| Question: |
Hello Started I tried to log in the admin of two of my sites with this account - does not work, what a mess of letters issued Now tried the sites - the same, with the main site does some strange page, I understand extort money please Help what to do? |
| Answer: |
Hello. Check amps. when was the last time You saw that the site is running and when made the last changes on the website? |
| Question: |
Tonight made some new entries, and it was working |
| Answer: |
the Site was hacked, we can restore the site from backup. Restore? |
| Question: |
Now I download first, it isn`t on sitestate, and while this version exists, can it pull the text that I wrote yesterday? Again not to write |
| Answer: |
where You hranitsja text in DB or in files? just for a start, we can recover the files, and then if necessary the database. |
| Question: |
I think filaha * yesterday added new on the website *.* |
| Answer: |
what engine Your website? |
| Question: |
WordPress backup download, how to boot - write |
| Answer: |
ok
|
| Question: |
Everything booted backup, It is normal for ** March |
| Answer: |
wordpress has all the data in the database. you to restore files from backup? |
| Question: |
Yes, restore, another exit But there seems to yesterday`s information to restore work? |
| Answer: |
we can rebuild files database is not going to touch |
| Question: |
Well |
| Answer: |
you have encrypted all the files. You UTO is threatened? offered, Eligio deciphering? |
| Question: |
It was written in English, when I went today to the main domain, it describes how I got the virus type, was a link to Wikipedia, and offered to pay for rasshifrovku you get to do everything? |
| Answer: |
of course not. it is almost we have restored the files from backup and checked http://art-asfalt.com/AI-BOLIT-REPORT-__-******-**-**-****_**-**.html Contact https://revisium.com/ru/order ini will make analysis report and immediately smenet all the passwords |
| Question: |
What do you not restored? It seems to have everything except yesterday`s pictures. But you delosperma great Vama analysis report make the charge?And can you tell me this cracking is likely due to weak passwords? It seems to me that it is unlikely that I virus has brought some |
| Answer: |
we vosstanovili files from your backup. more than anything we do. analysis of report TS revisium free |
| Question: |
Well, because you restored yesterday and the records that were not in a backup, how come? ) |
| Answer: |
we didn`t ostavlyali no records. we just replaced the site files on a file from Your backup. no record in file no. everything in the database. database of ima has not been touched |
| Question: |
Understand :)Thanks for the help! |
| Answer: |
ok
|
| Question: |
Hello wanted to clarify the passwords I have to change in the first place what you needed? I understand, I cPanel hacked times hacked whole account? That is the password to your website you need to change from WordPress in the first place? |
| Answer: |
it is Better to change them everywhere. |
| Answer: |
it is Better to change them everywhere. |
| Question: |
Thank you |
| Answer: |
Thank you, that appealed to customer support. |
| Question: |
Tell me more of This organization, which you referred to, that they can help to decipher the reports, they fully trustworthy? They replied:Good afternoon.Then send access to hosting, we will block the site until it is unprotected. |
| Answer: |
Yes, this is a serious organization. |
| Question: |
Thank you |
| Answer: |
ok
|
| Question: |
Hello You wrote - Contact: https://*.*/They`ll make analyses Occitane advised to block the IP addresses from which I got hacked, and how do I know? |
| Answer: |
you can learn from access logs. but the access logs on the server ebolie of the day are not stored. so find you meet etoliko the fact that today, logs are available in the panel menu - neopentane access logs or in the folder acces-logs |
| Question: |
Clear, sorry |
| Answer: |
beside the fact. it is essentially however a pointless exercise. chaterine work with personal ip`s why block them useless. This is the strangest recommendation from revisium |
| Question: |
Yes, and money they need to pay for any work in the future I will clarify. Again, if hacking is passwords FTP WordPress to change the IP of the attackers immediately see and block It all, or something else? To know and do |
| Answer: |
Make a backup of the site and deflate it to your local computer, stored on a hosting it is better not to, so if that could be restored, in case if we will have a version with broken files on a storage server. |
| Question: |
Okay, thanks |
| Answer: |
Thank you, that was rutilis support. |
