RECOVERY FILE / 010RECOVERED

Server Restored to a Pre-Attack State

After a compromise, the whole hosting server was restored to its state from before the attack. Mailbox passwords were reset, and because nothing was maintaining the server, a maintenance plan covering updates, cleanup and malware scans was recommended.

SYMPTOMS

The business website was found compromised and behaved abnormally.

FINDINGS

The compromise affected the whole hosting server, not just one site. Nobody was maintaining it: no security updates, no removal of unused scripts and no malware scans.

RECOVERY ACTION

The entire server was restored to a point before the compromise. The business was given control-panel access and a short walkthrough to reset all mailbox passwords. A one-off cleanup and update session, then an ongoing maintenance plan with malware scans, updates and general server housekeeping, were recommended.

VERIFICATION

The restored sites were tested and confirmed working.

Anonymised historical recovery completed by the team behind Dr Web. Scope and findings vary by website.

Get My Website Checked