site redirects to: adserver/728x90_bitbucket_v2.php

[kiasati]

Hi
in the morning when i got up and open my site, i saw this:

what is the problem?
when i try to go to the backend, the same result.

[leolam]

Well the problem is that you have been hacked. https://sitecheck.sucuri.net/results/farafan-market.ir

Follow all steps as described http://forum.joomla.org/viewtopic.php?f=714&t=757645

Leo

[kiasati]

what should i do to prevent this from happening again?
what security extensions to install?
i called my host. they keep blaming joomla :/
every time for every single problem they blame joomla.

[leolam]

Did you read what I posted? Follow the link and post as a start the output of the FPA

Leo

[kiasati]

[23-Jun-2016 09:06:28 UTC] PHP Fatal error: Class 'JSession' not found in /home/farafanm/public_html/libraries/joomla/factory.php on line 597

Joomla! Instance :: Joomla! 3.4.5-Stable (Ember) 22-October-2015
Joomla! Platform :: Joomla Platform 13.1.0-Stable (Curiosity) 24-Apr-2013
Joomla! Configured :: Yes | Read-Only (444) | Owner: farafanm (uid: 1/gid: 1) | Group: farafanm (gid: 1) | Valid For: 3.4
Configuration Options :: Offline: 0 | SEF: 1 | SEF Suffix: 0 | SEF ReWrite: 1 | .htaccess/web.config: Yes | GZip: 0 | Cache: 0 | FTP Layer: 0 | SSL: 0 | Error Reporting: default | Site Debug: 0 | Language Debug: 0 | Default Access: 1 | Unicode Slugs: 1 | Database Credentials Present: Yes

Host Configuration :: OS: Linux | OS Version: 2.6.32-673.8.1.lve1.4.3.el6.x86_64 | Technology: x86_64 | Web Server: LiteSpeed | Encoding: gzip, deflate | Doc Root: /home3/farafanm/public_html | System TMP Writable: Yes

PHP Configuration :: Version: 5.3.29 | PHP API: litespeed | Session Path Writable: Yes | Display Errors: 1 | Error Reporting: 6135 | Log Errors To: error_log | Last Known Error: 23rd June 2016 09:16:33. | Register Globals: 0 | Magic Quotes: | Safe Mode: 0 | Open Base: | Uploads: 1 | Max. Upload Size: 50M | Max. POST Size: 50M | Max. Input Time: 100 | Max. Execution Time: 100 | Memory Limit: 3100M

MySQL Configuration :: Version: 5.6.26-cll-lve (Client:5.6.26) | Host: --protected-- (--protected--) | Collation: latin1_swedish_ci (Character Set: latin1) | Database Size: 47.06 MiB | #of Tables:  230

PHP Extensions :: Core (5.3.29) | date (5.3.29) | ereg () | libxml () | openssl () | pcre () | sqlite3 (0.7-dev) | zlib (1.1) | bcmath () | bz2 () | calendar () | ctype () | curl () | dom (20031129) | hash (1.0) | fileinfo (1.0.5-dev) | filter (0.11.0) | ftp () | gd () | gettext () | SPL (0.2) | iconv () | session () | intl (1.1.0) | json (1.2.1) | mbstring () | mcrypt () | mysql (1.0) | mysqli (0.1) | standard (5.3.29) | Phar (2.0.1) | posix () | Reflection ($Id: 4af6c4c676864b1c0bfa693845af0688645c37cf $) | imap () | SimpleXML (0.1) | soap () | sockets () | exif (1.4 $Id$) | tidy (2.0) | tokenizer (0.1) | wddx () | xml () | xmlreader (0.1) | xmlrpc (0.51) | xmlwriter (0.1) | xsl (0.1) | zip (1.11.0) | litespeed () | htscanner (1.0.1) | PDO (1.0.4dev) | pdo_sqlite (1.0.1) | pdo_mysql (1.0.2) | imagick (3.1.2) | SQLite (2.0-dev) | SourceGuardian (10.1) | ionCube Loader () | Zend Guard Loader () | Zend Engine (2.3.0) |
Potential Missing Extensions :: suhosin |

Switch User Environment (Experimental) :: PHP CGI: No | Server SU: No | PHP SU: No | Custom SU (LiteSpeed/Cloud/Grid): Yes
Potential Ownership Issues: No

Core Folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (755) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) |

Elevated Permissions (First 10) :: modules/mod_universal_ajaxlivesearch/cache/ (777) | modules/mod_universal_ajaxlivesearch/cache/476/ (777) |

