home page is showing other site

[nijamutheen]

oh my god ! when i go to my home site it shows some muzic http://i.imgur.com/nionyHi.png

[_CONEJO]

Your site was hacked/defaced. Now, the typical questions:

Which version of Osclass were you using?
Which themes / plugins and which version of each one?
Which version of PHP / MySQL ?
Did you have any other software installed in the same server (Wordpress, joomla,...)? even if it's an old installation no longer in use.
Did you use strong password for your services? (FTP, SSH , MySQL,....)

Restore the last backup, update your software,  and look for any potential security issues.

[nijamutheen]

Which version of Osclass were you using? latest 3.7.3Which themes / plugins and which version of each one?veronica, still now they will not reply me,yesterday  i wrote review about veronica

Which version of PHP / MySQL ?  7/
Did you have any other software installed in the same server (Wordpress, joomla,...)? even if it's an old installation no longer in use.yes wordpress

Did you use strong password for your services? (FTP, SSH , MySQL,....):yes, num,caps letter,small letter ,and special character

Restore the last backup, update your software,  and look for any potential security issues. i dont have backup, from last 21 days  developing i'm from india so here network is verry slow that is why it take long time.
i don't know what i want to do next   i asked support for my hostgator they told that remove all files and ask your designer before deleting , after that  asked support for my theme designer still now they did not reply me (reached 12 hours)

[_CONEJO]

Which version of wordpress were you using?

There's no known vulnerability in Osclass 3.7.3 and if you don't use any plugin it's difficult to tell you how you were hacked.
Remove all files, download new files from original source and upload them again. Do the same for wordpress.

[nijamutheen]

i got this after scan http://prntscr.com/fotqtr

[_CONEJO]

Looks like the entry point was the k2.php file of the Wordpress theme "mantra"

[Liath]

if i remember right.... mantra is a very very old and unsupported theme for wordpress... you should also think about a new theme

[nijamutheen]

can i remove this

[nijamutheen]

After Removing infected files when i go to site it showed http://prntscr.com/fp2ol4
i dont know next what i do ?

[Aficionado]

After Removing infected files when i go to site it showed http://prntscr.com/fp2ol4
i dont know next what i do ?

Start by DISABLING your folders/files browsing (indexing). That should never happen in the first place.

Then reupload a fresh copy of Osclass because some files are missing. Preferably the version you used.

Also what is that "zoho" folder ? Doesn't belong to Osclass.

[nijamutheen]

mailserver configuring

[nijamutheen]

 how to get custom field and categories and mail configure settings
 http://prntscr.com/fp4tyw      http://prntscr.com/fp4umn


is it possible to backup that contents only like custom field and categories and mail configure ,theme setting ?



i did not publish this site so i have fully doubted hostgator ****  others plugins also updated no one site will be published they asking some money for old backup and selling some security things like ssl,codecords ,,,,**** things they are only working is selling things not security

[Aficionado]

mailserver configuring

You mean  that Zoho folder is for mailserver config ? What mailserver config ? What does that mean ?

I still believe it should not be in there. Who knows what exactly it contains....

[Liath]

i did not publish this site so i have fully doubted hostgator ****  others plugins also updated no one site will be published they asking some money for old backup and selling some security things like ssl,codecords ,,,,**** things they are only working is selling things not security

Did i understand right? Youre hosting company want money to give you a backup of your site?

[nijamutheen]

can i move my host to godaddy