Page 1 of 1

Trying to recover From Hack..

Posted: Sat Jan 17, 2015 4:17 pm
by hotrod007
Site was recently Hacked with a Pharmaceutical Links showing in Google.. Of course this was brought to my attention when my client got an email saying it was.. and they could fix it..

I updated to latest version.. (which I missed when I should have).. And My host helped direct me to multiple malicious files and folders that I removed.

Over Wrote all core Joomla files..

Site and all Are up to latest 2.5 version. But..

In the Admin side, Configuration Page It come up with no formatting and has this error.
Fatal error: Cannot redeclare get_request_info() (previously declared in /home/laceycha/public_html/libraries/joomla/session/storage/index.php:31) in /home/laceycha/public_html/libraries/joomla/session/storage/index.php on line 39

That was one of the Injected files it seems that from somewhere is trying to be called.

See screen shot

Re: Trying to recover From Hack..

Posted: Sat Jan 17, 2015 5:00 pm
by toivo
That was one of the Injected files it seems that from somewhere is trying to be called.
If you removed this file before, some other infected or injected file adds it back and tries to run it.

You need to follow the instructions in the sticky notes at the top of this Security forum, remove all files and rebuild the site. Otherwise there is no guarantee that the malicious files are gone.

Re: Trying to recover From Hack..

Posted: Sat Jan 17, 2015 5:31 pm
by hotrod007
Your Right.. I was back in there.. I deleted it and the admin section loads fine now..
I'll have to see if it comes back and start checking as you said..

Looks like it got back in there 2 hours before I over wrote all the core files..

Thank You