Unknown folders - Forum | JoomShaper
Staff replied SP Page Builder

Unknown folders

Asked by Anastasi 2 months ago Last activity 2 months ago

The site is running Joomla! 5.4.7 Stable and SPPB 6.6.2.
There are no other third-party applications or components installed.

  1. I noticed a large number of folders at /media/com_sppagebuilder/assets/iconfont/.
    The hosting provider's antivirus tool remediated the issue, but the folders and their contents still remain in the file manager. Should I delete them?
    If so, should I delete just the folders themselves, or is there anything else I need to check?

I manage several websites running different versions of Joomla and SPPB, and extra folders have appeared in the media directory on all of them.

Thank you for the help.

3 replies

Oldest first Newest first Most helpful
Gerhard Meyer
2 months ago

The hack OP is refering to (iconfont) is listed as "Critical · actively exploited" - so delete folders is no solution, they will reappear again. Also if it would be so easy as deleting files/folders (and nothing else!) there would not be so much heat regarding joomla/helix/sppb updates. You have to take down your site and either restore a clean and working backup or rebuild everything from scratch, ie install joomla and all extensions again, hardening the site, once the site is live again hope for the best, watch it 24h if any new attacks occur.

Paul Frankowski Senior Staff
2 months ago · edited

@Gerhard

Only cleaned, updated and secured website may survive next weeks/months.

If you like technical details - read also: https://mysites.guru/blog/

Log in to reply.