100427 - Malware Removal from Server

In Progress

.

I have a customer who has a shared hosting account that as apparently been compromised. The site hosts a LAMP based auction site and over 800 files have been corrupted with a Trojan virus.

Appears to be all of the [url removed, login to view], [url removed, login to view] and all *.js files, starting on April 8th.

ESET identifies the malware as JS/[url removed, login to view] trojan

I have taken the site off line via .htaccess accept for my IP and i have changed the cPanel/FTP password.

The malware has appended all of the files with a long string of code. I suspect you can write a script to remove this string from the files and save them. I would also like you to find any "back door" files that may be present and look at the database for trouble. And any other appropriate steps to restore the site and prevent reinfection in the future.

I'm looking for experienced, reputable bidders with good credentials only.

In short I need you to

1. clean the infected files

2. secure the server so it does not get compromised again

Budget: I'd prefer not to spend more than $30

Please only bid if you have at least 1 job of this nature reviewed in your feedback; otherwise you are wasting your time and mine. :)

Thank you in advance for you consideration.

Kind Regards,

Chris

Skills: Computer Security, Linux, System Admin, Troubleshooting, Web Security

See more: malware removal server, server malware removal, malware server removal, remove malware server, m string, future door, find job on line, Eset, malware server, virus clean, server job, server code, cpanel ftp, your door, virus remove, virus infected, trojan, site malware, remove virus, remove from, malware removal, linux admin cpanel admin, lamp server, infected site, door code

About the Employer:
( 102 reviews ) Laramie, United States

Project ID: #672038

Awarded to:

staryj

Hello! Check PM please

$30 USD in 1 day
(8 Reviews)
4.1

9 freelancers are bidding on average $48 for this job

itamarjp

I can do this for you.

$50 USD in 0 days
(73 Reviews)
5.7
fatmember

Hello, please check your PMB in a minute.

$50 USD in 0 days
(2 Reviews)
3.7
pranky

Greetings, Ready to start. Thanks Pranky

$30 USD in 1 day
(5 Reviews)
2.7
crashus3

Hello, You can find a specialist who can remove these entries for $30 (I suppose script will be written right) but still you need to add more to your budget to search some backdoors. PM for any questions

$60 USD in 2 days
(6 Reviews)
2.6
metal120

i can do that ..

$35 USD in 2 days
(0 Reviews)
0.0
drax

Hi. I can find and remove malicious code. Please see PM. Thanks.

$30 USD in 2 days
(0 Reviews)
0.0
argenix

hello, check your pmb please

$30 USD in 0 days
(0 Reviews)
0.0
Nitin1583

We do have very good hands on experience on such kind of projects. For more details kindly ref. our website ie. http://www.dinpl.com

$120 USD in 1 day
(0 Reviews)
0.0