hacked by hacker

Most hosts will give you a similar answer, especially the low costs ones. It’s rare that they ever admit fault for these types of things. The fix to this particular ‘hacked by hacker’ exploit was already posted earlier in this thread:

https://www.atmayogi.com/2012/11/wordpress-vulnerability-hacked-by-hacker/

It assumes you have a backup of your theme files though.

Thanks for all the great advice, guys. I too am quite unimpressed with how HostPapa has responded in light of all this.

I have one last question if anybody’s nice enough to help me out:

So I cleaned out the infected index.php, index.html, and header.php files. The problem is that, stupidly and inexperencedly, I hadn’t made a backup of my header.php theme file, and now I don’t know whether I can get a new, restored version of that file. Generally, people are saying just re-install the theme and the file will be there, but I was using a custom theme variant of +Positive, made for me by my website’s developer (who no longer responds to my emails…). I’ve been playing with my website’s back end and still can’t figure out whether re-installing this custom theme is even possible. And even if it is possible to reinstall it, because of the custom nature of the theme, will the header.php file even be the same as before it got corrupted?

Thank you guys SO much for any insight you can offer.

In all seriousness, if I can’t restore that header.php file back to normal, I believe I will just fold the website. The time, money, and effort it will take to recreate the entire theme with a new web developer/designer is just not worth it for me. Very, very sad if this is the final outcome…

I’ve been playing with my website’s back end and still can’t figure out whether re-installing this custom theme is even possible.

Unless you have a new, clean, copy of the theme, don’t even think about using it again.

I have been hacked too. My site is also with hostpapa. I’m not as Au fait with files and stuff….even the suggestions to fix this problem seem daunting for me.

I have been holding on hostpapa online support for over an hour now.

I have spent months and months developing my site, I use the TuturialChip theme.

All gone !! ??

https://www.earthwake-network.com

The solution is fairly simple.

1. Ask host to recover your site back to last weeks backup.
Recovery will solve the problem nearly instantly.

2. Then once recovered make sure to change all passwords, including your email passwords, then further lock down your site (I discuss most of this on my site).

3. If host does not have a backup to recover too, then move out as soon a possible to a more secure web host who offers daily malware scanning and weekly backups (this is your real long term solution).

Suffice it to say, Website security = backups + security focused web host
All of this these situations described above can be easily managed when you host through a web host who discusses security on their home page (as opposed to a blue eyed blondes grinning back at you…<hint>).