Hacked with Rogaine Ads on my WP - GoFuckYourself.com

PSSuperstars · 06-21-2009, 01:40 AM

Hey guys.. I got the assy hidden multi ad hack done to my main URL for like the millionth time... my rankings have taken a shit.. usually I find it... and it's a faux footer piece of code..

This time it's appearing after the first blog post's title... and I can't seem to figure it out..

Would someone be willing to ICQ me and look at my site to tell me, por favor?

icq: 254-771-666

JamesK · 06-21-2009, 02:10 AM

icq me 168048147

fris · 06-21-2009, 05:41 AM

im available if needed

alias · 06-21-2009, 05:47 AM

If it is on a dedicated server you may have a backdoor installed. Once a box gets hacked it is generally done for.

GetSCORECash · 06-21-2009, 06:14 AM

hope you get it resolved...

Mutt · 06-21-2009, 07:00 AM

what hosting company? i've had that hack a couple times - not in a year or so though. i think they beefed up some security on my box.

PSSuperstars · 06-21-2009, 11:13 PM

Hey sorry went to bed last night and was out all day...

I'm with Phatservers... but it's only my main PSS URL... not any of my secondary or fetish phone sites...

Usually they hide it in the footer.. and I can fix it myself.. but I can't find it for the life of me in the post php..

thanks guys! I'll be ICQ tonight..

When I emailed Phatservers... they just told me I sent them a google cache... I'm like.. Duh.. Yes.. because the text only cache is the only place you can see it.. you can't see it on the live site version... because it's hidden... then they emailed me to tell me they're not seeing it at all... I was spidered last night just after I posted and thought I fixed it... and yup.. still there..

PSSuperstars · 06-21-2009, 11:39 PM

Does anyone know how to view a live page as a text only? like on google's cache when you click "text only"...
A program that does it.. or a setting in a browser?

Jdoughs · 06-21-2009, 11:40 PM

Quote:

Originally Posted by PSSuperstars

Does anyone know how to view a live page as a text only? like on google's cache when you click "text only"...
A program that does it.. or a setting in a browser?

View Page Source?

Its the same source google is reading.

PSSuperstars · 06-21-2009, 11:44 PM

Quote:

Originally Posted by Jdoughs

View Page Source?

Its the same source google is reading.

For some reason thats not working.. when ya view page source it's not there...
But it is there on the cache'd google version.. Like 200+ Rogaine links...

and only after the title on the first post...

It's totally butt fucking me... normally I'm page 1.... top 5... and nada.

This will be my 5th google reconsideration plea in 8 months probably.... fuckers. I always bounce right back.. then they end up hacking again.. just this time it wasn't the faux footer php... it's something a little deeper.

Zyzz · 06-22-2009, 12:20 AM

Quote:

Originally Posted by PSSuperstars

Does anyone know how to view a live page as a text only? like on google's cache when you click "text only"...
A program that does it.. or a setting in a browser?

lynx browser perhaps?

emthree · 06-22-2009, 12:27 AM

I once had my old wordpress script hacked/exploited twice in a row. There was about 100 lines of links added to my footer. Once i upgraded the WP version the problem stopped. You have to be careful with these things because it got my domain banned from google adsense.

PSSuperstars · 06-22-2009, 12:34 AM

JamesK fixed it for me

It was in the mysql... it was attached to the security plugin.. an encrypted file in there... inside of the database...

Thanks so much guys

I'm in 2.8.. so hopefully they can't get in with this.. I upgraded to 2.8 mid last week.. and the hack could've happened before that.. so hopefully, we'll see if this helps

JamesK is a God.

JamesK · 06-22-2009, 12:54 AM

My pleasure and thanks for the generous tip

Zarathustra · 06-22-2009, 04:07 AM

Well done James

06-21-2009, 01:40 AM	#1
PSSuperstars Confirmed User Join Date: Jan 2006 Location: Houston, TX Posts: 1,477	Hacked with Rogaine Ads on my WP Hey guys.. I got the assy hidden multi ad hack done to my main URL for like the millionth time... my rankings have taken a shit.. usually I find it... and it's a faux footer piece of code.. This time it's appearing after the first blog post's title... and I can't seem to figure it out.. Would someone be willing to ICQ me and look at my site to tell me, por favor? icq: 254-771-666 __________________ Porn's Best Kept Secret : PSOCash.com : Make Money Promoting Phone Sex in Members Areas, TGPs, and MORE! : Lifetime 30% Payout *Best Webcam Referral Payouts*

06-21-2009, 02:10 AM	#2
JamesK hi Industry Role: Join Date: Jun 2002 Posts: 16,731	icq me 168048147 __________________ M3Server - NATS Hosting

06-21-2009, 05:41 AM	#3
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,359	im available if needed __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

06-21-2009, 05:47 AM	#4
alias aliasx Join Date: Apr 2001 Posts: 19,010	If it is on a dedicated server you may have a backdoor installed. Once a box gets hacked it is generally done for. __________________ https://porncorporation.com

06-21-2009, 06:14 AM	#5
GetSCORECash Confirmed User Industry Role: Join Date: Mar 2008 Location: Miami Posts: 5,527	hope you get it resolved... __________________ \| skype: getscorecash \| ICQ: 59-271-063 \| New Sites: \| SCORELAND2 \| Roku Channel SCORETV.TV \| 60PLUSMILFS \| \| Big Tit Hooker \| Tits And Tugs \| Big Boobs POV \| Karla James \| \| Naughty Foot Jobs \| Linsey's World \| Busty Arianna Sinn \| Get SCORE Cash \|

06-21-2009, 07:00 AM	#6
Mutt Too lazy to set a custom title Industry Role: Join Date: Sep 2002 Posts: 34,431	what hosting company? i've had that hack a couple times - not in a year or so though. i think they beefed up some security on my box. __________________ I moved my sites to Vacares Hosting. I've saved money, my hair is thicker, lost some weight too! Thanks Sly!

06-21-2009, 11:13 PM	#7
PSSuperstars Confirmed User Join Date: Jan 2006 Location: Houston, TX Posts: 1,477	Hey sorry went to bed last night and was out all day... I'm with Phatservers... but it's only my main PSS URL... not any of my secondary or fetish phone sites... Usually they hide it in the footer.. and I can fix it myself.. but I can't find it for the life of me in the post php.. thanks guys! I'll be ICQ tonight.. When I emailed Phatservers... they just told me I sent them a google cache... I'm like.. Duh.. Yes.. because the text only cache is the only place you can see it.. you can't see it on the live site version... because it's hidden... then they emailed me to tell me they're not seeing it at all... I was spidered last night just after I posted and thought I fixed it... and yup.. still there.. __________________ Porn's Best Kept Secret : PSOCash.com : Make Money Promoting Phone Sex in Members Areas, TGPs, and MORE! : Lifetime 30% Payout *Best Webcam Referral Payouts*

06-21-2009, 11:39 PM	#8
PSSuperstars Confirmed User Join Date: Jan 2006 Location: Houston, TX Posts: 1,477	Does anyone know how to view a live page as a text only? like on google's cache when you click "text only"... A program that does it.. or a setting in a browser? __________________ Porn's Best Kept Secret : PSOCash.com : Make Money Promoting Phone Sex in Members Areas, TGPs, and MORE! : Lifetime 30% Payout *Best Webcam Referral Payouts*

06-22-2009, 12:27 AM	#12
emthree Dialer Kingpin Join Date: Jun 2003 Location: New York Posts: 10,816	I once had my old wordpress script hacked/exploited twice in a row. There was about 100 lines of links added to my footer. Once i upgraded the WP version the problem stopped. You have to be careful with these things because it got my domain banned from google adsense. __________________ • Sell Patches & Pills •

06-22-2009, 12:34 AM	#13
PSSuperstars Confirmed User Join Date: Jan 2006 Location: Houston, TX Posts: 1,477	JamesK fixed it for me It was in the mysql... it was attached to the security plugin.. an encrypted file in there... inside of the database... Thanks so much guys I'm in 2.8.. so hopefully they can't get in with this.. I upgraded to 2.8 mid last week.. and the hack could've happened before that.. so hopefully, we'll see if this helps JamesK is a God. __________________ Porn's Best Kept Secret : PSOCash.com : Make Money Promoting Phone Sex in Members Areas, TGPs, and MORE! : Lifetime 30% Payout *Best Webcam Referral Payouts*

06-22-2009, 12:54 AM	#14
JamesK hi Industry Role: Join Date: Jun 2002 Posts: 16,731	My pleasure and thanks for the generous tip __________________ M3Server - NATS Hosting

06-22-2009, 04:07 AM	#15
Zarathustra Confirmed User Join Date: Oct 2005 Posts: 1,094	Well done James