I was hacked the first time the evening of June 25th. That night four sites were hit. Every morning since then, a few of my sites have had the Muslim message and arabic chanting. The changes show up here early in the day because I’m sure the offense is happening on the other side of the world.

I have come to the conclusion that my invasion must have been a “time-bomb” type program which was left behind at my website. My reasoning is that I have 13 websites. None have been hacked more than once. I therefore figure the hacker came once and left something that would run through available subdirectories. I’ve put in place all the “protections” but I can only do so much.

I had hoped the nightmare was over since they’d hit all my domains, but this a.m. the message was found on a subdirectory which contained an index html file. That’s a trigger component which can be used on the next tier down.

So now I fear that the hacker will go through all the other subdirectories that have index.html files. Here are all the areas that might be hit:

The first bunch have all been hit (but he could come back.)

1. http://dulcimers.com
2. http://dulcimers.biz
3. http://originaldulcimerplayersclub.org
4. https://sharons-blog.com
5. http://sonasmusic.com
6. http://finniganmusic.com
7. http://deedeetibbits.com
8. http://mhschemics1960.com
9. http://sub-strings.com
10. http://flintbanjoclub.com
11. http://originaldulcimerplayersclub.com
12. http://midlandduulcimerfestival.com
13. http://sharonsdiary.com – a password diary for only me.

Subdirectories with index files:

http://dulcimers.com/audioclips
http://dulcimers.com/Annettesmusic
http://dulcimers.com/dulcimerslist
http://dulcimers.com/buttons
http://dulcimers.com/email
http://dulcimers.com/evart
http://dulcimers.com/fbc
http://dulcimers.com/festival
http://dulcimers.com/Jim_album
http://dulcimers.com/lesraber
http://dulcimers.com/music
http://dulcimers.com/nantucketv
http://dulcimers.com/odpc
http://dulcimers.com/ODPCMembers
http://dulcimers.com/petes09
http://dulcimers.com/photos
http://dulcimers.com/skaryds
http://dulcimers.com/tunes
http://dulcimers.com/workshops

Going down the list to check works great then you hit your back to come back to the list again.

Hopefully folks will help me check out this list and let me know if any are hacked.