
25 Jan
2013
25 Jan
'13
12:44 a.m.
Hi Andrew, thanks for the comment. My friend fixed it with a fresh install. He needed to upgrade Joomla anyway. On Thu, 24 Jan 2013, Andrew McNaughton wrote:
The pharma hack infestation I dealt with a little while back certainly included a bunch of screw-ups, but it also included a whole bunch of techniques for hiding code that I hadn't seen before. That is to say code obfuscation techniques that are hard to search for. There's no simple string that you can search for to find the inserted code, but with some more complex regexes I was eventually able to clear the last of it. There were several hundred modified files involved.
So a MD5 check (comparing with the sums taken after a fresh install) would have helped? Regards Peter