Hello,
I know I was hacked, but I don't know how to get rid of it! I noticed that my results from my website in google redirects to links from advertising pages. I scanned the site with malware built into the host's cpanel. this software has to detect files like ".6fjklecce.ico". when i delete these files but when i scan the next day i find they are returned !
how to get rid of these files !
Moderators: mandville, General Support Moderators
Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
-
- Joomla! Apprentice
- Posts: 36
- Joined: Tue Jun 28, 2016 1:44 am
how to get rid of these files !
Last edited by toivo on Wed Dec 30, 2020 10:29 am, edited 1 time in total.
Reason: mod note: moved from 3.x General Questions
Reason: mod note: moved from 3.x General Questions
-
- Joomla! Champion
- Posts: 6056
- Joined: Tue Aug 23, 2005 1:56 pm
- Location: South coast, UK
- Contact:
Re: how to get rid of these files !
I would have my site audited by https://mysites.guru/ the first audit is free. Phil is a true joomla expert. I have no affiliation with the site.
https://gadsolutions.biz Electrical services
https://electrical-testing-safety.co.uk Testing services
https://electrical-testing-safety.co.uk Testing services
- abernyte
- Joomla! Virtuoso
- Posts: 4194
- Joined: Fri May 15, 2009 2:01 pm
- Location: Écosse - Scozia - Escocia - Škotija -स्कॉटलैंड
Re: how to get rid of these files !
Or follow viewtopic.php?f=714&t=946026 to the letter.
"Those who expect to reap the blessings of freedom must, like men, undergo the fatigue of supporting it." Thomas Paine
-
- Joomla! Apprentice
- Posts: 36
- Joined: Tue Jun 28, 2016 1:44 am
Re: how to get rid of these files !
Hello and thank you friends for your help. I prefer to go for the mysites.guru platform! because I have modifications in the joomla template and in the source files too. in the meantime I would like to know if the code in the attached file is far from being hackers' code? this is a file that I found in a plugin offered for free by its author.
You do not have the required permissions to view the files attached to this post.
- toivo
- Joomla! Master
- Posts: 17516
- Joined: Thu Feb 15, 2007 5:48 am
- Location: Sydney, Australia
Re: how to get rid of these files !
Where did you download the plugin from? What is the plugin supposed to do? Does it provide some sort of a scroll effect?
The code itself, when put through a beautifier, looks obscure but possibly harmless.
The code itself, when put through a beautifier, looks obscure but possibly harmless.
Toivo Talikka, Global Moderator
- PhilTaylor-Prazgod
- Joomla! Ace
- Posts: 1404
- Joined: Sat Aug 20, 2005 12:32 pm
- Location: Jersey, Channel Islands
- Contact:
Re: how to get rid of these files !
files named ".6fjklecce.ico" are hackers files. Your site is hacked.
Phil Taylor
- https://mySites.guru - Manage Multiple Joomla/WordPress Sites In One Dashboard for Security, Audits, Backups and more....
- https://www.phil-taylor.com/
- https://mySites.guru - Manage Multiple Joomla/WordPress Sites In One Dashboard for Security, Audits, Backups and more....
- https://www.phil-taylor.com/
- JAVesey
- Joomla! Hero
- Posts: 2656
- Joined: Tue May 14, 2013 1:21 pm
- Location: Cardiff, Wales, UK
- Contact:
Re: how to get rid of these files !
Have modified Joomla core files?
![eek :eek:](./images/smilies/icon_eek.gif)
Modified core files may well get overwritten during an update. I note that you haven’t said which Joomla version you’re running; have you been keeping your installation up to date?
John V
Cardiff, Wales, UK
Joomla 5.1.1 "live" site on PHP 8.2.15 and MariaDB 10.11.7 (with b/c plugin enabled)
Joomla 5.1.1 on XAMMP for MacOS with PHP 8.2.4 and MariaDB 10.4.28 (with b/c plugin enabled)
Cardiff, Wales, UK
Joomla 5.1.1 "live" site on PHP 8.2.15 and MariaDB 10.11.7 (with b/c plugin enabled)
Joomla 5.1.1 on XAMMP for MacOS with PHP 8.2.4 and MariaDB 10.4.28 (with b/c plugin enabled)