Hi there Guys,
somebody can help me to deal with a hacked ModX.
I’m kind of a newbie to this hacking stuff. Sorry.
My ModX Site (0.9.6.3 + Globals off + MaxiGallery) got hacked due to the Reflect issue.
I was not aware of it.
The hacker left a Trojan in a GalleryPic (.jpg) of the MaxiGallery.
I dumped the SQL Database and downloaded all FTP Files.
I scanned both downloads. But found none of the Trojan.
Now I’m wondering:
a) Should I go on to use MaxiGallery (for SlideShow Effects)?
b) Should I simply re-install a newer ModX Version and re-import the Database?
c) Should I simply re-ftp all the content files when installation is done?
Somebody help?
Kind regards.
The Aviator.
I would back up the current site, delete everything, and install the current version of MODx Evolution.
Change the DB username and password, the MODx username and password, and your cPanel password.
Get things working and back up the site.
Then I’d carefully import the rest of the site making sure not to import the hack.
If you have a backup of the original site that’s definitely pre-hack, you might choose to install that and then upgrade MODx, but I don’t think I’d take the chance.
Hi,
thanks for your quick reply.
I think I will refill the sitecontent manually.
Checking each part again towards hacked content.
Greetz
