Recommended Malware Removal Service?
 

Hi everyone,

Unfortunately my cPanel has been infected with malware and websites suspended by the current host, I have access via cPanel and have been told to clean the sites up.

I have already gone through the files once, and I was able to clean the obvious files that shouldn't be there, but seems there are more that I have missed.

There are 9 Wordpress sites, the rest of the add on domains are redirects.

Has anyone ever used a professional malware cleaning service?

Hopefully reasonably priced?

if you have any recommendations please share, thank you in advance

Recover any files you need then move the server.
It's probably faster. A lot of times it has to do with -- who the fuck knows.
You will need to scan all of the files (somewhere) in a VM sandbox to insure the files' integrity first.

Do you have ssh access?

Thank you for the reply Barry, yeah I'm looking at a few service providers now, but they have some serious prices, and most want to lock in their services for a year.

This is a share cPanel hosting account, I'm not sure if it has SSH access - but I do have access to the cPanel, file manager etc.

Before you clean files, make sure all plugins and base wordpress are updated. Do not run ancient wordpress plugins.

When you remove the files you must make sure you remove all the backdoors. Otherwise the malware is just going to get auto-installed again.

I believe succuri offers this service, but you probably already look at that one. I don't think you will find someone that's going to do it for $20 or something.

Check out TrendMicro for servers. They have a free trial.

We are chasing down an issue that came through WP as well

Your WordPress, themes, and plug-ins are all exploited. Best course of action is to do a migration to a completely clean and new account. It can be with the same web host or another if you prefer. Set up your WordPress sites on the new account. Dump the data from your originating WordPress sites, import into your sites on the new account. Eliminate any theme and plug-in you are not using.

Then you need to be relentless about keeping WordPress, themes, and plug-ins updated or this will just happen again. WordPress is not a "set and forget" platform but is used for that purpose far too often. Check into auto updaters as well, they are not 100% but they can help out a lot.

Good luck, you have some work ahead of you.

good info for anyone out there who has been hacked with malware

in the web root

just run the command in ssh
or $grep -rni 'javascr\|script' > FILE SAVED. TXT
Then you can read through the scripts for any unexpected code -- you may find a corrupt file. that should grep the script tags

Wordpress on shared servers is always precarious.

save the images and delete the wordpress saving the database used. reinstall a clean wordpress maybe the database is still good.

without shell access ... You can try some online scans but I would not waste a lot of time on a trashed wordpress.

Contact me (icq/email in sig) and I can take a look :)

Try Adwcleaner