Googlebot showing different content of index page - Joomla! Forum - community, help and support

problem description :: forum post assistant (v1.2.3) : 27th october 2012 wrote:google showing different http header

log/error message :: forum post assistant (v1.2.3) : 27th october 2012 wrote:google search error

log/error message :: forum post assistant (v1.2.3) : 27th october 2012 wrote:googlebot showing different http header

actions taken resolve forum post assistant (v1.2.3) 27th october 2012 wrote:removed other backdoors, fix need.

forum post assistant (v1.2.3) : 27th october 2012 wrote:

basic environment :: wrote:joomla! instance :: joomla! 1.0.14 rc1-stable (daybreak) 13 january 2008
joomla! configured :: yes | read-only (644) | owner: md (uid: 1/gid: 1) | group: md (gid: 1) | valid for: 1.0
configuration options :: offline: 0 | sef: 1 | sef suffix: n/a | sef rewrite: n/a | .htaccess/web.config: yes | gzip: 0 | cache: 1 | ftp layer: n/a | ssl: n/a | error reporting: -1 | site debug: 0 | database credentials present: yes

host configuration :: os: linux | os version: 2.6.32-279.9.1.el6.x86_64 | technology: x86_64 | web server: apache/2.2.23 (unix) mod_ssl/2.2.23 openssl/1.0.0-fips mod_bwlimited/1.4 php/5.3.17 mod_perl/2.0.6 perl/v5.10.1 | encoding: gzip,deflate,sdch | doc root: /media/disk1/home/md/public_html | system tmp writable: yes

php configuration :: version: 5.3.17 | php api: apache2handler | session path writable: unknown | display errors: 1 | error reporting: 22519 | log errors to: error_log | last known error: | register globals: 0 | magic quotes: 1 | safe mode: 0 | open base: | uploads: 1 | max. upload size: 4m | max. post size: 4m | max. input time: 60 | max. execution time: 1200 | memory limit: 64m

mysql configuration :: version: 5.1.65-cll (client:5.1.65) | host: --protected-- (--protected--) | collation: latin1_swedish_ci (character set: latin1) | database size: 3940.78 mib | #of tables:  186

detailed environment :: wrote:php extensions :: core (5.3.17) | date (5.3.17) | ereg () | libxml () | openssl () | pcre () | zlib (1.1) | bcmath () | calendar () | ctype () | curl () | dom (20031129) | filter (0.11.0) | ftp () | gd () | gettext () | hash (1.0) | iconv () | spl (0.2) | json (1.2.1) | mbstring () | mcrypt () | mysql (1.0) | pgsql () | posix () | reflection ($id: 593a0506b01337cfaf9f63ebc12cd60523fc2c41 $) | session () | standard (5.3.17) | simplexml (0.1) | sockets () | sqlite (2.0-dev) | imap () | tokenizer (0.1) | xml () | xmlreader (0.1) | xmlrpc (0.51) | xmlwriter (0.1) | zip (1.11.0) | apache2handler () | zend engine (2.3.0) |
potential missing extensions :: mysqli | suhosin |

switch user environment (experimental) :: php cgi: no | server su: no | php su: no | custom su (litespeed/cloud/grid): yes
potential ownership issues: no

apache modules :: core | mod_authn_file | mod_authn_default | mod_authz_host | mod_authz_groupfile | mod_authz_user | mod_authz_default | mod_auth_basic | mod_cache | mod_mem_cache | mod_include | mod_filter | mod_log_config | mod_logio | mod_env | mod_mime_magic | mod_expires | mod_headers | mod_setenvif | mod_version | mod_proxy | mod_proxy_connect | mod_proxy_ftp | mod_proxy_http | mod_proxy_scgi | mod_proxy_ajp | mod_proxy_balancer | mod_ssl | prefork | http_core | mod_mime | mod_status | mod_autoindex | mod_asis | mod_info | mod_suexec | mod_cgi | mod_negotiation | mod_dir | mod_actions | mod_userdir | mod_alias | mod_rewrite | mod_so | mod_perl | mod_fastinclude | mod_bwlimited | mod_php5 | apache/2.2.23 (unix) mod_ssl/2.2.23 openssl/1.0.0-fips mod_bwlimited/1.4 php/5.3.17 mod_perl/2.0.6 perl/v5.10.1 |
potential missing modules :: mod_deflate | mod_security | mod_evasive | mod_dosevasive | mod_qos | mod_userdir |