Components :: SITE :: com_wrapper (3.0.0) | com_mailto (3.0.0) |
Components :: ADMIN :: com_media (3.0.0) | com_sitemapgenerator (1.1.0-rc.1) | com_weblinks (3.0.0) | com_templates (3.0.0) | com_messages (3.0.0) | ECB Currency Converter (1.0) | VIRTUEMART (-) | com_checkin (3.0.0) | Offlajn Joomla 3.0 compatibili (1.0) | Universal AJAX Live Search (5.4) | AJAX Live Search results (1.0.0) | Universal_AJAX_Live_Search (5.4.0) | com_banners (3.0.0) | com_tags (3.1.0) | com_xmap (2.3.4) | com_admin (3.0.0) | com_content (3.0.0) | com_modules (3.0.0) | com_menus (3.0.0) | AlphaUserPoints (2.0.4) | alphauserpointsicon (1.9.0) | Content - AlphaUserPoints - Ra (1.9.1) | User - AlphaUserPoints - New u (2.0.3) | Editor Button - AlphaUserPoint (1.6.0) | AlphaUserPoints - Notification (1.9.0) | Content - AlphaUserPoints - Re (1.9.0) | Content - AlphaUserPoints - St (1.9.0) | System - AlphaUserPoints (1.9.0) | AlphaUserPoints - Example Plug (1.9.0) | com_newsfeeds (3.0.0) | com_search (3.0.0) | com_jhackguard (2.0.2) | com_cpanel (3.0.0) | com_users (3.0.0) | com_ajax (3.2.0) | com_osmap (3.4.1) | Admintools (3.8.3) | JW_DISQUS (3.4) | com_postinstall (3.2.0) | JCE (2.4.6) | Unknown (-) | com_cache (3.0.0) | mod_k2_comments (-) | mod_k2_comments (-) | COM_K2 (2.6.8) | com_login (3.0.0) | AcyMailing table of contents g (1.0.0) | AcyMailing : share on social n (1.0.0) | AcyMailing : (auto)Subscribe d (4.9.2) | AcyMailing Editor (4.9.2) | AcyMailing Tag : content inser (3.7.0) | AcyMailing Tag : Manage the Su (4.9.2) | AcyMailing Manage text (1.0.0) | AcyMailing Tag : Joomla User I (4.9.2) | AcyMailing Tag : CB User infor (3.7.1) | AcyMailing Module (3.7.0) | AcyMailing : Statistics Plugin (3.7.0) | AcyMailing Template Class Repl (4.9.2) | AcyMailing Tag : Subscriber in (4.9.2) | AcyMailing : trigger Joomla Co (3.7.0) | AcyMailing Tag : Website links (3.7.0) | AcyMailing Tag : Date / Time (4.9.2) | AcyMailing (4.9.2) | com_finder (3.0.0) | RSForm! (1.50.6) | com_installer (3.0.0) | com_contenthistory (3.2.0) | com_plugins (3.0.0) | com_config (3.0.0) | com_redirect (3.0.0) | plg_vm_route (2.5.0) | VirtueMart_allinone (-) | com_categories (3.0.0) | com_joomlaupdate (3.0.0) | com_languages (3.0.0) | Akeeba (4.7.3) |

Modules :: SITE :: mod_related_items (3.0.0) | K2 User (2.6.8) | Sj Module Tabs (1.0) | mod_virtuemart_cart (3.0.10) | mod_whosonline (3.0.0) | Sj Contact Ajax (1.0.1) | mod_random_image (3.0.0) | AlphaUserPoints - Lastest acti (2.0.4) | mod_articles_popular (3.0.0) | AlphaUserPoints - Coupon Code (2.0.4) | SJ Ajax Tabs for VirtueMart (1.0.0) | mod_syndicate (3.0.0) | Sj Flat Menu (1.0.0) | SJ Categories for VirtueMart (2.2.0) | mod_virtuemart_currencies (3.0.10) | mod_virtuemart_search (3.0.10) | K2 Tools (2.6.8) | mod_articles_archive (3.0.0) | Sj Minicart Pro for Virtuemart (3.0.0) | mod_menu (3.0.0) | mod_virtuemart_manufacturer (3.0.10) | mod_feed (3.0.0) | پیشنهاد شگفت انگ (2.0.1) | mod_weblinks (3.0.0) | AlphaUserPoints - Most Referra (2.0.4) | AlphaUserPoints - Most Active (2.0.4) | AcyMailing Module (3.7.0) | AlphaUserPoints - Actual Point (2.0.4) | mod_languages (3.0.0) | mod_articles_latest (3.0.0) | mod_tags_similar (3.1.0) | SP VirtueMart Category Search (1.0.0) | mod_finder (3.0.0) | mod_users_latest (3.0.0) | mod_virtuemart_product (3.0.10) | K2 Comments (2.6.8) | Universal AJAX Live Search (5.4) | mod_footer (3.0.0) | AlphaUserPoints - Online Users (2.0.4) | AlphaUserPoints - Monthly stat (2.0.4) | mod_stats (3.0.0) | SJ Filter for VirtueMart (2.0.0) | mod_articles_category (3.0.0) | Sj Content Responsive Listing (2.5.0) | AJAX Live Search results (1.0.0) | AlphaUserPoints - Points from (2.0.4) | mod_wrapper (3.0.0) | mod_login (3.0.0) | AlphaUserPoints - Last points (2.0.4) | mod_search (3.0.0) | K2 Users (2.6.8) | K2 Content (2.6.8) | mod_virtuemart_category (3.0.10) | mod_articles_news (3.0.0) | mod_banners (3.0.0) | mod_breadcrumbs (3.0.0) | mod_articles_categories (3.0.0) | mod_custom (3.0.0) | mod_tags_popular (3.1.0) |
Modules :: ADMIN :: mod_toolbar (3.0.0) | mod_logged (3.0.0) | mod_unread (1.6.0) | mod_version (3.0.0) | mod_submenu (3.0.0) | K2 Stats (admin) (2.6.8) | mod_menu (3.0.0) | mod_feed (3.0.0) | K2 Quick Icons (admin) (2.6.8) | mod_status (3.0.0) | mod_quickicon (3.0.0) | mod_title (3.0.0) | mod_multilangstatus (3.0.0) | mod_latest (3.0.0) | mod_popular (3.0.0) | mod_login (3.0.0) | mod_sitemapgenerator (1.0.0-beta.4) | VirtueMart Administrator Menu (3.0.10) | mod_online (1.6.0) | mod_stats_admin (3.0.0) | mod_custom (3.0.0) |

