Help tracing where I'm being hacked
-
I’ve been hacked and certain things are redirecting to some place generation-internet.ru. I didn’t see any evidence in my htaccess files so I removed some themes and plugins, installed fresh stuff, deleted offending files that were added.
Now, it was fine for a couple weeks. But now the same place keeps popping up. Images are redirecting to this place. I delete them. Things seem fine.
NOW, I look at one of the files that I had deleted (still getting referrer traffic to this page)
https://yum.neatlysliced.com/wp-content/themes/bueno/yahoolink.php
The styles are gone, and if you look at the Net tab in firebug, I have GET requests to this place. I’ve searched my whole database and my entire web project and I don’t see evidence of where this redirect could be ANYWHERE.
Any ideas? Please help!
- The topic ‘Help tracing where I'm being hacked’ is closed to new replies.