| Match | Count | SQL | Script |
| SELECT * FROM members_ledger WHERE ip = ? AND added>=unix_timestamp(NOW())-86400 | 1 | SELECT querystring, added
FROM members_ledger
WHERE
ip = ? AND added>=unix_timestamp(NOW())-86400
| /opt/clerks-staging/docroot/include/functions/includes/security.php 398 fetchMemberLedger() include_once()
|
| SELECT * FROM `questions` as q JOIN categories_faq as c ON q.catid=c.CATID WHERE (q.status=1 OR (q.status=2 AND userid='') ) AND q.quesid='29265' | 1 | SELECT q.*, c.seo as CatSEO, c.name as CatName, c.parentid
FROM `questions` as q
JOIN categories_faq as c ON q.catid=c.CATID
WHERE (q.status=1 OR
(q.status=2 AND userid='')
)
AND q.quesid='29265'
| /opt/clerks-staging/docroot/viewfaq.php 496 () ()
|
| SELECT * FROM seoclerks.members WHERE USERID='184190' | 1 | SELECT * FROM seoclerks.members WHERE USERID='184190'
| /opt/clerks-staging/docroot/include/functions/includes/member.php 445 GetAllUserDetails() ()
|
| SELECT * FROM seoclerks.members WHERE USERID=184190 | 1 | SELECT googleplus_profile FROM seoclerks.members WHERE USERID=184190
| /opt/clerks-staging/docroot/include/functions/main.php 16914 GetGooglePlusProfileFromId() ()
|
| SELECT * FROM ratings_faq as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=29265 LIMIT 5 | 1 | SELECT m.username FROM
ratings_faq as r,
seoclerks.members as m
WHERE r.USERID=m.USERID
AND r.upvote=1
AND r.PID=29265
LIMIT 5
| /opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()
|
| SELECT * FROM answers a, seoclerks.members b WHERE a.quesid='29265' AND a.userid=b.USERID and b.status='1' AND a.status=1 ORDER BY a.combined_votes DESC, a.date_answered asc | 1 | SELECT a.answer, a.USERID, a.upvotes, a.downvotes, a.ansid, a.parentid, a.combined_votes, a.date_answered,
b.username, b.userlevel, b.profilepicture FROM answers a, seoclerks.members b
WHERE a.quesid='29265' AND a.userid=b.USERID and b.status='1' AND a.status=1
ORDER BY a.combined_votes DESC, a.date_answered asc
| /opt/clerks-staging/docroot/viewfaq.php 1245 () ()
|
| SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=188591 LIMIT 5 | 1 | SELECT m.username FROM
ratings_faqanswers as r,
seoclerks.members as m
WHERE r.USERID=m.USERID
AND r.upvote=1
AND r.PID=188591
LIMIT 5
| /opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()
|
| SELECT * FROM ratings_faqanswers as r, seoclerks.members as m WHERE r.USERID=m.USERID AND r.upvote=1 AND r.PID=188601 LIMIT 5 | 1 | SELECT m.username FROM
ratings_faqanswers as r,
seoclerks.members as m
WHERE r.USERID=m.USERID
AND r.upvote=1
AND r.PID=188601
LIMIT 5
| /opt/clerks-staging/docroot/include/functions/main.php 17159 GetVoters() ()
|
| UPDATE questions SET total_views = total_views + 1 WHERE quesid='29265' | 1 | UPDATE questions SET total_views = total_views + 1 WHERE quesid='29265'
| /opt/clerks-staging/docroot/include/functions/main.php 1765 update_Faqviewcount() ()
|
| SELECT * FROM questions WHERE quesid!='29265' AND status='1' AND (question like '%How remove Reco Virus solve reco Ransomware FileDecryptor%' OR question like '%remove%' OR question like '%Reco%' OR question like '%Virus%' OR question like '%solve%' OR question like '%reco%' OR question like '%Ransomware%' OR question like '%FileDecryptor%') -- ORDER BY RAND() LIMIT 15 | 1 | SELECT quesid, question, seo, userid
FROM questions
WHERE quesid!='29265' AND status='1'
AND (question like '%How remove Reco Virus solve reco Ransomware FileDecryptor%' OR question like '%remove%' OR question like '%Reco%' OR question like '%Virus%' OR question like '%solve%' OR question like '%reco%' OR question like '%Ransomware%' OR question like '%FileDecryptor%')
-- ORDER BY RAND()
LIMIT 15
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() ()
|
| SELECT * FROM seoclerks.members WHERE USERID='632' limit 1 | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='632' limit 1
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_member_profilepicture()
|
| SELECT * FROM seoclerks.members WHERE USERID='9874' limit 1 | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='9874' limit 1
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_member_profilepicture()
|
| SELECT * FROM seoclerks.members WHERE USERID='3346' limit 1 | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='3346' limit 1
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_member_profilepicture()
|
| SELECT * FROM seoclerks.members WHERE USERID='30' limit 1 | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='30' limit 1
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_member_profilepicture()
|
| SELECT * FROM seoclerks.members WHERE USERID='15836' limit 1 | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='15836' limit 1
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_member_profilepicture()
|
| SELECT * FROM members_ledger WHERE script='/opt/clerks-staging/docroot/viewfaq.php' AND querystring LIKE '%id=29265%' AND added>=UNIX_TIMESTAMP(NOW())-1200 GROUP BY USERID | 1 | SELECT USERID, username FROM members_ledger
WHERE script='/opt/clerks-staging/docroot/viewfaq.php'
AND querystring LIKE '%id=29265%'
AND added>=UNIX_TIMESTAMP(NOW())-1200
GROUP BY USERID
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() ()
|
| SELECT * FROM categories | 1 | SELECT * FROM categories
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() parseRedundantQueriesCache()
|
| select * from categories_software order by name asc | 1 | select * from categories_software order by name asc
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_GetSoftwareCategories()
|
| select * from categories_wanttobuy order by name asc | 1 | select * from categories_wanttobuy order by name asc
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_wantcategories()
|
| select * from categories_wanttotrade order by name asc | 1 | select * from categories_wanttotrade order by name asc
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_tradecategories()
|
| SELECT * FROM seoclerks.members WHERE USERID='19821.png' | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='19821.png'
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()
|
| SELECT * FROM seoclerks.members WHERE USERID='184190.jpg' | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='184190.jpg'
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage()
|
| select * from categories_faq order by name asc | 1 | select * from categories_faq order by name asc
| /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_GetFaqCategories()
|
TommyCarey
Have you tried any sort of malware removal type of tool? I use Malwarebytes and it works pretty well, but I don't know if it will be able to recover anything that was already damaged or even remove the virus itself since it might be behind an encryption wall.
Here are a couple of guides that show you how to remove the virus but I'm not sure if you've already gone through them
https://www.pcrisk.com/removal-gui...-reco-ransomware
https://malwaretips.com/blogs/remove-reco/
I hope that helps
- Tommy Hey there, Have you tried any sort of malware removal type of tool? I use Malwarebytes and it works pretty well, but I don't know if it will be able to recover anything that was already damaged or even remove the virus itself since it might be behind an encryption wall. Here are a couple of guides that show you how to remove the virus but I'm not sure if you've already gone through them :( [url=https://www.pcrisk.com/removal-guides/16035-reco-ransomware]https://www.pcrisk.com/removal-guides/16035-reco-ransomware[/url] [url=https://malwaretips.com/blogs/remove-reco/]https://malwaretips.com/blogs/remove-reco/[/url] I hope that helps :( - Tommy
Are you sure you want to delete this post?