Is it really Malware or something else? Need HELP! - Joomla! Forum - community, help and support


hi,
my company make sales through website , killing me
(as know less of type of thing)
this never happened me, , nothing changed.

if helps, website getting fake registrations email address (*.ru)
i've deleted them though.

and here' s problem.
1. main page seems ok.
please see attached jpg01 file here (see? don't know how add pictures in here)
* there times(before happened). http address used take me google mainpage
or msn main page, , couldn't find website @ all. seems fine now.

2. whatever click on such categories or item, brings me page (see image),
i using google chrome.
please see attached jpg02 file here

3. , here click "proceed anyway"
and website goes (see image)
please see attached jpg03 file here

this has been driving me nuts since don't know because don't know has caused
this problems.
please help!
if knew wrong, google ways fix this.
really appreciate time! :-[

things slip through cracks sometimes.

i if still needing assistance follow post below. if follow checklist properly, can clean , repair site , prevent happening again.

phild wrote:
before post security/been hacked topic, suggested of following. failure follow suggestions below may leave site vulnerable being hacked again in future.


you must state version of joomla using when when site first became hacked. can make difference how approach individual situation.

[ ] download , run forum post assistant / fpa instructions available here , included in download package. post generated results in security/been hacked topic. use these links download fpa:
download .tar.gz version or download .zip version note: not download fpa other website or links found on internet.

[ ] ensure have latest version of joomla 1.5 or 2.5 version of joomla. delete files in joomla installation, saving copy of configuration.php file.

[ ] review vulnerable extensions list make sure 3rd party extensions versions used appear on vulnerable list.

[ ] review , action security checklist 7 make sure you've gone through of steps.

[ ] scan machines ftp, joomla super admin, , joomla admin access malware, virus, trojans, spyware, etc. checklist 7 contains list or recommended scanners.

[ ] change passwords , if possible user names website host control panel. change joomla database user name , password.

[ ] use proper permissions on files , directories. should never 777, ideal 644 files , 755 directories. configuration file can set 444 read only.

[ ] check htaccess for odd code (i.e. code not in standard htaccess supplied part of joomla installation).

[ ] check crontab or task scheduler unexpected jobs/tasks.

[ ] ensure not have anonymous ftp enabled.

[ ] verify individually non-joomla file such not limited placed on website such images, pdf files, files download, , other documents , files valid , supposed part of website.

[ ] replace deleted files fresh copies of current full version of joomla (minus installation directory) downloaded earlier. install freshly downloaded copies of extensions , templates used on site. if joomla database user name , password changed earlier, make necessary changes configuration.php file , upload copy website. upload non-joomla files necessary website. replacing files in installation (including extensions , templates) can sure remove backdoors inserted , hidden in various files , directories more detailed information can found in security checklist 7 link below.

note: forum post tool work versions of joomla. fpa written , maintained joomla security forum moderators.





Comments

Popular posts from this blog

How to change text Component easybook reloaded *newbee* - Joomla! Forum - community, help and support

After Effect warning: A problem occurred when processing OpenGL commands

Preconditions Failed. - Joomla! Forum - community, help and support