Backend:404 An error has occurred.Component Not Found (JCE?)

[phidias81]

If I leave JCE plugins ON, when I try to access Module manager on backend I receive this message: 404 An error has occurred.Component Not Found.
The same happened while installing an extension (phocagallery com).
Also the buttons Save, Close, Save and close, etc. stop to work.
If I deactivate JCE, then I can access module manager, and I succedd installing extensions and using the buttons.
Also if JCE is ON, it is actually not showing the toolbar in the text edit box.
On firebug I can see these errors: WFEditors is not defined

I've tried to purge cache, discover, fix database, uninstall and reistall JCE, overwrite all the joomla installation (I'm on local) with no results. Any help?

[Webdongle]

... (I'm on local) with no results ...

Localhost ?
What OS? What stack ?
Please http://forum.joomla.org/viewtopic.php?f=621&t=582860

[phidias81]

error 404 in backend, and save-close buttons not working

404 An error has occurred.Component Not Found. - WFEditors is not defined

[11-Oct-2014 18:36:26 Europe/Berlin] PHP Notice: Trying to get property of non-object in C:\xamppy\htdocs\trasloco\libraries\cms\installer\adapter\component.php on line 1686

I've tried to purge cache, discover, fix database, uninstall and reistall JCE, overwrite all the joomla installation (I'm on local) with no results

Joomla! Instance :: Joomla! 3.3.6-Stable (Ember) 01-October-2014
Joomla! Platform :: Joomla Platform 13.1.0-Stable (Curiosity) 24-Apr-2013
Joomla! Configured :: Yes | Writable (666) | Owner: 0 (uid: /gid: ) | Group: 0 (gid: ) | Valid For: 3.3
Configuration Options :: Offline: 0 | SEF: 0 | SEF Suffix: 0 | SEF ReWrite: 0 | .htaccess/web.config: No | GZip: 1 | Cache: 0 | FTP Layer: 0 | SSL: 0 | Error Reporting: maximum | Site Debug: 0 | Language Debug: 0 | Default Access: 1 | Unicode Slugs: 0 | Database Credentials Present: No

Host Configuration :: OS: Windows NT | OS Version: 6.1 | Technology: i586 | Web Server: Apache/2.4.9 (Win32) OpenSSL/1.0.1g PHP/5.5.11 | Encoding: gzip, deflate | Doc Root: C:/xamppy/htdocs | System TMP Writable: Yes

PHP Configuration :: Version: 5.5.11 | PHP API: apache2handler | Session Path Writable: Yes | Display Errors: 1 | Error Reporting: 22527 | Log Errors To: C:\xamppy\php\logs\php_error_log | Last Known Error: 11th October 2014 18:36:26. | Register Globals: | Magic Quotes: | Safe Mode: | Open Base: | Uploads: 1 | Max. Upload Size: 20M | Max. POST Size: 20M | Max. Input Time: 600 | Max. Execution Time: 3000 | Memory Limit: 128M

MySQL Configuration :: Database Credentials incomplete or not available Nothing to display.
Missing credentials detected: Database Password missing |

PHP Extensions :: Core (5.5.11) | bcmath () | calendar () | ctype () | date (5.5.11) | ereg () | filter (0.11.0) | ftp () | hash (1.0) | iconv () | json (1.2.1) | mcrypt () | SPL (0.2) | odbc (1.0) | pcre () | Reflection ($Id: 31d836a7ac92a37b5c580836d91ad4736fe2f376 $) | session () | standard (5.5.11) | mysqlnd (mysqlnd 5.0.11-dev - 20120503 - $Id: bf9ad53b11c9a57efdb1057292d73b928b8c5c77 $) | tokenizer (0.1) | zip (1.11.0) | zlib (2.0) | libxml () | dom (20031129) | PDO (1.0.4dev) | bz2 () | SimpleXML (0.1) | wddx () | xml () | xmlreader (0.1) | xmlwriter (0.1) | apache2handler () | openssl () | curl () | mbstring () | exif (1.4 $Id$) | gd () | gettext () | mysql (1.0) | mysqli (0.1) | Phar (2.0.2) | pdo_mysql (1.0.2) | pdo_sqlite (1.0.1) | soap () | sockets () | sqlite3 (0.7-dev) | xmlrpc (0.51) | xsl (0.1) | mhash () | Zend Engine (2.5.0) |
Potential Missing Extensions :: suhosin |

