0
Welcome Guest! Login
0 items Join Now

Methinks I have been hacked.

    • Drandon's Avatar
    • Drandon
    • Jr. Rocketeer
    • Posts: 21
    • Thanks: 0

    Methinks I have been hacked.

    Posted 17 years 11 months ago
    • In IE7 when I visit my site at mercywarrior.com I get a pop-up across the top informing me that the "site I am trying to access is trying to run the following add-on "Microsoft Data Accesss - Remote Data Services" Etc., etc.

      Mcafee then gets upset and informs me that a Trojan JS/Exploiit-BO gen (Virus) is trying to run from my site.

      Let the good times roll. Any suggestions on where this booger might be hiding would be helpful.
    • GollumX's Avatar
    • GollumX
    • Elite Rocketeer
    • Posts: 2817
    • Thanks: 0

    Re: Methinks I have been hacked.

    Posted 17 years 11 months ago
    • Attached is a little script that i found on joomla.org. I take no credit for it's creation nor accept any liability for its use.

      Unzip and upload it to the root of your site and then use your browser to navigate to it (yourdomain.com/filist.php)

      What it does is output a list of all the files on your site.

      The real clincher is that you can sort the files by 'last modified date'

      look for anything suspicious.

      In any case run the virus scanner in your cpanel.

      NOTE: AFTER USING THE FILE, PROMPTLY DELETE IT FROM YOUR SERVER FOR SECURITY REASONS
    • Last Edit: 17 years 11 months ago by GollumX.
    • Say no to Internet Explorer 6.
      twitter.com/mark_up

Time to create page: 0.148 seconds