[Solved] Suspended: Pakistan

[zaidi]

HH_username: pakistan

Stevie

http://www.mqmpakistani.org

 

My site was Joomla based. I found out hacker attack last night. I removed the posts that hacker made and tried to add additional security steps, but it seems it was already too late and hacker had already got the control.

 

I have older backups of my site. I will take the backup which I made 1 month ago and add all the necessary security steps before uploading it.

 

Hope to get rid of hacker this way.

 

May I request you to please restore my site. Thanks & Regards.

[Tjoene]

Your account was suspended for the following reason:

 

Malware. 1 file(s). Trojan.PHP.C99Shell FOUND

 

That means that there are some malware files found on your account.

 

For your safety and to protect your website from potential further corruption the account has been suspended.

 

To find the infected files we recommend making a backup of your site, download the backup file to your computer, and scan the backup using a reputable virus and malware scanner. If you're having trouble locating the offending files please ask and we can provide more information.

 

If you are you certain that it is a false-positive, we strongly encourage you to file a false positive form here: http://cgi.clamav.net/sendvirus.cgi

 

Your account should be unsuspended now, but keep in mind that this is a temporary unsuspension. You have 24 hours starting at the time of this post to clean your account of any and all malicious files or your account will be resuspended.

[zaidi]

I am not a technical person.

 

But I removed the whole site, made a fresh Joomla Installation, and then imported the database, changed the passwords, installed a lot of security extensions for Joomla.

 

Hope this removes the problem.

[Krydos]

Your account is showing up as clean now. Thank you for taking care of this.

[Sove]

Make sure you verify the safety of the plugins you upload, no doubt you uploaded a rogue one.