Exploited scripts

I have been informed by my hosting provider that several files on your templates have exploited scripts. They have suspended my hosting account till it is addresses. Please see links below and provide solution.

Please note that your account was using the following exploited scripts:
/home/water81/public_html/templates/it_thelodge2/icetools/default.php
/home/water81/public_html/templates/it_thelodge2/icetools/helper.php
/home/water81/public_html/templates/it_magazine/icetools/helper.php
/home/water81/public_html/templates/it_magazine/icetools/olddefault.php
/home/water81/public_html/templates/it_corporate/icetools/default.php
/home/water81/public_html/templates/it_corporate/icetools/helper.php
/home/water81/public_html/kenyawebtv.com/templates/list.php
/home/water81/public_html/kenyawebtv.com/templates/it_newsy3/icetools/default.php
/home/water81/public_html/kenyawebtv.com/templates/it_newsy3/icetools/helper.php
/home/water81/public_html/kenyawebtv.com/templates/beez5/language/en-GB/menu.php
/home/water81/public_html/kenyawebtv.com/plugins/quickicon/files.php
/home/water81/public_html/kenyawebtv.com/modules/global.php
/home/water81/public_html/kenyawebtv.com/modules/mod_whosonline/tmpl/alias.php
/home/water81/public_html/kenyawebtv.com/modules/mod_lastupdate/list.php
/home/water81/public_html/kenyawebtv.com/modules/mod_jv_google_weather/xml.php
/home/water81/public_html/kenyawebtv.com/modules/mod_icetabs/themes/help.php
/home/water81/public_html/kenyawebtv.com/modules/mod_gf_worldmarkets/tmpl/sql.php
/home/water81/public_html/kenyawebtv.com/modules/mod_footer/cache.php
/home/water81/public_html/kenyawebtv.com/modules/mod_feed/javascript.php
/home/water81/public_html/kenyawebtv.com/media/com_jantivirus/css/include.php
/home/water81/public_html/kenyawebtv.com/media/overrider/js/option.php
/home/water81/public_html/kenyawebtv.com/media/cms/css/ajax.php
/home/water81/public_html/kenyawebtv.com/media/media/images/sql.php
/home/water81/public_html/kenyawebtv.com/media/com_jgrid/admin.php
/home/water81/public_html/kenyawebtv.com/media/com_jgrid/demo_images/javascript.php
/home/water81/public_html/kenyawebtv.com/libraries/phputf8/mbstring/proxy.php
/home/water81/public_html/kenyawebtv.com/components/com_newsfeeds/xml.php
/home/water81/public_html/kenyawebtv.com/components/com_content/gallery.php
/home/water81/public_html/olympics/templates/it_newsy3/icetools/default.php
/home/water81/public_html/olympics/templates/it_newsy3/icetools/helper.php
/home/water81/public_html/olympics/southafrica/templates/it_newsy3/icetools/default.php
/home/water81/public_html/olympics/southafrica/templates/it_newsy3/icetools/helper.php
/home/water81/public_html/kenyawebtv.com/plugins/system/ice_speed/ice_speed/css.php
/home/water81/public_html/kenyatv.net/libraries/fof/view/user.php
Such exploits can be used to attack other sites as well as to destabilize or crash your server. We cannot allow such programs to run and compromise the security of the server, so we had to take immediate action to temporarily suspend your account.

Thanks.

David
Responses (9)
  • Accepted Answer

    Brunilda
    Brunilda
    Offline
    Monday, March 30 2015, 03:32 PM - #Permalink
    Hi David,


    We have provided you support for this issue through email. Please check it!
    Also, from my experience some of the lines you posted above are caused due to the subscriber number of users to Social networks. Try to disable them for one moment and see if the errors will be presented again.

    Let us know.
    The reply is currently minimized Show
  • Accepted Answer

    Saturday, May 02 2015, 10:00 AM - #Permalink
    Hi,

    I noticed that the default.php file keeps disappearing from the icetools folder thus leading to blank screen. Please what do I do? Thank you.
    The reply is currently minimized Show
  • Accepted Answer

    Brunilda
    Brunilda
    Offline
    Monday, May 04 2015, 09:15 AM - #Permalink
    I would recommend to keep disabled or remove at all the IceSpeed files from your site!
    The reply is currently minimized Show
  • Accepted Answer

    Saturday, April 15 2017, 11:12 PM - #Permalink
    Please How do I disable the icespeed files from my site?
    The reply is currently minimized Show
  • Accepted Answer

    Monday, April 17 2017, 05:28 PM - #Permalink
    Hello,

    What are you referring to as "IceSpeed"?
    Which template are you using?

    Could you provide your Website URL?


    If you are using one of our Joomla 2.5 Templates - Which is probable since we do not make use of any IceSpeed Extension - Maybe you might find this on your Plugins list.
    Either way, to disable an extension go to:
    Extensions > Extension Manager > Manage > filter extensions by typing "ICE"

    All our Ice-Extensions should show up.
    You can find and disable/uninstall our extensions from there.

    Let me know if this helps,
    Regards
    The reply is currently minimized Show
  • Accepted Answer

    Monday, April 17 2017, 07:31 PM - #Permalink
    Thanks alot for your reply... I'm using IT_Corporate(the first one). Let me ty your solution.
    The reply is currently minimized Show
  • Accepted Answer

    Monday, April 17 2017, 08:33 PM - #Permalink
    Hello,

    OK, let me know how it goes,
    Regards
    The reply is currently minimized Show
  • Accepted Answer

    Monday, April 17 2017, 11:58 PM - #Permalink
    Disabled all the plugins but still the file "default.php" is still missing and screen is still blank
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, April 18 2017, 06:07 PM - #Permalink
    Hello,

    Please elaborate.
    What is this issue "default.php is still missing"?

    Where do you get this error?
    Can you provide your Website URL so that I can have a look?

    Let me know,
    Regards
    The reply is currently minimized Show
Your Reply

Start your 7 days Free Trial Today!