I can't rename htaccess.txt

[fantoche]

And also can't enable Search Engine Friendly URLs.
The normal process is rename htaccess.txt to .htaccess and after select Search Engine Friendly URLs
and Use URL Rewriting to yes in Global Configuration, but in both situations the live site and the administrator shows me a "Internal Server Error, The server encountered an internal error or misconfiguration and was unable to complete your request. etc...".
I tested it in several possible ways. I even downloaded another htaccess.txt file that was "tested" and that worked, but no works.
The site is a new site joomla 3 in the same server of another Joomla 1.5 site that had the Friendly URL's enabled.

I found an article that I followed (https://docs.joomla.org/Common_problems ... (SEF)_URLs). The server is running Apache but I don't know how to check "AllowOverride all" and also I don't know where to search if the server is running IIS.

Please tell me what else I can do to fix this.

The site is http://w ww.solum et.cl, in joomla Joomla! 3.6.4 with a quickstart template of virtuemarttemplates.

[itoctopus]

If you're sure that you are using a "clean" .htaccess file, then try changing the following line:

Code: Select all

# RewriteBase /

to

Code: Select all

RewriteBase /

and see if that helps...

If it still doesn't, then check with your host - it might be an httpd.conf setting that is not there or it might be that mod_rewrite isn't even installed.

[sozzled]

The normal process is rename htaccess.txt to .htaccess and after select Search Engine Friendly URLs and Use URL Rewriting to yes in Global Configuration, but in both situations the live site and the administrator shows me a "Internal Server Error, The server encountered an internal error or misconfiguration and was unable to complete your request. etc...".

That is correct. Depending on the webserver software (e.g. Apache) being used, you would also need a .htaccess file to enable URL rewriting. If, however, you are using different webserver software (e.g. IIS) then the rename of htaccess.txt to .htaccess will not work.

It's possible that the htaccess.txt file included with the "quickstart version" you downloaded may not be appropriate and, in this case, it's probably an idea to extract the htaccess.txt file from a standard Joomla installation package, upload that file to your site, and rename it to .htaccess (to see if this overcomes your current problem). I am not impressed by these "quickstart" installations—particularly if they include an outdated/obsolete version of Joomla—but you could try by asking the people who developed that quickstart pack to see if there are known problems with it.

... it might be that mod_rewrite isn't even installed.

That's also a possibility. Good point, @itoctopus. However, if another site (using J! 1.5) is working with a valid .htaccess file on the same server, this would discount that possibility, wouldn't it?

I hope some of this information is helpful.

[itoctopus]

@sozzled - you're correct. There is also another thing when reading the original post, is that IIS is the web server, so mod_rewrite doesn't even apply in this context. I should have read the question more carefully.

[sozzled]

I'm wondering what the implied question in the subject means "can't rename htaccess.txt"

If a file can't be renamed, perhaps there's an ownership issue involved? This area may need more exploration.

[fantoche]

Yes, I can't rename htaccess.txt to .htaccess because immediately the site falls. It does not even allow to select "Search Engine Friendly URLs", but if I do it the other way round (I select "Search Engine Friendly URLs" at first and then rename the htaccess) anyway the site goes down.
I changed the htaccess.txt file to an original joomla install and nothing happens.
The server does work with Apache, but I am querying what happens with mod_rewrite, although as they say there, if there was a joomla 1.5 before with no problems, it should not be that. I am also asking what happens to the IIS webserver.
I do not understand about servers and I hope they answer me.

[sozzled]

Thank you for your explanation.

1. You can rename the file htaccess.txt to .htaccess but, when you do this, you say that you cannot use your J! 3.6.4 site with the Global Configuration settings enabled for SEF URLs; the "site goes down" with a HTTP 500 Internal Server Error.
2. You are not sure what webserver software (e.g. Apache, IIS, Nginx, Hiawatha, etc.) you're using.
3. You have written to your webhosting provider and you hope they answer you.

