Advertisement:

Author Topic: URGENT - ( yes I have ) BEEN HACKED - NEED HELP  (Read 8604 times)

Offline -Underdog-

  • Sr. Member
  • ****
  • Posts: 801
  • Gender: Male
  • If you're going through hell, keep going!
    • Underdog-01 GitHub Repositories
Re: URGENT - ( yes I have ) BEEN HACKED - NEED HELP
« Reply #40 on: January 06, 2012, 08:19:16 PM »
Remove files from public_html directory:

404javascript.js
404testpage4525d2fdc

.. the scan found those as malware. Also look for suspicious code that could have been edited into your index.php file although the upgrade package should have replaced it anew.
Did you contact the host regarding the issue?
« Last Edit: January 06, 2012, 08:30:18 PM by -Underdog- »
Quote from: -Underdog-
Those that present a medical excuse to be disrespectful to everyone should be ignored as this is a poor explanation for inappropriate behavior.

My SMF.org Mods
My SMF Mods (GitHub)

WebDev
Simple Portal Support

Request politely & demand nothing.

Offline DevinL

  • Semi-Newbie
  • *
  • Posts: 35
    • OPSOFO - the OPen SOurce FOrums
Re: URGENT - ( yes I have ) BEEN HACKED - NEED HELP
« Reply #41 on: January 09, 2012, 07:53:03 PM »
Turns out that code was in every single php file I had. I've gone though and manually edited it out of all php files, and things seem happy again.

That java script was coming from a redirect in a .htaccess file that was in the root directory. I thought I had checked it, but must have missed it somehow.

I think all is well again, and hopefully it will stay that way.
Proud owner of OPSOFO - the OPen SOurce FOrums
REAL IDEAS FROM REAL PEOPLE FOR REAL PEOPLE