FPA part 1 - says I'm over limit - see part 2. - Joomla! Forum - community, help and support

problem description :: forum post assistant (v1.3.0) : 30th may 2017 wrote:hacked - reported google

log/error message :: forum post assistant (v1.3.0) : 30th may 2017 wrote:this site may hacked

actions taken resolve forum post assistant (v1.3.0) 30th may 2017 wrote:reverted backup - google not satisfied.

forum post assistant (v1.3.0) : 30th may 2017 wrote:

basic environment :: wrote:joomla! instance :: joomla! 3.7.2-stable (amani) 22-may-2017
joomla! configured :: yes | read-only (444) | owner: --protected-- . (uid: 1/gid: 1) | group: --protected-- (gid: 1) | valid for: 3.7
configuration options :: offline: 0 | sef: 1 | sef suffix: 0 | sef rewrite: 1 | .htaccess/web.config: yes | gzip: 0 | cache: 0 | ftp layer: 0 | ssl: 0 | error reporting: default | site debug: 0 | language debug: 0 | default access: 1 | unicode slugs: 0 | database credentials present: yes

host configuration :: os: linux | os version: 3.14.52-vs2.3.6.15-1 | technology: x86_64 | web server: apache | encoding: gzip, deflate | doc root: /home/thecovehouse/thecovehouse.ca | system tmp writable: yes

php configuration :: version: 5.6.29 | php api: cgi-fcgi | session path writable: yes | display errors: 1 | error reporting: 22519 | log errors to: | last known error: | register globals: | magic quotes: | safe mode: | open base: | uploads: 1 | max. upload size: 64m | max. post size: 65m | max. input time: -1 | max. execution time: 30 | memory limit: 90m

mysql configuration :: version: 5.6.34-log (client:mysqlnd 5.0.11-dev - 20120503 - $id: 76b08b24596e12d4553bd41fc93cccd5bac2fe7a $) | host: --protected-- (--protected--) | collation: utf8_general_ci (character set: utf8) | database size: 7.27 mib | #of tables:  245

detailed environment :: wrote:php extensions :: core (5.6.29) | date (5.6.29) | ereg () | libxml () | pcre () | sqlite3 (0.7-dev) | filter (0.11.0) | mbstring () | spl (0.2) | pdo (1.0.4dev) | reflection ($id: 5f15287237d5f78d75b19c26915aa7bd83dee8b8 $) | pdo_sqlite (1.0.1) | hash (1.0) | session () | cgi-fcgi () | bcmath () | bz2 () | calendar () | ctype () | curl () | dom (20031129) | standard (5.6.29) | ftp () | gd () | gettext () | exif (1.4 $id: 8b0e34c10dc8a04b8e81d9d79985b2566141b03d $) | iconv () | imap () | json (1.2.1) | mcrypt () | mysqlnd (mysqlnd 5.0.11-dev - 20120503 - $id: 76b08b24596e12d4553bd41fc93cccd5bac2fe7a $) | mysqli (0.1) | openssl () | pcntl () | pdo_mysql (1.0.2) | posix () | pspell () | mysql (1.0) | simplexml (0.1) | soap () | sockets () | tokenizer (0.1) | xml () | xmlreader (0.1) | xmlrpc (0.51) | xmlwriter (0.1) | xsl (0.1) | zip (1.12.5) | zlib (2.0) | imagick (3.4.1) | memcached (2.2.0) | mhash () | zend engine (2.6.0) |
potential missing extensions :: suhosin |

switch user environment (experimental) :: php cgi: yes | server su: yes | php su: yes | custom su (litespeed/cloud/grid): yes
potential ownership issues: no

folder permissions :: wrote:core folders :: images/ (755) | components/ (755) | modules/ (755) | plugins/ (755) | language/ (755) | templates/ (755) | cache/ (755) | logs/ (755) | tmp/ (755) | administrator/components/ (755) | administrator/modules/ (755) | administrator/language/ (755) | administrator/templates/ (755) |

elevated permissions (first 10) ::

