online site hacked. what exactly to do?

[ronsmith00123]

X-line hacked mysite. Help me in order tofix it up. Thanks much
http://weddingsvermont.com

ronsmith00123 Reviewed by ronsmith00123 on 9th Aug 2012. online site hacked. what exactly to do? X-line hacked mysite. Help me in order tofix it up. Thanks much http://weddingsvermont.com Rating: 5

[Lock Down]

Not much to go on but obviously restore the backups..

[DJboutit]

Check your index.php file when my forum was hacked all that was changed was the index.php file

[Fish]

Depends on what exactly they did. If they only defaced then you can just apply the detault index page back on. Also, if your cPanel has a virus scanner then use it to scan for shells. If they deleted a lot of stuff and changed things around and you don't know which files to replace etc then just restore from a backup.

I also suggest you use codeguard for the future.
https://www.codeguard.com/

Kind Regards,
Fish.-

[dljawed]

did you had concluded any backup before? i think they changed or disabled your index page!!
do u can still access your CP?
if the hacker only gain control of your CMS admin page, then do the followings:
- login to your host control panel, change mysql user/password
- after changed the mysql user/password then login to your root using ftp and configure DB access with new user password lines...

some thing like this

define ("DBUSER",

&

define ("DBPASS",

If the hacker take over your domain like change dns servers, move domain to new host etc.... then you should consult with your host and your domain registrar to get it back

[bluefrogx]

Restore backups (if you have any) and hire a proper programmer to plug any holes you may have in your CMS

[arsijust17]

restore the backups is only option for you

[kunnusingh]

I just check your website and Does not hacked by virus or malware, hacker only modify your index page, It means hacker have a login details of your account..

Better install a fresh wordpress blog and change ftp password, mysql, phpmyadmin, control panel password, etc password.

[nkrc10]

Off topic: do u report to adsense that guy? or they just use that image

[Kw3rLn]

restore the backups