site hacked by Hacked by [removed]

Discussion regarding Joomla! 1.5 security issues.
Joomla! Vulnerable Extensions: http://feeds.joomla.org/JoomlaSecurityV ... Extensions

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Locked
mobileguy
Joomla! Intern
Joomla! Intern
Posts: 76
Joined: Sat Jan 05, 2008 3:23 am
Contact:

site hacked by Hacked by [removed]

Post by mobileguy » Sun Aug 17, 2008 2:54 am

Hello,

Have joomla 1.5.5 now upgraded to latest and my site has been hacked. see pic Hacked by [removed]

All I did to restore my site was to reload index.php now this is 644 so somehow these dudes where able to replace the default index file.
Last edited by mobileguy on Sun Aug 17, 2008 3:15 am, edited 1 time in total.

User avatar
brad
Joomla! Master
Joomla! Master
Posts: 13272
Joined: Fri Aug 12, 2005 12:38 am
Location: Australia
Contact:

Re: site hacked by Hacked by linuXploit_crew

Post by brad » Sun Aug 17, 2008 2:57 am

Why do you want to give these guys publicity? I'm going to edit your post.

However, have you spoken to your host about this? Let me guess though, they DON'T run suphp and probably still have register_globals enabled...

Also, see: http://docs.joomla.org/Joomla!_Administ ... _Checklist

mobileguy
Joomla! Intern
Joomla! Intern
Posts: 76
Joined: Sat Jan 05, 2008 3:23 am
Contact:

Re: site hacked by Hacked by [removed]

Post by mobileguy » Sun Aug 17, 2008 3:16 am

Thanks brad, see what you mean and will go and talk to my host provider. :)

User avatar
brad
Joomla! Master
Joomla! Master
Posts: 13272
Joined: Fri Aug 12, 2005 12:38 am
Location: Australia
Contact:

Re: site hacked by Hacked by [removed]

Post by brad » Sun Aug 17, 2008 3:42 am

All the best.

imgwebmaster
Joomla! Apprentice
Joomla! Apprentice
Posts: 9
Joined: Tue Jan 08, 2008 10:30 pm

Re: site hacked by Hacked by [removed]

Post by imgwebmaster » Fri Aug 22, 2008 8:36 pm

Hi there,

I have the same problem but I don't have a copy of index.php from before my site was hacked by this group. Is there any way to create or get a copy of the original index.php so that I can replace it with the hacked one?

Thank you all for your help.

jptkts
Joomla! Apprentice
Joomla! Apprentice
Posts: 44
Joined: Sun Nov 13, 2005 10:48 pm
Location: Rochest / Buffalo NY
Contact:

Re: site hacked by Hacked by [removed]

Post by jptkts » Fri Aug 22, 2008 8:45 pm

The main index.php file on the root? Did you make changes to it? I try not to change core files to ease upgrading Joomla. If you didn't change the file you can download the full version of Joomla, unzip it, and copy the index.php from the extracted zip to your FTP. If you changed or customized the file you might be out of luck unless you backed up the file. Maybe I am missing something please explain if I am

web2web
Joomla! Apprentice
Joomla! Apprentice
Posts: 36
Joined: Tue Jul 15, 2008 6:15 pm

Re: site hacked by Hacked by [removed]

Post by web2web » Fri Aug 22, 2008 9:03 pm

Hi there!

My website was also hacked... could you please send your screenshot to me to see if it was the same?

Did you solve the problem? how?

Thanks in advance
Peter

mobileguy
Joomla! Intern
Joomla! Intern
Posts: 76
Joined: Sat Jan 05, 2008 3:23 am
Contact:

Re: site hacked by Hacked by [removed]

Post by mobileguy » Sat Aug 23, 2008 3:35 am

I sent you a PM I have since changed my configuration and index files to 644 etc

I just uploaded a backup copy of index.php


Locked

Return to “Security in Joomla! 1.5”