Plugins :: SITE :: OSMap - Kunena Plugin (3.3.0) | OSMap - WebLinks Plugin (3.3.0) | OSMap - Mosets Tree Plugin (3.3.0) | OSMap - Virtuemart Plugin (3.3.0) | OSMap - Content Plugin (3.3.0) | OSMAP_PLUGIN_K2 (3.3.0) | OSMap - SobiPro Plugin (3.3.0) | VM - Calculation Avalara Tax (3.0.10) | User - AlphaUserPoints - New u (2.0.3) | plg_user_joomla (3.0.0) | plg_user_profile (3.0.0) | plg_user_contactcreator (3.0.0) | User - K2 (2.6.8) | plg_twofactorauth_totp (3.2.0) | plg_twofactorauth_yubikey (3.2.0) | YT Framework (3.0.2) | YT Shortcodes (1.3) | plg_system_debug (3.0.0) | Offlajn Joomla 3.0 compatibili (1.0) | System - SJ QuickView for Virt (3.0.0) | Plugin System Sj Ajax Minicart (3.0.0) | plg_system_languagefilter (3.0.0) | plg_system_sef (3.0.0) | System - Admin Tools (3.8.3) | AMAZON (3.0.10) | plg_system_languagecode (3.0.0) | plg_system_p3p (3.0.0) | PLG_SYSTEM_JCH_OPTIMIZE (4.2.0) | PLG_SYS_ADMINEXILE (2.3.6) | plg_system_ossystem (1.1.0) | PLG_SYSTEM_BACKUPONUPDATE_TITL (3.7) | plg_system_logout (3.0.0) | plg_system_highlight (3.0.0) | plg_system_reslisting_ajax (1.1.0) | plg_system_sj_contact_ajax (1.0.1) | plg_system_cache (3.0.0) | System - AlphaUserPoints (1.9.0) | plg_system_remember (3.0.0) | plg_system_redirect (3.0.0) | plg_system_log (3.0.0) | JHackGuard Plugin (2.0.3) | system - EUCookieDirectiveLite (1.1.1) | AcyMailing : (auto)Subscribe d (4.9.2) | PLG_SYSTEM_NNFRAMEWORK (14.11.6) | System - K2 (2.6.8) | PLG_SYSTEM_CDNFORJOOMLA (3.4.0FREE) | System - DISQUS Comments for J (3.4) | alphauserpointsicon (1.9.0) | plg_quickicon_extensionupdate (3.0.0) | plg_quickicon_jcefilebrowser (2.4.6) | plg_quickicon_joomlaupdate (3.0.0) | plg_quickicon_akeebabackup (1.0) | plg_ajax_sitemapgenerator (1.0.0-beta.4) | By weight, ZIP and countries (3.0.10) | plg_editors_jce (2.4.6) | plg_editors_codemirror (5.6) | plg_editors_tinymce (4.1.7) | AcyMailing Editor (4.9.2) | Sofort Ideal (3.0.10) | realex_hpp_api (3.0.10) | PayPal (3.0.10) | Heidelpay (3.0.10) | Klarna Checkout (3.0.10) | Sofort (3.0.10) | AMAZON (3.0.10) | VM Payment - klikandpay (Beta1) | Klarna (3.0.10) | Authorize.net AIM (3.0.10) | Standard (3.0.10) | Skrill (3.0.10) | VM Payment - Paybox (3.0.10) | plg_content_pagenavigation (3.0.0) | Content - AlphaUserPoints - Ra (1.9.1) | plg_content_geshi (3.0.0) | plg_content_loadmodule (3.0.0) | Content - AlphaUserPoints - Re (1.9.0) | plg_content_joomla (3.0.0) | plg_content_emailcloak (3.0.0) | Content - AlphaUserPoints - St (1.9.0) | Sj Related News (1.0) | plg_content_vote (3.0.0) | plg_content_pagebreak (3.0.0) | plg_content_finder (3.0.0) | DISQUS Comments for Joomla! (b (3.4) | AlphaUserPoints - Notification (1.9.0) | AlphaUserPoints - Example Plug (1.9.0) | Josetta - K2 Items (2.6.8) | Josetta - K2 Categories (2.6.8) | plg_search_contacts (3.0.0) | plg_search_tags (3.0.0) | plg_search_weblinks (3.0.0) | plg_search_categories (3.0.0) | plg_search_newsfeeds (3.0.0) | plg_search_content (3.0.0) | Search - VirtueMart (2.9.8) | Search - K2 (2.6.8) | AcyMailing Template Class Repl (4.9.2) | AcyMailing Tag : Website links (3.7.0) | AcyMailing Tag : CB User infor (3.7.1) | AcyMailing Tag : content inser (3.7.0) | AcyMailing Tag : Date / Time (4.9.2) | AcyMailing : Statistics Plugin (3.7.0) | AcyMailing : share on social n (1.0.0) | AcyMailing : trigger Joomla Co (3.7.0) | AcyMailing Tag : Manage the Su (4.9.2) | AcyMailing Manage text (1.0.0) | AcyMailing Tag : Joomla User I (4.9.2) | AcyMailing table of contents g (1.0.0) | AcyMailing Tag : Subscriber in (4.9.2) | VMCustom - textinput (3.0.10) | plgvm_specification (3.0.10) | plg_installer_webinstaller (1.0.5) | plg_editors-xtd_readmore (3.0.0) | plg_editors-xtd_image (3.0.0) | plg_editors-xtd_article (3.0.0) | Editor Button - AlphaUserPoint (1.6.0) | plg_editors-xtd_pagebreak (3.0.0) | plg_authentication_ldap (3.0.0) | plg_authentication_gmail (3.0.0) | plg_authentication_joomla (3.0.0) | plg_authentication_cookie (3.0.0) | plg_extension_joomla (3.0.0) | plg_captcha_recaptcha (3.4.0) | Realex_hpp_api (3.0.10) | plg_finder_contacts (3.0.0) | plg_finder_tags (3.0.0) | plg_finder_weblinks (3.0.0) | plg_finder_categories (3.0.0) | plg_finder_newsfeeds (3.0.0) | plg_finder_content (3.0.0) | plg_finder_k2 (2.6.8) |

