File injected on into Joomla site
joomla
Solution
This type of issue is common with outdated CMS solutions. Its usualy quite prone to vulnerabilities because of it's popularity. There are a lot of things you can do to prevent these type of attack, depending if you are on a shared server or a dedicated one there are solutions avaialable. I'll name only a few
- First, start by changing your password to a passphrase with characters, numbers, sepcial characters (15)
- Change your passphrase often
- Ensure all of your server software is up to date on patches and knowned vulnerability, if on a shared server contact your provider with issues you have been facing.
- Use sftp for transfers and definitely don't use filezilla
- Invest in a firewall, very efficient to prevent brute force password attacks on certain ip range
- Ultimately, you can visit these types of site that sell you protection for Joomla http://extensions.joomla.org/extensions/access-a-security/site-security/site-protection/8384 or these type of site that explains avaialable hacks for joomla http://www.exploit-db.com/papers/15780/
Hopefully these few advices will help you solve the problem you are faced with.
Problem
we had Joomla 2.5.8. a virus file list.php was created in this path /public_html/modules/mod_jacontentslider/assets/css This file was sending spam emails non stop. we thought it was php hack and update to latest version of php and upgraded joomla 2.5.11 and we got hit again with the same issue. Any thoughts? Update I tried to download this infected file (list.php) to my windows 7 PC. The Microsoft security essentials software detected the virus and didn't allow me to download this file. So, is there some software on linux (CentOS 5.9) side that will scan the files periodically and automatically delete bad ones or notify us? We had clam installed which is of no use. It did not detect this virus file.