| Question: |
Good day, could you help me to remove viruses, so I didn`t ruin anything. Thank you |
| Answer: |
Hello. Your question referred to the administrator of the company. |
| Answer: |
Hello. you have infected the whole site. consider vozmozhnos reinstalling website. fully acidities from viruses we can`t. we have no such services. try to contact http://www.revisium.com they produce clean |
| Question: |
Can I open access to FTP, TK can`t connect to it. Thank you |
| Answer: |
Wait. Your issue is being dealt with. |
| Answer: |
Yes, you can. please tell us Your ip and we`ll open access for You |
| Question: |
RU I have a backup of the site, now I perezalil.Thank you |
| Answer: |
open. are you sure that your backup.? |
| Question: |
Thanks site from becapable everything is OK, open full access.Thank you |
| Answer: |
what steps have been taken in order that the virus has not appeared again? |
| Question: |
Before this moment, do not tell me, after transferring the backup, loaded a blank page on website lolpost.ru access to the database is correct, and with this backup I previously flooded to your hosting first time can be met such a problem?Thank you |
| Answer: |
you can go to the admin area of the site? if Yes, then disable the plugins. |
| Question: |
no, admin can`t. |
| Answer: |
how do you backup zakruzhili |
| Question: |
loaded a blank page |
| Answer: |
how do you zakruzhili backup and that was it? |
| Question: |
database I not overloaded, I then downloaded all files, checked the access to the database |
| Question: |
Database I was then downloaded, and then downloaded all the files, erased the old, checked the accesses to the database as usual, decausative |
| Answer: |
perhaps your file Yong correspond to the current version of the database and site settings that are in it. you have a backup base for this same time as the files? |
| Question: |
probably not((((Hurried I must delete all files(( |
| Answer: |
how did you do the backup ? you just copied the files to your computer? |
| Question: |
Yes, files copied, then transferred to your hosting for a couple of months ago. |
| Answer: |
please wait, we will try to restore files from our backup. |
| Answer: |
files restored from backup |
| Answer: |
proverit all plugins and change passwords |
| Question: |
Thank you, You wonderful hosting, all here, updated just in case WordPress to poldina version. Thank you! |
| Answer: |
please provite the folders where the virus was detected |
| Answer: |
/var/www/happy99/data/www/lolpost.ru/wp-includes/SimplePie/XML/Declaration/page.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/version.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/images/wlw/footer.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/pomo/stats.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/tinymce/plugins/paste/error.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/tinymce/plugins/directionality/files.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/tinymce/skins/config.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/tinymce/skins/dirs.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/imgareaselect/test.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/swfupload/plugins/gallery.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/lol/articles.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentythirteen/genericons/font/menu.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentythirteen/archive.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentyfourteen/featured-content.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentytwelve/content-page.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentytwelve/page-templates/config.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentytwelve/sidebar.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentyten/images/file.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/socialize-it/img/code.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/socialize-it/img/help.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp-noexternallinks/dump.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp_module/index.php: PHP.Shell-38 FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp_module/class-wp-importer-cron.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp_module/wp-conf.php: PHP.Shell-38 FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/hello.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp-pagenavi/test.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/all-in-one-seo-pack/JSON.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/uploads/2012/10/diff.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/uploads/dir.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/uploads/utf.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/uploads/2015/03/defines.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/languages/plugins/ajax.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-admin/css/colors/sunrise/libworker.so: Unix.Trojan.Roopre FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/SimplePie/XML/Declaration/page.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/version.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/images/wlw/footer.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/pomo/stats.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/tinymce/plugins/paste/error.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/tinymce/plugins/directionality/files.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/tinymce/skins/config.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/tinymce/skins/dirs.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/imgareaselect/test.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-includes/js/swfupload/plugins/gallery.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/lol/articles.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentythirteen/genericons/font/menu.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentythirteen/archive.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentyfourteen/featured-content.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentytwelve/content-page.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentytwelve/page-templates/config.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentytwelve/sidebar.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/themes/twentyten/images/file.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/socialize-it/img/code.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/socialize-it/img/help.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp-noexternallinks/dump.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp_module/index.php: PHP.Shell-38 FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp_module/class-wp-importer-cron.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp_module/wp-conf.php: PHP.Shell-38 FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/hello.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/wp-pagenavi/test.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/plugins/all-in-one-seo-pack/JSON.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/uploads/2012/10/diff.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/uploads/dir.php: PHP.Trojan.Uploader FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/uploads/utf.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/uploads/2015/03/defines.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-content/languages/plugins/ajax.php: Php.Trojan.StopPost FOUND
/var/www/happy99/data/www/lolpost.ru/wp-admin/css/colors/sunrise/libworker.so: Unix.Trojan.Roopre FOUND |
| Question: |
Yes definitely, thanks a lot.The site is already available for everyone?Thank you |
| Answer: |
Yes available |
