erikacon

I actually read all of it, especially Vladimir’s comments. I went into cpanel and then Error logs. I got this. I don’t know if that is helpful but here it is:
[Wed Jul 04 13:24:09 2012] [crit] [client 66.249.66.239] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:24:09 2012] [crit] [client 66.249.66.239] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:23:06 2012] [crit] [client 188.65.96.106] (13)Permission denied: /home/erikacon/public_html/say-cheese/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:23:05 2012] [crit] [client 188.65.96.106] (13)Permission denied: /home/erikacon/public_html/say-cheese/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:20:45 2012] [crit] [client 180.76.6.232] (13)Permission denied: /home/erikacon/public_html/boy-scouts-canada/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:19:41 2012] [crit] [client 208.115.113.85] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:19:41 2012] [crit] [client 208.115.113.85] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:19:24 2012] [crit] [client 124.115.0.18] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:19:24 2012] [crit] [client 124.115.0.18] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:17:07 2012] [crit] [client 180.76.6.211] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:17:07 2012] [crit] [client 180.76.6.211] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:08:16 2012] [crit] [client 208.115.113.85] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:08:16 2012] [crit] [client 208.115.113.85] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:08:03 2012] [crit] [client 208.115.113.85] (13)Permission denied: /home/erikacon/public_html/can-we-talk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:08:00 2012] [crit] [client 208.115.113.85] (13)Permission denied: /home/erikacon/public_html/say-cheese/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:05:58 2012] [crit] [client 180.76.5.111] (13)Permission denied: /home/erikacon/public_html/can-we-talk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 13:01:06 2012] [crit] [client 66.249.66.148] (13)Permission denied: /home/erikacon/public_html/can-we-talk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:59:27 2012] [crit] [client 208.92.218.66] (13)Permission denied: /home/erikacon/public_html/can-we-talk/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:58:46 2012] [error] [client 77.75.77.11] client denied by server configuration: /home/erikacon/public_html/canwetalk/.htaccess
[Wed Jul 04 12:57:34 2012] [crit] [client 77.75.77.11] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:57:34 2012] [crit] [client 77.75.77.11] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:57:31 2012] [crit] [client 77.75.77.11] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:57:31 2012] [crit] [client 77.75.77.11] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:57:19 2012] [crit] [client 66.249.66.239] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:57:19 2012] [crit] [client 66.249.66.239] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:56:04 2012] [crit] [client 100.43.83.158] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:56:04 2012] [crit] [client 100.43.83.158] (13)Permission denied: /home/erikacon/public_html/tapc.ca/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:52:22 2012] [crit] [client 66.249.66.148] (13)Permission denied: /home/erikacon/public_html/say-cheese/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:52:20 2012] [crit] [client 66.249.66.121] (13)Permission denied: /home/erikacon/public_html/say-cheese/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:52:07 2012] [crit] [client 180.76.5.53] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:52:06 2012] [crit] [client 180.76.5.53] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:51:49 2012] [crit] [client 1.202.218.8] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:51:49 2012] [crit] [client 1.202.218.8] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:49:39 2012] [crit] [client 100.43.83.158] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:49:39 2012] [crit] [client 100.43.83.158] (13)Permission denied: /home/erikacon/public_html/countrygarden/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Wed Jul 04 12:48:20 2012] [error] [client 1.202.218.8] File does not exist: /home/erikacon/public_html/canwetalk/404.shtml
[Wed Jul 04 12:48:20 2012] [error] [client 1.202.218.8] File does not exist: /home/erikacon/public_html/canwetalk/robots.txt
[Wed Jul 04 12:19:53 2012] [error] [client 115.250.194.46] client denied by server configuration: /home/erikacon/public_html/wp-admin/install.php
[Wed Jul 04 12:19:15 2012] [error] [client 115.250.194.46] client denied by server configuration: /home/erikacon/public_html/wp-admin/install.php
[Wed Jul 04 12:19:14 2012] [error] [client 66.249.66.148] client denied by server configuration: /home/erikacon/public_html/wp-admin/install.php
[Wed Jul 04 12:19:08 2012] [error] [client 115.250.194.46] client denied by server configuration: /home/erikacon/public_html/wp-admin/install.php
[Wed Jul 04 09:59:33 2012] [error] [client 1.202.218.8] File does not exist: /home/erikacon/public_html/canwetalk/404.shtml
[Wed Jul 04 09:59:33 2012] [error] [client 1.202.218.8] File does not exist: /home/erikacon/public_html/canwetalk/robots.txt
[Wed Jul 04 09:05:07 2012] [error] [client 123.126.50.71] client denied by server configuration: /home/erikacon/public_html/saycheese/.htaccess
Warning: DocumentRoot [/home/erikacon/public_html/whatsmellssogood] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotosbyerika.com] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotoblog] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/food911] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/whatsmellssogood] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotosbyerika.com] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotoblog] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/food911] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/whatsmellssogood] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotosbyerika.com] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotoblog] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/food911] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/whatsmellssogood] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotosbyerika.com] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotoblog] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/food911] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/whatsmellssogood] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotosbyerika.com] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/fotoblog] does not exist
Warning: DocumentRoot [/home/erikacon/public_html/food911] does not exist
[Wed Jul 04 07:08:56 2012] [error] [client 1.202.218.8] File does not exist: /home/erikacon/public_html/canwetalk/404.shtml
[Wed Jul 04 07:08:56 2012] [error] [client 1.202.218.8] File does not exist: /home/erikacon/public_html/canwetalk/robots.txt

