Mobile app version of vmapp.org
Login or Join
Eichhorn148

: Need help in removing and forbidding some kind of malware in my website I have a website based on Joomla 2.5. Recently people with AVG anti-virus started to complain that some strange windows

@Eichhorn148

Posted in: #Hacking #Joomla #Virus

I have a website based on Joomla 2.5. Recently people with AVG anti-virus started to complain that some strange windows appear when they open the site. An unknown line of code with comments "Google search bot" appears in index.php files and the permissions set changes.

AVG detected Blackhole and Sweet orange exploit kits. I removed manually all the code but a day later it appeared again. I installed OSE anti-virus plugin and RS Firewall plugin for Joomla and scanned and it said it was OK.Is it necessary to reinstall Joomla? Please, help me. Thank you in advance. Oh, I forgot to say that I can not change the FTP password.

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Eichhorn148

1 Comments

Sorted by latest first Latest Oldest Best

 

@Radia820

Your problem is that you have not identified how the hackers got in, simply removing the malware/virus doesn't address the actual issue of how they planted the code, therefore simply removing will resolve the problem temporary but at some point the hackers will use the same exploit and replant.

There could be could be 101 reasons why and no one here will be able to help without additional information and then it brings in another question/problem is it suitable for Pro Webmasters? Since its very localized and not very constructive therefor its likely to be closed.

Anyhow! You should follow these steps and hopefully you can get site back on track:


Identify how the hackers got in (Check your Access Logs, Error Logs, SQL logs)
Fix identified vulnerable code
Review all your security measures such as chmod, plugins, etc etc.


Alternatively the guys at Joomla actually have a forum that actively help people with such problems you can find this post directly here.

Also it's worth mentioning that many people within the Stack community are committing to getting a Joomla Stack Exchange into beta phrase at Area 51, it may be in your interest that you commit like so many of us have already have here at Pro Webmasters.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme