SOLVED Site Compromised
-
-
- Tim Haverstick
- Jr. Rocketeer
- Posts: 22
- Thanks: 0
-
Hi guys,
Im having a rough time here. Ive downloaded the site to my local machine. I use Textwrangler to view and edit files. I am unsure where exactly to look for this hacked file that has been placed in my site.
I looked for httpdocs and am unable to find that.
I looked for .de in the site files overall using Finder and am unable to find that string except in files that some string of code starts with .de like .delete or something else.
I went into the site again today and there was another hack. I wanted to find the source first but it seems that the custom css file that I made only worked for a few days until it was hacked again.
Also, I noticed that the Roksprocket is not working and the Breezing forms are no longer showing. Ouch. Can you guys help me locate the source of this breech?
Thanks for all the help
-
-
-
- DanG
- Preeminent Rocketeer
- Posts: 36750
- Thanks: 3229
- Custom work done
-
Tim Haverstick wrote:
HiCan you guys help me locate the source of this breech?
Thats beyond the scope of our Terms of Service. However I can suggest to you how I would approach it.
- in the current hacked local - go into module manager and take note of all your non-Joomla modules. You'll need this list later.
- backup the site files using 7zip. Export your DB to your HDD.
- begin uninstalling all 3rd party apps except Joomla amd Rockettheme, this would be similar to a RocketLauncher install
- install into a new local folder the Hexeris RocketLauncher
- with your comparison software it should be easy to spot the files that don't belong.
-
-
-
- Joe Halleck
- Preeminent Rocketeer
- Posts: 5480
- Thanks: 67
- Never give up!
-
Tim,
Like Dan mentioned this is beyond the scope of template support but I can try to help.
I can't guarantee I can locate the issue but if you want to post your web server admin control panel super user and IP address in the Secure tab I will look to see if I can track it down.
I won't be able to review this until after 18:00 EST -
The following users have thanked you: Tim Haverstick
- Magento - phpBB3 - Kunena - RokBridge Specialist
No Secure Tab posts unless requested.
Use the Thank You and Life Preserver Buttons!
Your signature is also great place for setup details...help us help you!
-
-
-
- Tim Haverstick
- Jr. Rocketeer
- Posts: 22
- Thanks: 0
-
Thanks for all the hep! I was able to get an old dev backup of the site working. Before going any further I will install Akeeba and also RSfirewall to prevent this from happening again.
Again, your help, all of your help was SO extremely appreciated. My hosting company Godaddy, was useless!
Thank you!
-
-
-
- DanG
- Preeminent Rocketeer
- Posts: 36750
- Thanks: 3229
- Custom work done
-
Tim Haverstick wrote:
My hosting company Godaddy, was useless!
Your not the first member to mention this. Time to switch providers methinks....
To mark this issue as Solved, please change to a Checkmark and edit the Topic Title in your FIRST post of the Topic to read[SOLVED] Topic TitleThis image is hidden for guests.
Please log in or register to see it.
Thanks. -
The following users have thanked you: Tim Haverstick
-
-
-
- Tim Haverstick
- Jr. Rocketeer
- Posts: 22
- Thanks: 0
- I dont see an edit button for any of my posts!
-
-
-
- DanG
- Preeminent Rocketeer
- Posts: 36750
- Thanks: 3229
- Custom work done
-
Tim Haverstick wrote:
I dont see an edit button for any of my posts!Sorry its outside the 7 day time limit so I'll take care of it.
Just thought I'd mention have a look at Admin Tools also. Akeeba's stuff is awesome!
-
-
-
- Tim Haverstick
- Jr. Rocketeer
- Posts: 22
- Thanks: 0
-
Thanks for all the help. I did get that rolling and will make sure to have all the backups run weekly.
It was a long night!
-
-
-
- Joe Halleck
- Preeminent Rocketeer
- Posts: 5480
- Thanks: 67
- Never give up!
-
Great to hear Tim.
If you get hit again my offer still stands as others in the RT community can learn from your experience. -
The following users have thanked you: Tim Haverstick
- Magento - phpBB3 - Kunena - RokBridge Specialist
No Secure Tab posts unless requested.
Use the Thank You and Life Preserver Buttons!
Your signature is also great place for setup details...help us help you!
-
Time to create page: 0.063 seconds