Site Hijacked/Hacked - Help Please

What is happening?

[SEOQuestions]

Over the last week my site, which is a travel related website, has had its photopost program hacked, the ubbthreads was hacked and now my domain has been suspended for "phishing". Does anyone have any idea how this could happen or how I can find out who is doing it. Any thoughts and suggestions are quite welcome.

[willybfriendly]

Last site I had hacked I found the answers on forums dedicated to the software that was being used. That is a good place to start.

Server logs can give a good deal of information if you take the time to sift through them.

If your server has been compromised, you may well have torjans hiding in the software somewhere. Not good. You may need to start from scratch.

WBF

[SEOQuestions]

Thanks for your reply. If you don't mind me asking - who was responsible (generally speaking) for "hacking" your site? Were they going after you deliberately or was it a generic hack (and if so why?)

[rocknbil]

Try not to take it personally, more often than not it's because the hacker knows of some security flaw in installed software or your system administrator missed some patch that allowed an OS security flaw and they rooted the box.

Basically it's just "because they can."

[willybfriendly]

Basically it's just "because they can."

Exactly right!

The problem becomes figuring out if it was a "Look at me, I got you" hack, or if they slipped some little gift onto the system that allows them to hijack the server for future nefarious designs.

WBF

[tigertom]

Might be a good idea to move change web-hosts, to be on the safe side.