Templates :: SITE :: sj_market (1.0.1) | protostar (1.0) | beez3 (3.1.0) |
Templates :: ADMIN :: isis (1.0) | hathor (3.0.0) |

[leolam]

Some of the reasons for you being hacked:

Outdated and not updated Joomla. The version you use is vulnerable and was patched with Joomla 3.4.7. http://forum.joomla.org/viewtopic.php?f=8&t=902920

So if you do not follow up advise you will get whacked as you have been whacked. Your hosting company is wrong.... Joomla is not the cause but you are the cause with the simple fact that you do not update site and extensions

1) A lot of outdated extensions (K2/Acymailing/VM/AlphaUserPoint) to mention a few
2) Extensions not being used should be removed
3) Elevated permissions. You have with '777' the doors wide open. Permission should be set for files = 644 and folders '755'
4) Is your ImageMagick module patched by your host? If not you have a highly vulnerable server
5) Litespeed suEXEC daemon seems to be missing on the server (security & speed)

So now we know some reasons why you might have been whacked you now need to connect with your hosting company and ask them about point 4 and 5

Than follow all the steps I have outlined with the link given http://forum.joomla.org/viewtopic.php?f=714&t=757645

You cannot just update and overwrite the hacked site.... You need to remove all dirt by following what has been written and after that backup and update

Leo

[kiasati]

Thank you in advanced.

but i dont have k2 on my site.
there was an old site with joomla 2.x that had k2.
but i totally removed the site from the host and installed this joomla that's been hacked like 3 months ago.

and the virtuemart extension was totally up to date. its weird..

i wanted to update joomla, but the company that i bought my template from, told me not to. they said wait till we release the template update.

my host's been constantly getting UP and DOWN today for like 20 times or more, isnt that suspicious?!

[mandville]

there is an update to your template according to the site http://www.smartaddons.com/documentation/sj-market/

[sozzled]

I wanted to update joomla, but the company that I bought my template from, told me not to. They said wait [until] we release the template update.

That sounds to me, from a completely detached and objective standpoint, to be one of the worst pieces of advice anyone could give. J! 3.4.5 (and versions earlier) are unsafe—they are vulnerable—and a lot of people have suffered as a result of the exploit that hackers used to infect Joomla websites around the world.

It was unfortunate that, when the announcement was made about the security hole, the news went viral; hackers and "script-kiddies" went on a wild spree blasting websites out of the ether. But, if you want to leave your site with J! 3.4.5, that's your business and none of us can argue with that. Good luck.

[leolam]

Well, whatever is been said "objectively" above I feel sad that you are a victim of such 'abuse' despite you are indefinitely responsible yourself. Either activated or not it shows you have installed those extensions and you are to blame for not removing or update those (outdated and often vulnerable) extensions as mentioned. (see point 2 I mentioned)

So once again and for a last time (3 x already now) I point you to http://forum.joomla.org/viewtopic.php?f=714&t=757645 and with that you have to live............. (it S***s) I know

Leo

[leolam]

It was unfortunate that, when the announcement was made about the security hole

I have removed the link since the link posted by 'sozzled' is outdated and incorrect promoting the company in said link he posted. The correct security announcement by Joomla with the patch is (https://www.joomla.org/announcements/re ... 3-4-7.html) so all posters: kindly be requested to be precise and not promote services to gain business for that company?

Leo

[sozzled]

Thanks, Leo. My apologies. I was trying to find a reputable link and that particular reference was one of the results thrown up by Google; I certainly was not trying to promote some other business—it was an honest mistake on my part and I admit it. I completely agree with everything you've written in this topic.

