Malicious File intrusion

[drbarnet]

I have had 4 sites hosted by 1&1 Internet that I've gotten an abuse - virus report on.

This is an urgent message concerning your 1&1 account.

A few minutes ago, our anti-virus scanner reported that a malicious file has been uploaded to your 1&1 webspace.

Name of the file: ~/administrator/components/com_admin/index.php

I have not actually been able to read the file (won't download because of a permission issue) but I can delete it.

Any ideas? I don't see any other malicious index or php files in the sites. They are all running the latest version 3 Joomla

David

[numinousmedia]

I'd strongly recommend you go through the Joomla Security Checklist for when you've been hacked: http://docs.joomla.org/Security_Checkli ... or_defaced