Unless we're able to understand what, specifically, causes the HTTP 500 Internal Server Error, this problem remains a mystery.

Have you tried enabling Joomla's debug mode (in the Global Configuration settings), before you enable SEF URLs, to see if this gives additional information about the HTTP 500 Internal Server Error?

[fantoche]

Hi
The server says that it is not their responsibility and that they meet the standards.
Although I already did, I checked again the error_log file and found a virtuemart error saying that there is no file (which does Not exist, since I checked it in a new virtuemart file) in modules.


The error_log line is:

Code: Select all

[20-Jan-2017 12:15:02 UTC] Warning: include (): Error opening '/home/sol515cl/public_html/modules/mod_virtuemart_product/start.php' for inclusion (include_path = '.: / Usr / lib / Php: / usr / local / lib / php ') in /home/sol515cl/public_html/index.php on line 3

Could it be that virtuemart being able to cause the error in Engine Friendly URLs?

Also I enabled debug system:
http://ww w.solu met.cl/

[itoctopus]

No - but likely your website is hacked - proceed accordingly.

[ribo]

If you will see

Code: Select all

site:www.solumet.cl

in google you will see that you are hacked.
Please check how you can fix it https://docs.joomla.org/Security_Checkl ... or_defaced
Also don t use quick start packages, it s easier to be hacked. But also you are out of date and vulnerable.

[fantoche]

The server create a .htaccess and now the site have friendly url's, but they don't tell me what they did.

Please tell me, where you saw the site is hacked? I can see it good in google, and where you see is out of date?


Thanks!

[Webdongle]

Cleaning the site is easy ... just delete all the folders/files. Rebuilding the site is easy ... just install a fresh Joomla to a empty database and install 3rd party extensions then edit the configuration.php.

Before you ask what other users ask. No there is no real alternative ... you need to delete all folders/files.

Here is a summary of what you need to do

1. Run the fpa and post the results in this forum
2. Uninstall any untrusted 3rd party extensions and Templates https://vel.joomla.org/live-vel
3. Delete all the files on the server
4. Scan your computer and all computers that have server or Joomla admin access
5. Change Passwords
6. Install Joomla (of the same version) to a new database. Install up to date 3rd party extensions (that are not on the VEL) then edit the configuration.php to connect to the original database. Update Joomla if you have and old version
7. Change your Joomla SU/Admin Passwords and check the users/groups/access levels are correct and not been tampered with. Update your Joomla and run the fpa again

Step #f is simply installing Joomla and 3rd party extensions to an empty database so you get fresh files. Then connect the files to the database that has your data. That gives you your site back. The rest cleans the site and helps keep it secure.

Full details http://forum.joomla.org/viewtopic.php?f=714&t=757645

[ribo]

Please tell me, where you saw the site is hacked? I can see it good in google, and where you see is out of date?


Thanks!

If you search in google this :

Code: Select all

site:www.solumet.cl

you will see some url of yours that have chineese titles and chinnese descriptions and from your contact and from virtuemart. About out of date, you said that you have joomla 3.6.4, it is an out of date and vulnerable. That is one. Did you update all your extensions and template? You may not if for example you did nt update your jooma(it s more possible). So please do the instructions that @Webdongle gives if you want to clean your hacked site.

[sozzled]

@fantoche: I do not think it really matters where or how your website has been hacked but, if this is the case, you should proceed accordingly. If you want to understand where or how your website has been hacked then, of course, we can spend a couple of weeks trying to guess.

As some of us have already said, these so-called "quickstart packages"—which are not approved or endorsed by the Joomla project—may cause problems and, for those reasons, the more experienced users of the Joomla community avoid using them because of the problems that "quickstart" installations can cause.

We know your version of Joomla is out of date because you gave us this information in your first post. You stated that you are using J! 3.6.4.