[kiasati]

Joomla! Instance :: Joomla! 3.6.0-Stable (Noether) 12-July-2016
Joomla! Platform :: Joomla Platform 13.1.0-Stable (Curiosity) 24-Apr-2013
Joomla! Configured :: Yes | Read-Only (444) | Owner: farafanm (uid: 1/gid: 1) | Group: farafanm (gid: 1) | Valid For: 3.6
Configuration Options :: Offline: 0 | SEF: 1 | SEF Suffix: 0 | SEF ReWrite: 1 | .htaccess/web.config: Yes | GZip: 0 | Cache: 0 | FTP Layer: 0 | SSL: 0 | Error Reporting: default | Site Debug: 0 | Language Debug: 0 | Default Access: 1 | Unicode Slugs: 1 | Database Credentials Present: Yes

Host Configuration :: OS: Linux | OS Version: 2.6.32-673.8.1.lve1.4.3.el6.x86_64 | Technology: x86_64 | Web Server: LiteSpeed | Encoding: gzip, deflate | Doc Root: /home3/farafanm/public_html | System TMP Writable: Yes

PHP Configuration :: Version: 5.6.23 | PHP API: litespeed | Session Path Writable: Yes | Display Errors: | Error Reporting: 32767 | Log Errors To: error_log | Last Known Error: | Register Globals: | Magic Quotes: | Safe Mode: | Open Base: | Uploads: 1 | Max. Upload Size: 2M | Max. POST Size: 8M | Max. Input Time: -1 | Max. Execution Time: 30 | Memory Limit: 128M

MySQL Configuration :: Version: 5.6.30-cll-lve (Client:5.6.30) | Host: --protected-- (--protected--) | Collation: latin1_swedish_ci (Character Set: latin1) | Database Size: 11.22 MiB | #of Tables:  243

PHP Extensions :: Core (5.6.23) | date (5.6.23) | ereg () | libxml () | openssl () | pcre () | sqlite3 (0.7-dev) | zlib (2.0) | bz2 () | calendar () | ctype () | curl () | hash (1.0) | filter (0.11.0) | ftp () | gettext () | gmp () | SPL (0.2) | iconv () | pcntl () | readline (5.6.23) | Reflection ($Id: fbcf7a77ca8e3d4cd7501de8025235b947b8240f $) | session () | standard (5.6.23) | shmop () | SimpleXML (0.1) | mbstring () | tokenizer (0.1) | xml () | litespeed () | bcmath () | dom (20031129) | fileinfo (1.0.5) | gd () | htscanner (1.0.1) | imagick (3.1.2) | imap () | intl (1.1.0) | json (1.2.1) | exif (1.4 $Id: db007ca2e6d0b4513ae77990972997fad8bfe9c9 $) | mcrypt () | mysql (1.0) | mysqli (0.1) | PDO (1.0.4dev) | pdo_mysql (1.0.2) | pdo_sqlite (1.0.1) | Phar (2.0.2) | posix () | soap () | sockets () | tidy (2.0) | wddx () | xmlreader (0.1) | xmlrpc (0.51) | xmlwriter (0.1) | xsl (0.1) | zip (1.12.5) | mhash () | ionCube Loader () | Zend OPcache (7.0.4-devFE) | SourceGuardian (10.1.3) | Zend Guard Loader () | Zend Engine (2.6.0) |
Potential Missing Extensions :: suhosin |

Switch User Environment (Experimental) :: PHP CGI: No | Server SU: No | PHP SU: No | Custom SU (LiteSpeed/Cloud/Grid): Yes
Potential Ownership Issues: No

Core Folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (755) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) |

Elevated Permissions (First 10) ::

Components :: SITE :: com_wrapper (3.0.0) | com_mailto (3.0.0) |
Components :: ADMIN :: com_media (3.0.0) | com_weblinks (3.5.0) | com_templates (3.0.0) | com_messages (3.0.0) | ECB Currency Converter (1.0) | VIRTUEMART (-) | com_checkin (3.0.0) | Offlajn Joomla 3.0 compatibili (1.0) | Universal AJAX Live Search (5.4) | AJAX Live Search results (1.0.0) | Universal_AJAX_Live_Search (5.4.0) | com_banners (3.0.0) | com_tags (3.1.0) | com_xmap (2.3.4) | com_admin (3.0.0) | com_content (3.0.0) | com_modules (3.0.0) | com_menus (3.0.0) | AlphaUserPoints (2.0.4) | alphauserpointsicon (1.9.0) | Content - AlphaUserPoints - Ra (1.9.1) | User - AlphaUserPoints - New u (2.0.3) | Editor Button - AlphaUserPoint (1.6.0) | AlphaUserPoints - Notification (1.9.0) | Content - AlphaUserPoints - Re (1.9.0) | Content - AlphaUserPoints - St (1.9.0) | System - AlphaUserPoints (1.9.0) | AlphaUserPoints - Example Plug (1.9.0) | com_newsfeeds (3.0.0) | com_search (3.0.0) | com_jhackguard (2.0.2) | com_cpanel (3.0.0) | com_users (3.0.0) | com_ajax (3.2.0) | COM_OSMAP (4.1.3) | Admintools (3.8.6) | JW_DISQUS (3.4) | com_postinstall (3.2.0) | JCE (2.4.6) | Unknown (-) | com_cache (3.0.0) | mod_k2_comments (-) | mod_k2_comments (-) | COM_K2 (2.6. | com_login (3.0.0) | AcyMailing table of contents g (1.0.0) | AcyMailing : share on social n (1.0.0) | AcyMailing : (auto)Subscribe d (4.9.2) | AcyMailing Editor (4.9.2) | AcyMailing Tag : content inser (3.7.0) | AcyMailing Tag : Manage the Su (4.9.2) | AcyMailing Manage text (1.0.0) | AcyMailing Tag : Joomla User I (4.9.2) | AcyMailing Tag : CB User infor (3.7.1) | AcyMailing Module (3.7.0) | AcyMailing : Statistics Plugin (3.7.0) | AcyMailing Template Class Repl (4.9.2) | AcyMailing Tag : Subscriber in (4.9.2) | AcyMailing : trigger Joomla Co (3.7.0) | AcyMailing Tag : Website links (3.7.0) | AcyMailing Tag : Date / Time (4.9.2) | AcyMailing (4.9.2) | com_finder (3.0.0) | RSForm! (1.50.6) | com_installer (3.0.0) | com_contenthistory (3.2.0) | com_plugins (3.0.0) | com_config (3.0.0) | com_redirect (3.0.0) | plg_vm_route (2.5.0) | VirtueMart_allinone (-) | JComments (3.0.5) | com_categories (3.0.0) | com_joomlaupdate (3.6.0) | com_languages (3.0.0) | Akeeba (5.1.2) |