folder permissions :: wrote:core folders :: images/ (755) | components/ (755) | modules/ (755) | mambots/ (755) | language/ (755) | templates/ (755) | cache/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/templates/ (755) |

elevated permissions (first 10) :: fb/php/ (777) | fb/php/.svn/ (777) | fb/php/.svn/prop-base/ (777) | fb/php/.svn/props/ (777) | fb/php/.svn/text-base/ (777) | fb/php/.svn/tmp/ (777) | fb/php/.svn/tmp/prop-base/ (777) | fb/php/.svn/tmp/props/ (777) | fb/php/.svn/tmp/text-base/ (777) | fb/php/jsonwrapper/ (777) |

extensions discovered :: wrote:components :: site :: news (1.0) |
components :: admin :: news (1.0) | search (1.0.0) | news (1.0) | news (1.0) | news (1.0) | users (1.0.0) | news (1.0) | news (1.0) | news (1.0) | typed content page (1.0.0) | login (1.0.0) | news (1.0) | news (1.0) | banners (1.0.0) | link - contact item (1.0.0) | link - url (1.0.0) | table - content category (1.0.0) | blog - content section (1.0.0) | table - contact category (1.0.0) | component (1.0.0) | separator / placeholder (1.0.0) | list - content section (1.0.0) | table - newsfeed category (1.0.0) | link - newsfeed (1.0.0) | table - weblink category (1.0.0) | link - content item (1.0.0) | blog - content category (1.0.0) | link - static content (1.0.0) | link - component item (1.0.0) | wrapper (1.0.0) | submit - content (1.0.0) | blog - content category archiv (1.0.0) | blog - content section archive (1.0.0) | content page (1.0.0) | weblinks (1.0.0) | weblinks (1.0.0) | news (1.0) | joomlapack (1.2.3) | wmtpic1 (v1.0) | mass mail (4.5.1) | news (1.0) | news (1.0) | contact items (1.0.0) | news (1.0) | news (1.0) | trash (1.0.0) | pressrelease (1.0.0) | news (1.0) | newsfeeds (1.0.0) | news (1.0) | editors management (1.0) | news (1.0) | news (1.0) | news (1.0) | news (1.0) | news (1.0) | news (1.0) | news (1.0) | news (1.0) | news (1.0) | poll (1.0.0) | media manager (1.0.0) | news (1.0) | frontpage (1.0.0) | news (1.0) | news (1.0) | news (1.0) | menu manager (1.0.0) | news (1.0) | news (1.0) | news (1.0) | syndicate (1.0.0) |

modules :: site :: machintoshdirectory (1.0.0) | who's online (1.0.0) | read content (1.0.0) | wrapper module (1.0.0) | login form (1.0.0) | random image (1.0.0) | template chooser (1.0.0) | latest news (1.0.0) | machintoshdirectory (1.0.0) | press release (1.0.0) | press release (1.0.0) | custom module (1.0.0) | newsflash (1.0.0) | main menu (1.0.0) | sections (1.0.0) | syndicate (1.0.0) | banner (1.0.0) | archived content (1.0.0) | search module (1.0.0) | statistics (1.0.0) | poll (1.0.0) | related items (1.0.0) |
modules :: admin :: component list (1.0.0) | popular items (1.0.0) | latest news (1.0.0) | quick icons (1.0.0) | custom module (1.0.0) | popular items (1.0.0) | logged in users (1.0.0) |

plugins :: site :: mospage.btn (1.0.0) | mosimage.btn (1.0.0) | mosloadposition (1.0.0) | legacybots (1.0.0) | mosvote (1.0.0) | mospaging (1.0.0) | mosemailcloak (1.0.0) | mosimage (1.0.0) | moscode (1.0.0) | geshi (1.0.4) | mossef (1.0.0) | weblinks searchbot (1.0.0) | contacts searchbot (1.0.0) | sections searchbot (1.0.0) | contacts searchbot (1.0.0) | content searchbot (1.0.0) | categories searchbot (1.0.0) | tinymce (2.0. |

templates discovered :: wrote:templates :: site :: madeyourweb (1.3) | macdirectory (2.2) | rhuk_solarflare_ii (2.2) |
templates :: admin :: joomla admin (1.0) | joomla admin (1.0) |

summary -
old out dated version of joomla - last version of 1.0.x chain 1.0.15
open folder permissions -777 - b/php/ (777) | fb/php/.svn/ (777) | fb/php/.svn/prop-base/ (777) |
unsuitable apache module -php api: apache2handler - cgi better

removing backdoor not resolve how hacked.
refer security checklist 7 safe route recovey