BLog Gone Missing!

Successyes · #1 08-13-2009, 09:57 PM

Can't find my blog:
http://SuccessYes.com/blog

Can't find the admin either
http://successYes.com/blog/wp-admin

Had access to both yesterday and updated
site. No show, gone missing today.

Any help, much appreciated.

Vasili · #2 08-13-2009, 10:35 PM

Depending on how you created your add-on domain in your cP, the correct link to your WordPress Dashboard is either http://successyes.com/wp-admin/ or http://www.successyes.com/wp-admin/ (note there is no need to designate the sub-directory as required when creating links to the blog: http://www.successyes.com/blog/ )

I would suggest you verify that your accounts are in Good Status (paid up, renewed on time) for your Domain and Hosting both.

Successyes · #3 08-14-2009, 07:43 PM

My account is in good standing and my blog access url is:

http://SuccessYes.com/blog/wp-admin

And it's still missing...maybe it's time for a support ticket.

Successyes · #4 08-15-2009, 05:22 PM

Here's the response I got from support:

Your domain is affected with iframe java script hack. This hacking does not takes place by any PHP application vulnerability nor any kernel bug nor apache bug nor cpanel or Plesk bug. Those accounts files are affected whose FTP logins are leaked. the hacker(s) are setting up innocent looking sites (or using previously hacked sites where the owner is usually unaware of being compromised) and loading them with expensive hacking tools like Mpack. When someone visits that site, their browser is detected and attacked (browsers affected are IE, firefox and opera). The visitor is unaware that they may have a keylogger that sends the persons passwords ect to the hacker(s) and moves on. If the innocent visitor has an ftp or root password for any internet sites, the hackers use a program that goes to the persons site(s) and instantly adds the hidden iframe to every index type page. This is why there seems to be no indication that the site has been compromised, as the hackers already have the ftp or root passwords to login. And since they have at least your account ftp pass, whatever permissions your folders and files are set to make no difference.

After they put the iframe code into that person's pages, anyone visiting that site will be redirected to the hackers infection site, where the person's computer will be injected and infected. The hackers are depending on site owners not knowing their sites have been hacked so that the number of hacked sites will grow (as they have starting in Italy) into the tens of thousands... Please don't think you can depend solely on your antivirus software to protect your computer. So , keep your virus program updated, but don't depend on it completely!

Just do the two things:

1) Change the FTP and CPanel password of your domain.
2) Scan your PC thoroughly and check if it contains any malwares/spywares. If so, please clean it.

and take care in future, you don't visit any of the virus links made by this hack.

After doing this, you can restore your domain if you have any backups available.

Vasili · #5 08-16-2009, 08:15 AM

Another reminder to always contact VodaHost Support first with all major technical issues ....

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)