Re: SQL injection embeded .js file to execute CF hack

["Kronin555" <webforumsuser@xxxxxxxxxxxxxx>]

> Is there a way to find out which file names come from an original install? We 
would like to use this to match against what we are currently seeing to be able 
to establish a baseline to work from.

 Yeah, do an install to a different folder. Then you can do a diff -r between 
that and the current CF folder.

  Is Apache all updated? What modules are loaded/activated?