Sites Hacked


#1

Hello,

3rd time my sites have been hacked in 2 years. Help!

Hackers Bite.

This time, it’s writing to javascript files to the bottom. I can see it when I ‘view source’ but not when I download it to my text editor. I’m lost as to how he/they/it did that one!

Any assistance much obliged.

J

P.S. They are also very slow which I would assume is related…


#2

Sounds like the foreign code is being included via another file.

Check .htaccess first, then go through all the included files to track it down.


#3

Start here: http://wiki.dreamhost.com/Troubleshooting_Hacked_Sites

Make sure each of your sites runs in its own user when you finish cleaning up.