1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Joomla 1.5.x HACKED! Found the code but can't locate it. **NEED HELP**

Discussion in 'PHP & Perl' started by abhi1, Jul 1, 2010.

  1. abhi1

    abhi1 Power Member

    Joined:
    Feb 12, 2009
    Messages:
    680
    Likes Received:
    349
    Occupation:
    Student, Webmaster
    Location:
    Planet Earth
    Hey guys,
    I had this Joomla site of mine I didn't use for 8-9 months and I chk it back and its hacked!

    It was on Joomla 1.5.9 but I've upgraded to 1.5.18

    This is the code that is killing the site:

    Code:
    var m3_u = (location.protocol=='https:'?'https://d.jemm.biz/ajs.php':'http://d.jemm.biz/ajs.php';);
    //]]>--></script><noscript><a href='http://d.jemm.biz/ck.php?n=a69006b6&cb=INSERT_RANDOM_NUMBER_HERE'; target='_blank'><img src='http://d.jemm.biz/avw.php?zoneid=2747&n=a69006b6&ct0=INSERT_CLICKURL_HERE'; border='0' alt='' /></a></noscript> </div>
    var m3_u = (location.protocol=='https:'?'https://d.jemm.biz/ajs.php':'http://d.jemm.biz/ajs.php';);
    //]]>--></script><noscript><a href='http://d.jemm.biz/ck.php?n=ac87c43a&cb=INSERT_RANDOM_NUMBER_HERE'; target='_blank'><img src='http://d.jemm.biz/avw.php?zoneid=2745&n=ac87c43a&ct0=INSERT_CLICKURL_HERE'; border='0' alt='' /></a></noscript> 
    
    Its redirecting the domain to some jemm.biz page. I can't find where its placed...

    Any help wud b appriciated...can't post the link to the site here but will PM

    thx
     
  2. abhi1

    abhi1 Power Member

    Joined:
    Feb 12, 2009
    Messages:
    680
    Likes Received:
    349
    Occupation:
    Student, Webmaster
    Location:
    Planet Earth
    duh, nevermind...found it...i hate scriptkiddies :|