Solved SP Page Builder Locked

current-item active"> showing in menus

Asked by Neil 2 months ago Last activity 2 months ago

After recent updates we have current-item active"> showing on the main menu. Any idea what's causing this?

Accepted answer

Marked as the solution

Jürgen J. Fischer

2 months ago

Hi Neil

we run a lot of JoomlaSites with helix, it is a great solution for us.
But since June we had a lot of injections, malware, backdoors, shells and so on. We spent a lot of time to find all this hidden files and to clean the server.

If you only have Current-item Active">, this is not really a problem:
You can easily solve this with https://github.com/zkrana/joomla-security-scanner/tree/main/dist

But I think you have something more.
Scan your webserver for syshack, antonkil, zypeer, wclient, accesson, .phar, kill.gif, kill.png,
com_jce2
com_jce2.SUSPECT
jce.DISABLED
exploit
cve48907
cve354b80aa
cve4f554e27
cve66a60f7e
xsx17r2
J400779

if you find one of this, you have a bigger problem.
Did you use JCE-Editor also?

Neil Asked this

2 months ago

This is an amazing component that really helps with cleaning up after a hack, and I really appreciate all the work that’s gone into it. Thank you.

A bit of feedback from one of the sites I look after. It has a high level of customisation and a very large number of uploaded files. Running the “Unknown Files” scan eventually ran out of memory. In this case, most of the unknown files are legitimate documents uploaded by the business.

Also, with around 9,000 files being listed, the results page doesn’t load properly. It would be really helpful if the results could be paginated, or perhaps loaded in batches, to make them easier to browse on larger sites.

4 more replies

Ziaul Kabir Staff

2 months ago

Hello,

Thanks for reaching out to us. Could you please share temporary administrator access to your Joomla backend? You can provide the credentials securely in the hidden content section. Also, please take a full backup of your site before we make any changes.

Once I have access, I’ll investigate further and see what’s causing the issue. Let me know once you’ve shared the details!

Best regards,

Moalosi Pheto

2 months ago

Hi Kabir

I have the same problem with "current-item active">"

Jürgen J. Fischer

2 months ago

we had the same problem on multiple Sites. Only sites with helix ultimate and sp pagebuilder.
Problem is an injection of javascript in menu.

You only solve this, if you delete the injection in Database.
And dont forget to update to newest version.

https://drive.google.com/file/d/1v2R-eARoKrr73OvFMMVA0E3IVdAN7ReM/view

Moalosi Pheto

2 months ago

This has worked for me thank you.

Ziaul Kabir Staff

2 months ago

You can try this scanner. Download the latest version from the link below. It can detect malware in your Joomla installation, including the menu table, and help you clean it if any malicious code is found.

https://github.com/zkrana/joomla-security-scanner/tree/main/dist

Thanks.

Paul Frankowski Senior Staff

2 months ago · edited

Hi Neil,

Remember to reinstall template, and whole Joomla, and update extenstions. Read what we teach here: https://www.joomshaper.com/documentation/sp-page-builder/troubleshooting#how-to-clean-an-infected-joomla-4x-6x-site

I still see signs of infection of your site, those 11 folders and files inside should be removed TODAY !!!

This question is locked, so it takes no new replies. Have a similar problem? Ask a new question.