First of all, backups made by the host are not for "your" use. It is a backup made of the entire server in case the server needs to be restored; that happens to include your site. As a courtesy, "your" site files can be extracted from the backup (typically from the full and partial or changed file backup), but may or may not be complete for any one particular site for a number of reasons.
The database server which is usually a seperate server, is also backed up in a similar matter and is for recovery from server failures. "Your" database can be recovered similar to above, but may or may not be complete for various reasons.
It is the sole responsibility of the domain owner to make the proper backups of their domain, including all files and all databases. Site extractions from server backups are provided only as a courtesy and may not be complete or up do date. Pretty much all TOS or other hosting fine print will say this in one way or another.
Now since you have been hacked, and "restored", and the site is now apparently missing a file "jmailhelper" (not a database or database table), then all files were not restored, are damaged, in the wrong place etc.
Follow the info below. This will properly restore your website files to the places where they belong.
PhilD wrote:
Before you post your security/been hacked topic, it is suggested to do all of the following. Failure to follow the suggestions below may leave your site vulnerable to being hacked again in the future.You must state what version of Joomla you were using when when the site first became hacked. This can make a difference as to how we approach your individual situation.[ ] Download and RUN the
Forum Post Assistant / FPA Instructions
available here and are also included in the download package. Post the generated results in your security/been hacked topic.
[ ] Ensure you have the
latest version of Joomla for your 1.5 or 2.5 version of Joomla.
Delete all files in your Joomla installation, saving a copy of the configuration.php file. [ ] Review
Vulnerable Extensions List to make sure any 3rd party extensions versions used appear on the vulnerable list.
[ ] Review and action
Security Checklist 7 Make sure you've gone through all of the steps.
[ ] Scan all machines with FTP, Joomla super admin, and Joomla admin access for malware, virus, trojans, spyware, etc. Checklist 7 contains a list or recommended scanners.
[ ] Change all passwords and if possible user names for the website host control panel. Change the Joomla database user name and password.
[ ] Use proper permissions on files and directories. They should
never be 777, ideal is 644 for files and 755 for directories. The configuration file can be set to 444 which is read only.
[ ] Check your htaccess for for any odd code (i.e. code which is not in the standard htaccess supplied as part of the Joomla installation).
[ ] Check the crontab or Task Scheduler for unexpected jobs/tasks.
[ ] Ensure you do not have anonymous ftp enabled.
[ ] Verify individually that any non-Joomla file such as but not limited to that will be placed back on the website such as images, pdf files, files for download, and other documents and files are valid and are supposed to be part of your website.
[ ] Replace the deleted files with fresh copies of a current full version of Joomla (minus the installation directory) you downloaded earlier. Install freshly downloaded copies of any extensions and templates used on the site. If the Joomla database user name and password were changed earlier, then make the necessary changes to the configuration.php file and upload a copy to the website. Upload any non-Joomla files that are necessary for your website.
Only by replacing all files in the installation (including extensions and templates) can you be sure to remove the backdoors inserted and hidden in various files and directories More detailed information can be found in the security Checklist 7 link below.
Note: The forum post tool will work with all versions of Joomla.
| com_users (2.5.0) | com_categories (2.5.0) | com_config (2.5.0) | Webplayer (1.6) | Admintools (2.2.5) | com_checkin (2.5.0) | com_banners (2.5.0) | COM_MYRSSREADER (0.