extensions discovered :: wrote:[size=85]components :: site :: com_wrapper (3.0.0) 1 | com_mailto (3.0.0) 1 | wf_hr_title (2.6.12) 1 | wf_styleselect_title (2.6.12) 1 | wf_formatselect_title (2.6.12) 1 | wf_fontsizeselect_title (2.6.12) 1 | wf_fontselect_title (2.6.12) 1 | wf_fontcolor_title (2.6.12) 1 | wf_xhtmlxtras_title (2.6.12) 1 | wf_visualchars_title (2.6.12) 1 | wf_visualblocks_title (2.6.12) 1 | wf_textcase_title (2.6.12) 1 | wf_table_title (2.6.12) 1 | wf_style_title (2.6.12) 1 | wf_spellchecker_title (2.6.12) 1 | wf_source_title (2.6.12) 1 | wf_searchreplace_title (2.6.12) 1 | wf_print_title (2.6.12) 1 | wf_preview_title (2.6.12) 1 | wf_nonbreaking_title (2.6.12) 1 | wf_media_title (2.6.12) 1 | wf_lists_title (2.6.12) 1 | wf_link_title (2.6.12) 1 | wf_layer_title (2.6.12) 1 | [do not buy our kitchens!] (2.6.12) 1 | wf_inlinepopups_title (2.6.12) 1 | wf_imgmanager_title (2.6.12) 1 | wf_fullscreen_title (2.6.12) 1 | wf_directionality_title (2.6.12) 1 | wf_contextmenu_title (2.6.12) 1 | wf_clipboard_title (2.6.12) 1 | wf_cleanup_title (2.6.12) 1 | wf_charmap_title (2.6.12) 1 | wf_browser_title (2.6.12) 1 | wf_autosave_title (2.6.12) 1 | wf_article_title (2.6.12) 1 | wf_anchor_title (2.6.12) 1 | wf_emotions_title (2.6.12) 1 | wf_link_search_title (2.6.12) 1 | wf_popups_jcemediabox_title (2.6.12) 1 | wf_popups_window_title (2.6.12) 1 | wf_links_joomlalinks_title (2.6.12) 1 | k2 links jce link (2.2) 1 | wf_filesystem_joomla_title (2.6.12) 1 | wf_aggregator_vimeo_title (2.6.12) 1 | wf_aggregator_vine_title (2.6.12) 1 | [youtube] (2.6.12) 1 | wf_aggregator_dailymotion_titl (2.6.12) 1 | wf_mediaplayer_jceplayer_title (2.5.18) 1 |
components :: admin :: akeeba (4.5.1) 1 | com_weblinks (3.6.0) 1 | com_users (3.0.0) 1 | com_templates (3.0.0) 1 | com_tags (3.1.0) 1 | com_search (3.0.0) 1 | roksprocket (2.1.19) 1 | rokgallery (2.42) 1 | rokcandy (2.0.2) 1 | com_redirect (3.0.0) 1 | com_postinstall (3.2.0) 1 | com_plugins (3.0.0) 1 | com_newsfeeds (3.0.0) 1 | com_modules (3.0.0) 1 | com_messages (3.0.0) 1 | com_menus (3.0.0) 1 | com_media (3.0.0) 1 | com_login (3.0.0) 1 | com_languages (3.0.0) 1 | com_joomlaupdate (3.6.2) 1 | jhotelreservation (5.3.1) 1 | plg_system_urltranslator (1.0.0) 1 | jhotelsearchfilter (1.0.0) 1 | jhotelreservation (4.0.0) 1 | com_jevents (3.4.39) 1 | com_jce (2.6.12) 1 | unknown (-) 1 | com_installer (3.0.0) 1 | gantry (4.1.32) 1 | com_finder (3.0.0) 1 | com_cpanel (3.0.0) 1 | com_contenthistory (3.2.0) 1 | com_content (3.0.0) 1 | com_config (3.0.0) 1 | com_cmc (1.4) 1 | com_checkin (3.0.0) 1 | com_categories (3.0.0) 1 | com_cache (3.0.0) 1 | com_banners (3.0.0) 1 | com_alfcontact (3.2.6) 1 | com_ajax (3.2.0) 1 | com_admin (3.0.0) 1 | com_associations (3.7.0) 1 | com_fields (3.7.0) 1 |

