NYCPHP Meetup

NYPHP.org

[joomla] The Pharma Hack - Link spamming injection

Scott Wolpow scott at wolpow.com
Tue Jan 24 12:47:57 EST 2012


First suggestion is to get off shared hosting.
I expect you will find your site is not secure.
Change all passwords, including that used by the DB user.
If you have a back up, delete all files and re-upload.

You can contact me off list if you wish.

scott at wwolpow.com

SW

On 1/24/2012 10:51 AM, Ted Coyle wrote:
> Does anyone have experience with the "Pharma Hack"?
>
> http://redleg-redleg.blogspot.com/2011/02/pharmacy-hack.html
>
> Basically a script is installed that spams links like "Viagra" in Google search results. As a result Google removes our site from the index.
>
> I have followed many instructions on how to remove it, but each time it returns after about 3 weeks. VERY frustrating.
>
> http://wiki.dreamhost.com/Troubleshooting_Hacked_Sites#Looking_for_FTP.2FSSH_Hacks
>
>
>
>
> If there is anyone out there with experience please let me know. We would be happy to hire your services as well.
>
> Thanks.
>
>
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



More information about the Joomla mailing list