| Question: |
On the websites of the virus. Please rollback all the files on the host state naana 29-03-2015 or 28-03-2015. Dasy data if possible to leave the present and not to touch. sites cv-news.ru ecadom.by belexport.biz |
| Answer: |
Hello. please Wait, the request is sent to the administrator. |
| Answer: |
A backup of the database on 23 March. Restore? |
| Question: |
The backup is not needed, the most necessary backups of all host files. Is this possible?When restore files are not all entirely on March 23. |
| Answer: |
you have a virus with another 2015-02-21 here is log antivirus /home/viteck/public_html/mihalwood.com/C:\\Temp/update-extraction-b5161221/ctools/plugins/content_types/comment/.functions12.php: PHP.Trojan.Mailer-1 FOUND
/home/viteck/public_html/mihalwood.com/C:\\Temp/update-extraction-b5161221/menu_block/plugins/model.php: PHP.Trojan.Mailer-1 FOUND
/home/viteck/public_html/ecadom.by/modules/block/dump56.php: PHP.Trojan.Mailer-1 FOUND
/home/viteck/public_html/ecadom.by/profiles/testing/modules/plugin.php: PHP.Trojan.Mailer-1 FOUND
/home/viteck/public_html/ecadom.by/sites/all/modules/imagecache_actions/translations/.dump.php: PHP.Trojan.Mailer-1 FOUND
/home/viteck/public_html/ecadom.by/sites/all/modules/wysiwyg/plugins/break/ini57.php: PHP.Trojan.Mailer-1 FOUND
/home/viteck/public_html/ecadom.by/sites/all/modules/custom/views_image_colorbox/css/images/ie6/.error.php: PHP.Trojan.Mailer-1 FOUND
/home/viteck/public_html/ecadom.by/sites/all/libraries/tinymce/jscripts/tiny_mce/plugins/example/js/.template30.php: PHP.Trojan.Mailer-1 FOUND |
| Question: |
rollback, pochemu |
| Question: |
but the pullback in February, a week ago |
| Answer: |
what to do with the current files? |
| Question: |
Zabekapit just in case. Places on the host enough |
| Answer: |
files are restored. |
| Question: |
Can`t concepts where there is something at the bottom http://ecadom.by/Ðто clearly here the virus, but where is it? |
| Answer: |
open the page code and search for code eomu. we recommend you to download website files to your computer and check antivirus |
| Question: |
in http://ecadom.by search page code the result is not given. The virus still appears at the bottom http://ecadom.by/. Help to find the virus. If you need to roll back the database viteck_doorlis on March 23. |
| Answer: |
please Wait, the request is sent to the administrator. |
| Question: |
Sorry, confused. DB viteck_mihalles roll on March 23 |
| Answer: |
what does the base if you webshell on the website. we check your files antivirus |
| Answer: |
Yes, You were right, the data in the database 1 according to table cache_field 1 line in the table field_data_body 1 line in the table field_revision_body |
| Question: |
Thank you! I scoured the host, replaced the files and the virus remained. Suspected base. |
| Answer: |
check out all the sites. which version of engine do you have? been updated? |
| Question: |
The site is now not working. You rolled back the database?Rather, the site works but missing all the items from the catalog |
| Question: |
Other sites on WordPress, all cleaned up. This http://ecadom.by/ watched the other man, now lie in it |
| Answer: |
check everything just in case, and change all passwords. webshell dayt polnuyu power over the files from your account |
| Question: |
To remove webshell everything worked. The password does not work, I will. |
| Answer: |
OK
|
| Question: |
the site is not working, the admin panel will not let me. The catalog has disappeared. If there is a rollback database viteck_mihalles of February, make a rollback |
| Answer: |
we have a backup base in February. |
| Question: |
How long have backups? what date? |
| Question: |
All fixed. The website works, thanks. But I can`t login to the admin area of the website. Password recovery email not working.You can also roll back database viteck_mihalles on March 23. Removing from the database the virus. |
| Question: |
Sorry...)))))))))) fixed everything in the admin entered. Nothing needs to be done. Thank you. Out. |
| Answer: |
OK
|
