Greetings Webmaster-talk forum members.

I need some help. It seems some hacking program has gotten into my website. A few days ago I noticed a whole bunch of links pasted at the bottom of my website. I did not put these there, so it must me some kind of hacking software. I deleted the links off my website, but today they were back.

Do any of you have any idea how this happens? Or how I could fix it?

I have taken the links off my website. But here is the beginning of the list:


<u style=display:none><a href="http://jas.org.jo/amr/personal/0/fast-personal-loans.html">
fast personal loans</a> <a href="http://jas.org.jo/amr/personal/0/1730937003.html">
quick personal loans</a> <a href="http://jas.org.jo/amr/personal/0/21832422368.html">
secured personal loans</a> <a href="http://jas.org.jo/amr/personal/0/31458237160.html">
unsecure personal loans</a> <a href="http://jas.org.jo/amr/personal/0/41461835133.html">
high risk personal loans</a> <a href="http://jas.org.jo/amr/personal/0/unsecured-personal-loans/">
unsecured personal loans</a> <a href="http://jas.org.jo/amr/personal/0/fast-cash-personal-loans.html">
fast cash personal loans</a> <a href="http://jas.org.jo/amr/personal/0/bad-credit-personal-loans.html">
bad credit personal loans</a> <a href="http://jas.org.jo/amr/personal/0/personal-bad-credit-loans.html">
personal bad credit loans</a> <a href="http://jas.org.jo/amr/personal/0/9969660644.html">

And it goes on for about another hundred lines.

I think I am going to try to restore my website to a period before the adds started appearing. Is that a good idea?

Thanks for your help,

Ian

If someone has hacked your password or something, this may be how they are doing it. Change things like that and see what happens. This is probably the main way from which they could be doing anything.

Either that or your host has been hacked, but that's fairly unlikely

Thanks Daniel, but I have changed all the passwords I can since it happened last time--and it happened again today.

Any other ideas?

Well make sure there is no spyware on your computer before changing your password. Also what type of server is your site on?

Ewan,

Thanks, I'll have to find a spyware scan and check that out.

I have shared hosting with hostrocket. I believe that it is running Linux.

Thanks for your help,

Ian