I have been hacked... any help here?

[Nightfall25gr]

i found a site that has my FTP account there and tell that has been hacked...
take a look here...
http://www.turk-h.org/defacement/vie....gr/geros/im..
this is my domain and the geros ftp account tells that is hacked.
what is that means?
they can enter into my control panel? they can hack the entire site?
is that a serious problem?

[riostyles]

Not clear for me,
anyway:
-Change the password,
-Save the "Hacked" site renaming or copying everything in a new directory.
-Reload your site
-Search out your logs or ask support or abuse to give a look

[charlesgan]

there is possibility to get hacked.
i have hosting somewhere else, that got hacked once as well.
Increase the length of password seem solve it 'for now'

[Arez]

I thought someone had my FTP password once, and it turned out they were exploiting my upload script. If you change your pass and don't have a log stroker on your system, it'll solve the problem!

[Break the Silence]

Sorry to hear about the hack...

If I were you, I'd follow the riostyles plan. Get yourself back up and stay safe!

The best thing to do is to preserve the site that got hacked and report it to abuse@hostgator.com . Our abuse dept can work with you to find out how the site got hacked and ways to avoid this in the future.

If there is anything else we can help you with, please let us know.

[riostyles]

Originally Posted by Arez

I thought someone had my FTP password once, and it turned out they were exploiting my upload script. If you change your pass and don't have a log stroker on your system, it'll solve the problem!

The thrue is that, for example;
You let upload anything or anonymeous ftp to an open directory; they are some technics for to explore the site like any SE does then call the script you just uploaded and do whatever you want.
Give a check with cpanel index manager and correlate this with your logs.
Anyway protect the directories without index.xxx and the very sensitive ones can be chmod to 700, no web acces.