Site has been hacked – PLEASE help!

[jsride]

Can someone look at my site and tell me what I need to do?  I have the latest WordPress and Genesis updates.

Site is: http://www.rxtimes.com

Any help is greatly appreciated.

Thanks!

Rick

[Bill Murray]

If your site has been hacked, no one will want to visit that link because it could infect the system that visits your site.

Sucuri is in the business of cleaning sites, among other things. Hope that helps.

---

Web: https://wpperform.com or Twitter: @wpperform

We do managed WordPress hosting.

[jsride]

I guess hacked is the wrong terminology to use here (I’m a computer novice – sorry).

After checking with Sucuri, there are no viruses:

Basically, this appeared on my site above the header:

“phone monitoring iphone spy track phones . Interesting payday loans online tips”

And now everything else is mis-aligned.  Not sure how this got there or how to remove it?

Thanks,

Rick

[jsride]

I guess hacked is the wrong terminology to use here (I'm a computer novice - sorry).

After checking with Sucuri, there are no viruses:

Basically, this appeared on my site above the header:

"phone monitoring iphone spy track phones . Interesting payday loans online tips"

And now everything else is mis-aligned.  Not sure how this got there or how to remove it?

Thanks,

Rick

[AnitaC]

Look at Genesis > Settings > Header box which is at the bottom of the screen. Do yo have any Scripts or anything in that box?

---

Need help with customization or troubleshooting? Reach out to me.

[jsride]

Great idea.  I checked this section and it was blank.  So to see what would happen, I added the word "test" and "test" appeard on my site after the junk that is showing up.

Not sure what to do.  Also, everything is still misaligned on the home page.

Rick

[AnitaC]

Disable any recently added plugins to see if it goes away.

---

Need help with customization or troubleshooting? Reach out to me.

[jsride]

I disabled them all one-by-one and nothing happens.

So I decided to search on Google using the info that is showing up on the top of my site, "phone monitoring iphone spy track phones . Interesting payday loans online tips" and my website is showing up as the number two right after this forum being number one.

I also checked under the Page, Viewsouce on the top tabs of the internet and this is what shows up in the first lines:

<styletype='text/css'>#a7df3a889, #a7df3a889 * {text-decoration:none; font-size:0.9em; color:#999;}</style><spanid='a7df3a889'>phone monitoring <ahref="http://appiphonespy.com/"target="_blank">iphone spy</a> track phones .  Interesting <ahref="http://www.loanscoast2coast.com"target="_blank">payday loans online</a> tips</span><!DOCTYPEhtmlPUBLIC"-//W3C//DTD XHTML 1.0 Transitional//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<htmlxmlns="http://www.w3.org/1999/xhtml"lang="en-US"xml:lang="en-US">

<headprofile="http://gmpg.org/xfn/11">

<metahttp-equiv="Content-Type"content="text/html; charset=UTF-8"/>

<title>Rx Times Pharmacy Magazine</title>

Not sure what to do.

[jsride]

I disabled all plugins one by one until all were disabled and nothing happens.

If you search the internet with this info that is showing up, "phone monitoring iphone spy track phones . Interesting payday loans online tips" my site shows up as number two right after this forum because of this thread.

Also, if you look at Page, View Source, there is stuff in the view source that shows up in the first few lines that I do not know where it's coming from or how to get rid of it.

The other day, this was showing up on the bottom of my website after the footer, so I updated WordPress and Genesis and it went away.  Then a couple of days later it showed up on top and my homepage is misaligned.

Not sure what to do 🙁

[jsride]

Ok, if anyone is wondering, I finally found a file in my news template called footer_top.php and after removing this file, all the text and links above the header is gone and everything is back to normal.

Now I just wish I knew how someone was able to put this there.

Rick

[wp guy]

What kind of security are you using for your site?

[jsride]

To be honest, I do not know.

[Author]

Posts