Modules :: SITE :: mod_related_items (3.0.0) | K2 User (2.6. | Sj Module Tabs (1.0) | mod_virtuemart_cart (3.0.10) | mod_whosonline (3.0.0) | Sj Contact Ajax (1.0.1) | mod_random_image (3.0.0) | AlphaUserPoints - Lastest acti (2.0.4) | mod_articles_popular (3.0.0) | AlphaUserPoints - Coupon Code (2.0.4) | SJ Ajax Tabs for VirtueMart (1.0.0) | mod_syndicate (3.0.0) | Sj Flat Menu (1.0.0) | SJ Categories for VirtueMart (2.2.0) | mod_virtuemart_currencies (3.0.10) | mod_virtuemart_search (3.0.10) | K2 Tools (2.6. | mod_articles_archive (3.0.0) | Sj Minicart Pro for Virtuemart (3.0.0) | mod_menu (3.0.0) | mod_virtuemart_manufacturer (3.0.10) | mod_feed (3.0.0) | پیشنهاد شگفت انگ (2.0.1) | mod_weblinks (3.5.0) | AlphaUserPoints - Most Referra (2.0.4) | AlphaUserPoints - Most Active (2.0.4) | AcyMailing Module (3.7.0) | AlphaUserPoints - Actual Point (2.0.4) | mod_languages (3.5.0) | mod_articles_latest (3.0.0) | mod_tags_similar (3.1.0) | SP VirtueMart Category Search (1.0.0) | mod_finder (3.0.0) | mod_users_latest (3.0.0) | mod_virtuemart_product (3.0.10) | K2 Comments (2.6. | Universal AJAX Live Search (5.4) | mod_footer (3.0.0) | AlphaUserPoints - Online Users (2.0.4) | AlphaUserPoints - Monthly stat (2.0.4) | mod_stats (3.0.0) | SJ Filter for VirtueMart (2.0.0) | mod_articles_category (3.0.0) | Sj Content Responsive Listing (2.5.0) | AJAX Live Search results (1.0.0) | AlphaUserPoints - Points from (2.0.4) | mod_wrapper (3.0.0) | mod_login (3.0.0) | AlphaUserPoints - Last points (2.0.4) | mod_search (3.0.0) | K2 Users (2.6. | K2 Content (2.6. | mod_virtuemart_category (3.0.10) | mod_articles_news (3.0.0) | mod_banners (3.0.0) | mod_breadcrumbs (3.0.0) | mod_articles_categories (3.0.0) | mod_custom (3.0.0) | mod_tags_popular (3.1.0) |
Modules :: ADMIN :: mod_toolbar (3.0.0) | mod_logged (3.0.0) | mod_unread (1.6.0) | mod_version (3.0.0) | mod_submenu (3.0.0) | K2 Stats (admin) (2.6. | mod_menu (3.0.0) | mod_feed (3.0.0) | K2 Quick Icons (admin) (2.6. | mod_status (3.0.0) | mod_quickicon (3.0.0) | mod_title (3.0.0) | mod_multilangstatus (3.0.0) | mod_latest (3.0.0) | mod_popular (3.0.0) | mod_login (3.0.0) | VirtueMart Administrator Menu (3.0.10) | mod_online (1.6.0) | mod_stats_admin (3.0.0) | mod_custom (3.0.0) |

