0
Welcome Guest! Login
0 items Join Now

ROCKETTHEME IS CLOSING ON JUNE 30, 2025. As a thank-you to our community, enjoy 50% off all themes with the promo code THANKYOU before we shut down. Read our Farewell Blog Post for more details.

Methinks I have been hacked.

    • Drandon's Avatar
    • Drandon
    • Jr. Rocketeer
    • Posts: 21
    • Thanks: 0

    Methinks I have been hacked.

    Posted 18 years 1 month ago
    • In IE7 when I visit my site at mercywarrior.com I get a pop-up across the top informing me that the "site I am trying to access is trying to run the following add-on "Microsoft Data Accesss - Remote Data Services" Etc., etc.

      Mcafee then gets upset and informs me that a Trojan JS/Exploiit-BO gen (Virus) is trying to run from my site.

      Let the good times roll. Any suggestions on where this booger might be hiding would be helpful.
    • GollumX's Avatar
    • GollumX
    • Elite Rocketeer
    • Posts: 2817
    • Thanks: 0

    Re: Methinks I have been hacked.

    Posted 18 years 1 month ago
    • Attached is a little script that i found on joomla.org. I take no credit for it's creation nor accept any liability for its use.

      Unzip and upload it to the root of your site and then use your browser to navigate to it (yourdomain.com/filist.php)

      What it does is output a list of all the files on your site.

      The real clincher is that you can sort the files by 'last modified date'

      look for anything suspicious.

      In any case run the virus scanner in your cpanel.

      NOTE: AFTER USING THE FILE, PROMPTLY DELETE IT FROM YOUR SERVER FOR SECURITY REASONS
    • Last Edit: 18 years 1 month ago by GollumX.
    • Say no to Internet Explorer 6.
      twitter.com/mark_up

Time to create page: 0.064 seconds