Switch User Environment (Experimental) :: PHP CGI: No | Server SU: No | PHP SU: No | Custom SU (LiteSpeed/Cloud/Grid): Yes
Potential Ownership Issues: No

Apache Modules :: core | mod_win32 | mpm_winnt | http_core | mod_so | mod_access_compat | mod_actions | mod_alias | mod_allowmethods | mod_asis | mod_auth_basic | mod_authn_core | mod_authn_file | mod_authz_core | mod_authz_groupfile | mod_authz_host | mod_authz_user | mod_autoindex | mod_cgi | mod_dav_lock | mod_dir | mod_env | mod_headers | mod_include | mod_info | mod_isapi | mod_log_config | mod_cache_disk | mod_mime | mod_negotiation | mod_proxy | mod_proxy_ajp | mod_rewrite | mod_setenvif | mod_socache_shmcb | mod_ssl | mod_status | mod_version | mod_php5 | Apache/2.4.9 (Win32) OpenSSL/1.0.1g PHP/5.5.11 |
Potential Missing Modules :: mod_expires | mod_deflate | mod_security | mod_evasive | mod_dosevasive | mod_qos | mod_userdir |

Core Folders :: images/ (777) | components/ (777) | modules/ (777) | plugins/ (777) | language/ (777) | templates/ (777) | cache/ (777) | logs/ (777) | tmp/ (777) | administrator/components/ (777) | administrator/modules/ (777) | administrator/language/ (777) | administrator/templates/ (777) |

Elevated Permissions (First 10) :: administrator/ (777) | administrator/cache/ (777) | administrator/cache/expose/ (777) | administrator/components/ (777) | administrator/components/com_acymailing/ (777) | administrator/components/com_acymailing/buttons/ (777) | administrator/components/com_acymailing/classes/ (777) | administrator/components/com_acymailing/compat/ (777) | administrator/components/com_acymailing/controllers/ (777) | administrator/components/com_acymailing/extensions/ (777) |

