Monday, February 16, 2015

CryptoPHP Malware Removal Service - remove this from your site now



Is you site down because of 
CryptoPHP Malware and you need urgent resurrection. 

I can fully restore your site to what it was before.

CryptoPHP Malware removal from you site. 

Tasked performed

  1. Scan your database for CryptoPHP Malware signatures and rogue users created
  2. Remove and detect any images that contain CryptoPHP Malware
  3. remove and restore files infected with CryptoPHP Malware  
  4. remove and restore .htaccess files for redirects
Required 

  1. You're host provider should provide you with a detailed list of all the files that have infected when it shutdown your site.
  2. Cpanel Adminstrator Username/password access to your site

Time 

  1. Depends on how many files are infected and urgency.


CryptoPHP is a threat that uses backdoored Joomla, WordPress and Drupal themes and plug-ins to compromise webservers on a large scale. By publishing pirated themes and plug-ins free for anyone to use instead of having to pay for them, the CryptoPHP actor is social engineering site administrators into installing the included backdoor on their server.


It is fully explained here 

http://blog.fox-it.com/2014/11/18/cryptophp-analysis-of-a-hidden-threat-inside-popular-content-management-systems/