My server's been hacked EMERGENCY
My site is hacked and I've asked yesterday about this issue.
I've changed the FTP password, the server password. I also have change the location of the server where it use to be in the folder of
MAMP now I changed it to somewhere else and it is still happening.
What happen is that all the sites being replace with
.htaccess with all the redirection to some random russian site and end up forwarded to
baidu.com which is Chinese search engine.
I have the most up to date Wordpress and all the plugin is disabled even I did removed them all.
First I though only one of them is being affected, but it turn out to be all the site in the same server got affected by replace the
I don't know which step I should take to solve this problem now. I have also download my site (3.5GB) and did some search with
Notepad++ and using command line like
grep to find if there is any php file that is doing that kind of replacing the file and nothing really found.
I'm looking to solve this problem since yesterday and lost a lots of traffic of my site to them and I don't know what to do now.
Anyone please give me some suggestion.
I did a lots of researches and nothing really found yet.
.htaccess to permission
400 and they still can replace the file.