecting to me website associated with that suspicious url, it also looked like my user admin had recently been used to log into my account. I changed the password now, and blocked all those ips.

I contacted my service provider and they think its something to do with the .htaccess file. They said they had fixed it, but its still not working. I also found various copies of this file with that url copied many times inside it, but I have removed all of them now.

Anyway please let me know if you manage to fix it, or if you find out anything else. I’ll let you know how my problem goes as well. Thanks, and good luck!