Violation of TOS

Well, yesterday wasn't fun. I went to look at my website and it was CLOSED!! There was a note saying for the webmaster to contact them at once. So, I did and they said it was closed because "violation of TOS - phishing detected." Um, okaaaaaaaay. Then, the guy tells me that I have to go through all my files and determine which ones don't belong.

What?

Really??

I hung up, then called back later after staring at .php and .dat files with glazed eyes. Luckily, I got someone else and he told me which files were affected. Why the other dude couldn't do it, is beyond me. Maybe he likes to make women suffer or something.

Anyway, after I deleted those files, they turned my site back on. Well, those files were important, it seemed.

Now, 24 hours later, I have totally reworked my site.  Tongue

Lesson: don't add any plugins in WordPress. However, my site is nice and shiny new now.  Drinks
Logged


Do you know which plugins were affected?

A few weeks ago 3 of the really popular plugins got hit. I think they got a fake update and everybody that updated got the bug.
« Last Edit: August 03, 2011, 11:45:31 AM by Ryan »
Logged


It was a plugin that allowed me to tweet my posts. Tongue
Logged


You don't happen to remember which one, do you? I'm using something like that on one of my blogs, although there are hundreds of Twitter plugins for WordPress.
Logged


No, I don't. I deleted the plug-in so there's no way of going back to check the name. Sorry. Sad
Logged


I had something similar happen on a site that I was hosting for a family member. It was an ecommerce site using software that hadn't been updated in a while. Somebody got in and was using the software to send out phishing emails. Fortunately there wasn't much of a push to get that particular site back online.
Logged


It only takes a few minutes to back up the code. I usually keep a complete copy of the "engine" in a folder beside the "main" folder. if something goes wrong (and it has) I just rename them both and everything is happy and I can go through the "broken" code at my leisure.

never used wordpress though. I do know joomla, and modx, and a few others.
Logged

-----------------------------------
Between two evils, I always pick the one I never tried before. -- Mae West

Chattanooga Portrait Photographer BobEdens.com

Odd timing. I just spent way more time today and yesterday than I would have liked cleaning up a WordPress install that had gotten hacked through two different plugins.

Quote
I do know joomla, and modx, and a few others
I've used Etomite which modx forked off of for a few sites. It was pretty clunky on the admin side, especially for non-technical types, and was more complicated to customize than it should have been.
Logged


a year or more ago, Modx was pretty new and very complicated. Its improved a lot. Still more complicated than joomla but it fit what I needed for a project and after being hip deep in the engine for a few weeks I like it. (its not for those not comfortable with PHP)
Logged

-----------------------------------
Between two evils, I always pick the one I never tried before. -- Mae West

Chattanooga Portrait Photographer BobEdens.com