Plugins :: SITE :: OSMap - Kunena Plugin (3.3.0) | OSMap - WebLinks Plugin (3.3.0) | OSMap - Mosets Tree Plugin (3.3.0) | OSMap - Virtuemart Plugin (3.3.0) | PLG_OSMAP_JOOMLA (4.1.0) | OSMAP_PLUGIN_K2 (3.3.0) | OSMap - SobiPro Plugin (3.3.0) | VM - Calculation Avalara Tax (3.0.10) | User - AlphaUserPoints - New u (2.0.3) | plg_user_joomla (3.0.0) | plg_user_profile (3.0.0) | plg_user_jcomments (1.0) | plg_user_contactcreator (3.0.0) | User - K2 (2.6. | plg_twofactorauth_totp (3.2.0) | plg_twofactorauth_yubikey (3.2.0) | YT Framework (3.0.2) | YT Shortcodes (1.3) | plg_system_debug (3.0.0) | Offlajn Joomla 3.0 compatibili (1.0) | System - SJ QuickView for Virt (3.0.0) | Plugin System Sj Ajax Minicart (3.0.0) | plg_system_languagefilter (3.0.0) | plg_system_sef (3.0.0) | System - Admin Tools (3.8.6) | AMAZON (3.0.10) | plg_system_languagecode (3.0.0) | plg_system_updatenotification (3.5.0) | plg_system_p3p (3.0.0) | PLG_SYSTEM_JCH_OPTIMIZE (4.2.0) | PLG_SYS_ADMINEXILE (2.3.6) | plg_system_ossystem (1.1.0) | PLG_SYSTEM_BACKUPONUPDATE_TITL (3.7) | plg_system_logout (3.0.0) | plg_system_highlight (3.0.0) | plg_system_reslisting_ajax (1.1.0) | plg_system_sj_contact_ajax (1.0.1) | plg_system_cache (3.0.0) | System - AlphaUserPoints (1.9.0) | plg_system_stats (3.5.0) | PLG_SYSTEM_AKEEBAUPDATECHECK_T (1.1) | plg_system_remember (3.0.0) | plg_system_redirect (3.0.0) | plg_system_log (3.0.0) | JHackGuard Plugin (2.0.3) | plg_system_jcomments (1.0) | system - EUCookieDirectiveLite (1.1.1) | AcyMailing : (auto)Subscribe d (4.9.2) | PLG_SYSTEM_NNFRAMEWORK (14.11.6) | System - K2 (2.6. | PLG_SYSTEM_CDNFORJOOMLA (3.4.0FREE) | System - DISQUS Comments for J (3.4) | alphauserpointsicon (1.9.0) | plg_quickicon_extensionupdate (3.0.0) | plg_quickicon_jcefilebrowser (2.4.6) | plg_quickicon_joomlaupdate (3.0.0) | plg_quickicon_jcomments (1.0) | plg_quickicon_akeebabackup (1.0) | By weight, ZIP and countries (3.0.10) | plg_editors_jce (2.4.6) | plg_editors_codemirror (5.15.2) | plg_editors_tinymce (4.3.12) | AcyMailing Editor (4.9.2) | Sofort Ideal (3.0.10) | realex_hpp_api (3.0.10) | PayPal (3.0.10) | Heidelpay (3.0.10) | Klarna Checkout (3.0.10) | Sofort (3.0.10) | AMAZON (3.0.10) | VM Payment - klikandpay (Beta1) | Klarna (3.0.10) | Authorize.net AIM (3.0.10) | Standard (3.0.10) | Skrill (3.0.10) | VM Payment - Paybox (3.0.10) | plg_content_pagenavigation (3.0.0) | Content - AlphaUserPoints - Ra (1.9.1) | plg_content_geshi (3.0.0) | plg_content_loadmodule (3.0.0) | Content - AlphaUserPoints - Re (1.9.0) | plg_content_joomla (3.0.0) | plg_content_emailcloak (3.0.0) | Content - AlphaUserPoints - St (1.9.0) | Sj Related News (1.0) | plg_content_vote (3.0.0) | plg_content_jcomments (1.0) | plg_content_pagebreak (3.0.0) | plg_content_finder (3.0.0) | DISQUS Comments for Joomla! (b (3.4) | AlphaUserPoints - Notification (1.9.0) | AlphaUserPoints - Example Plug (1.9.0) | Josetta - K2 Items (2.6. | Josetta - K2 Categories (2.6. | plg_search_contacts (3.0.0) | plg_search_tags (3.0.0) | plg_search_weblinks (3.5.0) | plg_search_categories (3.0.0) | plg_search_newsfeeds (3.0.0) | plg_search_content (3.0.0) | plg_search_jcomments (1.0) | Search - VirtueMart (2.9. | Search - K2 (2.6. | AcyMailing Template Class Repl (4.9.2) | AcyMailing Tag : Website links (3.7.0) | AcyMailing Tag : CB User infor (3.7.1) | AcyMailing Tag : content inser (3.7.0) | AcyMailing Tag : Date / Time (4.9.2) | AcyMailing : Statistics Plugin (3.7.0) | AcyMailing : share on social n (1.0.0) | AcyMailing : trigger Joomla Co (3.7.0) | AcyMailing Tag : Manage the Su (4.9.2) | AcyMailing Manage text (1.0.0) | AcyMailing Tag : Joomla User I (4.9.2) | AcyMailing table of contents g (1.0.0) | AcyMailing Tag : Subscriber in (4.9.2) | VMCustom - textinput (3.0.10) | plgvm_specification (3.0.10) | plg_installer_webinstaller (1.0.5) | PLG_INSTALLER_URLINSTALLER (3.6.0) | PLG_INSTALLER_FOLDERINSTALLER (3.6.0) | plg_installer_packageinstaller (3.6.0) | plg_editors-xtd_module (3.5.0) | plg_editors-xtd_readmore (3.0.0) | plg_editors-xtd_image (3.0.0) | plg_editors-xtd_article (3.0.0) | plg_editors-xtd_jcommentson (1.0) | Editor Button - AlphaUserPoint (1.6.0) | plg_editors-xtd_pagebreak (3.0.0) | plg_editors-xtd_jcommentsoff (1.0) | plg_authentication_ldap (3.0.0) | plg_authentication_gmail (3.0.0) | plg_authentication_joomla (3.0.0) | plg_authentication_cookie (3.0.0) | plg_extension_joomla (3.0.0) | plg_captcha_recaptcha (3.4.0) | Realex_hpp_api (3.0.10) | plg_finder_contacts (3.0.0) | plg_finder_tags (3.0.0) | plg_finder_weblinks (3.5.0) | plg_finder_categories (3.0.0) | plg_finder_newsfeeds (3.0.0) | plg_finder_content (3.0.0) | plg_finder_k2 (2.6. |

