~TABASCO~ needs some computer help

~TABASCO~

RIDE ON ADV is what I do !
Founding Member
2011 Site Supporter
2012 Site Supporter
2013 Site Supporter
2014 Site Supporter
Vendor
Joined
Apr 4, 2011
Messages
7,328
Location
TEXAS
Hello,

With the new forum layout I don't know where to put this question... The RideOnADV web site has been hacked and I don't know how to fix it. Can anyone help me?

Thank you ~ Jaxon
 

~TABASCO~

RIDE ON ADV is what I do !
Founding Member
2011 Site Supporter
2012 Site Supporter
2013 Site Supporter
2014 Site Supporter
Vendor
Joined
Apr 4, 2011
Messages
7,328
Location
TEXAS
Jaxon, not expert at all, but I suggest to do a search "web hacked". Several instructions are given


Thanks, I need a bit more 'guidance'.... I could probably read for three months (or two years) and maybe or maybe not fix it...
 

Venture

Administrator
Staff member
Founder
Joined
Feb 26, 2010
Messages
2,121
Hello,

With the new forum layout I don't know where to put this question... The RideOnADV web site has been hacked and I don't know how to fix it. Can anyone help me?

Thank you ~ Jaxon
Depends on what you mean by "hacked." What is the behavior you are seeing? How are you hosting the site and what is your backup schedule?
 

~TABASCO~

RIDE ON ADV is what I do !
Founding Member
2011 Site Supporter
2012 Site Supporter
2013 Site Supporter
2014 Site Supporter
Vendor
Joined
Apr 4, 2011
Messages
7,328
Location
TEXAS
Depends on what you mean by "hacked." What is the behavior you are seeing? How are you hosting the site and what is your backup schedule?
I was just told it was ‘hacked’. The only thing I know is when you type the web site into google it directs you to a drug company in Europe.
Thank you
 

PowersUSA

Member
2014 Site Supporter
Joined
Jun 12, 2012
Messages
297
Location
USA
I can confirm that I get a "drug company" page when I follow a link from Google search result. But I get your site when I reload the page or type in the url directly. Did you renew your domain name at GoDaddy on 7/31 (this is what is in the public record)?
 

~TABASCO~

RIDE ON ADV is what I do !
Founding Member
2011 Site Supporter
2012 Site Supporter
2013 Site Supporter
2014 Site Supporter
Vendor
Joined
Apr 4, 2011
Messages
7,328
Location
TEXAS
I can confirm that I get a "drug company" page when I follow a link from Google search result. But I get your site when I reload the page or type in the url directly. Did you renew your domain name at GoDaddy on 7/31 (this is what is in the public record)?
It was renewed. Do you know how to fix the google search?
Thanks
 

PowersUSA

Member
2014 Site Supporter
Joined
Jun 12, 2012
Messages
297
Location
USA
I just ran a simple test using CURL (you can think of this like a command line web browser). A simple straight request for rideonadv.com returns the html for your site. However if I set the referrer header (this tells the hosting server what site you coming from) to google.com or bing.com then the site returns the html for the "drug company". Unfortunately this points to malicious code running on the server hosting your site. The fix will require knowledge of how the site is developed and hosted.
 
Last edited:

Nikolajsen

"Keep it simple"
Joined
Jul 1, 2017
Messages
2,046
Location
Denmark
So Tabasco can't do anything?
He will have to talk to the company that host the site? (unless of course it is hostet privat)
 

~TABASCO~

RIDE ON ADV is what I do !
Founding Member
2011 Site Supporter
2012 Site Supporter
2013 Site Supporter
2014 Site Supporter
Vendor
Joined
Apr 4, 2011
Messages
7,328
Location
TEXAS
Thanks guys,

You suggest I speak with the host provider ? Can they go 'fix' that issue ?
 

AVGeek

Well-Known Member
Founding Member
2014 Site Supporter
Joined
Sep 5, 2010
Messages
2,780
Location
Boulder City, NV 89005
Thanks guys,

You suggest I speak with the host provider ? Can they go 'fix' that issue ?
Definitely. I clicked on PowersUSA link above, and it went straight to your website, while typing in the address on Google took me to the online pharmacy.
 

~TABASCO~

RIDE ON ADV is what I do !
Founding Member
2011 Site Supporter
2012 Site Supporter
2013 Site Supporter
2014 Site Supporter
Vendor
Joined
Apr 4, 2011
Messages
7,328
Location
TEXAS
Thanks AVGeek..........

Do you know why it logs me out every time I leave the forum.. When I return I have to log back in ? (its probably my computer luck) LOL
 

PowersUSA

Member
2014 Site Supporter
Joined
Jun 12, 2012
Messages
297
Location
USA
Thanks guys,

You suggest I speak with the host provider ? Can they go 'fix' that issue ?
From what I can tell from looking at your site it is based on WordPress (a very popular comment management system) along with Woo Commerce. Both of these involve software running on the server to generate your sites content dynamically. There are many vectors for malware. Like insecure passwords, insecure hosting, un-patched server software (e.g. WordPress). Did you set this site up yourself or was this done by a third party? If setup by a third party are they also the ones hosting the site?
 
Last edited:

Venture

Administrator
Staff member
Founder
Joined
Feb 26, 2010
Messages
2,121
Thanks AVGeek..........

Do you know why it logs me out every time I leave the forum.. When I return I have to log back in ? (its probably my computer luck) LOL
How are you coming back? Typing in the address? Bookmark? Are you selecting the "remember me" option when you log in?
 

~TABASCO~

RIDE ON ADV is what I do !
Founding Member
2011 Site Supporter
2012 Site Supporter
2013 Site Supporter
2014 Site Supporter
Vendor
Joined
Apr 4, 2011
Messages
7,328
Location
TEXAS
From what I can tell from looking at your site it is based on WordPress (a very popular comment management system) along with Woo Commerce. Both of these involve software running on the server to generate your sites content dynamically. There are many vectors for malware. Like insecure passwords, insecure hosting, un-patched server software (e.g. WordPress). Did you set this site up yourself or was this done by a third party? If setup by a third party are they also the ones hosting the site?
No, I didn’t set up. A friend ‘built it’. It’s word press I guess hosted by godaddy.
 

~TABASCO~

RIDE ON ADV is what I do !
Founding Member
2011 Site Supporter
2012 Site Supporter
2013 Site Supporter
2014 Site Supporter
Vendor
Joined
Apr 4, 2011
Messages
7,328
Location
TEXAS
How are you coming back? Typing in the address? Bookmark? Are you selecting the "remember me" option when you log in?
When I come back I’m logged out. I go to the top and re sign in.
 
Top