hi there
i have a similar micro jobs website which has been disabled from the hosting due to a user uploading a spam script.
I have attached the reply below from the hosting company about the problem.
I do not wish to delete and remove all users and their jobs so am looking for some one who can scan the script and remove the spam script, remove the whole micro jobs script from the host before uploading the cleaned script back to the server.
I Think the reply from the host will explain more:
Thanks for taking the time to read this ticket. This site has been disabled as it was found to contain a spam script, which can be used by an external party to send out large volumes of spam emails.
Typically, spam scripts are uploaded by malicious scripts taking advantages of weaknesses in a site's code. Therefore, before we'll be able to re-enable this site, we'll need to know that all malicious scripts have been removed and that the original vulnerability has been fixed. Therefore, you should now:-
- Download a copy of your site, but keep it separate from your clean backups.
- Delete all files from your hosting package.
- Contact us so that we can confirm that all files have been removed and so that we can re-enable the site for you. This will also re-enable access to eXtend.
- Change any passwords relating to the site, including database, administration, FTP, and mailboxes
- Rebuild your site from the latest releases of your CMS, or upload a known clean backup and update all scripts to the latest releases. If your site is custom-built, you should review the HTTP logs and vulnerable source to identify the issue, and resolve it.
- Audit your site's security. Have you removed any installation files, checked directory permissions, removed any un-needed modules?
- Contact us to re-enable the site.
If you require any assistance, please ask - we can, for example, delete all file from your hosting package to avoid having to do this via FTP, and offer advice on security best practice to help keep your site secure in the future.
Best Wishes
Help in restoring the website back to original state without losing any files and members.
hey hire me, i can scan your script
just send me your script and i will fix it within 2 hrs.
hello,
i will scan all of the script and the database,
some malicious scripts not only injecting the script, but database too.
| Match | Count | SQL | Script |
| SELECT * FROM wanttobuy A, categories_wanttobuy B, seoclerks.members C WHERE A.wantid='9297' AND A.category=B.CATID AND A.USERID=C.USERID | 1 | SELECT A.*, B.name, B.seo, C.username, C.userlevel, C.footer_code, C.rating,
C.ratingcount, C.googleplus_profile, C.total_recommendations, C.USERID, C.profilepicture, C.average_response_time, C.lastlogin, C.addtime
FROM wanttobuy A, categories_wanttobuy B, seoclerks.members C
WHERE A.wantid='9297'
AND A.category=B.CATID AND A.USERID=C.USERID | /opt/clerks-staging/docroot/viewwant.php 163 () () |
| SELECT * FROM ratings_buyer WHERE USERID=88759 | 1 | SELECT sum(good) as thumbup, sum(bad) as thumbdown
FROM ratings_buyer WHERE USERID=88759 | /opt/clerks-staging/docroot/include/functions/main.php 19523 GetRatingsAsBuyerTotal() () |
| SELECT * FROM wanttobuy A, categories_wanttobuy B WHERE A.wantid != 9297 AND A.category=B.CATID AND A.active=1 AND (A.tags like '%Wordpress Errors Fix Problems Installation%' ) LIMIT 4 | 1 | SELECT A.wantid, A.title, A.p1, A.maxprice, B.name, B.seo
FROM wanttobuy A,
categories_wanttobuy B
WHERE A.wantid != 9297
AND A.category=B.CATID
AND A.active=1
AND (A.tags like '%Wordpress Errors Fix Problems Installation%' ) LIMIT 4 | /opt/clerks-staging/docroot/viewwant.php 551 () () |
| SELECT * FROM wanttobuy A, categories_wanttobuy B WHERE A.wantid != 9297 AND A.category=B.CATID AND A.active=1 AND A.USERID=88759 LIMIT 4 | 1 | SELECT A.wantid, A.title, A.p1, A.maxprice, B.name, B.seo
FROM wanttobuy A, categories_wanttobuy B
WHERE A.wantid != 9297
AND A.category=B.CATID
AND A.active=1
AND A.USERID=88759