Components :: SITE :: WF_AGGREGATOR_VIMEO_TITLE (2.4.3) | WF_AGGREGATOR_VINE_TITLE (2.4.3) | WF_AGGREGATOR_[youtube]_TITLE (2.4.3) | WF_FILESYSTEM_JOOMLA_TITLE (2.4.3) | WF_LINKS_JOOMLALINKS_TITLE (2.4.3) | K2 Links for JCE Link (2.2) | WF_MEDIAPLAYER_JCEPLAYER_TITLE (2.4.3) | WF_POPUPS_JCEMEDIABOX_TITLE (2.4.3) | WF_POPUPS_WINDOW_TITLE (2.4.3) | WF_LINK_SEARCH_TITLE (2.4.3) | WF_ANCHOR_TITLE (2.4.3) | WF_ARTICLE_TITLE (2.4.3) | WF_AUTOSAVE_TITLE (2.4.3) | WF_BROWSER_TITLE (2.4.3) | WF_CHARMAP_TITLE (2.4.3) | WF_CLEANUP_TITLE (2.4.3) | WF_CLIPBOARD_TITLE (2.4.3) | WF_CONTEXTMENU_TITLE (2.4.3) | WF_DIRECTIONALITY_TITLE (2.4.3) | WF_FONTCOLOR_TITLE (2.4.3) | WF_FONTSELECT_TITLE (2.4.3) | WF_FONTSIZESELECT_TITLE (2.4.3) | WF_FORMATSELECT_TITLE (2.4.3) | WF_FULLSCREEN_TITLE (2.4.3) | WF_IMGMANAGER_TITLE (2.4.3) | WF_INLINEPOPUPS_TITLE (2.4.3) | WF_KITCHENSINK_TITLE (2.4.3) | WF_LAYER_TITLE (2.4.3) | WF_LINK_TITLE (2.4.3) | WF_LISTS_TITLE (2.4.3) | WF_MEDIA_TITLE (2.4.3) | WF_NONBREAKING_TITLE (2.4.3) | WF_PREVIEW_TITLE (2.4.3) | WF_PRINT_TITLE (2.4.3) | WF_SEARCHREPLACE_TITLE (2.4.3) | WF_SOURCE_TITLE (2.4.3) | WF_SPELLCHECKER_TITLE (2.4.3) | WF_STYLE_TITLE (2.4.3) | WF_STYLESELECT_TITLE (2.4.3) | WF_TABLE_TITLE (2.4.3) | WF_TEXTCASE_TITLE (2.4.3) | WF_VISUALBLOCKS_TITLE (2.4.3) | WF_VISUALCHARS_TITLE (2.4.3) | WF_XHTMLXTRAS_TITLE (2.4.3) | com_mailto (3.0.0) | Default (1.0.0) | com_wrapper (3.0.0) |
Components :: ADMIN :: AcyMailing (4.7.2) | AcyMailing (4.8.0) | AcyMailing Module (3.7.0) | AcyMailing : trigger Joomla Co (3.7.0) | AcyMailing Manage text (1.0.0) | AcyMailing Tag : Website links (3.7.0) | AcyMailing : share on social n (1.0.0) | AcyMailing : Statistics Plugin (3.7.0) | AcyMailing table of contents g (1.0.0) | AcyMailing Tag : CB User infor (3.7.0) | AcyMailing Tag : content inser (3.7.0) | AcyMailing Tag : Subscriber in (4.8.0) | AcyMailing Tag : Manage the Su (4.8.0) | AcyMailing Tag : Date / Time (4.8.0) | AcyMailing Tag : Joomla User I (4.8.0) | AcyMailing Template Class Repl (4.8.0) | AcyMailing Editor (beta) (4.8.0) | AcyMailing : (auto)Subscribe d (4.8.0) | com_admin (3.0.0) | com_advancedmodules (4.16.6FREE) | com_advancedmodules (4.16.9FREE) | com_ajax (3.2.0) | Akeeba (3.8.3) | com_banners (3.0.0) | com_cache (3.0.0) | com_categories (3.0.0) | cedthumbnails (2.6.22-free) | com_checkin (3.0.0) | com_config (3.0.0) | com_content (3.0.0) | com_contenthistory (3.2.0) | com_cpanel (3.0.0) | DM Helper (1.1.0) | COM_DMPINBOARDLITE (1.3.0) | com_finder (3.0.0) | Free PayPal (3.0.0) | Gantry (4.1.26) | com_installer (3.0.0) | JCE (2.4.3) | Unknown (-) | JComments (3.0.5) | com_joomlaupdate (3.0.0) | JotCache (2.0.7) | com_languages (3.0.0) | com_login (3.0.0) | com_media (3.0.0) | com_menus (3.0.0) | com_messages (3.0.0) | com_modules (3.0.0) | com_newsfeeds (3.0.0) | com_phocagallery (4.1.1) | com_plugins (3.0.0) | com_postinstall (3.2.0) | com_redirect (3.0.0) | com_search (3.0.0) | com_tags (3.1.0) | com_templates (3.0.0) | com_users (3.0.0) | com_weblinks (3.0.0) | com_xmap (2.3.4) |

Modules :: SITE :: AcyMailing Module (3.7.0) | mod_articles_archive (3.0.0) | mod_articles_categories (3.0.0) | mod_articles_category (3.0.0) | mod_articles_latest (3.0.0) | cedThumbnails - Latest Article (2.6.22-free) | mod_articles_news (3.0.0) | mod_articles_popular (3.0.0) | cedThumbnails - Popular Articl (2.6.22-free) | mod_banners (3.0.0) | mod_breadcrumbs (3.0.0) | mod_custom (3.0.0) | mod_feed (3.0.0) | mod_finder (3.0.0) | mod_footer (3.0.0) | Free PayPal Module (3.0.0) | mod_googlecrumbs (2.5.0) | mod_languages (3.0.0) | MOD_LATESTNEWSENHANCED (1.2.10) | mod_login (3.0.0) | mod_menu (3.0.0) | mod_phocagallery_image (4.0.0) | mod_random_image (3.0.0) | mod_related_items (3.0.0) | cedThumbnails - Related Articl (2.6.22-free) | RokNavMenu (2.0.7) | mod_search (3.0.0) | mod_stats (3.0.0) | mod_syndicate (3.0.0) | mod_tags_popular (3.1.0) | mod_tags_similar (3.1.0) | mod_users_latest (3.0.0) | mod_weblinks (3.0.0) | mod_whosonline (3.0.0) | mod_wrapper (3.0.0) |
Modules :: ADMIN :: mod_custom (3.0.0) | mod_feed (3.0.0) | mod_latest (3.0.0) | mod_logged (3.0.0) | mod_login (3.0.0) | mod_menu (3.0.0) | mod_multilangstatus (3.0.0) | mod_popular (3.0.0) | mod_quickicon (3.0.0) | mod_stats_admin (3.0.0) | mod_status (3.0.0) | mod_submenu (3.0.0) | mod_title (3.0.0) | mod_toolbar (3.0.0) | mod_version (3.0.0) |

