Recovering from a Hack: How long until Google reindexes changes?
-
In a previous post I made, I was able to determine that one of my sites; http://pokeronamac.com/ was hacked and was feeding spam perscription drug content to search engines, then redirecting to another site when clicked on Google.
I then contacted my web host, and, after they did a scan of our files, they determined that something within the wp-includes directory was compromised and malicious. They removed the file, though they weren't able to determine the source of the attack, or how they god in (should we be scared?). Anyway, its been several days now ~5 and if I do a site search the spam pages still show up, but the redirect is no longer working.
At this point, I am at a standstill, because i'm loosing traffic on my site by about 90%, and google hasn't sent us any warnings of malaware or the like. I know I was recommended against this before, but should I attempt to submit a reconsideration request, or should I just wait it out?
Thanks for your help,
Zach
-
If I were going to name a plugin that was NOT likely to be the cause then Akismet would probably be top of that list. Nothing is guaranteed of course, but Akismet probably the mostly widely used wordpress plugin available. If there was an issue with that I think everyone would know.
-
I have had a word press site hacked in the past......
Once we eliminated the issue. I installed some additional security and changed passwords etc.
This seemed to take care of it.
I am not sure, but I want to say a plugin the customer had called Akismet may have played a role....?
-
I'm not an expert of wordpress. However my approach for any compromised CMS would usually be something like:
- Ensure that you have a full back up of all content and media
- Put up a test install of the core CMS (most up to date version)
- Import content and media to the test install
- test test test test
- Only install plugins that are ABSOLUTELY ESSENTIAL, and then only if they are well used by others, without reported problems and from trusted sources
- test test
- Once you are happy that your test version is good create a full backup
- Now delete the live site
- Change all passwords
- Copy the test install
-
I didn't realize that it was still redirecting. Do you recommend we completely replace the WordPress core? and then go through the plugins?
-
Your site appears to be infected with a trojan and still redirecting users. I wouldn't expect traffic and earnings to return until that issue is fixed.
Most WP hacks are down to either a bad installation or a bad plugin. The core files are pretty good as long as they are kept up to date. Get the mess cleared up and reudce your plugins to the absolute bare minimum. They research each one to see if others have had problems.
I wouldn't suggest waiting it out. That will achieve nothing.
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
Google Acquisition & Audience Segmentation
Hi. I'm trying to figure out a solution to two questions one of my current clients has asked me in regards to Google Analytics tagging, and I'm unsure how to respond. Can anyone help? See below the questions, 1. In Google Acquisition > Overview, their paid media is reporting as "Other". They do not run any Google paid ads. They only run Facebook paid ads. Is there a way to update the source so that it says "Paid" versus "Other" within the default channel? The current solution was advised to create a channel group that the client has to then tick on overtime they want to see this data with the correct labeling. They would prefer to see it in the default. Is it just a matter of going into the *default channel, choosing the "Paid" option, and then specifying the source/medium that contains Facebook, CPC, or referral to be categorized under this channel? Or is it something else? *Aware that changes to the Default Channel are permanent changes and will change how new traffic is classified. 2. Audience segmentation > The client wants to be able to define it's audience by shopping intent and informational intent. Is there a clear way to do this, for example, by keywords used, e.g. buy, product name, entry (shopping intent), versus e.g. non-purchase intent, entry to the blog, length of time on site (info intent). Would be happy to have a conversation about the last question, since I'm conscious that there are probably multiple ways to define this - thanks. To the group, thank you for readying my questions and helping me with these solutions - your time is appreciated and valued. Sincerely, Amanda
Search Behavior | | AmandaValle.Digital0 -
Skewed results in Google
Im just curious.. Im sure a lot of you, like me, Google your own search terms on a fairly frequent basis. Does doing this skew the result you are actually seeing? As in, does Google tailor the results more to my liking, and therefore perhaps show my own site (which I would click through to often enough) higher on the page that it actually is? Sometimes I swear that happens. Steve.
Search Behavior | | blitzna100 -
Privacy Policy requirements for Demos and Interests in Google Analytics
I have a client who is activating the Demographics and Interests in Google Analytics, and I need to provide an appropriate privacy policy, per Google's TOS. Can anybody suggest what to state in the privacy policy? Google says: "If you’ve implemented Google Analytics Demographics and Interest Reporting, you must also disclose in your privacy policy: How you use data from Google's Interest-based advertising or 3rd-party audience data (such as age, gender, and interests) with Google Analytics." So, I guess it's advisable to state that the site gathers "3rd-party audience data." Is it enough to say that the info is being used to better understand and communicate with the website visitor?
Search Behavior | | jrae0 -
Google reconsideration nightmare
Hello and thanks in advance The website has had a penalty on it for a while now, around 10 months, it was worked on by an agency who bought bad links to it but before then it was worked on by other agencies that may have done the same. I cleaned up as many bad link (according to many posts read) and filled for reconsideration and was told to get rid of a whole bunch of links which i did not know existed. Downloaded WMT links as instructed by Google admin person and contacted a heap of people which took a lot of man hours and cost us a fortune. Resubmitted and again was shown a handful of links by the Google admin person and told to contact and remove. The funny thing is that a few of them I disavowed in my list so they should not have pointed these out. I emailed back and showed that everything I could do was done and am happy to disavow any other link which they though violated their terms. This was not enough and I was told to show more efforts in removing links and then resubmit for reconsideration. I have done as much as I can on the website, I cannot see any more links which show violation, if there are some I am happy to remove but am now at a stage where i need direction from others to tackle this matter. Any advice would be helpful; I cannot start over from scratch as it's a brand and not a small website.
Search Behavior | | Benbug0 -
How long til meta robots noindex takes effect?
I have a wordpress site with about 3,000 posts and over 1,000 tags. All of the tag archives are currently indexed in Google and I don't want them to be. I just set the meta robots to no-index all the tag archives and was wondering how long it will take til they're out of the search engines? Since there are close to 1,500 of these and they are duplicate content it would be nice to have them gone asap. I noticed Webmaster Tools allows me to resubmit my site to index if my site has changed significantly... should I try that?? Any other advice would be greatly appreciated!
Search Behavior | | gfreeman230 -
Decline in engagement metrics, due to nav changes vs. content changes
With improvements in our rankings, we are seeing adverse changes in our measures of engagement. My gut reaction is to believe we are attracting more unqualified traffic, thus higher bounce rates, declines in pages/visit and time on site (approx 15%, 15%, 25%, respectively). While recent improvements in navigation might have contributed to these engagement declines, do you have any suggestions how best to determine whether these declines are due to nav changes vs. due to copy/content issues? There's been no change in copy content during this period. Thanks.
Search Behavior | | ahw0 -
Google showing malware attack, how to remove ?
Someone just reported that our website was showing malware attack page on their browsers. We checked and saw a bad php code on the above of our index.php file. We removed it and made it clean. Still all the visitors are getting malware attack page. How to fix this ? Site is already clean.
Search Behavior | | qubesys0 -
Google Is Displaying An Alt image tag as my homepage's page title
Google is randomly displaying the alt image tag as the page title for my homepage. It happens when you search for the brand name, but the page title appears as "BrandName Logo" (obviously not "BrandName"). Has anybody seen this happen before?
Search Behavior | | MichaelWeisbaum0