LIMIT 4 | /opt/clerks-staging/docroot/viewwant.php 568 () () |
| SELECT * FROM wantcomments a, seoclerks.members b WHERE a.PID='9297' AND a.USERID=b.USERID and b.status='1' AND a.status=1 order by a.CID asc | 1 | SELECT a.comment, a.USERID, a.CID, a.time_added, a.istranslated, a.parentid, b.username, b.profilepicture
FROM wantcomments a, seoclerks.members b
WHERE a.PID='9297' AND a.USERID=b.USERID and b.status='1' AND a.status=1
order by a.CID asc | /opt/clerks-staging/docroot/viewwant.php 835 () () |
| UPDATE wanttobuy SET viewcount = viewcount + 1 WHERE wantid='9297' | 1 | UPDATE wanttobuy SET viewcount = viewcount + 1 WHERE wantid='9297' | /opt/clerks-staging/docroot/include/functions/main.php 1729 update_wantviewcount() () |
| SELECT * FROM wantbids as w, seoclerks.members AS m WHERE w.active=1 AND m.USERID=w.USERID AND m.status=1 AND w.USERID>0 AND w.wantid='9297' ORDER BY w.bidid ASC | 1 | SELECT w.bidid, w.PID, w.comment, w.title, w.pricepublic, w.USERID, w.adjustedprice, w.ip, m.profilepicture
FROM wantbids as w,
seoclerks.members AS m
WHERE w.active=1
AND m.USERID=w.USERID
AND m.status=1
AND w.USERID>0
AND w.wantid='9297'
ORDER BY w.bidid ASC
| /opt/clerks-staging/docroot/viewwant.php 1192 () () |
| SELECT * FROM seoclerks.members as m WHERE m.USERID=50837 | 1 | SELECT m.username, m.skills, m.userlevel, m.ip, m.total_recommendations
FROM seoclerks.members as m
WHERE m.USERID=50837 | /opt/clerks-staging/docroot/viewwant.php 1258 () () |
| SELECT * FROM seoclerks.members as m WHERE m.USERID=86613 | 1 | SELECT m.username, m.skills, m.userlevel, m.ip, m.total_recommendations
FROM seoclerks.members as m
WHERE m.USERID=86613 | /opt/clerks-staging/docroot/viewwant.php 1258 () () |
| SELECT * FROM seoclerks.members as m WHERE m.USERID=2040 | 1 | SELECT m.username, m.skills, m.userlevel, m.ip, m.total_recommendations
FROM seoclerks.members as m
WHERE m.USERID=2040 | /opt/clerks-staging/docroot/viewwant.php 1258 () () |
| SELECT * FROM categories_wanttobuy | 1 | SELECT * FROM categories_wanttobuy | /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() parseRedundantQueriesCache() |
| SELECT * FROM posts WHERE USERID=88759 | 1 | SELECT sum(positive_ratings) as thumbup,
sum(negative_ratings) as thumbdown
FROM posts
WHERE USERID=88759 | /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() GetBuyerRatingsTotal() |
| SELECT * FROM categories | 1 | SELECT * FROM categories | /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() parseRedundantQueriesCache() |
| select * from categories_software order by name asc | 1 | select * from categories_software order by name asc | /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_GetSoftwareCategories() |
| select * from categories_wanttobuy order by name asc | 1 | select * from categories_wanttobuy order by name asc | /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_wantcategories() |
| select * from categories_wanttotrade order by name asc | 1 | select * from categories_wanttotrade order by name asc | /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() insert_get_tradecategories() |
| SELECT * FROM seoclerks.members WHERE USERID='50837' | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='50837' | /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage() |
| SELECT * FROM seoclerks.members WHERE USERID='86613' | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='86613' | /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage() |
| SELECT * FROM seoclerks.members WHERE USERID='2040' | 1 | SELECT profilepicture FROM seoclerks.members WHERE USERID='2040' | /opt/clerks-staging/docroot/libraries/adodb5/adodb.inc.php 1899 CacheExecute() getUserProfileImage() |
| SELECT * FROM seoclerks.members WHERE USERID='88759' | 1 | SELECT profile_data FROM seoclerks.members WHERE USERID='88759' | /opt/clerks-staging/docroot/include/functions/main.php 1927 getUserBackground() include() |
| count(*) | sql1 | error_msg |
|---|
| Load | Count | SQL | Max | Min |
