Suspected hacking

[John Lester]

Originally Posted by TheLastSuperman

Whenever your hacked it's best to check for all types of Malicious files/codes etc instead of simply assuming it was one "file" as it were, for that try the info outlined here: http://www.vbulletin.com/forum/blogs...iller/3934768- especially run the queries to see if anything comes up.

On the one file you had trouble deleting, open a support ticket with your host and mention this to them, ask them to verify that the file was removed entirely - they may at that point decide to run some server-side scans it depends on your host and what importance they place on matters such as this.

Did those steps and did not find anything malicious. Host confirms that the file was deleted through the cpanel's file manager at the time I deleted it. They will get back to me once they finish going through the server to let me know if there are any issues.

Thanks, forgot all about those queries

--------------- Added [DATE]1369348828[/DATE] at [TIME]1369348828[/TIME] ---------------

Originally Posted by nhawk

I'd also suggest checking php.ini to see if allow_url_fopen is enabled. That's a huge security risk and should be disabled.

I have asked my host about this and am awaiting a response