I was advised by my web developer that he found a lot of instances of ../../../../ in the access and error logs, and all stemming from the gameroom directory.
The hosting company gave me a list of infected/malicious files. There were around 20 or so in total, all in the gameroom directory. Only one of the files was/is a script file, the rest had been installed over the past few days.
I'm waiting on a report from my file guy to find out exactly where they got in, but according to him, the entry point was the gameroom.
After deleting the malicious files, the hosting company have reinstated my account, so things aren't so bad.
|