1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Site got malware affected

Discussion in 'BlackHat Lounge' started by fmOzilla, Sep 4, 2013.

  1. fmOzilla

    fmOzilla Power Member

    Joined:
    Nov 11, 2011
    Messages:
    714
    Likes Received:
    384
    Location:
    C:\Windows\System32
    One of my client got suspend coz of malware attacks.They scan file directories and sent to result my client. lot of files got Infected.Now He want me to clean those files and move his host.how can i do it?
     
  2. Patel

    Patel Senior Member

    Joined:
    Mar 1, 2011
    Messages:
    1,116
    Likes Received:
    1,503
    Location:
    On the coast
    I am assuming you don't have a backup. If you do, then use it.

    If not, see if the files are all infected with the same code, if they are, you may be able to go into cpanel and look for all instances of that code through php my admin and replace all the instances of that code with blank text.
     
  3. fmOzilla

    fmOzilla Power Member

    Joined:
    Nov 11, 2011
    Messages:
    714
    Likes Received:
    384
    Location:
    C:\Windows\System32
    He have't got backup.he also using nulled theme.i think that is the Problem.i have Cpanel loggings.Can you please tell me more? i mean how to clean them via phpmyadmin?
     
  4. Nigel Farage

    Nigel Farage BANNED BANNED

    Joined:
    Feb 8, 2012
    Messages:
    563
    Likes Received:
    1,495
    If it was a nulled theme, then it was probably infected to begin with. No way around getting rid of the nulled theme and replacing it with something legit.
     
  5. kvmcable

    kvmcable Supreme Member

    Joined:
    Dec 28, 2010
    Messages:
    1,355
    Likes Received:
    2,815
    Occupation:
    24 year business owner - old school dude
    Location:
    KFC - BW3
    Ask the host if they have a backup they can restore. Some will do it if you ask nicely.