Been Hacked by pSycho-Tn

Discussion in 'Products & Tools' started by ianrdo, Jul 6, 2011.

  1. #1
    Can anyone help? I have 4 websites that have been hacked by pSycho-Tn virus
     
    ianrdo, Jul 6, 2011 IP
  2. dmm2020

    dmm2020 Peon

    Messages:
    59
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Look for files in the root of your website. Typically, there is a line added also at top of your index.php file or index.htm.

    It's expensive to have someone come in and clean a website, about $250.00 each. Do you have backups?
     
    dmm2020, Jul 6, 2011 IP
  3. TomBrownsword

    TomBrownsword Peon

    Messages:
    16
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Cleanup is one thing, but it's not enough. You also need to figure out how they got in (weak password? outdated software with vulnerabilities?) and close that door.

    If you have server logs, it should help immensely. If not, you need to start saving them right away so that you can help recover from future hacks.

    And by all means, backups will help, but be careful; it's possible that your backups were made after the hack took place -- so restoring them would not do anything for you.

    And yes, it is expensive to have somebody come in and clean up your website (I get a few of those calls but only do it for really good friends; I dislike getting my hands too terribly dirty!).

    Best wishes,
    Tom
     
    TomBrownsword, Jul 8, 2011 IP