Hi Lynne I have done a full back up and restore but the site is still hacked after you login or click any links.
is it worth going to an earlier backup or is the redirection actually sitting in the file system?

ask your host to restore a backup if possible (before the hack occurred)

disable all products/plugins once you log in

I would replace the files also. But also look for any suspicious files in your system (you can do that in Admin CP > Maintenance ).

sorry if this is a stupid question: When did you create that backup, before or after the site was hacked?

did you even revert your templates?

Backup was done by cpanel automatically, daily, weekly and monthly, I did the weekly restore within 7 days of the hack.

Thanks for the offers of help on this from everyone, we will be sorting it out soon. :)

I like to gather the hacked files together, tarball them and send them to the host just so they have a record that it wasn't me that sent out those 10,000,000 emails haha. Anyway if you keep regular backups you only lose as many days of posts as your backup period is long, so it's usually not bad. My only worry ever when someone gets in is that they'll propagate something malicious that I might get in trouble for.

hi there, we got our websites hacked yeaterday, can anyone help us to fix the problem, i have done back up before we got hacked, but no ideas what to do next, we will be very grateful for any help

thanks

ahhh,

i got hacked twice couple of days ago by different hackers....after getting hacked second time what i did...was

as i have regular backup of my forum
i restored all backup from cpanel
and then i disabled all hooks
and then upgraded my forum to latest version of vb
and also i used a web scanner to find out the vulnerables and suspicious files.

can you explain how to do that, as we can,t in to do all things you done

thanks