Malicious files being uploaded to /test_uploads

[StevensonWay]

My web host (IONOS.co.uk) has alerted me to malicious files that have been found in the com_jdownloads/test_uploads folder. The web site is based on Joomla, is running the latest version and all passwords are complex. Currently IONOS have blocked ("parked") the web site (www.stevensonway.org.uk) and although I restored the last backup from a few days ago, the web site was blocked again after about 10 minutes.

I then tried to restore again but then ran into issues with Kickstart not being able to write to some files. I'm now stuck and I'm trying to find a way to find and delete these malicious files. So does anyone have any idea of how these files came to be in the /test_uploads folder? IONOS have very strict file checking and so I'm puzzled as to how this has come about.


I'd appreciate any ideas/help as being offline is not good!

Kind regards

Ian

[ColinM]

Hi
Have you installed the Akeeba package 'Admin Tools' ? That package seems to cause a challenge/conflict with jDownloads!!
Colin