My website Hacked

[vickypark]

I was busy these 2 weeks and till yesterday my website was running fine(my friend said so). Today i logged into admin of wordpress to select the winners of the giveaway i conducted two weeks ago. But it said wrong password, then i visited my site and this shows up

_ ______ _ ______ _______ ______ ____ ____ / \ .' ___ | / \ .' ___ ||_ __ \ / ____ `.|_ _| |_ _| / _ \ / .' \_| / _ \ / .' \_| | |__) | `' __) | \ \ /\ / / / ___ \ | | / ___ \ | | | __ / _ |__ '. \ \/ \/ / _/ / \ \_\ `.___.'\ _/ / \ \_ \ `.___.'\ _| | \ \_| \____) | \ /\ / |____| |____|`.____ .'|____| |____| `.____ .'|____| |___|\______.' \/ \/ ######################## Own3d By TuPac^SHaKuR ################################### TuPac^SHaKuR ~ GrandMast3r ~ pr0xyb0mb3r ~ 1NJ3CT0R ~ 4L ~ N3G4T1VY ~ 1NF3CT0R ~ SPONG3B0B ~ therider ######################## Greetz 4 ################################################ Kosova Hackers Security (ALl TEAM) HF.AL Members Like d4rkn3Ss & Theoc_no & cr0wn Etc.. My oLd ATH -> l00k & crackcood3R (good boys both) ################################################################################## now admin u can patch ur ASS!! ######################## Albanian Cyber Army #####################################

i reseted my password and got into wp admin but was unable to remove this message. I dont know how they posted this and which file i should remove from the file manager in cpanel. I seriously need help . My site is LINK REMOVED

[JayCub]

Hi Victor sorry to hear about your website been hacked that's a real pain, hopefully Raymond or some site manager can help you remove the message......... i suppose you can count your blessing they didn't delete everything, at least this is a lesson learned, and shows the importance of having backups..

[leofelix]

@ vickypark

I am sorry to hear, but please do not post live link to hacked sites for NO reason.
I had to remove your link, I do not want any member to get infected

Now have a look here
http://www.unmaskparasites.com/

http://sucuri.net/

use the above links to scan your site, the second one might help you to clean your site

[utkarsh30june]

Lol you've been pwned.

That's why you need to have a security advisor before creating a website. Too bad you had to learn it the hard way.

Albanian Cyber Army posted about your website in their Official Facebook page as well:
LINK REMOVED

[leofelix]

I am afraid I have to lock this thread as I do not want any other user to start posting links that may lead to possible infected sites.

@ urktash30june: there is nothing to laugh.
I doubt you would like to have your site hacked

[Raymond]

Look at the HTML source code and that should give you some idea.

<title>own3d by TuPac^SHaKuR</title>
<IFRAME SRC="index.txt" WIDTH=450% HEIGHT=100%></iframe>

I believe plugins are the cause of the hack.
Make sure you remove unnecessary and old plugins.