Generally, backup is something you need to breathe, not just use, if you are in this business. It's the number one security tool. Having a fresh and usable backup can be a life saver in a number of situations, not only when your site is hacked, but on a great number of other situation, beginning from human error (accidentally deleted key parts of site - or just forgot to pay your hosting bill) to situations out of your control, as a hardware/software failure. And is essential to have an easy to use tool to move your site around - from local development environment to live hosting, or from one server to another. Enter Akeeba Backup (former Joomla Pack), a must have tool for any Joomla webmaster.
Changing your database password is something you rarely need, but then you need it immediately, and with the lowest possible downtime. Why you should do that, in first time? Hm, there are many reasons/situations when you should consider changing your database access data ASAP:
By comparing infected files with known good files (from official sources or reliably clean backups) you can identify and remove malicious changes.
It is important that you compare the same version of your Joomla! core files and extensions. Core files on the 2.x branch are not the same as the 3.x branch and so on.
Never perform any actions without a backup. If you’re unsure, please seek assistance from a professional.
To manually remove a malware infection from your Joomla! files:
Log into your server via SFTP or SSH.
Create a backup of the site files before making changes.
Search your files for reference to malicious domains or payloads you noted.
Identify recently changed files and confirm whether they are legitimate.
Review files flagged by the diff command during the core file integrity check.
Restore or compare suspicious files with clean backups or official sources.
Remove any suspicious or unfamiliar code from your custom files.
Test to verify the site is still operational after changes.
If you can't find the malicious content, try searching the web for malicious content, payloads, and domain names that you found in the first step. Chances are that someone else has already figured out how those domain names are involved in the hack you are attempting to clean.
Diff tools to compare suspicious files with known-good copies:
Do you are an early adopter and you upgraded to Joomla 1.0.13? And you have Community Builder, VirtueMart or SMF Bridge...and you cant' login right now, and/or your users are complaining about the same problem. We're sorry for you... Do you have a backup? Then is simple, restore the Joomla 1.0.12 files, overwriting the actual files with those from the official distribution package and restore the jos_users or similar (or at least the passwords column from that).
Do you have backup, don't you? No??? Ouch... humm, then the job is a bit harder, but can be done!
So, still you can do the file restore? Good, do it. Then read below!
Websites take maintenance, and making a habit of performing a little spring cleaning each year can keep a business website running smoothly. The tips below does not apply for Joomla sites alone, any site can benefit from most of these tricks and tips.
Web Links 13
Articles View Hits 1983853
Currently are 78 guests and no members online