Fake pages generated

[timhenley]

Hi I have a site that was hacked and the index.php page had a script that listed a number of sites mainly in China. The hack stopped the site from working when I found the issue I just deleted the script from the Index.php page and the site began to work again. I have now done a google site index and found that there are lots of pages in the google index that are not on my site but the links show my site and with SEO poisoning text over it. I suspect in the near future the links will be diverted by the hackers to some dodgy virus scan scam.

The delay in activation of the hack means my backups are now contaminated. How can I identify where the text and pages are coming from and stop the page generation.
Any help would be great.

I have now reset all passwords and permissions

Thanks so Much

[Webdongle]

Unless you can find a Joomla 1.x full package then you probably have lost your site, as the only sure way to get rid of it is to delete all the files.

However perhaps your Host can do a 'Roll back' on your site pre infection ? Most Hosts keep backups.

[timhenley]

Thanks for the Bad news. Is there any way of finding out if it is in the template and if the Database is clean, I can recrate the site but do not want to transfer the problem in the template files or the databse.

Thanks for any input

[Webdongle]

Database is usually uninfected,and all the Articles etc is in that. The problem is that if you delete the files you need to replace the Joomla core files from a version the same as you had. With Joomla 1.5 that's easy just download the Joomla full installation.zip. But where do you get a Joomla full package.zip for 1.0 ?

[timhenley]

Cool the site is 1.5 so not a problem. Can you advise on the best way to proceed - is it to create a temp site and install the fresh install and the copy the database over with teh template files.
Or do I have to manually creeate pages and menu's

Thanks so much for your prompt help.

[Webdongle]

Cool the site is 1.5 so not a problem. Can you advise on the best way to proceed - is it to create a temp site and install the fresh install and the copy the database over with teh template files.
Or do I have to manually creeate pages and menu's

Thanks so much for your prompt help.

This is a 1.0 forum

Ok delete all the folders/files (but save the configuration.php file)
Use the files from the full package to the server and the saved configuration.php file

Or

delete all the folders/files
Install to a new database
Use the old database details in the newly created configuration.php

But check your PC for malware and change the passwords.
see http://forum.joomla.org/viewtopic.php?p ... 1#p1988191

[timhenley]

sorry for using wrong forum

Thanks for your help

[pe7er]

[MOD note: moved from Joomla Security 1.0 to 1.5]