Website Again Infected, Even After All Updates And Patches
Seppe
Good afternoon
More then a month ago, mywebsite was infected,everywhere I was blocked because of scam and possible phising.
After using the security-scanner.pgp, all the updates & patches, cleaning the TMP & iconfont-folder, cleaning JCE-editor, ....
It all looked good, and my website was finally online again.
Now, today, it all starts over. Again I have 1000's of files in the iconfont-folder, my TMP is full of crappy files, even in my root-folder there is showing some weird files.
Is this something we will going to be doing every month?
Paul Frankowski
Accepted AnswerHi Seppe,
hard to say, maybe you had hidden malware file somewhere, and was activated yesterday.
For sure, clean site again using our component (https://github.com/zkrana/joomla-security-scanner/) , and also check manually, then ask hosting support to scan server (!), and in meantime install firewall component. Use to scan as well.
Seppe
Accepted AnswerI installed the joomla security scanner from Githb.
I also had the 2nd security scanner (SPPB scanner instaleld).
This is what I get about the MuRuGuard:
Pascal - HTProtect.org
Accepted AnswerMaybe HTProtect will find something that hasn't been detected yet.
You could also set up daily malware scans with htprotect.app (connect up to 5 sites for free). It will automatically send you an email if anything suspicious is found.
The malware signatures are updated and improved almost daily, and its .htaccess also prevents most backdoors from being executed in the first place.