Hi guys,

A site I created a while back seems to be trying to be hacked. I noticed when doing a few changes earlier that were new files created in the root, and a new folder within the themes folder, within that folder i saw a file referencing to something called "ly0kha" which after googling seems to be some kind of shell hack.

Luckily it doesn't seem to have worked (site is still working fine), despite new files being added all across the root. No new files were within the Concrete directory though. Looks like it has been happening for the last couple of weeks though and even new files added yesterday.

I've deleted all dodgy files and changed passwords / usernames on the site and the hosting. Is there anything else you'd suggest i should do? I'm using C5 5.4.1.1

Thanks for any help guys :) shame we have to worry about pesky things like this!