Our recommendation (in order to remove the infections) is to delete all the files and folders used by your Joomla website, drop all the database tables used by your site, and start with a clean copy of the latest version of Joomla (i.e. J! 3.6.5).

[fantoche]

To drop all the database means to do all the site again. Well, I will do if is this the only and real solution.

I selected this template (xenon, of virtuemarttemplates) in search of a template with good virtuemart settings. If I install again joomla 3.6.5 will be with other template. If you have some observation about this, please tell me. Now I know you disapprove the use of quickstart. Other times I worked with gavick and joomlart and the decision was only for details.

@soozled and @ribo, about the chinese characters, I only want to know from where you can see it (from USA? from google.com? from chrome?), because if I search in google (google translate to google.cl) I see a good front end site, that works (not from where are the hackers, really).

[sozzled]

... about the chinese characters, I only want to know from where you can see it?

See the image below:

solumetGoogle.jpg

[fantoche]

Incredible.
I have others sites in joomla 2.5 and 1.5 with virtuemart,very olders and without problems (well, it's a Russian roulette), but specially this case was a lot of problems.

[Webdongle]

To drop all the database means to do all the site again. Well, I will do if is this the only and real solution. ...

Don't drop the database please see viewtopic.php?p=3457136#p3457104

You will need to delete the files for the other sites as well if they are on the same server.

[fantoche]

Yes. I will run the FPA before delete all for to know what would be happen and publish the results here. Meanwhile I need the site published for to have presence in web.
The other sites are from clients that don't want to pay for to update, and their sites are with good health, some of them in the same server.

[fantoche]

[21-Jan-2017 15:00:43 UTC] PHP Warning: include(): Failed opening '/home/sol515cl/public_html/modules/mod_virtuemart_product/start.php' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/sol515cl/public_html/index.php on line 3

Joomla! Instance :: .- ()
Joomla! Configured :: Yes | Read-Only (444) | Owner: 1382 (uid: /gid: ) | Group: 1395 (gid: ) | Valid For: 1.6
Configuration Options :: Offline: 0 | SEF: 1 | SEF Suffix: 0 | SEF ReWrite: 1 | .htaccess/web.config: Yes | GZip: 0 | Cache: 0 | FTP Layer: 0 | SSL: 0 | Error Reporting: default | Site Debug: 0 | Database Credentials Present: Yes

Host Configuration :: OS: | OS Version: | Technology: | Web Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 | Encoding: gzip, deflate | Doc Root: /home/sol515cl/public_html | System TMP Writable: Yes

PHP Configuration :: Version: 5.4.45 | PHP API: cgi-fcgi | Session Path Writable: Yes | Display Errors: | Error Reporting: 22519 | Log Errors To: error_log | Last Known Error: 21st January 2017 15:06:08. | Register Globals: | Magic Quotes: | Safe Mode: | Open Base: | Uploads: 1 | Max. Upload Size: 300M | Max. POST Size: 200M | Max. Input Time: 120 | Max. Execution Time: 600 | Memory Limit: 900M

MySQL Configuration :: Version: 5.5.52-cll (Client:5.5.52) | Host: --protected-- (--protected--) | Collation: latin1_swedish_ci (Character Set: latin1) | Database Size: 7.68 MiB | #of Tables:  178

PHP Extensions :: Core (5.4.45) | date (5.4.45) | ereg () | libxml () | openssl () | pcre () | sqlite3 (0.7) | zlib (2.0) | bcmath () | calendar () | ctype () | curl () | dom (20031129) | filter (0.11.0) | ftp () | gd () | hash (1.0) | iconv () | SPL (0.2) | json (1.2.1) | mbstring () | mcrypt () | session () | mysql (1.0) | mysqli (0.1) | pgsql () | standard (5.4.45) | Phar (2.0.1) | posix () | Reflection ($Id: f6367cdb4e3f392af4a6d441a6641de87c2e50c4 $) | mysqlnd (mysqlnd 5.0.10 - 20111026 - $Id: c85105d7c6f7d70d609bb4c000257868a40840ab $) | SimpleXML (0.1) | sockets () | imap () | tokenizer (0.1) | xml () | xmlreader (0.1) | xmlrpc (0.51) | xmlwriter (0.1) | zip (1.11.0) | cgi-fcgi () | PDO (1.0.4dev) | pdo_sqlite (1.0.1) | pdo_mysql (1.0.2) | ionCube Loader () | Zend Engine (2.4.0) |
Potential Missing Extensions :: suhosin |

