Our team (1726) has had a website for some time now, and just recently (sunday) I woke up, checked the website, and it had been hacked. At first it looked like just the index file had been hacked, but after looking around, I realized that several other files had been added or changed in different directories. I've tried deleting all the files I could find that were changed, but every time I reload our index file, it is only several hours before it is changed back. You can see what the hacked page looks like here:
http://www.project1726.org
But PLEASE don't click on any links that may be on there.
I wanted to know if anyone had experience in isolating and removing problems like this? We have continually contacted our hosting service,
http://www.globat.com, but even though they delete the changed folders and files, the problem persists.
Any help right now would be
extremely appreciated!
Thanks!
-1726 webmaster