Virus has attacked my phpvms

[Sasha]

It all began when I recieved an email from google saying they have blocked my domain from their browsers and search engines. They said it was since a virus was being spread through the site. I later spoke to my domain host who told me which the infected files were and said I have to delete a certain part of the script from each and every one of these files.

The entire list is:

SpryAccordion.js SpryCollapsiblePanel.js TEST3.html about2.html contact.html downloads.html fleet2.html flights2.html joinnew.html new.html oldindex.html oldschedules.html phpvms/admin/index.php phpvms/admin/lib/phpvmsadmin.js phpvms/admin/templates/awards_allawards.tpl phpvms/admin/templates/awards_awardform.tpl phpvms/admin/templates/core_about.tpl phpvms/admin/templates/core_error.tpl phpvms/admin/templates/core_navigation.tpl phpvms/admin/templates/core_success.tpl phpvms/admin/templates/dashboard.tpl phpvms/admin/templates/diff_showdiff.tpl phpvms/admin/templates/downloads_overview.tpl phpvms/admin/templates/export_form.tpl phpvms/admin/templates/finance_balancesheet.tpl phpvms/admin/templates/finance_expenselist.tpl phpvms/admin/templates/finance_header.tpl phpvms/admin/templates/finance_summarysheet.tpl phpvms/admin/templates/groups_groupform.tpl phpvms/admin/templates/groups_grouplist.tpl phpvms/admin/templates/import_form.tpl phpvms/admin/templates/logs_index.tpl phpvms/admin/templates/mailer_form.tpl phpvms/admin/templates/maintenance_changepilotid.tpl phpvms/admin/templates/maintenance_options.tpl phpvms/admin/templates/news_additem.tpl phpvms/admin/templates/news_list.tpl phpvms/admin/templates/ops_aircraftform.tpl phpvms/admin/templates/ops_aircraftlist.tpl phpvms/admin/templates/ops_airlineslist.tpl phpvms/admin/templates/ops_airportform.tpl phpvms/admin/templates/ops_airportlist.tpl phpvms/admin/templates/ops_fastscheduleform.tpl phpvms/admin/templates/ops_scheduleform.tpl phpvms/admin/templates/ops_schedules.tpl phpvms/admin/templates/pages_allpages.tpl phpvms/admin/templates/pages_editpage.tpl phpvms/admin/templates/pilots_awards.tpl phpvms/admin/templates/pilots_details.tpl phpvms/admin/templates/pilots_detailtabs.tpl phpvms/admin/templates/pilots_groups.tpl phpvms/admin/templates/pilots_list.tpl phpvms/admin/templates/pilots_options.tpl phpvms/admin/templates/pilots_pending.tpl phpvms/admin/templates/pilots_viewallbids.tpl phpvms/admin/templates/pirep_addcomment.tpl phpvms/admin/templates/pirep_edit.tpl phpvms/admin/templates/pirep_log.tpl phpvms/admin/templates/pirep_reject.tpl phpvms/admin/templates/pireps_comments.tpl phpvms/admin/templates/pireps_filter.tpl phpvms/admin/templates/pireps_list.tpl phpvms/admin/templates/ranks_allranks.tpl phpvms/admin/templates/ranks_rankform.tpl phpvms/admin/templates/reports_aircraft.tpl phpvms/admin/templates/reports_main.tpl phpvms/admin/templates/route_map.tpl phpvms/admin/templates/settings_addcustomfield.tpl phpvms/admin/templates/settings_addpirepfield.tpl phpvms/admin/templates/settings_addsetting.tpl phpvms/admin/templates/settings_customfieldsform.tpl phpvms/admin/templates/settings_mainform.tpl phpvms/admin/templates/settings_pirepfieldsform.tpl phpvms/admin/templates/sidebar_addpage.tpl phpvms/admin/templates/sidebar_aircraft.tpl phpvms/admin/templates/sidebar_airlines.tpl phpvms/admin/templates/sidebar_airports.tpl phpvms/admin/templates/sidebar_awards.tpl phpvms/admin/templates/sidebar_customfields.tpl phpvms/admin/templates/sidebar_dashboard.tpl phpvms/admin/templates/sidebar_downloads.tpl phpvms/admin/templates/sidebar_editschedule.tpl phpvms/admin/templates/sidebar_expenses.tpl phpvms/admin/templates/sidebar_financial.tpl phpvms/admin/templates/sidebar_groups.tpl phpvms/admin/templates/sidebar_import.tpl phpvms/admin/templates/sidebar_mailer.tpl phpvms/admin/templates/sidebar_news.tpl phpvms/admin/templates/sidebar_pages.tpl phpvms/admin/templates/sidebar_pending.tpl phpvms/admin/templates/sidebar_pilots.tpl phpvms/admin/templates/sidebar_pirep_pending.tpl phpvms/admin/templates/sidebar_pirepfields.tpl phpvms/admin/templates/sidebar_ranks.tpl phpvms/admin/templates/sidebar_reports.tpl phpvms/admin/templates/sidebar_schedules.tpl phpvms/admin/templates/sidebar_settings.tpl phpvms/admin/templates/vacentral_index.tpl phpvms/changelog.htm phpvms/core/pages/aboutus.htm phpvms/core/pages/contact.htm phpvms/core/pages/rules.htm phpvms/core/templates/acarsmap.tpl phpvms/core/templates/contact_form.tpl phpvms/core/templates/core_navigation.tpl phpvms/core/templates/download_item.tpl phpvms/core/templates/downloads_list.tpl phpvms/core/templates/finance_balancesheet.tpl phpvms/core/templates/finance_header.tpl phpvms/core/templates/finance_summarysheet.tpl phpvms/core/templates/flown_routes_map.tpl phpvms/core/templates/frontpage_main.tpl phpvms/core/templates/frontpage_recentbids.tpl phpvms/core/templates/frontpage_recentpilots.tpl phpvms/core/templates/frontpage_reports.tpl phpvms/core/templates/fsfk_log_flightcritique.tpl phpvms/core/templates/fsfk_log_flightdata.tpl phpvms/core/templates/fsfk_log_flightimages.tpl phpvms/core/templates/fsfk_log_flightplan.tpl phpvms/core/templates/login_complete.tpl phpvms/core/templates/login_forgotpassword.tpl phpvms/core/templates/login_form.tpl phpvms/core/templates/login_notfound.tpl phpvms/core/templates/login_rejected.tpl phpvms/core/templates/login_unconfirmed.tpl phpvms/core/templates/news_newsitem.tpl phpvms/core/templates/pages_items.tpl phpvms/core/templates/pilot_public_profile.tpl phpvms/core/templates/pilots_list.tpl phpvms/core/templates/pirep_editform.tpl phpvms/core/templates/pirep_new.tpl phpvms/core/templates/pirep_viewreport.tpl phpvms/core/templates/pireps_viewall.tpl phpvms/core/templates/profile_badge.tpl phpvms/core/templates/profile_edit.tpl phpvms/core/templates/profile_main.tpl phpvms/core/templates/profile_stats.tpl phpvms/core/templates/registration_autoconfirm.tpl phpvms/core/templates/registration_mainform.tpl phpvms/core/templates/registration_sentconfirmation.tpl phpvms/core/templates/reqlogin.tpl phpvms/core/templates/route_map.tpl phpvms/core/templates/schedule_bids.tpl phpvms/core/templates/schedule_boarding_pass.tpl phpvms/core/templates/schedule_briefing.tpl phpvms/core/templates/schedule_details.tpl phpvms/core/templates/schedule_list.tpl phpvms/core/templates/schedule_results.tpl phpvms/core/templates/schedule_searchform.tpl phpvms/index.php phpvms/lib/js/acarsmap.js phpvms/lib/js/jqModal.js phpvms/lib/js/jquery-admin.js phpvms/lib/js/jquery-calendar.js phpvms/lib/js/jquery-front.js phpvms/lib/js/jquery.bigiframe.js phpvms/lib/js/jquery.colorbox-min.js phpvms/lib/js/jquery.colorbox.js phpvms/lib/js/jquery.form.js phpvms/lib/js/jquery.metadata.js phpvms/lib/js/jquery.pstrength.js phpvms/lib/js/jquery.tablesorter.pack.js phpvms/lib/js/jquery.tablesorter.pager.js phpvms/lib/js/jquery_essentials.js phpvms/lib/js/phpvms.js pilotroster.html pilotroster1.html schedules.html spry_test.html summerarn2.html summergot.html summerosl.html summerschedules.html

