metadata hacked

[kerrysnow]

A google search for our club, the Potomac Appalachian Trail Club comes up with our correct url and site info, but also includes this text, "low price [* spam *] - Add to Favorites. Online store selling [* spam *]." I'm wondering how to fix that problem. I've looked at the metadata that's available through the Joomla panel, and that's ok. I'm thinking that some file on our server must've been hacked, but I can't find the right one to repair.

Any help is great appreciated.

[panosgr]

It is not the metadata. This text is in your website and google have decided to put as description!
This means that your website is compromised, probably with the famoys Gumblar virus!
Make a serach and you will find tons of information.
Proceed to all the necessary actions to clean you website (and your pc too)

[mandville]

[ ] Run the forum post assistant and security tool Instructions available here

[ ] Ensure you have the latest version of Joomla. Delete all files in your Joomla installation. Replace the deleted files with fresh copies of a current full version of Joomla, and fresh copies of extensions and templates used. Only by replacing all files in the installation (including extensions and templates) can you be sure to remove the backdoors inserted and hidden in files and directories

[ ] Review Vulnerable Extensions List

[ ] Review and action Security Checklist checklist 7 to make sure you've gone through all of the steps.

[ ] Change all passwords and if possible user names for the website host control panel and your Joomla site.

[ ] Use proper permissions on files and directories. They should never be 777, but ideal is 644 and 755

[ ] For the malicious code topic

[sucuri]

Those are not the gumblar virus, but part of a SEO spam network that is affecting lots of
sites.

You are also using a very old version of Joomla , which explains how they got in...


Some info here:

http://blog.sucuri.net/2010/05/leanmite ... -spam.html
http://blog.sucuri.net/2010/05/it-is-no ... sites.html

[kerrysnow]

Thanks to everyone for the quick and informative replies. Our organization is in the process of moving to a commercial database/web alternative (iMIS), so our Joomla site (managed sporadically by volunteers) is not long for the world. I was hoping that there was some file on the server that I could easily repair, as a temporary fix.

[mandville]

as the OP hasnt used the forum post tool for us to diagnose more, and seems to be using J1.0.x - i am moving this to the correct forum

[mandville]

topic locked due to no response from original poster -see http://forum.joomla.org/viewtopic.php?f=432&t=509319