[TYPO3] Getting site running after Hacked

[Thijs Hakkenberg]

I'd do a new typo3 install and replace the database with your database 
from the hacked site. If you copy the fileadmin, typo3temp and media 
folders, your site will work (after installing the missing extensions)

Ian Fish schreef:
> Hello all,
>
> One of my sites has been hacked.
>
> I am not an experienced typo3 or linux user, although I have learnt 
> enough (with the communities help) to set up typo3 and a few sites on a 
> linux virtual server.
> I am running version 3.8.0 installed via Fantastico
> When the site was hacked I couldn't get in to the typo3 backend, but 
> could still ftp to the site.
> I found the following amended files:
>
> www/typo3/index_re.php
> www/typo3/index.php
> www/typo3/index.htm
> www/typo3/index.html
> www/typo3/t3lib/index.html
> www/typo3_src/t3lib/index.html
> www/typo3_src/tslib/index_ts.php
> www/typo3_src/tslib/index.html
>
> I have replaced these files with backups.
>
> There may be others, for example in the folder www/typo3_src there are 2 
> folders called showpic.php and index.php that were amended about the 
> same time the hack happened, I can't view or download these folders.
>
> The site is now accessible, and I can log on to the backend, however I 
> can only access the page and list views in the backend, the other pages 
> load the hacked site in the main view window.
>
> How can I get the site running again?
> What do I need to do to stop the site from being hacked again?
> Any other advice?
>
> Regards,
> Ian Fish
> _______________________________________________
> TYPO3-english mailing list
> TYPO3-english at lists.netfielders.de
> http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-english
>   

-- 
Thijs Hakkenberg,  

Voorzitter Stichting Ebriositas
www.ebriositas.nl

Student Natuurkunde UvA
www.uva.nl

Systeembeheerder Stichting Varkens in Nood
www.varkensinnood.nl

Contact:
tel: 06-48761131
www.hakkenberg.com
thijs at hakkenberg.com