[wp-hackers] My WPMU site got hacked!!!

Brian Layman bulk at thecodecave.com
Fri Jul 16 00:22:08 UTC 2010

It looks like it is a simple defacement.  Deleting index.html will likely
temporarily fix the problem. However, that does nothing to plug the hole.
Your best bet is to delete all the files, reinstall the core WordPress files
and restore from last week's backup of the wp-content. And then uninstall
any plugins you don't HAVE to have and change the rights on  all of your
files to 744.

A hack can be fairly complex, but that's the basic procedure. A detailed
slide by Brad Williams about fixing hacks can be found here:

Or contact Brad Williams, myself or the wp-pro mailing list if you just want
this fixed and want to move to a host that can prevent it from happening

And don't worry, you're not alone in having this particular hack happen to
your site http://www.zone-h.org/archive/notifier=Xa7m3d Just make sure you
don't appear in the R column or get a gold star :)

Brian Layman
eHermits, Inc.
TheCodeCave.com / eHermitsInc.com / twitter.com/BrianLayman /

More information about the wp-hackers mailing list