My site has been Hacked!

[SecureAspects]

Haha Real funny Peter. Well I got on this morning and another 58 thousand e-mails in que, There are several strange things about it, the post that it is referring to has been deleted and the template id#46 does not exist? I just don't know where else to look my next step will be to replace all the 3.6.11 files.

Template ID:    46
To Name:    [email protected]
To Address:    [email protected]
From Name:    Secure Aspects Group Job Board
From Address:    [email protected]
Subject:    Learn How I Made $537,217.96 With 100% FREE Traffic!"
Message (text)    

To: [email protected] <[email protected]>
From: Kieth  <[email protected]>

I thought you'd be interested in this page from Secure Aspects Group Job Board

Link:
http://secureaspects.com/jobboard/index.php?post_id=6421

Comments:

[SecureAspects]

Ok I deleted the entire Mail folder in include>lib and replaced it with a fresh one that I just unzipped, so far so good, the spam instantly stopped generating. I hope that did it.

[CompuDave]

Good luck with that, hope it works.

Template #46 belongs to the Email Job function. You need to check the email_job_window.php file. You could also try removing this file if the previous attempt does not work.

[SecureAspects]

Funny you should mention that I just removed that file and so far so good. Maybe I will try to replace it, I just don't have a good understanding of how a file like that would be corrupted?

[SecureAspects]

I removed the email_job_window.php file and replaced it with the Face Book recommend and send buttons. So far no problems.

[SecureAspects]

No more problems, that was the file that was letting all those e-mails get sent. How frustrating makes me want to conduct extreme violence against people that do that crap.

[Peter]

The soultion would be to remove the file email_job_window.php from the main directory.

[steve]

Something else you can do is delete your website. Download a clean version of jamit, unzip it, upload it, then install it using the old database. I had to do this at one time. Or, if you don't want to do that just overwrite your website with a clean version.

It seems that your website has a virus in it that is doing all the maliciousness. I'm not sure, but that is what it seems like.

Make sure the computer you are working from is virus free, adware free, malware free... etc.