Plugins :: SITE :: AcyMailing : trigger Joomla Co (3.7.0) | AcyMailing Manage text (1.0.0) | AcyMailing Tag : Website links (3.7.0) | AcyMailing : share on social n (1.0.0) | AcyMailing : Statistics Plugin (3.7.0) | AcyMailing table of contents g (1.0.0) | AcyMailing Tag : CB User infor (3.7.0) | AcyMailing Tag : content inser (3.7.0) | AcyMailing Tag : Subscriber in (4.8.0) | AcyMailing Tag : Manage the Su (4.8.0) | AcyMailing Tag : Date / Time (4.8.0) | AcyMailing Tag : Joomla User I (4.8.0) | AcyMailing Template Class Repl (4.8.0) | plg_authentication_cookie (3.0.0) | plg_authentication_gmail (3.0.0) | plg_authentication_joomla (3.0.0) | plg_authentication_ldap (3.0.0) | plg_captcha_recaptcha (3.0.0) | plg_content_articledetails (2.0.4) | PLG_AUTHORINFOBOX (2.5-8) | plg_content_emailcloak (3.0.0) | plg_content_finder (3.0.0) | plg_content_geshi (2.5.0) | plg_content_jcomments (1.0) | plg_content_joomla (3.0.0) | plg_content_loadmodule (3.0.0) | plg_content_pagebreak (3.0.0) | plg_content_pagenavigation (3.0.0) | plg_content_phocagallery (4.0.4) | relatedthumbarticles (2.6.22-free) | plg_content_vote (3.0.0) | AcyMailing Editor (beta) (4.8.0) | plg_editors_codemirror (3.15) | plg_editors_jce (2.4.3) | plg_editors_tinymce (4.1.2) | plg_editors-xtd_article (3.0.0) | PLG_EDITORS-XTD_ARTICLESANYWHE (3.6.1FREE) | PLG_EDITORS-XTD_BETTERPREVIEW (3.3.2FREE) | plg_editors-xtd_image (3.0.0) | plg_editors-xtd_jcommentsoff (1.0) | plg_editors-xtd_jcommentson (1.0) | PLG_EDITORS-XTD_MODULESANYWHER (3.5.2FREE) | plg_editors-xtd_pagebreak (3.0.0) | plg_editors-xtd_phocagallery (3.0.1) | plg_editors-xtd_readmore (3.0.0) | PLG_EDITORS-XTD_TABS (3.7.1FREE) | plg_extension_joomla (3.0.0) | plg_finder_categories (3.0.0) | plg_finder_contacts (3.0.0) | plg_finder_content (3.0.0) | plg_finder_newsfeeds (3.0.0) | plg_finder_tags (3.0.0) | plg_finder_weblinks (3.0.0) | plg_quickicon_extensionupdate (3.0.0) | plg_quickicon_jcefilebrowser (2.4.3) | plg_quickicon_jcomments (1.0) | plg_quickicon_joomlaupdate (3.0.0) | plg_search_categories (3.0.0) | plg_search_contacts (3.0.0) | plg_search_content (3.0.0) | plg_search_jcomments (1.0) | plg_search_newsfeeds (3.0.0) | plg_search_phocagallery (3.0.1) | plg_search_tags (3.0.0) | plg_search_weblinks (3.0.0) | System - Admin Forever (0.9.2) | PLG_SYSTEM_ADMINBARDOCKER (1.7.1) | System - Admin Bar Unlocker (0.9.1) | PLG_SYSTEM_ADVANCEDMODULES (4.16.9FREE) | PLG_SYSTEM_ARTICLESANYWHERE (3.6.1FREE) | PLG_SYSTEM_BETTERPREVIEW (3.3.2FREE) | plg_system_cache (3.0.0) | plg_system_debug (3.0.0) | System - Gantry (4.1.26) | plg_system_highlight (3.0.0) | System - JCE MediaBox (1.1.17) | PLG_SYSTEM_JCH_OPTIMIZE (4.1.2) | plg_system_jcomments (1.0) | System - jQuery Easy (1.5.5) | System - kareebu Secure (1.0.3) | plg_system_languagecode (3.0.0) | plg_system_languagefilter (3.0.0) | plg_system_log (3.0.0) | plg_system_logout (3.0.0) | PLG_SYSTEM_MODULESANYWHERE (3.5.2FREE) | PLG_SYSTEM_NNFRAMEWORK (14.10.1) | System - OpenPotion Asynchrono (3.3) | plg_system_p3p (3.0.0) | plg_system_phocasite (1.0.1) | plg_system_redirect (3.0.0) | AcyMailing : (auto)Subscribe d (4.8.0) | plg_system_remember (3.0.0) | System - RokExtender (2.0.0) | plg_system_sef (3.0.0) | PLG_SYSTEM_TABS (3.7.1FREE) | plg_twofactorauth_totp (3.2.0) | plg_twofactorauth_yubikey (3.2.0) | PLG_USER_AIBPROFILE (2.5-8) | plg_user_contactcreator (3.0.0) | plg_user_jcomments (1.0) | plg_user_joomla (3.0.0) | plg_user_profile (3.0.0) | Xmap - Content Plugin (2.0.4) | XMAP_PLUGIN_K2 (1.3) | Xmap - Kunena Plugin (3.0.0) | Xmap - Mosets Tree Plugin (2.0.2) | Phoca Gallery (1.0.2) | Xmap - SobiPro Plugin (2.0.2) | Xmap - Virtuemart Plugin (2.0.3) | Xmap - WebLinks Plugin (2.0.1) |

