Joomla! Discussion Forums

Hi - my client's ISP advised me that the site is being used to send out copious amount of spam so they have disabled the site - they said the problem eminated from  "administrator/components/com_events/admin.events.php?"

What do you advise?

Cheers

Chris

Further report -  it appears the hacker created two folders  (images and .orkut)
through the components admin_events.php file.  .orkut has the script in it that generates the spam so I am getting the isp to delete the two offending folders and renaming admin_events.php  to admin_events for now.

Then they will give me acces to the administrator area of Joomla again and I guess I'll either delete the component or see if there is a security upgrade for it - unless someone has a better idea :>

Read the stickies in this forum.

Here is a comprehensive collection of the best ideas from the security forum:
http://help.joomla.org/component/option ... temid,268/

Thank you for that - very helpful resource. Re my issue client has not actively  used the component on his site so I dumped it.

Cheers