HELP! whats happened?

[hhtbeatz]

my url http://www.silverspoondesigns.x10hosting.com has been hi-jacked so now a page apperas that is not mine and displays a web address.
This is frustrating how do i fix this?

 

[descalzo]

CPanel, rename index page to indexBAK and place a skeleton (Sorry for the interruption) page in its place.

Check the indexBAK for the problem. Check any javascript libraries you use. Examine anything that has "document.write" in it

 

[Livewire]

Affected file: liveclock.js

There is a rogue line at the bottom. Erase the entire line.



EDIT: Just so you know how I found it, I started blocking scripts/swf's one by one in AdBlock until it stopped having the problem. It stopped having the problem after liveclock.js, and you can see the line right at the bottom - if you fix that line it should go away without breaking anything.

 

[descalzo]

After you clean up that file, start checking all your other files for code that looks like the one Livewire found.

Check to see if you have any cron jobs...even if you never set up a cron job.

ie...if they compromised one file, they might have compromised others.

Where did you get the liveclock script? From its parent site?

 

[hhtbeatz]

liveclock does seem to be the problem. i removed it from index page and left it on the other pages and site works. i have had a few pages online for 4-5 months all with liveclock and not had a problem..until now.