Hacked - selenayhaven

[selenay]

OK, it looks like www.selenayhaven.com (my site) got hacked during the week (thank you paranoidangel42 for the heads up!).

I have removed/replaced all the files that got replaced (it appears to have just been anything that called index.xxx), changed my password and reported the hack to my hosts.

Anyone know what other steps I need to take?

I have no idea how long all the virus thingies are going to keep telling people that my site is compromised :-(

Comments

[paranoidangel]

I only noticed because I was going to do some reviews this afternoon. I went to your site and went "hang on a minute..."

I had the same thing happen to me a few years ago, but they got every index.xxx page on the server and Dad's in charge of the server, so he sorted it all and I don't know exactly what he did.

[selenay]

Thank you so much for letting me know when you spotted it! I haven't been around much lately, so I haven't been on the site and it could have stayed that way for who knows how long!

They got most of the index.xxx files and .htaccess files, but everything else seems OK. I deleted everything and restored it from the local copy anyway, protected a directory that should be protected and the host has now confirmed that everything is OK. They got in through the phpMyAdmin installation, which I have completely removed.

It sucks completely :-( But at least it should now be up and running again!