• 1

Read this first!

We do not monitor these forums. The forum is provided to exchange information and experience with other users ONLY. Forum responses are not guaranteed.

However, please submit a ticket if you have an active subscription and wish to receive support. Our ticketing system is the only way of getting in touch with RSJoomla! and receiving the official RSJoomla! Customer Support.

For more information, the Support Policy is located here.

Thank you!

TOPIC: The System Log has been emptied.

The System Log has been emptied. 14 years 6 months ago #8462

RS Team, my site was hacked and I got this message:

Website: www.daystar.com/
Page: /administrator/index.php?option=com_rsfirewall&view=logs
Description: The System Log has been emptied.
Alert level: critical
Date of event: 14.09.2009 06:46:34
User IP: 83.234.116.227
User Id: 62
Username: admin

I can't access my site now. How can i tell where the breach was and how to restore?

Thanks for your prompts response.
The administrator has disabled public write access.

Re:The System Log has been emptied. 14 years 6 months ago #8473

  • alexp
  • alexp's Avatar
  • OFFLINE
  • RSJoomla! Official Staff
  • Posts: 2253
  • Thank you received: 180
Hello,

Clearly you had an intrusion to your site. But from what i can see this was done by the admin user, thus it is very possible you have used a weak password.

It would be best to run a system check and see what else has been modified. A complete Joomla reinstallation would also be great.

The System log was erased so you can't see what exactly did he do on your server.

I strongly recommend following the indications stated here:

blog.rsjoomla.com/bid/20490/10-security-...d-in-Joomla-Part-One

and:

blog.rsjoomla.com/bid/20493/10-security-...d-in-Joomla-Part-two
Please note: my help is not official customer support. To receive your support, submit a ticket by clicking here
Regards,
RSJoomla! Development Team
The administrator has disabled public write access.
  • 1

Read this first!

We do not monitor these forums. The forum is provided to exchange information and experience with other users ONLY. Forum responses are not guaranteed.

However, please submit a ticket if you have an active subscription and wish to receive support. Our ticketing system is the only way of getting in touch with RSJoomla! and receiving the official RSJoomla! Customer Support.

For more information, the Support Policy is located here.

Thank you!