[Locked] Current-item Active"> Showing In Menus
Neil
After recent updates we have current-item active"> showing on the main menu. Any idea what's causing this?
Jürgen J. Fischer
Accepted AnswerHi Neil
we run a lot of JoomlaSites with helix, it is a great solution for us. But since June we had a lot of injections, malware, backdoors, shells and so on. We spent a lot of time to find all this hidden files and to clean the server.
If you only have Current-item Active">, this is not really a problem: You can easily solve this with https://github.com/zkrana/joomla-security-scanner/tree/main/dist
But I think you have something more. Scan your webserver for syshack, antonkil, zypeer, wclient, accesson, .phar, kill.gif, kill.png, com_jce2 com_jce2.SUSPECT jce.DISABLED exploit cve48907 cve354b80aa cve4f554e27 cve66a60f7e xsx17r2 J400779
if you find one of this, you have a bigger problem. Did you use JCE-Editor also?
Neil
Accepted AnswerThis is an amazing component that really helps with cleaning up after a hack, and I really appreciate all the work that’s gone into it. Thank you.
A bit of feedback from one of the sites I look after. It has a high level of customisation and a very large number of uploaded files. Running the “Unknown Files” scan eventually ran out of memory. In this case, most of the unknown files are legitimate documents uploaded by the business.
Also, with around 9,000 files being listed, the results page doesn’t load properly. It would be really helpful if the results could be paginated, or perhaps loaded in batches, to make them easier to browse on larger sites.
Ziaul Kabir
Accepted AnswerHello,
Thanks for reaching out to us. Could you please share temporary administrator access to your Joomla backend? You can provide the credentials securely in the hidden content section. Also, please take a full backup of your site before we make any changes.
Once I have access, I’ll investigate further and see what’s causing the issue. Let me know once you’ve shared the details!
Best regards,
Jürgen J. Fischer
Accepted Answerwe had the same problem on multiple Sites. Only sites with helix ultimate and sp pagebuilder. Problem is an injection of javascript in menu.
You only solve this, if you delete the injection in Database. And dont forget to update to newest version.
https://drive.google.com/file/d/1v2R-eARoKrr73OvFMMVA0E3IVdAN7ReM/view
Ziaul Kabir
Accepted AnswerYou can try this scanner. Download the latest version from the link below. It can detect malware in your Joomla installation, including the menu table, and help you clean it if any malicious code is found.
https://github.com/zkrana/joomla-security-scanner/tree/main/dist
Thanks.
Paul Frankowski
Accepted AnswerHi Neil,
Remember to reinstall template, and whole Joomla, and update extenstions. Read what we teach here: https://www.joomshaper.com/documentation/sp-page-builder/troubleshooting#how-to-clean-an-infected-joomla-4x-6x-site
I still see signs of infection of your site, those 11 folders and files inside should be removed TODAY !!!
