jxrtau

jdembowski, hopefully thread7 is still monitoring this post and hasn’t given up all hope of finding a solution.
I believe thread7 was looking for people who have also suffered the virus and have immediate solution to getting rid of it and eliminating re-occurrence.

I found the thread and also hoped someone would supply a fix. I felt i should comment on your comment as not responding
to thread7’s direct request. Your help was in fact rather condescending, bleeding obvious and vague. As I also found no
helpful responses to the request I had to trawl through my site and ferret out the source of the virus and fix.

If thread7 is still around here is what i found and did.

The hacked front page can be removed by changing your theme template. Use a different template for the time being. Once changed delete the corrupted template, you could upload a fresh uncorrupted version of your template.

I am unsure of how the hacker gained entry or was able to change my password, but Cron jobs or RSS feeds could have something to do with it from viewing my access logs. You can modify these entry points.

Entry was gained through a sub domain site. The virus drilled down and changed my template of my main site which has joomla installed.

The hacker is lazy and sloppy and left tracks all through his code(a cry for attention?). Hopefully i can return the favor to him somehow.

jdembowski, it is smart alec know it all people like you that frustrate internet users.
Your link for a hacked blog is about as useful as turning your computer off and then on again.
If you have nothing to add to a specific request then don’t bother.