Switch User Environment (Experimental) :: PHP CGI: Yes | Server SU: Yes | PHP SU: Yes | Custom SU (LiteSpeed/Cloud/Grid): No
Potential Ownership Issues: Maybe

Core Folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (755) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) |

Elevated Permissions (First 10) ::

Components :: SITE :: com_wrapper (3.0.0) | com_mailto (3.0.0) | WF_FONTSELECT_TITLE (2.6.7.1) | WF_CLEANUP_TITLE (2.6.7.1) | WF_ANCHOR_TITLE (2.6.7.1) | WF_ARTICLE_TITLE (2.6.7.1) | WF_SEARCHREPLACE_TITLE (2.6.7.1) | WF_AUTOSAVE_TITLE (2.6.7.1) | WF_NONBREAKING_TITLE (2.6.7.1) | WF_LAYER_TITLE (2.6.7.1) | WF_STYLESELECT_TITLE (2.6.7.1) | WF_FULLSCREEN_TITLE (2.6.7.1) | WF_PREVIEW_TITLE (2.6.7.1) | WF_CONTEXTMENU_TITLE (2.6.7.1) | WF_HR_TITLE (2.6.7.1) | WF_CHARMAP_TITLE (2.6.7.1) | WF_IMGMANAGER_TITLE (2.6.7.1) | WF_FONTCOLOR_TITLE (2.6.7.1) | WF_TEXTCASE_TITLE (2.6.7.1) | WF_LINK_TITLE (2.6.7.1) | WF_VISUALCHARS_TITLE (2.6.7.1) | WF_MEDIA_TITLE (2.6.7.1) | WF_BROWSER_TITLE (2.6.7.1) | WF_SOURCE_TITLE (2.6.7.1) | WF_STYLE_TITLE (2.6.7.1) | WF_INLINEPOPUPS_TITLE (2.6.7.1) | WF_KITCHENSINK_TITLE (2.6.7.1) | WF_DIRECTIONALITY_TITLE (2.6.7.1) | WF_XHTMLXTRAS_TITLE (2.6.7.1) | WF_EMOTIONS_TITLE (2.6.7.1) | WF_FORMATSELECT_TITLE (2.6.7.1) | WF_SPELLCHECKER_TITLE (2.6.7.1) | WF_LISTS_TITLE (2.6.7.1) | WF_FONTSIZESELECT_TITLE (2.6.7.1) | WF_VISUALBLOCKS_TITLE (2.6.7.1) | WF_CLIPBOARD_TITLE (2.6.7.1) | WF_PRINT_TITLE (2.6.7.1) | WF_TABLE_TITLE (2.6.7.1) | WF_POPUPS_JCEMEDIABOX_TITLE (2.6.7.1) | WF_POPUPS_WINDOW_TITLE (2.6.7.1) | WF_AGGREGATOR_DAILYMOTION_TITL (2.6.7.1) | WF_AGGREGATOR_[youtube]_TITLE (2.6.7.1) | WF_AGGREGATOR_VINE_TITLE (2.6.7.1) | WF_AGGREGATOR_VIMEO_TITLE (2.6.7.1) | WF_FILESYSTEM_JOOMLA_TITLE (2.6.7.1) | WF_LINK_SEARCH_TITLE (2.6.7.1) | WF_LINKS_JOOMLALINKS_TITLE (2.6.7.1) |
Components :: ADMIN :: com_cache (3.0.0) | com_newsfeeds (3.0.0) | com_languages (3.0.0) | com_users (3.0.0) | com_redirect (3.0.0) | com_search (3.0.0) | com_installer (3.0.0) | com_config (3.0.0) | com_modules (3.0.0) | com_joomlaupdate (3.6.2) | com_tags (3.1.0) | Akeeba (5.2.5) | com_templates (3.0.0) | com_postinstall (3.2.0) | Admintools (4.0.2) | com_contenthistory (3.2.0) | com_categories (3.0.0) | com_checkin (3.0.0) | com_ajax (3.2.0) | tcpdf (1.0.0) | tcpdf (1.0.2) | com_media (3.0.0) | VirtueMart_allinone (-) | plg_vm_route (2.5.0) | VirtueMart_allinone (-) | com_admin (3.0.0) | VIRTUEMART (-) | ECB Currency Converter (1.0) | COM_JCE (2.6.7.1) | com_content (3.0.0) | COM_JANTIVIRUS (5.1) | com_finder (3.0.0) | com_plugins (3.0.0) | com_login (3.0.0) | com_messages (3.0.0) | AcyMailing Tag : Website links (3.7.0) | AcyMailing Template Class Repl (5.6.1) | AcyMailing : share on social n (1.0.0) | AcyMailing Tag : content inser (3.7.0) | AcyMailing Tag : Subscriber in (5.6.1) | AcyMailing Tag : Manage the Su (5.6.1) | AcyMailing : Statistics Plugin (3.7.0) | AcyMailing table of contents g (1.0.0) | AcyMailing : (auto)Subscribe d (5.6.1) | AcyMailing : trigger Joomla Co (3.7.0) | AcyMailing Tag : Joomla User I (5.6.1) | AcyMailing Tag and filter : Co (3.7.2) | AcyMailing Tag and filter : Co (3.7.2) | AcyMailing Tag : Date / Time (5.6.1) | AcyMailing Manage text (1.0.0) | AcyMailing Editor (5.6.1) | AcyMailing Module (3.7.0) | AcyMailing (5.6.1) | com_weblinks (3.5.0) | com_menus (3.0.0) | com_cpanel (3.0.0) | com_banners (3.0.0) |

