[wp-hackers] My WPMU site got hacked!!!

[Arlen Beiler]

Do you have ftp access? If so, download a copy of the files to your
computer.

On Sat, Jul 17, 2010 at 8:04 PM, MarvinC <marvinc at gmail.com> wrote:

> Where must I go to backup the content?
>
> On Thu, Jul 15, 2010 at 8:22 PM, Brian Layman <bulk at thecodecave.com>
> wrote:
>
> > It looks like it is a simple defacement.  Deleting index.html will likely
> > temporarily fix the problem. However, that does nothing to plug the hole.
> > Your best bet is to delete all the files, reinstall the core WordPress
> > files
> > and restore from last week's backup of the wp-content. And then uninstall
> > any plugins you don't HAVE to have and change the rights on  all of your
> > files to 744.
> >
> > A hack can be fairly complex, but that's the basic procedure. A detailed
> > slide by Brad Williams about fixing hacks can be found here:
> >
> >
> http://www.slideshare.net/williamsba/now-thats-what-i-call-wordpress-securit
> > y-2010
> >
> > Or contact Brad Williams, myself or the wp-pro mailing list if you just
> > want
> > this fixed and want to move to a host that can prevent it from happening
> > again.
> >
> > And don't worry, you're not alone in having this particular hack happen
> to
> > your site http://www.zone-h.org/archive/notifier=Xa7m3d Just make sure
> you
> > don't appear in the R column or get a gold star :)
> >
> > ______________________________________________
> > Brian Layman
> > eHermits, Inc.
> > TheCodeCave.com / eHermitsInc.com / twitter.com/BrianLayman /
> > facebook.com/eHermit
> >
> > _______________________________________________
> > wp-hackers mailing list
> > wp-hackers at lists.automattic.com
> > http://lists.automattic.com/mailman/listinfo/wp-hackers
> >
> _______________________________________________
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-hackers
>