help! website hacked

Discussion regarding Joomla! 2.5 security issues.

Moderators: Bernard T, mandville, fcoulter, PhilD, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Post Reply
JoshJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 37
Joined: Sat Feb 25, 2017 7:22 am

help! website hacked

Post by JoshJoomla » Sat Feb 25, 2017 7:29 am

Please help me fix. Blocked from google since last night.
Last edited by fcoulter on Sun Feb 26, 2017 11:33 am, edited 3 times in total.
Reason: Removed URL as requested by poster

zero24
Joomla! Apprentice
Joomla! Apprentice
Posts: 48
Joined: Fri Sep 27, 2013 6:46 am
Contact:

Re: HELP! WEBSITE HACKED

Post by zero24 » Sat Feb 25, 2017 9:10 am

Hi,

first of all please remove the link to the hacked site.

Here are some resources about cleaning up your site:
https://www.joomshaper.com/blog/my-joom ... what-to-do
https://www.siteground.com/kb/joomla_hacked/

If you can not do that your self it is suggestet to contact professional help.

If your site is realy 2.5 i suggest to start from scratch with 3.6.5 as 2.5 is EOS (End of Support) since 12.2014 and contains know securiy issues.
Nothing in the world is as fair as the understanding. Because everyone is convinced that he had enough of it. (Rene Descartes, mathematician & philosopher, 1596 - 1650)

JoshJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 37
Joined: Sat Feb 25, 2017 7:22 am

Re: HELP! WEBSITE HACKED

Post by JoshJoomla » Sat Feb 25, 2017 9:33 am

I need help. What is the problem how to fix it?

JoshJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 37
Joined: Sat Feb 25, 2017 7:22 am

Re: HELP! WEBSITE HACKED

Post by JoshJoomla » Sat Feb 25, 2017 9:34 am

And Joomla 3 should have been easy to upgrade. My extensions only work on Joomla 2.

zero24
Joomla! Apprentice
Joomla! Apprentice
Posts: 48
Joined: Fri Sep 27, 2013 6:46 am
Contact:

Re: HELP! WEBSITE HACKED

Post by zero24 » Sat Feb 25, 2017 9:41 am

> And Joomla 3 should have been easy to upgrade. My extensions only work on Joomla 2.

Than the easyset way should be to contact the developer to make them fix Joomla 3 as well.

You can not set up a save and secure Joomla 2.5 website as it has known security issues so you will be hacked soon after you have fixed it :)

> I need help. What is the problem how to fix it?

i suggest to start from scratch with 3.6.5 as 2.5 is EOS (End of Support) since 12.2014.
Nothing in the world is as fair as the understanding. Because everyone is convinced that he had enough of it. (Rene Descartes, mathematician & philosopher, 1596 - 1650)

JoshJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 37
Joined: Sat Feb 25, 2017 7:22 am

Re: HELP! WEBSITE HACKED

Post by JoshJoomla » Sat Feb 25, 2017 11:33 am

Maybe they should fix those security issues. Many people have Joomla 2.

zero24
Joomla! Apprentice
Joomla! Apprentice
Posts: 48
Joined: Fri Sep 27, 2013 6:46 am
Contact:

Re: HELP! WEBSITE HACKED

Post by zero24 » Sat Feb 25, 2017 11:40 am

> Maybe they should fix those security issues. Many people have Joomla 2.

They are fixed but if you don't update to the last version we can't timetravel to fix this issues to your site :)
Nothing in the world is as fair as the understanding. Because everyone is convinced that he had enough of it. (Rene Descartes, mathematician & philosopher, 1596 - 1650)

JoshJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 37
Joined: Sat Feb 25, 2017 7:22 am

Re: HELP! WEBSITE HACKED

Post by JoshJoomla » Sun Feb 26, 2017 9:03 am

zero24 wrote:> Maybe they should fix those security issues. Many people have Joomla 2.

They are fixed but if you don't update to the last version we can't timetravel to fix this issues to your site :)
Security issues are critical and they should be fixed for all versions. I had a great Joomla 1 site that had to be shut down because it was hacked.

JoshJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 37
Joined: Sat Feb 25, 2017 7:22 am

Re: HELP! WEBSITE HACKED

Post by JoshJoomla » Sun Feb 26, 2017 9:09 am

Can somebody remove the url from my first post please? Thanks.

JoshJoomla
Joomla! Apprentice
Joomla! Apprentice
Posts: 37
Joined: Sat Feb 25, 2017 7:22 am

Re: help! website hacked

Post by JoshJoomla » Sun Feb 26, 2017 9:18 pm

Thanks for removing the link guys.

User avatar
dhuelsmann
Joomla! Master
Joomla! Master
Posts: 19646
Joined: Sun Oct 02, 2005 12:50 am
Location: Omaha, NE
Contact:

Re: help! website hacked

Post by dhuelsmann » Sun Feb 26, 2017 9:46 pm

Webdongle wrote:Cleaning the site is easy ... just delete all the folders/files. Rebuilding the site is easy ... just install a fresh Joomla to a empty database and install 3rd party extensions then edit the configuration.php.

Before you ask what other users ask. No there is no real alternative ... you need to delete all folders/files.

Here is a summary of what you need to do

  1. Run the fpa and post the results in this forum
  2. Uninstall any untrusted 3rd party extensions and Templates https://vel.joomla.org/live-vel
  3. Delete all the files on the server
  4. Scan your computer and all computers that have server or Joomla admin access
  5. Change Passwords
  6. Install Joomla (of the same version) to a new database. Install up to date 3rd party extensions (that are not on the VEL) then edit the configuration.php to connect to the original database. Update Joomla if you have and old version
  7. Change your Joomla SU/Admin Passwords and check the users/groups/access levels are correct and not been tampered with. Update your Joomla and run the fpa again
Step #f is simply installing Joomla and 3rd party extensions to an empty database so you get fresh files. Then connect the files to the database that has your data. That gives you your site back. The rest cleans the site and helps keep it secure.

Full details http://forum.joomla.org/viewtopic.php?f=714&t=757645
Regards, Dave
Past Treasurer Open Source Matters, Inc.
Past Global Moderator
http://www.kiwaniswest.org


Post Reply

Return to “Security in Joomla! 2.5”