Hacked website?

[calaf6]

Don't know if anyone here can help or shed light on this one, its nothing to do with 68, but with the amount of knowledge here its a good place to ask.

I am having problems accessing one of my websites cpanel. I changed the password on Monday as it was not recognising the one I had. Today the new password did not work, so I changed it again and while I was in cpanel I started to get a server not found error message.

At the weekend I also discovered that I had a virus on the site, not sure if its related, but I am suspicious about it all now.

So, any ideas if I could have had some software planted that picks up password changes, and if so hoe do I trace it, remove it, and find the ip of the originator so I can ban them. I am in contact with the service provider, but they are not over fast with responses

[juven14]

I would definitely contact your host about the cPanel issues. cPanel does have some virus scanning options, so be sure to do that. You can also scan your directories to look for files/folders that you don't recognize. If cPanel has problems it is something your host will need to resolve because usually you don't have access to that directory via ftp.

[calaf6]

Thanks, the host got back to me last night (8 hours after the latest ticket was submitted) and said that the virus is in the script, so I was to look on the homepage for iframes, take that out and then not to worry about it

Soooo, I am switching hosts, I have got the site backup that I did in February well before this started, and all I need from the problem server is the database and pictures. Pictures I can scan with McAfee on my pc, and I know the Feb backup is clean, so it will be a new start. Host I switched to have been very helpful so far, online chat to support and an answer to a support ticket within 30 mins, so looks a lot better.

Big thanks to Blair for his help as well, better support on here for a non 68 problem than from a host who should have been sorting it.