Modules :: SITE :: mod_virtuemart_currencies (3.0.18) | mod_virtuemart_manufacturer (3.0.18) | mod_syndicate (3.0.0) | mod_articles_categories (3.0.0) | mod_banners (3.0.0) | mod_footer (3.0.0) | mod_finder (3.0.0) | mod_stats (3.0.0) | mod_breadcrumbs (3.0.0) | mod_virtuemart_cart (3.0.18) | mod_virtuemart_product (3.0.18) | mod_articles_popular (3.0.0) | mod_random_image (3.0.0) | mod_articles_news (3.0.0) | mod_related_items (3.0.0) | mod_custom (3.0.0) | mod_menu (3.0.0) | mod_whosonline (3.0.0) | mod_virtuemart_category (3.0.18) | mod_virtuemart_search (3.0.18) | mod_weblinks (3.5.0) | mod_languages (3.5.0) | mod_feed (3.0.0) | mod_search (3.0.0) | mod_articles_archive (3.0.0) | AcyMailing Module (3.7.0) | mod_tags_similar (3.1.0) | mod_tags_popular (3.1.0) | mod_articles_category (3.0.0) | mod_login (3.0.0) | mod_users_latest (3.0.0) | mod_articles_latest (3.0.0) | mod_wrapper (3.0.0) |
Modules :: ADMIN :: mod_stats_admin (3.0.0) | mod_submenu (3.0.0) | mod_status (3.0.0) | mod_title (3.0.0) | mod_jantivirus (2.5.0) | mod_custom (3.0.0) | mod_toolbar (3.0.0) | mod_menu (3.0.0) | mod_quickicon (3.0.0) | mod_multilangstatus (3.0.0) | mod_feed (3.0.0) | VirtueMart Administrator Menu (3.0.18) | mod_latest (3.0.0) | mod_version (3.0.0) | mod_logged (3.0.0) | mod_popular (3.0.0) | mod_login (3.0.0) |

