0
Welcome Guest! Login
0 items Join Now

restoring hacked website

  • restoring hacked website

    Posted 13 years 6 months ago
    • Hello,

      I have a problem which should have been solved with my host but since my host (Rochen) doesn't help at all, and even in their forums one can't really get any help, I'll write here.

      First I want to complain a bit, stay away from Rochen unless you are very knowledgeable on the subject and will never need their help. They were extremely rude and snobbish, I can hear them laughing at me behind my back. Since I am not a developer, but one musician keeping my own website, I would need clearer instruction on how to proceed. Instead of explaining something they tell me to go find a webmaster to do it (and stop writing them basically). :cry:

      Before when I had a problem because of their security settings making gantry framework useless, they wouldn't help me at all and only someone in Rocket Theme would help me.

      So here is what happened:

      Two days ago my host wrote me saying my account has ben suspended because they found these in my website:
      root@valencia [/home/zeynepoy/public_html]# ls -lha

      -rw-r--r-- 1 zeynepoy zeynepoy 103K Oct 7 09:27 error_log.php
      -rw-r--r-- 1 zeynepoy zeynepoy 65K Oct 8 05:01 x.txt

      Which is supposed to that my account was under attack. They gave me a link to a short article with a few steps on what to do in this occasion. It says:

      *Take a backup of your site.
      *Remove all your files.
      *Restore your site to an earlier time

      So I took a backup, then I went to file manager in cpanel, selected all fines, and clicked delete. Then I restored it using Rochen's 'vault'. Then my website was back and working as it was before. But then they said, 'what did you do, you didn't do anything, those scripts are still there, we told you to do this blah blah...'
      So I thought, I must have restored to an earlier date. I did the above again, but 'restore' wouldn't work anymore. When I told them they say, my account is useless now since I deleted all the files, I was supposed to delete only some of them.

      Now I don't have a website anymore, thanks to Rochen. I have a backup but since it is a full backup I can't upload it through cpanel. Is there anything I can do, or should I just accept this and start building my site from scratch?
    • Adamck's Avatar
    • Adamck
    • Elite Rocketeer
    • Posts: 546
    • Thanks: 2
    • Web Developer, IT Assistant, Graphics design, App Developer

    Re: restoring hacked website

    Posted 13 years 6 months ago
    • If you have a backup, cant you extract it locally, delete the harmful scripts and then manually FTP it back?

      As a rule i install and backup via Akeeba on EVERY website i run/build.
      It makes issues like this a thing of the past and makes restoring your joomla site a 10 min job!
    • Kiss my RSS

Time to create page: 0.045 seconds