My Site hacked by malware three times in a month

Discussion in 'Security' started by nile1483, Jan 16, 2010.

0
  1. #1
    Hi,

    One of my clients website Host at hostmonster.com hacked third times in last 30 days, site have a large number of file and database and site is joomla 1.5 CMS contains lost of component and module, first time this is hacked because of my computer affected from malware and i was use filezilla ftp, than i remove affected file from all the file and reuploa site, since than my nither i operate this site from malware affected computer not i use ftp, and also i changed cpanel pasword many times.


    if any one have idea for how to prevent from such attach let me know,
     
    nile1483, Jan 16, 2010 IP
  2. nikb

    nikb Peon

    Messages:
    93
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #2
    There is a backdoor in your site. Something like that http://forums.digitalpoint.com/showpost.php?p=12950936&postcount=8

    Try to check all eval, system, base64, fopen, include etc functions in your scripts. http://forums.digitalpoint.com/showpost.php?p=13330348&postcount=6

    Try to search for non image or executable files in directory`s like /images of /uploads

    You can also contact me about security of your site. I can check your site for bugs.
     
    Last edited: Jan 17, 2010
    nikb, Jan 17, 2010 IP
  3. segzeey

    segzeey Active Member

    Messages:
    350
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    78
    #3
    There are backdoor and bugs in one or more of joomla components or your web server isn't secure. There are tool that can help you diagnose what's really wrong.
     
    segzeey, Jan 17, 2010 IP