Templates :: SITE :: atomic (2.5.0) | beez3 (3.1.0) | protostar (1.0) | rt_afterburner2 (1.3) |
Templates :: ADMIN :: bluestork (2.5.0) | hathor (3.0.0) | isis (1.0) |

[Webdongle]

I see you have xampp installed to C:\xamppy\

Try setting the default Template to Protostar then see if the problem exists.

[phidias81]

Yes, I still get the error even with protostar and I've tried also to change backend templates, and no improvements.
Actually now I get the error also when JCE is deactivated, so it might be somenthing not related with that

[phidias81]

New guess is that it might be connected with Advanced Module Manager, No number

[Webdongle]

Try overwriting the Joomla ones from the Joomla full package.

[phidias81]

I did it already yesterday

[Webdongle]

Could it be a time out of some kind ?

Have you turned on 'Debug System' in Global config >>> server tab ?

Install another Joomla and see if that has the same problem ?

[phidias81]

Since I'm actually rebuilding (and migrating from joomla 2.5) my website after an hack, and in this moment I'm still in the process of migrating the hacked website for the database, before rebuilding it from scratch and connecting it to the old database, I'm thinking if it makes sense to just forget about this errors now (if they don't influence the database), and see if I get them solved by simply rebuilding the website from scratch.
Would it make sense or do I risk to use a corrupted database? According to the "database" tab, it looks ok and up to date

[Webdongle]

Since I'm actually rebuilding (and migrating from joomla 2.5) my website after an hack, and in this moment I'm still in the process of migrating the hacked website for the database,... simply rebuilding the website from scratch.
...

You are combining to separate processes.

You need to delete ALL the folders and files of your old site
Then check your computer thoroughly with an antivirus program
Next install a version of Joomla that was the same as your original site
Edit the configuration.php file of the new install to connect to your database.

Full instructions http://forum.joomla.org/viewtopic.php?f=621&t=582854

When you have done that and made a backup then you can update.

[phidias81]

I've already done the scans and things over a month ago and found a lot of viruses, trojans and base64 strings(I had no time in the meanwhile to finish the process) and uploaded the cleaned website online, and in this time frame it gave no problems (before it was sending spam and having many "pills" pages), so there are good chances that it was cleaned. But I still want to be sure and rebuild it completely. Instead of 1) rebuilding 2) migrating, I'm doing 1)migrating 2) rebuilding. Probably not the best choice but at this point I basically finished with the migration and it was really time consuming, so I will keep going this way

[Webdongle]

************ edit **********

hacked03.PNG

hacked04.PNG

http://sitecheck.sucuri.net/results/www ... llers.com/
******************************

I've already done the scans and things over a month ago and found a lot of viruses, trojans and base64 strings(I had no time in the meanwhile to finish the process) and uploaded the cleaned website online, ...