Plugins :: SITE :: plg_quickicon_jce (2.6.0-pro-bet) | plg_quickicon_joomlaupdate (3.0.0) | plg_quickicon_akeebabackup (1.0) | plg_quickicon_extensionupdate (3.0.0) | plg_editors-xtd_article (3.0.0) | plg_editors-xtd_module (3.5.0) | plg_editors-xtd_image (3.0.0) | plg_editors-xtd_readmore (3.0.0) | plg_editors-xtd_pagebreak (3.0.0) | plg_content_joomla (3.0.0) | plg_content_jce (2.6.7.1) | plg_content_loadmodule (3.0.0) | plg_content_vote (3.0.0) | plg_content_pagenavigation (3.0.0) | plg_content_emailcloak (3.0.0) | plg_content_finder (3.0.0) | plg_content_pagebreak (3.0.0) | By weight, ZIP and countries (3.0.18) | plg_authentication_joomla (3.0.0) | plg_authentication_gmail (3.0.0) | plg_authentication_ldap (3.0.0) | plg_authentication_cookie (3.0.0) | AMAZON (3.0.18) | AcyMailing : (auto)Subscribe d (5.6.1) | plg_system_logout (3.0.0) | PLG_SYSTEM_BACKUPONUPDATE_TITL (3.7) | plg_system_stats (3.5.0) | plg_system_sef (3.0.0) | plg_system_languagecode (3.0.0) | plg_system_log (3.0.0) | plg_system_cache (3.0.0) | plg_system_p3p (3.0.0) | plg_system_remember (3.0.0) | System - Admin Tools (4.0.2) | plg_system_jce (2.6.7.1) | plg_system_languagefilter (3.0.0) | plg_system_updatenotification (3.5.0) | plg_system_highlight (3.0.0) | plg_system_debug (3.0.0) | plg_system_redirect (3.0.0) | PLG_SYSTEM_AKEEBAUPDATECHECK_T (1.1) | AMAZON (3.0.18) | PayPal (3.0.18) | Authorize.net AIM (3.0.18) | VM Payment - Paybox (3.0.18) | Sofort (3.0.18) | Skrill (3.0.18) | realex_hpp_api (3.0.18) | 2Checkout (0.1) | Standard (3.0.18) | Klarna (3.0.18) | Klarna Checkout (3.0.18) | VM Payment - klikandpay (Beta1) | Heidelpay (3.0.0) | Sofort Ideal (3.0.18) | VM - Calculation Avalara Tax (3.0.18) | plg_editors_tinymce (4.4.3) | plg_editors_codemirror (5.18.0) | plg_editors_jce (2.6.7.1) | AcyMailing Editor (5.6.1) | plg_captcha_recaptcha (3.4.0) | AcyMailing Template Class Repl (5.6.1) | AcyMailing Tag : Joomla User I (5.6.1) | AcyMailing Manage text (1.0.0) | AcyMailing : Statistics Plugin (3.7.0) | AcyMailing table of contents g (1.0.0) | AcyMailing : share on social n (1.0.0) | AcyMailing Tag : Website links (3.7.0) | AcyMailing Tag : Manage the Su (5.6.1) | AcyMailing Tag : Subscriber in (5.6.1) | AcyMailing : trigger Joomla Co (3.7.0) | AcyMailing Tag : Date / Time (5.6.1) | AcyMailing Tag and filter : Co (3.7.2) | AcyMailing Tag and filter : Co (3.7.2) | AcyMailing Tag : content inser (3.7.0) | plgvm_specification (3.0.18) | VMCustom - textinput (3.0.18) | Realex_hpp_api (3.0.18) | plg_twofactorauth_totp (3.2.0) | plg_twofactorauth_yubikey (3.2.0) | plg_installer_packageinstaller (3.6.0) | plg_installer_jce (2.6.7.1) | PLG_INSTALLER_URLINSTALLER (3.6.0) | PLG_INSTALLER_FOLDERINSTALLER (3.6.0) | plg_finder_weblinks (3.5.0) | plg_finder_content (3.0.0) | plg_finder_tags (3.0.0) | plg_finder_categories (3.0.0) | plg_finder_contacts (3.0.0) | plg_finder_newsfeeds (3.0.0) | plg_user_joomla (3.0.0) | plg_user_contactcreator (3.0.0) | plg_user_profile (3.0.0) | plg_search_weblinks (3.5.0) | plg_search_content (3.0.0) | plg_search_tags (3.0.0) | plg_search_categories (3.0.0) | plg_search_contacts (3.0.0) | Search - VirtueMart (3.0.18) | plg_search_newsfeeds (3.0.0) | plg_extension_joomla (3.0.0) | plg_extension_jce (2.6.7.1) |

