Page 1 of 1

site hacked

Posted: Tue Dec 27, 2011 2:03 pm
by 4joomla
Respected members .
My site is hacked . :'(
http://www.kuhipat .org
I dont have any clue how to recover it from this problem. I can log in to admin and all my files are intact .
Please guide me how to get rid of this .
thanking you .

Re: site hacked

Posted: Tue Dec 27, 2011 2:06 pm
by pe7er

Re: site hacked

Posted: Tue Dec 27, 2011 2:14 pm
by 4joomla
thankyou sir .
I will try to follow it .
regards

Re: site hacked

Posted: Tue Dec 27, 2011 2:20 pm
by mandville
[ ] Run the Forum Post Assistant / FPA Instructions available here and are also included in the download package.

[ ] Ensure you have the latest version of Joomla. Delete all files in your Joomla installation. Replace the deleted files with fresh copies of a current full version of Joomla, and fresh copies of extensions and templates used. Only by replacing all files in the installation (including extensions and templates) can you be sure to remove the backdoors inserted and hidden in files and directories

[ ] Review Vulnerable Extensions List

[ ] Review and action Security Checklist checklist 7 to make sure you've gone through all of the steps.

[ ] Scan all machines with FTP, Joomla super admin, and Joomla admin access for malware, virus, trojans, spyware, etc.

[ ] Change all passwords and if possible user names for the website host control panel and your Joomla site.

[ ] Use proper permissions on files and directories. They should never be 777, but ideal is 644 and 755

[ ] Check your htaccess for for any odd code (i.e. code which is not in the standard htaccess supplied as part of the Joomla installation).

[ ] Check the crontab or Task Scheduler for unexpected jobs/tasks.

[ ] Ensure you do not have anonymous ftp enabled

Re: site hacked

Posted: Mon Jan 02, 2012 12:00 am
by evuln-com
and dont forget to inspect files for web-shells
Regards

Re: site hacked

Posted: Mon Jan 02, 2012 7:40 pm
by kasser
1- To get back all your files and everything you need to talk or communicate with server owner, because he can do backup and bring you site online.
2- You need to get help from website support to close all gaps and leaks in your site to keep your site well protected - you need to pay some dollars - not too much - to do that.

Re: site hacked

Posted: Tue Jan 03, 2012 5:58 am
by leolam
kasser wrote:1- To get back all your files and everything you need to talk or communicate with server owner, because he can do backup and bring you site online.
and what if the backup is also hacked already?
2- You need to get help from website support to close all gaps and leaks in your site to keep your site well protected - you need to pay some dollars - not too much - to do that.
Both replies have no actual value. Madville's reply covers all

Leo 8)

Re: site hacked

Posted: Thu Jan 05, 2012 6:24 am
by pranav034
post removed

Re: site hacked

Posted: Thu Jan 05, 2012 6:43 am
by leolam
pranav034 wrote:I am also having some problem opening my site
Do not hijack someone's post and open your own issue so we can help you better?

Leo 8)

Re: site hacked

Posted: Thu Jan 05, 2012 6:54 am
by pranav034
leolam , I am sorry for that . I will post a new topic


Thanks

Re: site hacked

Posted: Thu Jan 05, 2012 8:00 am
by leolam
posted on your new thread