I have deleted my food blog, so that makes sense. Also fotosbyerika was demolished during the first hacking and, would you believe, that’s the only one I did not have a backup for? I’ll have to start from scratch.

The instructions are often over my head. That’s a lot to take in all at once. I’ll just keep re-reading until i figure it out.

Done. All of them now have the .htaccess what the main domain has.

OK, here goes nothing.

What should I be looking for?
Where would I find a backdoor script?
In fact, what is a backdoor script? How does it look?
When you say a known good source, what do you mean? What about my backups? Wouldn’t that be a known good source?

I have a number of add-on domains and also sub-domains. Do I have to do anything with them?

OK, Done.

Wow. Looks like I’ve got my work cut out for me. I’ll get right on that. It looks like someone even hacked my appletv. I called AVG this morning and they’ve been running scans since then. Then I’ll call Apple.

I should have checked it. It’s true, I read on this site about bullet proofing wordpress. One of the things suggested was moving .htaccess one directory above to wp-includes.

I’ll move it back into the root right now.

What I meant was, I have paid for another 2 years of hosting. I don’t want to lose that money. Besides, how do I know the next one will be any better?

I know. Thanks anyway.

All of the above.

I’ve had a number of ways that I know it’s hacked. First of all, when I type in my website they tell me. You’ve been hacked, instead of my home page. Of course, that also affects my sub-domains and my add-on domains. The last couple of times, that did not happen. I just had my main site affected. But, my main site is the most important one.

There was an instance when I checked phpmyadmin and I saw a foreign email address and password and username. I quickly fixed that.

It’s just that it’s annoying beyond belief.

A bunch of times. I’m getting pretty good at this.

My folders are 755 and files are 644. Yes, it’s shared hosting but I keep hearing it’s something I’m doing or not doing that’s causing the problem. I’ve been dealing with the same host for several years and for the most part, it’s been uneventful. This hacking started in April this year and has been driving me crazy since then. There is only one user and that’s me. Also, I’ve changed my passwords over and over again. It’s started to get confusing.

I maintain it’s from their end – perhaps an insecure domain on the same server. Be damned if I know. Trouble is, I’ve just renewed for two years. If I’m going to change I’ll have to wait, won’t I?

Yeah, the “redirect” plugin screwed things up so I deleted it.

Those plugins can sure make a mess, eh?

I hear you. It’s just that since April I have been hacked repeated times. I’ve changed all the passwords – several times. Just yesterday I installed Website defender in the hope that it will stop the hackers.

I don’t know what else to do. Any suggestions?

Hmmm. Bad markup. I havent’ added anything. I haven’t changed any codes. So, I don’t know.