modules :: site :: mod_wrapper (3.0.0) 1 | mod_whosonline (3.0.0) 1 | mod_weblinks (3.6.0) 1 | mod_users_latest (3.0.0) 1 | mod_tags_similar (3.1.0) 1 | mod_tags_popular (3.1.0) 1 | mod_syndicate (3.0.0) 1 | mod_stats (3.0.0) 1 | mod_search (3.0.0) 1 | roksprocket module (2.1.19) 1 | roknavmenu (2.0.9) 1 | rokgallery module (2.42) 1 | rokajaxsearch (2.0.4) 1 | mod_related_items (3.0.0) 1 | mod_random_image (3.0.0) 1 | mod_menu (3.0.0) 1 | mod_login (3.0.0) 1 | mod_languages (3.5.0) 1 | jreservationinfo (1.0.0) 1 | jquerylogin (1.0.0) 1 | jhotelsearchfilter (1.0.0) 1 | jhotelreservation (4.0.0) 1 | mod_jev_switch_view_title (3.4.39) 1 | mod_jev_legend_title (3.4.39) 1 | mod_jev_latest_events_title (3.4.39) 1 | mod_jev_filter_module_title (3.4.39) 1 | mod_jev_custom_module_title (3.4.39) 1 | mod_jev_calendar_title (3.4.39) 1 | innhand (1.1) 0 | mod_footer (3.0.0) 1 | mod_finder (3.0.0) 1 | mod_feed (3.0.0) 1 | mod_custom (3.0.0) 1 | mod_cmc (1.4) 1 | mod_breadcrumbs (3.0.0) 1 | mod_banners (3.0.0) 1 | mod_articles_popular (3.0.0) 1 | mod_articles_news (3.0.0) 1 | mod_articles_latest (3.0.0) 1 | mod_articles_category (3.0.0) 1 | mod_articles_categories (3.0.0) 1 | mod_articles_archive (3.0.0) 1 |
modules :: admin :: mod_version (3.0.0) 1 | mod_toolbar (3.0.0) 1 | mod_title (3.0.0) 1 | mod_submenu (3.0.0) 1 | mod_status (3.0.0) 1 | mod_stats_admin (3.0.0) 1 | mod_quickicon (3.0.0) 1 | mod_popular (3.0.0) 1 | mod_multilangstatus (3.0.0) 1 | mod_menu (3.0.0) 1 | mod_login (3.0.0) 1 | mod_logged (3.0.0) 1 | mod_latest (3.0.0) 1 | mod_feed (3.0.0) 1 | mod_custom (3.0.0) 1 | cmc - update (1.4) 1 | cmc - newsfeed (1.4) 1 | cmc - mailchimp (1.4) 1 | cmc - icons (1.4) 1 |

