How to prevent/ fix website hacking

karlp295 · 04-06-2009, 02:53 AM

A couple days ago my website was hacked and a stupid file added. Google spotted this and has temporarily dropped my site which is seriously awful news for me!

I have been trying to find a way to check and prevent this any ideas?
Have you faced this? I am waiting for an answer from my host company.

I have found a few downloads such as quick web secure, web monitor etc...

Any experience with any of these or advice what to do to plug these holes and stop this happening again?

How can I be sure I have fixed the problem before asking Google to reinstate me?

Thanks for your help guys...

waxman1000 · 04-06-2009, 03:28 AM

Sorry for your site! It is kind of bad that the internet is full with people of evil intentions.
I don't seem to know so much about this hacking stuff but just make sure you don't have some 777 chmode directories on your host! cos files in that directory will be readable writable and executable by a third party!

phardy20 · 04-06-2009, 01:33 PM

Hi Karlp

Sorry to hear about your site it happened last year for me. There are a few steps you can take to reduce the chance of it happening, make sure all your files and folders have there correct file permissions, remove install files. You should also contact your web host to let them know as they should see how they got into you site.

karlp295 · 04-15-2009, 06:04 AM

hosting company no help at all... they couldnt find anything, deleted the file aand back on google now...

tobemenow · 04-19-2009, 03:45 PM

sorry to hear that, karlp

Did you find out who the hackers were? or how did they manage to do the hack?

This is the most important step in preventing future hacks.

ejfern22 · 04-20-2009, 09:55 AM

This has also happened to me as well about a year ago. When this happened I had a really short password. After that I changed my password using lower and upper case letters and numbers in the password. Since then I haven't had a problem. This is something I would suggest doing that could help protecting your websites.

treeves · 06-15-2009, 09:12 PM

We own a hosting company and had a couple of incidences of this hack. Most likely, you experienced the Gumblar exploit, which can either load files on your site for spamming purposes, or modify the leading pages like index.html with javascript coding also leading to spamming.

The hack "typically" was caused by poor password protection, and infection by someone who had access to the site (ie, site developer, etc).

Generally, if the exploit is not completely cleaned, it will reinfect the site again.

The last I read, over 40,000 site have been infected with the exploit.

This site has an excellent explanation of what happens to the sites that are infected: Gumblar .cn Exploit - 12 Facts About This Injected Script | Unmask Parasites. Blog.

06-18-2009, 12:35 AM

I hate hackers, seriously... its cute the first couple times you mess someones stuff up, but after that you are just being a nouisense. lol I wish I knew how to hack. I couldn't hack my way out of a paper bag! rofl!

To Your Success,
Clint Anderson

MarketingWiseGuy · 05-13-2010, 10:01 PM

A quick way to find the file is to download it to your computer and then do a ctrl-F search of that main directory. Usually Google will bring down your site when this happens and inform you of the corrupted file name, so you can use that to start searching.

I would recommend a strong FTP password to protect against this.

Posylane · 05-29-2011, 10:56 PM

Who is your host?

04-06-2009, 02:53 AM	#1
karlp295 Join Date: Oct 2008 Posts: 152	How to prevent/ fix website hacking A couple days ago my website was hacked and a stupid file added. Google spotted this and has temporarily dropped my site which is seriously awful news for me! I have been trying to find a way to check and prevent this any ideas? Have you faced this? I am waiting for an answer from my host company. I have found a few downloads such as quick web secure, web monitor etc... Any experience with any of these or advice what to do to plug these holes and stop this happening again? How can I be sure I have fixed the problem before asking Google to reinstate me? Thanks for your help guys...

06-15-2009, 09:12 PM	#7
treeves Join Date: May 2009 Location: Indianapolis, Indiana Posts: 9	We own a hosting company and had a couple of incidences of this hack. Most likely, you experienced the Gumblar exploit, which can either load files on your site for spamming purposes, or modify the leading pages like index.html with javascript coding also leading to spamming. The hack "typically" was caused by poor password protection, and infection by someone who had access to the site (ie, site developer, etc). Generally, if the exploit is not completely cleaned, it will reinfect the site again. The last I read, over 40,000 site have been infected with the exploit. This site has an excellent explanation of what happens to the sites that are infected: Gumblar .cn Exploit - 12 Facts About This Injected Script \| Unmask Parasites. Blog. Last edited by treeves; 06-15-2009 at 09:15 PM.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
12 Ways To Increase Your Website Traffic	journeyoflife7	How To Make Money On The Internet	20	12-19-2012 11:07 AM
Prevent hacking of your website	karlp295	How To Make Money On The Internet	7	05-04-2009 10:42 PM
Finding the Right Website for Your Legitimate Home Based Business	balbata	How To Make Money On The Internet	0	01-16-2009 01:39 AM
Get Your Website to Profit With the Best Affiliate Programs Available	netstar	How To Make Money On The Internet	1	03-25-2008 12:24 PM
Building Residual Income With a Website	nolt1968	How To Make Money On The Internet	0	11-26-2006 11:09 AM

04-06-2009, 03:28 AM	#2
waxman1000 Join Date: Dec 2008 Location: Sweden Posts: 547	Sorry for your site! It is kind of bad that the internet is full with people of evil intentions. I don't seem to know so much about this hacking stuff but just make sure you don't have some 777 chmode directories on your host! cos files in that directory will be readable writable and executable by a third party!

04-06-2009, 01:33 PM	#3
phardy20 Join Date: Feb 2009 Posts: 64	Hi Karlp Sorry to hear about your site it happened last year for me. There are a few steps you can take to reduce the chance of it happening, make sure all your files and folders have there correct file permissions, remove install files. You should also contact your web host to let them know as they should see how they got into you site.

04-15-2009, 06:04 AM	#4
karlp295 Join Date: Oct 2008 Posts: 152	hosting company no help at all... they couldnt find anything, deleted the file aand back on google now...

04-19-2009, 03:45 PM	#5
tobemenow Join Date: Dec 2008 Location: Game Zone Posts: 24	sorry to hear that, karlp Did you find out who the hackers were? or how did they manage to do the hack? This is the most important step in preventing future hacks.

04-20-2009, 09:55 AM	#6
ejfern22 Join Date: Oct 2008 Posts: 63	This has also happened to me as well about a year ago. When this happened I had a really short password. After that I changed my password using lower and upper case letters and numbers in the password. Since then I haven't had a problem. This is something I would suggest doing that could help protecting your websites.

06-18-2009, 12:35 AM	#8
clinta Guest Posts: n/a	I hate hackers, seriously... its cute the first couple times you mess someones stuff up, but after that you are just being a nouisense. lol I wish I knew how to hack. I couldn't hack my way out of a paper bag! rofl! To Your Success, Clint Anderson

05-13-2010, 10:01 PM	#9
MarketingWiseGuy Join Date: Feb 2010 Location: MarketingWiseGuy.com Posts: 15	A quick way to find the file is to download it to your computer and then do a ctrl-F search of that main directory. Usually Google will bring down your site when this happens and inform you of the corrupted file name, so you can use that to start searching. I would recommend a strong FTP password to protect against this.

05-29-2011, 10:56 PM	#10
Posylane Join Date: May 2011 Location: The North Dallas metroplex. Posts: 13	Who is your host?