NYCPHP Meetup

NYPHP.org

[joomla] The Pharma Hack - Link spamming injection

Ted Coyle ted.coyle at nutrigraphix.com
Tue Jan 24 15:47:50 EST 2012


Scott thank you for the tips. Do you have a suggestion for hosting?


On Jan 24, 2012, at 12:47 PM, Scott Wolpow wrote:

> First suggestion is to get off shared hosting.
> I expect you will find your site is not secure.
> Change all passwords, including that used by the DB user.
> If you have a back up, delete all files and re-upload.
> 
> You can contact me off list if you wish.
> 
> scott at wwolpow.com
> 
> SW
> 
> On 1/24/2012 10:51 AM, Ted Coyle wrote:
>> Does anyone have experience with the "Pharma Hack"?
>> 
>> http://redleg-redleg.blogspot.com/2011/02/pharmacy-hack.html
>> 
>> Basically a script is installed that spams links like "Viagra" in Google search results. As a result Google removes our site from the index.
>> 
>> I have followed many instructions on how to remove it, but each time it returns after about 3 weeks. VERY frustrating.
>> 
>> http://wiki.dreamhost.com/Troubleshooting_Hacked_Sites#Looking_for_FTP.2FSSH_Hacks
>> 
>> 
>> 
>> 
>> If there is anyone out there with experience please let me know. We would be happy to hire your services as well.
>> 
>> Thanks.
>> 
>> 
>> 
>> _______________________________________________
>> New York PHP SIG: Joomla! Mailing List
>> http://lists.nyphp.org/mailman/listinfo/joomla
>> 
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>> 
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>> 
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
> 
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
> 
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php




More information about the Joomla mailing list