My Hosting is Hacked!

Very Very Urgent !

[netjobs]

I dont know this is right place!

Few moments ago I just viewed my site and shocked my homepage turns like the following:

****************************************************

<snip>Usual "this has been hacked by..." type message but with political overtone</snip>

************************************************

What the hell is this? Spyware? Adware? Virus? I lost my earnings today because of this... anyone attacked by this rubbish? how to rectify? help please

[edited by: trillianjedi at 3:55 pm (utc) on Aug. 11, 2006]
[edit reason]
[1][edit reason] Let's not give them any publicity or display their email address, thanks. [/edit] [/edit][/1]

[trillianjedi]

Looks like either someone has gained access to your server and uploaded a page of their own. Either that or you have a nasty on your own PC that's rewritten your hosts file.

First thing - stay calm. Second thing, check your site on another PC.

If it is your server, is it Linux or Windows hosting?

TJ

[Birdman]

Are you running any popular forum(or other) software on your site?

Does your site use PHP or Perl?

[jbgilbert]

I think Birdman is on to something...... same thing happened to me on several sites and they were exploiting a commercial PHP script!

[netjobs]

If it is your server, is it Linux or Windows hosting?

Its Linux

---------

Does your site use PHP or Perl?

PHP. My homepage are in html only... but i am using php scripts for my sites for Link Directory, Classifieds... I did'nt run forums

---------

I managed to backup my sites.. But still the hacker inside my hosting.. how can i remove it? I lost today earnings because of this.. its frustrated..

[Birdman]

Well, you will need to pinpoint where the hacker got in.

First, I would look at the timestamp on the hacked homepage. This will tell you WHEN it happened.

Then, go through your log files and get to that time and try to figure out what file was exploited.

I do hope you have kept a copy of the hacked file so you can grab that time.