<div>
That site is reporting as Joomla, not WordPress. &nbsp;You sure you have the correct site/account details?
</div>


<div>
Shoot I am sorry and you are correct, it is joomla. This was created so long ago. Yes, my login information is 100% correct. When I go to the <a href="http://starkservice.com/administrator" rel="ugc">http://starkservice.com/administrator</a>&nbsp;page, its just blank. When I go to the login it and put my name and password in, it looks for it then just comes back to the page and I cant edit anything. I have been using this for years.
</div>


<div>
Thank you! I may do that if I don't get any hit, I appreciate it.
</div>


<div>
Hi<br />
<br />
When I go to <a href="http://starkservice.com/administrator/" rel="ugc">http://starkservice.com/administrator/</a>&nbsp; &nbsp;Like you, I am not presented with the usual Joomla login form. &nbsp;I also only see a blank page.<br />
<br />
You say in your question &quot;When I go to the login it...&quot;<br />
<br />
I assume you mean logging in on this page: &nbsp;<a href="http://starkservice.com/index.php/login" rel="ugc">http://starkservice.com/index.php/login</a><br />
<br />
No question this is a bit weird, and it indeed may be possible that your site was hacked, or perhaps it could be something else, such as the version of php your hosting is using.<br />
<br />
In any case, is it possible you have &nbsp;a backup of your current site? &nbsp;Perhaps using akeeba backup.<br />
<br />
Rowby
</div>


<div>
Yes, normally when I go to the Login page my name and password will work there too and I can edit accounts.<br />
<br />
I honestly do not think I do have a back up to this site. &nbsp;Is there something I can look at within my ftp file or ask godaddy, my hosting company?
</div>


<div>
Ask them to tell you what version of PHP you are running now, and what version of PHP you were running the last time the login script worked. &nbsp;PHP has some breaking changes in the more recent releases, and it may be necessary to upgrade PHP and Joomla in concert.
</div>


<div>
Ok thank you, I will see what they say about the PHP. If I cant login to the back-end, how can I upgrade my PHP and Joomla?
</div>


<div>
Hi<br />
<br />
If you decide to do a new version of your site, just post here and I'll walk you through the best method.<br />
<br />
Rowby
</div>


<div>
Thank you, I will most likely contact go daddy in a few hours and be in touch tomorrow about all of this. Thank you all, I will see what they say.
</div>


<div>
Good. &nbsp; <br />
<br />
<br />
And as I said I will help you recreate your site using the latest version of joomla if you decide to go that route.<br />
<br />
Rowby
</div>


<div>
Hello,<br />
<br />
So after speaking with Go Daddy, they have no idea what to tell me other than they keep backups up to 30 days and I can push my website back to one of those days. I am going to try that when I have some time to see if that works, I will keep you all update and again thank you for the help. I will Accept Solution soon as well.
</div>


<div>
Okay. &nbsp; Let me know what you decide to do.<br />
<br />
Best,<br />
Rowby
</div>


<div>
<blockquote>
hey keep backups up to 30 days and I can push <b>my website</b> back to one of those days
</blockquote>
Suggest you ask GoDaddy to push <b>their hosting</b> back instead!<br />
<br />
Going forward you may want to learn about Github and Git. &nbsp;Version control saves us from a multitude of headaches!
</div>


<div>
Thank you all, I still haven't logged in yet, work has been nuts but I will today, and give credit to all those for their great help.
</div>


<div>
So I restored my files back 30 days (that's how long godaddy saves them for) and I still have the issue. I for sure have been hacked because I see on the bottom of every page a little . and that . leads to a spam ware site. Also, when I go to it from iexploer and safri, I get a Malicious Ware Detected cant open site at all error. &nbsp;I understand I should have had a good backup but, that is my fault, I will for now on.... What can I do to get my site back up and running normal so I can login as I used to and keep my same site and files? Rowby Goren, you had an idea about this?
</div>


<div>
<blockquote>
Suggest you ask GoDaddy to push their hosting back instead
</blockquote>
<br />
Unlikely. &nbsp;If it is an older version of Joomla that won't work on PHP 5.5 or 5.6, then he might be stuck having to bring the site forward to modern standards. I know a lot of ISPs are dropping support for all versions of PHP prior to 5.5 or so and spent a lot of time notifying customers to get ready for this...
</div>