Templates :: SITE :: xenon (25.10.2016 3.) | beez3 (3.1.0) | protostar (1.0) |
Templates :: ADMIN :: hathor (3.0.0) | isis (1.0) |

[Webdongle]

... Meanwhile I need the site published for to have presence in web.
....

The longer you wait before you remove all the files from the server (or put the sites offline) the more hacks will be uploaded to your site. You risk the server infecting visiting computers. You are closer to your sites being black listed and for your Host to stopping access to the server.

...
The other sites are from clients that don't want to pay for to update, and their sites are with good health, some of them in the same server.

Once the server has been hacked there can be hack files anywhere on the server ... so none of the sites on your server can be considered clean. Doesn't matter who owns the domain names ... it is you who is running the software on the server so it is you who is responsible for keeping it up to date. If (when quoting your clients) you didn't take into account the cost of updating the software then that is your fault.

Irresponsible webmasters who refuse (for whatever lame excuse) to take immediate action with hacked sites and fail to keep the software updated ... risk there servers being used for spamming and infecting computers of visitors.

If you fail to take the advice that has been given then you only have yourself to blame for the consequences.

[ribo]

Meanwhile I need the site published for to have presence in web.

You need a hacked site have presence in web? I dont understand this thought? It s good to action fast and clean it as @Webdongle said.

The other sites are from clients that don't want to pay for to update, and their sites are with good health, some of them in the same server.

How do you know that they have good health? You did n t know this joomla 3 that was hacked and you asked twice how we see that is hacked. Also you have EOL and unsupported joomla versions and EOL and unsupported third party extensions and templates

Yes. I will run the FPA before delete all for to know what would be happen and publish the results here.

With the results we have closer look of your server and your joomla
1. php 5.4.45 is EOL . http://php.net/eol.php
better to have the latest version of php 5.6 or php 7 for joomla 3
check http://php.net/supported-versions.php and https://docs.joomla.org/Technical_requirements
2. Max. POST Size must have bigger value from Max. Upload Size and also i don t understand why do you have so big values.
3.Also why do you have so big values in Max. Execution Time and Memory Limit?

[fcoulter]

Last PHP Error(s) Reported :: Forum Post Assistant (v1.2.7) : 21st January 2017 wrote:
[21-Jan-2017 15:00:43 UTC] PHP Warning: include(): Failed opening '/home/sol515cl/public_html/modules/mod_virtuemart_product/start.php' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/sol515cl/public_html/index.php on line 3

This error message strongly suggests you have been hacked: the virtuemart product module has never contained a file called "start.php". Moreover the code to include it is in your site index.php file, which definitely should not contain such code.

Your site is hacked, as the others have said, the longer you delay fixing it, the worse it will get.