I had the same problem on a few of my sites with ext_calendar.   If you 
have com_galeria installed get rid of it too.
The exploit they use points to another site's basepath and overwrites 
index.php and/or configuration.php with their own file.

JD

alandd@consultpros.com wrote:
> I broke the calendar the other day.
>
> An alert broke out on the Joomla! forums early this week about an exploit
> in the calendar component we use on the site.  Many sites cracked and
> vandalized already.
>
> A thread in the forums had instructions on a quick fix to plug the hole. 
> I implemented the quick fix, correctly I thought.  But, either I goofed it
> or the fix was not well designed.  So the calendar displays on the main
> page but does not display when clicked.
>
> Sorry about that.
>
> The real solution is to replace that calendar component.  It is orphaned
> and with this event, I think it's time to move on.  I have another picked
> out that I plan to install this weekend.
>
> Thanks for your patience.
>
> Alan
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>   
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change  you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss