How to check if your drupal site was hacked (and how to fix it)
Created on 2014-Nov-28
Updated on 2017-Jan-15
Install drupalgeddon on your server:
drush dl drupalgeddon
Install Site Audit:
drush dl site_audit --dev
Install Hacked:
drush dl hacked --dev; drush en hacked -y
Install Security Review:
drush en security_review -y
OPTIONAL: run all the above in a single line.
drush dl drupalgeddon -y; drush dl site_audit --dev -y; drush dl hacked --dev -y; drush en hacked -y; drush en security_review -y
Run the drupalgeddon site audit--this will also run the above modules--this will create a file called 'report.html'. Open it up and see what's up.