plugins :: site :: plg_installer_webinstaller (1.1.1) 1 | plg_installer_folderinstaller (3.6.0) 1 | plg_installer_packageinstaller (3.6.0) 1 | plg_installer_urlinstaller (3.6.0) 1 | plg_installer_jce (2.6.12) 1 | plg_installer_jeventsinstaller (3.4.39) 0 | community - cmc registration p (1.4) 1 | plg_user_profile (3.0.0) 0 | plg_user_joomla (3.0.0) 1 | plg_user_contactcreator (3.0.0) 0 | user - cmc registration plugin (1.4) 0 | plg_twofactorauth_yubikey (3.2.0) 0 | plg_twofactorauth_totp (3.2.0) 0 | plg_system_jce (2.6.12) 1 | plg_seofli (3-3) 1 | plg_system_urltranslator (1.0.0) 1 | system - seosimple (2.2) 1 | plg_system_sef (3.0.0) 1 | system - rokupdater (1.0.8) 1 | system - roksprocket (2.1.19) 1 | system - rokgallery (2.42) 1 | system - rokextender (2.0.0) 1 | system - rokcommon (3.2.5) 1 | system - rokcandy (2.0.2) 1 | system - rokbox (2.0.13) 1 | system - rokbooster (1.1.16) 0 | plg_system_remember (3.0.0) 1 | plg_system_redirect (3.0.0) 1 | system - google maps (3.3) 1 | plg_system_p3p (3.0.0) 1 | plg_system_logout (3.0.0) 1 | plg_system_log (3.0.0) 1 | plg_system_languagefilter (3.0.0) 0 | plg_system_languagecode (3.0.0) 0 | plg_system_highlight (3.0.0) 1 | system - google site verificat (1.0) 1 | system - gantry (4.1.32) 1 | system - cmc ecom360 virtuemar (1.4) 1 | system - cmc ecom360 redshop (1.4) 0 | system - cmc ecom360 payplans (1.4) 0 | system - cmc ecom360 matukio (1.4) 0 | cmc - ecom360 hika (1.4) 0 | system - cmc ecom360 akeebasub (1.4) 1 | system - cmc mailchimp ecommer (1.4) 1 | plg_system_debug (3.0.0) 1 | plg_system_cache (3.0.0) 0 | plg_system_fields (3.7.0) 1 | plg_system_stats (3.5.0) 1 | plg_system_updatenotification (3.5.0) 1 | plg_system_gwejson (3.4.39) 1 | plg_system_backuponupdate_titl (3.7) 1 | plg_search_tags (3.0.0) 0 | plg_search_weblinks (3.6.0) 1 | plg_search_newsfeeds (3.0.0) 1 | plg_jev_search_title (3.4.39) 1 | plg_search_content (3.0.0) 1 | plg_search_contacts (3.0.0) 1 | plg_search_categories (3.0.0) 1 | plg_quickicon_joomlaupdate (3.0.0) 1 | plg_quickicon_extensionupdate (3.0.0) 1 | plg_quickicon_phpversioncheck (3.7.0) 1 | plg_quickicon_jce (2.6.0-pro-bet) 1 | plg_quickicon_jcefilebrowser (2.5.18) 1 | plg_quickicon_akeebabackup (1.0) 1 | plg_finder_weblinks (3.6.0) 1 | plg_finder_tags (3.0.0) 1 | plg_finder_newsfeeds (3.0.0) 1 | plg_finder_jevents (3.4.39) 0 | plg_finder_content (3.0.0) 1 | plg_finder_contacts (3.0.0) 1 | plg_finder_categories (3.0.0) 1 | plg_extension_joomla (3.0.0) 1 | plg_extension_jce (2.6.12) 1 | button - rokgallery (2.42) 1 | button - rokcandy (2.0.2) 1 | button - rokbox (2.0.13) 1 | plg_editors-xtd_readmore (3.0.0) 1 | plg_editors-xtd_pagebreak (3.0.0) 1 | plg_editors-xtd_image (3.0.0) 1 | plg_editors-xtd_article (3.0.0) 1 | plg_editors-xtd_fields (3.7.0) 1 | plg_editors-xtd_menu (3.7.0) 1 | plg_editors-xtd_module (3.5.0) 1 | plg_editors_tinymce (4.5.6) 1 | editor - rokpad (2.1.9) 1 | plg_editors_jce (2.6.12) 1 | plg_editors_codemirror (5.25.2) 1 | plg_jev_core_content_plugin_ti (3.4.39) 1 | plg_content_vote (3.0.0) 1 | content - rokinjectmodule (1.7) 1 | content - rokbox (2.0.13) 1 | plg_content_pagenavigation (3.0.0) 1 | plg_content_pagebreak (3.0.0) 1 | plg_content_loadmodule (3.0.0) 1 | plg_content_joomla (3.0.0) 1 | innhand (1.1) 0 | plg_content_finder (3.0.0) 0 | plg_content_emailcloak (3.0.0) 0 | plg_content_fields (3.7.0) 1 | plg_content_jce (2.6.12) 1 | plg_captcha_recaptcha (3.4.0) 0 | plg_authentication_ldap (3.0.0) 0 | plg_authentication_joomla (3.0.0) 1 | plg_authentication_gmail (3.0.0) 0 | plg_authentication_cookie (3.0.0) 1 | plg_fields_calendar (3.7.0) 1 | plg_fields_checkboxes (3.7.0) 1 | plg_fields_color (3.7.0) 1 | plg_fields_editor (3.7.0) 1 | plg_fields_imagelist (3.7.0) 1 | plg_fields_integer (3.7.0) 1 | plg_fields_list (3.7.0) 1 | plg_fields_media (3.7.0) 1 | plg_fields_radio (3.7.0) 1 | plg_fields_sql (3.7.0) 1 | plg_fields_text (3.7.0) 1 | plg_fields_textarea (3.7.0) 1 | plg_fields_url (3.7.0) 1 | plg_fields_user (3.7.0) 1 | plg_fields_usergrouplist (3.7.0) 1 | [/size]

templates discovered :: wrote:templates :: site :: rt_paradigm (1.2) 1 | protostar (1.0) 1 | beez3 (3.1.0) 1 |
templates :: admin :: isis (1.0) 1 | hathor (3.0.0) 1 |

i'm not sure there else need add. thank assistance in locating , recovering hack.