Zen Cart Logo
Forums / General Questions / Hacked or an error ?

Hacked or an error ?

Locked

Views: 1,195

Results 1 to 3 of 3
This thread is locked. New replies are disabled.
7 Aug 2009, 5:11 PM
#1
kasnah36 avatar

kasnah36

New Zenner

Join Date:
Mar 2007
Posts:
28
Plugin Contributions:
0

Hacked or an error ?

Hi
i am running Zen Cart 1.3.7 for my website spoilurpets.com

the website been running fine for years until about a week!

the problem is; the new customers can not create a new account due to a worried link that appear on you try to create a new account! the link is a spam for ############.... ! i think i being hacked!

i deleted all the files and folder on the server and uploaded an old backup but the problem still exist.

please try to create a account as new customer to see what i am taking about!

Your help will be appreciated!

7 Aug 2009, 5:14 PM
#2
barco57 avatar

barco57

Totally Zenned

Join Date:
Apr 2006
Location:
West Salem, IL
Posts:
2,844
Plugin Contributions:
0

Re: Hacked or an error ?

Its a hack. They have been able to insert the text into the db in the field for the storename. You can clear it by going to admin>configuration>my store> store name and clearing the extra code there. The you will need to apply the security patch AND RENAME YOUR ADMIN.

You will also notice that there is a record company sidebox now on the site, which means they used the admin vulnerability to upload .php files to your images folder. Your will find that the record company and record company description tables will have information in them that doesn't belong there. You will need to clean out the images folder of the .php files that shouldn't be there.

7 Aug 2009, 5:42 PM
#3
kasnah36 avatar

kasnah36

New Zenner

Join Date:
Mar 2007
Posts:
28
Plugin Contributions:
0

Re: Hacked or an error ?

Thank you very much for your assistance.
I was able to fix it following your instructions!

i will appropriate it more if you can guide me on how to apply the security patch AND rename the admin to avoid such problem in the future.

Thank you in advance.