Advertisement:

Author Topic: URGENT - ( yes I have ) BEEN HACKED - NEED HELP  (Read 10329 times)

Offline Chen Zhen

  • Sr. Member
  • ****
  • Posts: 894
  • Gender: Male
  • If you're going through hell, keep going!
    • WebDev.ca
Re: URGENT - ( yes I have ) BEEN HACKED - NEED HELP
« Reply #40 on: January 06, 2012, 08:19:16 PM »
Remove files from public_html directory:

404javascript.js
404testpage4525d2fdc

.. the scan found those as malware. Also look for suspicious code that could have been edited into your index.php file although the upgrade package should have replaced it anew.
Did you contact the host regarding the issue?
« Last Edit: January 06, 2012, 08:30:18 PM by -Underdog- »

Offline DevinL

  • Semi-Newbie
  • *
  • Posts: 35
    • OPSOFO - the OPen SOurce FOrums
Re: URGENT - ( yes I have ) BEEN HACKED - NEED HELP
« Reply #41 on: January 09, 2012, 07:53:03 PM »
Turns out that code was in every single php file I had. I've gone though and manually edited it out of all php files, and things seem happy again.

That java script was coming from a redirect in a .htaccess file that was in the root directory. I thought I had checked it, but must have missed it somehow.

I think all is well again, and hopefully it will stay that way.
Proud owner of OPSOFO - the OPen SOurce FOrums
REAL IDEAS FROM REAL PEOPLE FOR REAL PEOPLE