Problem: Keywords Hijacked or Rogue Keywords???

Hi all,

I have been searching in the web, but havent found anything about this.

I have a site [URL BLOCKED by Forum) , which I had SEO'ed a little and was doing pretty well with its main keywords.

Around one week ago I realised that the site didnt even appear for keywords which previously had ranked 1. The site only appeared on searches with its domain name.

I thought google had changed its algorithm and I started to work again in the SEO. What was my surprise when I checked Googles Webmaster Tools and saw that Googlebot was listing as contents a huge amount of keywords that didnt even appear in my site. All porn related keywords.

My question is , What has happened???, Might have I been hacked?

I've checked the site , all the files and folders, and havent seen any strange file nor any file modified lately. I'm about to delete all the site and recover a backup, but I would like to know what happened in order to prevent it in the future.

Any advice, help is welcome!!

Thanks in advance!

It does sound as though the site has been hacked. If you do a site search in Google for the keywords, does it help you find which page(s) they're on, ie
site:www.yoursite.com keyword

If the script uses cloaking then it may not be obvious without setting your user agent to imitate Google.

Yes, I have been hacked.

I just found that the index.php of my template had been modified when I was on vacation. I checked it out and, at the end, had an invisilbe layer with the classic decode64(.....) , which displayed a lot of links and porn keywords.

Thanks for the help!

No problem, and sorry to hear that you were hacked. Once you've cleaned up the file and hopefully worked out how they gained access in the first place so that you can close the security hole, make sure you file a reinclusion request with Google via your Google Webmaster Tools account.

Thanx for the advise, I just wiped all the site and uploaded a backup.

Have checked for possible holes but dont seem to find anything. I'm right now checking the apache logs for the dates the index.php was modified.

I will keep an eye on the site and fill up the reinclusion form in a couple of days.