Hacked or an error ?

[kasnah36]

Hi
i am running Zen Cart 1.3.7 for my website spoilurpets.com

the website been running fine for years until about a week!

the problem is; the new customers can not create a new account due to a worried link that appear on you try to create a new account! the link is a spam for ############.... ! i think i being hacked!

i deleted all the files and folder on the server and uploaded an old backup but the problem still exist.

please try to create a account as new customer to see what i am taking about!

Your help will be appreciated!

[barco57]

Its a hack. They have been able to insert the text into the db in the field for the storename. You can clear it by going to admin>configuration>my store> store name and clearing the extra code there. The you will need to apply the security patch AND RENAME YOUR ADMIN.

You will also notice that there is a record company sidebox now on the site, which means they used the admin vulnerability to upload .php files to your images folder. Your will find that the record company and record company description tables will have information in them that doesn't belong there. You will need to clean out the images folder of the .php files that shouldn't be there.

[kasnah36]

Thank you very much for your assistance.
I was able to fix it following your instructions!

i will appropriate it more if you can guide me on how to apply the security patch AND rename the admin to avoid such problem in the future.

Thank you in advance.