<div>
Will that help with this virus I have? Or do you think this PHP thing is the reason I cant login and why my admin page is blank? &nbsp;How should I word that to ask them?
</div>


<div>
Very cool site, I removed that code from 4 of the files. The index.php doesn't have it and once of the likes it just says: <a href="http://starkservice.com/" rel="ugc">http://starkservice.com/</a>&nbsp;( View Payload ) &nbsp; and doesn't have a file source. I still see the little &quot;&nbsp;. &quot;&nbsp; on each page and the login is not working.
</div>


<div>
It is finding some more which is good because I can clean it up but where are these files?<br />
<br />
Website Malware &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="http://starkservice.com" rel="ugc">http://starkservice.com</a>&nbsp;( View Payload )<br />
Website Malware &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="http://starkservice.com/index.php" rel="ugc">http://starkservice.com/index.php</a>&nbsp;( View Payload )<br />
Website Malware &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="http://starkservice.com/index.php/sample-sites-2" rel="ugc">http://starkservice.com/index.php/sample-sites-2</a>&nbsp;( View Payload )<br />
Website Malware &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="http://starkservice.com/index.php/22-sample-data-articles/joomla/extensions/modules/24-joomla" rel="ugc">http://starkservice.com/index.php/22-sample-data-articles/joomla/extensions/modules/24-joomla</a>&nbsp;( View Payload )<br />
Website Malware &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="http://starkservice.com" rel="ugc">http://starkservice.com</a>&nbsp;( View Payload )
</div>


<div>
Probably in the web root folder<br />
<br />
one appears to be in this folder: &nbsp;/22-sample-data-articles/j<wbr />oomla/exte<wbr />nsions/<br />
<br />
and <br />
/extensions/modules/24-joo<wbr />mla
</div>


<div>
I just cant seem to find those sub folders anywhere. They must exist because when I click the link it goes to a web page: See attached screen shot.<br />
<a href="https://filedb.experts-exchange.com/incoming/2016/01_w04/1074445/Doc1.docx" target="_blank" class="file-inline" title="Doc1.docx (178 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>Doc1.docx</a>
</div>


Doc1.docx

<div>
Which specific sub folders are you still looking for?
</div>


<div>
I don't know, I am just going by the Sucuri Site Check: &nbsp;Where are these files they show below? &nbsp;I cant seem to find them anywhere, not in the root and/or the sub folders I have looked in. I am more confused now than I was.<br />
<br />
Website Malware &nbsp; &nbsp; &nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp; &nbsp; &nbsp;<a href="http://starkservice.com" rel="ugc">http://starkservice.com</a> ( View Payload )<br />
Website Malware &nbsp; &nbsp; &nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp; &nbsp; &nbsp;<a href="http://starkservice.com/index.php" rel="ugc">http://starkservice.com/index.php</a> ( View Payload )<br />
Website Malware &nbsp; &nbsp; &nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp; &nbsp; &nbsp;<a href="http://starkservice.com/index.php/sample-sites-2" rel="ugc">http://starkservice.com/index.php/sample-sites-2</a> ( View Payload )<br />
Website Malware &nbsp; &nbsp; &nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp; &nbsp; &nbsp;<a href="http://starkservice.com/index.php/22-sample-data-articles/joomla/extensions/modules/24-joomla" rel="ugc">http://starkservice.com/index.php/22-sample-data-articles/joomla/extensions/modules/24-joomla</a> ( View Payload )<br />
Website Malware &nbsp; &nbsp; &nbsp;mw-redirection121?web.js.s<wbr />pam-seo.re<wbr />direct.014<wbr /> &nbsp; &nbsp; &nbsp;<a href="http://starkservice.com" rel="ugc">http://starkservice.com</a> ( View Payload )
</div>


Underlined recently modified folders/files

recentfolders.png

<div>
I am not sure, I cant seen to find the files the site is referring to. I wondering if its worth signing up for, for $30 have have them clean it all.
</div>


