Question: |
Hello, yesterday the site has been hacked beta.vmokshane.ru CMS WordPressСегодня hacked other sites on the CMS Joomla |
Answer: |
what version of joomla Your sites? |
Question: |
2.5 |
Question: |
As a result, all websites one and also displays an example teh-int.vmokshane.ru |
Answer: |
http://beta.vmokshane.ru/AI-BOLIT-REPORT-__-919596-12-04-2016_08-26.html |
Answer: |
version 2.5 is vulnerable. list the sites which are hacked and precise in Cahokia folder they are located |
Question: |
http://teh-int.vmokshane.ru/http://new-idea.vmokshane.ru/ |
Question: |
in the Folder public and, accordingly, the-int, new-idea Actually hacked all the sites are on a domain vmokshane.At the moment the most important is the restoration of the above sites |
Answer: |
the sites have a known critical vulnerability http://teh-int.vmokshane.ru/AI-BOLIT-REPORT-__-94368-12-04-2016_08-30.html Ustronie vulnerability necessarily https://revisium.com/ru/blog/joomla_rce_all_versions_affected.html |
Answer: |
we can vosstanovit files noone will be hacked very quickly. the website has a vulnerability, it is necessary to restrict access to the sites on work time. soobie when websites work |
Question: |
Yesterday the sites were working |
Question: |
I understand the changed files index.php in the root folder of the subdomain. |
Answer: |
upload the clean originals with other sites. we can polnostu to replace the files in the public_html folder on the files from backup |
Question: |
Now being any work, to restore? We have restored the site gives an error on port 80. Another site informs the technical work. |
Answer: |
no. no rabatin conducted. |
Question: |
It is possible to backup folders mak |
Answer: |
utochnyat the path to the folder. also utochnyat where to upload backup |
Question: |
Perezalil file index.php in the folder is a public folder then the mak (i.e. subdomain mak) and reports that the site is on maintenance) if you check the service health check that indicates that the site is not available. |
Answer: |
Provide a link for you to check. |
Question: |
mak.vmokshane.ru |
Answer: |
enable the site by going to its admin panel |