Sorry to bust your bubble but scanning the website is no good ... you need to delete all the folders/files.

And you are working on localhost trying to update so lets deal with things in a methodical order please.

You need to delete ALL the folders and files of your old site
Then check your computer thoroughly with an antivirus program
Next install a version of Joomla that was the same as your original site
Edit the configuration.php file of the new install to connect to your database.

Full instructions viewtopic.php?f=621&t=582854

When you have reconstructed your site with new fresh Joomla files to the original database ... then and only then should the upgrade be attempted. Then delete all the files on the server and install the clean updated site.

[phidias81]

Thank you for your warning.
That's why I'm still planning to erase all the data, from the old website I'll take just the database. I'll just erase them in a different moment. Even if it might not the the best workflow, that what the events brought me to do, and I think the final result should be the same, right?

[Webdongle]

... I'll just erase them in a different moment. Even if it might not the the best workflow, that what the events brought me to do, and I think the final result should be the same, right?

No ... Wrong !

That list was created by mandville and others in a specific order. The reason being to prevent re-infection. Do things in a different order and you risk being re-infected.
e.g. You change user/pass before deleting the files then you risk the new user/pass being stolen
or
You update 3rd party extensions before deleting all the files you risk your database being compromised.
or
you scan your computer before you delete your files you risk it being compromised while you are doing other things.
or
you delete the files but replace them with new ones before you scan your computer you risk the new files being infected by it.
There are a myriad of combinations that leave you vulnerable to the site being re-infected.

The work flow is important. How do I know ? Because I've done it your way and kept getting re-infected. http://forum.joomla.org/viewtopic.php?f=621&t=582854 is your best hope of cleaning your site and prevent it getting re-infected. If you work on localhost and connect to the site you risk your localhost being infected. You need to delete all the folders/files on the server and the folder on localhost first.

[leolam]

Webdongle is correct. These are the steps to follow (all of them) since you are hacked/whacked/cracked:
[ ] Ensure you have the latest version of Joomla for your version of Joomla. Delete all files in your Joomla installation, saving a copy of the configuration.php file.

[ ] Review Vulnerable Extensions List to make sure any 3rd party extensions versions used appear on the vulnerable list.

[ ] Review and action Security Checklist 7 Make sure you've gone through all of the steps.

[ ] Scan all machines with FTP, Joomla super admin, and Joomla admin access for malware, virus, trojans, spyware, etc. Checklist 7 contains a list or recommended scanners.

[ ] Change all passwords and if possible user names for the website host control panel. Change the Joomla database user name and password.

[ ] Use proper permissions on files and directories. They should never be 777, ideal is 644 for files and 755 for directories. The configuration file can be set to 444 which is read only.

[ ] Check your htaccess for for any odd code (i.e. code which is not in the standard htaccess supplied as part of the Joomla installation).

[ ] Check the crontab or Task Scheduler for unexpected jobs/tasks.

[ ] Ensure you do not have anonymous ftp enabled.

[ ] Verify individually that any non-Joomla file such as but not limited to that will be placed back on the website such as images, pdf files, files for download, and other documents and files are valid and are supposed to be part of your website.

[ ] Replace the deleted files with fresh copies of a current full version of Joomla (minus the installation directory) you downloaded earlier. Install freshly downloaded copies of any extensions and templates used on the site. If the Joomla database user name and password were changed earlier, then make the necessary changes to the configuration.php file and upload a copy to the website. Upload any non-Joomla files that are necessary for your website. Only by replacing all files in the installation (including extensions and templates) can you be sure to remove the backdoors inserted and hidden in various files and directories More detailed information can be found in the Security Checklist 7 document.

Alternatively open an account here (we use that in our operations to cleanse client sites) https://myjoomla.com and that will help you clean all without all the steps mentioned above (first scan is free) Solves all your issues flashy fast

Leo

[phidias81]

Ok, you convinced me and I'll start over and (unfortunately) waste the spare hours I found in the last 2 months. Funny to see that I got this answer in a out of topic discussion and not when I asked exactly for that same question 2 months ago in this topic
http://forum.joomla.org/viewtopic.php?f=710&t=854829
I clearly read previously that list in different topics about hacked sites, but it's still not completely clear in a couple of points. If the first point is to delete all files, then where I get the info for rebuilding my website? (extensions, versions, etc.) I might do screenshots, but there is still the risk you forget something. Would it be a valid option if I'm working locally, to leave the old website copy online and delete the files when the rebuilt is ready locally?
And also when I reinstall all of the extensions, it might be impossible to get the exact same version if it's outdated. This means that actually there is a previous step to number one, that is updating all the extensions (and so the database) to the latest compatible version, before deleting all of the files?

[leolam]

No I did not convince you properly I see. The list of actions is the formal list to follow (and is correct) if you do not wish to use other means. For instance we (my company could easily restore your site and remove all dirt so you do not have to rebuild and spend all that time. To avoid such scenario and a rebuilding scenario I posted the list and (you missed that it seems) the link to myjoomla. You can subscribe free of charge and have your first site scanned and repair advise given (which you can apply automagically (!) ) within a short time depending on your connection and the load on myjoomla. Again the first scan (so your website!) is free so better un that first before jumping in rebuilding the site which is a shame since it is a nice site (!) You do not loose anything by trying out that service as well and again if you would for example any professional (as we are for instance) they would use these (we do) tools or similar as well. So shoot that first I suggest!

Leo

[phidias81]

Thank you Leo, but I'm on a very low budget and never spent even 1$ so far for assistance or extensions (I might try the free version, but it wouldn't help me much). And also ow that I read a lot about it and did preliminary work it wouldn't take as much time to start over. But I need to understand exactly the list, so that I don't risk to waste other days of work.

[mandville]

.

i think in your post from 2 months ago there were two separate issues that you posted in one topic. you should have dealt with thehack first then the migration/update.
the first line of the "before you post" topic says

Ensure you have the latest version of Joomla for your version of Joomla. Delete all files in your Joomla installation, saving a copy of the configuration.php file

so i assume for you that would have been 2.5? you could have wiped the account space and then re uploaded J and the config file then reinstalled the extensions latest versions. or reuploaded a backup and updated everything there.
then migrated to j3 if your extensions were compatible.

[phidias81]

The version I was working on locally was actually a backup (2.5) that I thought was safe, but it also turned out to have some dirt, so I better start from scratch. But I still don't understand how can I install different versions of the extensions, and then connect the database with the older versions, since they might have changed in the meanwhile, and from where I get the information to rebuild my website if I deleted everything. Sorry if I insist, but if it's not clear for my, I guess it could be the same also for others.

[Webdongle]

... Funny to see that I got this answer in a out of topic discussion and not when I asked exactly for that same question 2 months ago in this topic
viewtopic.php?f=710&t=854829

Because you asked in upgrading not the security forum. It is only because someone reported this post and requested it moved to the correct forum ... that your failure to follow http://forum.joomla.org/viewtopic.php?f=621&t=582854 was noticed.

The version I was working on locally was actually a backup (2.5) that I thought was safe, but it also turned out to have some dirt, so I better start from scratch....

You were told that as soon as you said you had been hacked.

... But I still don't understand how can I install different versions of the extensions, and then connect the database with the older versions, since they might have changed in the meanwhile, ...

It is unlikely that 3rd party extensions tables structure will have changed. But if you wait until after connecting to the original database and after updating to the latest version of the SAME Joomla series ... you risk loosing the data in those Tables.

... and from where I get the information to rebuild my website if I deleted everything. ....

From the original database after you connect the new/fresh/clean files to it. i.e. Your site is in the database ... all the files do is put/get data to/from the database and tell the Browser how to display it.

[leolam]

First Scan at http://myjoomla.com is free. (Did I do it correct this time or do I make a report now? ) Does not cost money so no budget influence.

Leo

[phidias81]

In the meanwhile I rebuilt completely the website again, with the orthodox procedure. Still not done, but it's going well. So no need for now, but I might still try on the rebuilt version, just extra safety, but it makes no sense to be infected!

[Webdongle]

So long as you have your database you have your site and you can restore it to the server.