Server Hacked! Looking To Pay Someone to Fix it!

software development

#1

My DreamHost Server has been hacked. I have close to a 100 sites on it and it seems that a handful have been infected. Not sure how or why but I need someone with expertise in this area to help me fix this mess. Please either PM me or leave a comment with your experience and how much you will charge. Thanks. ~Paul


#2

Could you elaborate on the hack?

Maximum Cash Discount on any plan with MAXCASH

How To Install PHP.INI / ionCube on DreamHost


#3

This server only runs wordpress blogs and somehow a script is placed at the bottom of my index page on a number of these blogs.

If you hit the site the script tries to pull a pdf file from a chinese site. The actual call is mirain.cn/sv/pdf.php?f=all.

I think, but I haven’t completely confirmed this, that only sites that I have ftp-ed to in the last little while are infected.

However, my main DreamHost user has close to 100 sites on it. So, if it gained access to one, it has access to all.

The frustrating thing is that I have removed the script off a couple of my sites, but the virus always comes back. So, obviously, the virus is calling the script somewhere else on the server.

Any help or suggestions would be greatly appreciated.


#4

Are you on dig-dug perchance?

Maximum Cash Discount on any plan with MAXCASH

How To Install PHP.INI / ionCube on DreamHost


#5

YES


#6

Do you have a database backup?