Site hacked ?

Having security issue : in all articles (this is e-shop based on esport, so not many articles) external links appeared, something like http://www.victoryag.org/about.htm. Only one link per article.

How did the hell this happened ?

Always updated to latest joomla and gavick template. Sure now I removed those links, but how can I find and fix the hole in joomla or template ?

Maybe it is already fixed and I already applied the update, but how can I found that ?

Hi,
1) Probably someone hacked it. Check your core files and check all new (with new date) files which not belongs to Joomla.

2) Have to read it before: http://www.gavick.com/documentation/gen ... r-attacks/

3) Check your address here: http://sitecheck.sucuri.net/scanner/ and here: https://www.virustotal.com/

4) You can hire me or somebody else from our team to fix it. We have expedience with securing webpages.


Do you have J2.5 or J3.1 ?

Joomla 2.5.14 at the moment. All those online scanners shows that site is healthy.

For now changed admin password and will see what happens next

Now check for new files, and default template folder - maybe any .php file has a newer date than should have.

Here:
gk_TemplateName\layouts
and
gk_TemplateName\index.php

1) Change also password for FTP
2) Do you use .htaccess
3) If it possible change PHP version from PHP 5.2/5.3 to 5.4, ask your hosting support, this should be easy.

It seems everything fine with mentioned folders. I wanted to download eshop 2.16.1 againa and compare all files, but gavick asks for login when I try to download template. Sure it is not related to this issue, but can you see why I am not able to download templates any more (I am logged in).

If you can not login, please use another browser. And Clean cache & cookies before.

..or Maybe your PC have virus?

If won't help use : https://www.gavick.com/supportdesk/inde ... ets/Submit