Templates :: SITE :: sj_market (1.0.1) | protostar (1.0) | beez3 (3.1.0) |
Templates :: ADMIN :: isis (1.0) | hathor (3.0.0) |

[kiasati]

This is my site after i updated Joomla and extensions.
is there any security problem that i must solve?
thanks

[leolam]

but i dont have k2 on my site.

What are all these K2 component/modules/plugin doing on your installation if you have no K2. they all should be uninstalled if you have no K2. Anything that is present and not being used should be removed. (example installed disqus as well as jcomments: which one you use?

Com_Xmap should be replaced by OSmap (free) since it is no longer supported.

Make sure you make backups and download to your computer/usb-stick

Leo

[kiasati]

What are all these K2 component/modules/plugin doing on your installation if you have no K2. they all should be uninstalled if you have no K2.

all these K2 component/modules/plugin went to " extensions --> manage --> discover " after updating Joomla!
how should i get rid of them?

what should i do with plugins like "OSMap - K2 Plugin" ? i should uninstall them or uppublish them?

Anything that is present and not being used should be removed. (example installed disqus as well as jcomments: which one you use?

im using jcomments. disqus came with my template. i uninstalled it. : )

[kiasati]

what is "System - JCH Optimize" ? is it necessary?

what is the free replacement for "RS form"?

what are must-have security extensions?

[leolam]

The extensions you do noot need show up under 'discovery' because you uninstalled them incorrect. Go to Extension Manager--> Manage and type K2 in the filter. Select all that show up (yes incl K2-plugins for other extensions such as OSMap) and click uninstall. That will uninstall anything related to K2 (backup first....I cannot mention that enough!)

JCH-Optimize is a compression tool. Since you do not know what it does and you are a 'beginner' uninstall the plugin for now since if wrongly configured it will render your site useless. Find more on JCH https://www.jch-optimize.net. Very powerful but again you need to know what you do especially with Js compression or your site will be blown up. Hire professional developers to set that up when your site is live if you want to speed-up your site loading.

Also uninstall PLG_SYSTEM_NNFRAMEWORK (14.11.6) which is a plugin you are not using and is an outdated plugin that has been replaced by the Regularlabs.nl framework.... Select in "manage" NNFRAMEWORK" and uninstall that thing. It will cause trouble if you leave it on site. Also uninstall PLG_SYSTEM_CDNFORJOOMLA since that is using that plugin mentioned before (NNFRAMEWORK) since you are not using a CDN so uninstall.

Free version and powerful replacement of RSForm: Breezingforms (free and more powerful) http://extensions.joomla.org/extensions ... forms-lite

Again uninstall all yo are not using Extension Manager --> manage Select what is not being used and uninstall

Leo

[kiasati]

The extensions you do noot need show up under 'discovery' because you uninstalled them incorrect. Go to Extension Manager--> Manage and type K2 in the filter. Select all that show up (yes incl K2-plugins for other extensions such as OSMap) and click uninstall. That will uninstall anything related to K2 (backup first....I cannot mention that enough!)

Also uninstall PLG_SYSTEM_NNFRAMEWORK (14.11.6) which is a plugin you are not using and is an outdated plugin that has been replaced by the Regularlabs.nl framework.... Select in "manage" NNFRAMEWORK" and uninstall that thing. It will cause trouble if you leave it on site. Also uninstall PLG_SYSTEM_CDNFORJOOMLA since that is using that plugin mentioned before (NNFRAMEWORK) since you are not using a CDN so uninstall.

PLG_SYSTEM_NNFRAMEWORK and PLG_SYSTEM_CDNFORJOOMLA cant be found in manage. its like they're not installed!!

how can i uninstall extensions in discovery? cuz they cant be found in manage.

what are the free replacements for alphauserpoints and universalajaxlivesearch ?

[leolam]

Search for 'nonumber'. Your assets tables seems to be a 'bit' messed up as well. Anyhow it seems that you need some professional help to clean up the mess that seems to be your site (search the Resources Directory [ redacted ] and you need to search the JED please for your replacements of the mentioned extensions.

Leo

[kiasati]

sorry for asking alota questions.

what should be done, what sources should be read to get a professional in joomla? cuz i dont have access to a professional .

should i uninstall "nonumber plugins?

[leolam]

Of course you have access to professional support as long as you are willing to pay for it...... follow the links I gave you an you get to them.....

Leo