<div>
Should I try the PHP suggestion first?
</div>


<div>
<blockquote>
 I wondering if its worth signing up for, for $30 have have them clean it all. 
</blockquote>
<br />
Yes, it is. &nbsp;Unless you know exactly what you are doing it's better to have security experts do it for you.
</div>


<div>
Unfortunately this company makes you pay a year in advance, its not worth it at that price. &nbsp;I see the code thats infected on their site, I just dont understand where the files are.
</div>


<div>
<blockquote>
I wondering if its worth signing up for, for $30 have have them clean it all.
</blockquote>
Even if Sucuri cleans your current site of malware -- the site can be infected again if you are using an older version of Joomla.<br />
<br />
Do you know what version of Joomla you are using? &nbsp;<br />
<br />
If it's older than 3.x then you should just create a new site, and copy the articles, images etc onto you new site with a new template <br />
<br />
Your website looks very simple and once you create a new site and use some security tools that I will recommend (specifically admintools) your site will be secure and is very unlikely to be hacked again <br />
<br />
Ideally you keep the old site up, and put up a new joomla site on an extra domain you might have laying around. &nbsp; Then your current site will be live while you take a few days to build the new one -- and you will have your old site as a reference for &nbsp;your new site.<br />
<br />
Rowby
</div>


<div>
Its for sure older but I am working on finding a way to clean it out so I can at least login and update Joomla. Re doing the site (although there isn't much to it) is my last resort. You have all been so helpful and I am determined to get to the bottom of fixing my files then updating joomla once I can log back in.
</div>


<div>
Then ftp all of your web files to your local computer<br />
<br />
Perhaps there is a local software you can install on your local computer to look for malware in a specific folder. (Anyone here know of one that WO2015 can try)<br />
<br />
Be aware that downloading the files to your local computer could possible infect your local computer -- unless, I guess, you have a good local virus malware protector on your computer.<br />
<br />
BTW it is also possible that your Joomla database is infected. &nbsp;So who knows where this adventure will lead.<br />
<br />
Rowby
</div>


<div>
Thank you Rowby, I have had some people give me a hard time when accepting a solution because I didnt select Multiple. How would you like me to do so?
</div>


<div>
Hi<br />
<br />
Multiple is fine and just split the points as you see fit<br />
<br />
Just make sure you select the Best Answer radio button for the best answer<br />
<br />
Don't hesitate to open a new joomla question when you are ready<br />
<br />
Rowby
</div>


<div>
Always happy to help when I can. &nbsp; I get so much help here on EE.<br />
<br />
ROWBY
</div>


<div>
<div class="content wysiwyg-content">
Hello,<br />
<br />
All of the sudden when I try to log into my account it doesn't work... it is the correct name and password as I have had forever. What can I do to log back into my backed wordpress page to edit my content? Is there something within the FTP files I can edit?<br />
<br />
<a href="http://starkservice.com/index.php/login" rel="ugc">http://starkservice.com/index.php/login</a><br />
<br />
Thank you.
</div>
</div>


Hello,

All of the sudden when I try to log into my account it doesn't work... it is the correct name and password as I have had forever. What can I do to log back into my backed wordpress page to edit my content? Is there something within the FTP files I can edit?

http://starkservice.com/index.php/login

Thank you.

Cant log into Joomla

Joomla is a free and open-source content management system (CMS) for publishing web content. It is built on a model–view–controller web application framework that can be used independently of the CMS. Written in PHP, Joomla uses object-oriented programming (OOP) techniques and software design patterns, stores data in a MySQL, MS SQL  or PostgreSQL database, and includes features such as page caching, RSS feeds, printable versions of pages, news flashes, blogs, search, and support for language internationalization.

Joomla

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

A web-based content management system (CMS) provides website authoring, collaboration, and administration tools that enables users with little knowledge or experience to create and manage website content. Most CMS systems use a content repository or a database to store page content, metadata, and other information assets, and a presentation component that displays the content to website visitors.

Web-Based CMS

PHP is a widely-used server-side scripting language especially suited for web development, powering tens of millions of sites from Facebook to personal WordPress blogs. PHP is often paired with the MySQL relational database, but includes support for most other mainstream databases. By utilizing different Server APIs, PHP can work on many different web servers as a server-side scripting language.