Any Web Developers out there? Need a hand!

[dandingo13]

So I built my own site using Wordpress for my business and when I Google my business name, I get russian writing below my name in Google's search results. Also, my business name is my name plus Photography. The thing is, my last name's spelled wrong.

I spoke to my host, Godaddy, and they had me check a few things on the back end and what we found was that in the information schema/processlist, the Russian writing is found. Apparently, I got hacked somehow?

What I did was backup my site and the Godaddy guy recommended trying to delete the processlist. I wanted to find out if this will do anything to my site? Or maybe there's another way to go about this? ANY help would be appreciated! Thanks!

[the_natterjack]

[dandingo13]

Yeah, I translated it as well. I don't have any comments in any language but English. It's freaking weird!

[Subotai]

Did you use a template? What about plug-ins? Might want to check the sources.

[Andric]

Look for this style sheet in your wordpress editor: custom-style-css

http://danielsolomonphotography.com/wp-content/themes/u-design/styles/custom/custom_style.php?ver=3.7.1

Go to the bottom there is a paragraph of code that looks like it's Russian.

Copy all the text on that css before you change it, save it in a notepad file on your computer as backup. Then delete that paragraph and save the css, see if it removes the Russian.

[diveRN]

Appears to be a hack.

If you google the URLs, you'll get a bunch of hits referencing these URLs in robots.txt files and other places. Tracking down how they got in is a whole other can of beans. WP isn't known for tight security.

If I were in your shoes, I would change all host passwords and remake the site with a fresh WP install in a sub directory and the do a backup of the fresh site. You can redirect traffic to the subdir via DNS or .htaccess file changes.

If you have the ability to block domains via your host, I would trace the IP subnet of these domains and block them. Personally, I block all traffic to my server that originates with .ru TLDs. Ain't worth the headache.

[dandingo13]

Appears to be a hack.

If you google the URLs, you'll get a bunch of hits referencing these URLs in robots.txt files and other places. Tracking down how they got in is a whole other can of beans. WP isn't known for tight security.

If I were in your shoes, I would change all host passwords and remake the site with a fresh WP install in a sub directory and the do a backup of the fresh site. You can redirect traffic to the subdir via DNS or .htaccess file changes.

If you have the ability to block domains via your host, I would trace the IP subnet of these domains and block them. Personally, I block all traffic to my server that originates with .ru TLDs. Ain't worth the headache.

Thanks for the info. Remaking the site would be a complete nightmare, as I have 50+ blog entries that are working as my SEO. This is ridiculous! Why in the hell would they hack a small site like mine?

[diveRN]

...

Why in the hell would they hack a small site like mine?

Because they could, no other reason needed.