Public Forums 71,145 posts

[antoniocerasuolo Friend antoniocerasuoloJoin date: February 2011Posts: 274Downloads:0Uploads:59 Thanks: 55 Thanked: 7 times in 1 posts]

#178292

Hi ,

can anyone please help a hacker got to my site:

http://www.milanopartytours.com

can you please help get it back to the original??

i have disabled on the backend but it is still showing the hacked page.

Regards,

[antoniocerasuolo Friend antoniocerasuoloJoin date: February 2011Posts: 274Downloads:0Uploads:59 Thanks: 55 Thanked: 7 times in 1 posts]

#457990

the index.php

and configuration.php have been modified..

[swissa Friend swissaJoin date: November 2011Posts: 1955Downloads:7Uploads:277 Thanks: 175 Thanked: 717 times in 572 posts]

#457996

<em>@antoniocerasuolo 326120 wrote:</em><blockquote>the index.php

and configuration.php have been modified..</blockquote>

Always hard with hackers to know just what else they have changed.

I know it’s not the right time to say it but if you did regular backups you could just restore one of these. If you haven’t been doing backups, it’s a hard lesson to learn to start doing them on as from now and on a regular basis.

You can try blowing the quickstart package on your own pc and then copy these two files across to your site and see if that restores it. YOU’LL have to edit the configuration.php file so that it matches your database and passwords – and the hacker will have a copy of these anyway, so you’ll really need to build new database with new passwords.

Best way? Start again completely fresh, delete everything in your joomla and load all new. Lots of work but probably easier than checking all files for backdoors, trojans etc.

Some useful links I hope from Joomla here and here.

1 user says Thank You to swissa for this useful post

1. Phill

[antoniocerasuolo Friend antoniocerasuoloJoin date: February 2011Posts: 274Downloads:0Uploads:59 Thanks: 55 Thanked: 7 times in 1 posts]

#458001

Hi,

thanks..

[antoniocerasuolo Friend antoniocerasuoloJoin date: February 2011Posts: 274Downloads:0Uploads:59 Thanks: 55 Thanked: 7 times in 1 posts]

#458016

hi swissa,

i think that the hacker just changed the index page

[swissa Friend swissaJoin date: November 2011Posts: 1955Downloads:7Uploads:277 Thanks: 175 Thanked: 717 times in 572 posts]

#458032

<em>@antoniocerasuolo 326152 wrote:</em><blockquote>hi swissa,

i think that the hacker just changed the index page</blockquote>

Which means he’s more than likely a “script kiddie” so you should check that you have an index.html file in every directory on the site.

Make sure you do a backup – akeeba is the best tool & free – in case he comes back again! :p

Wish you the best with the site!

[antoniocerasuolo Friend antoniocerasuoloJoin date: February 2011Posts: 274Downloads:0Uploads:59 Thanks: 55 Thanked: 7 times in 1 posts]

#458087

<em>@swissa 326182 wrote:</em><blockquote>Which means he’s more than likely a “script kiddie” so you should check that you have an index.html file in every directory on the site.

Make sure you do a backup – akeeba is the best tool & free – in case he comes back again! :p

Wish you the best with the site!</blockquote>

Hi i downloaded akeeba backup english… what do i do now??

regars??

[swissa Friend swissaJoin date: November 2011Posts: 1955Downloads:7Uploads:277 Thanks: 175 Thanked: 717 times in 572 posts]

#458091

<em>@antoniocerasuolo 326250 wrote:</em><blockquote>Hi i downloaded akeeba backup english… what do i do now??

regars??</blockquote>

Ciao!

Well done!! 🙂

Install it, let it do it’s test and then make a backup! That simple!! 🙂

If you want to store a copy away from the site you need to use ftp to copy the backup to your local machine from

mysite.com/administrator/components/com_akeena/backup

Again, well done – you will never regret doing backups – believe me!! 😀

[antoniocerasuolo Friend antoniocerasuoloJoin date: February 2011Posts: 274Downloads:0Uploads:59 Thanks: 55 Thanked: 7 times in 1 posts]

#458093

hi i downloaded the component bu the system is unable to install..

Today i also instyalled RS firewall..

[swissa Friend swissaJoin date: November 2011Posts: 1955Downloads:7Uploads:277 Thanks: 175 Thanked: 717 times in 572 posts]

#458095

<em>@antoniocerasuolo 326256 wrote:</em><blockquote>hi i downloaded the component bu the system is unable to install..

Today i also instyalled RS firewall..</blockquote>

If it does not install then maybe look at their forum (they are very good) or you will have to ask for help from a moderator/developer here so that they can look. I don’t have and would not like to have access to your site – Too dangerous for you!! 😀

[antoniocerasuolo Friend antoniocerasuoloJoin date: February 2011Posts: 274Downloads:0Uploads:59 Thanks: 55 Thanked: 7 times in 1 posts]

#458161

<em>@swissa 326258 wrote:</em><blockquote>If it does not install then maybe look at their forum (they are very good) or you will have to ask for help from a moderator/developer here so that they can look. I don’t have and would not like to have access to your site – Too dangerous for you!! :D</blockquote>

Hi swissa..

grazieeeeeeeee

[antoniocerasuolo Friend antoniocerasuoloJoin date: February 2011Posts: 274Downloads:0Uploads:59 Thanks: 55 Thanked: 7 times in 1 posts]

#458162

hi swissa i fixed the problem with rs firewall.. i ghad to modify a file by hand..

ciao

1 user says Thank You to antoniocerasuolo for this useful post

1. swissa

[Author]

Posts