(Note that some of these files are old ordinary html form the old site which no longer is in use)

Now I really dont know what the best is to do. I am not at all used to handle these types of codes/scripts and therefore I know it will be a very long and complicated process of going through it all.

I wonder what the best will be to do, It may perhaps be easier to make a new site from scratch, but is there a way of saving all data and implementing it in the new site?

I am very grateful for any kind of help!!

best regards,

Sasha (Managing director - Novair Virtual)

[Parkho]

Back up your tables and re-install phpvms. then replace your tables and you'll get pretty much everything as far as the records then it's just the skin you'll need to worry about. Also, if you already don't have a full back up of your website then do yourself a favor and make one after re-installation.

Cheers

[mark1million]

By looking at that list your skins folder is untouched, download a complete copy of your site to your desktop then delete everything from your home folder on the server, thats providing you have phpvms only in there.

Download a new version of phpvms and upload to your server.

Now go to your desktop where your old site is and check all the files in your active skin folder that they are clean, once satisfied upload them to your site, check also the local.config.php file and when your in there change your database password and save, then upload that to your core and you should be back to normal.

If you have modified the other scripts you will need to re modify them again to your needs but basically thats the easiest thing to do.

[Sasha]

Ok thank you guys, I shall try it!

[Sasha]

By looking at that list your skins folder is untouched, download a complete copy of your site to your desktop then delete everything from your home folder on the server, thats providing you have phpvms only in there.

Download a new version of phpvms and upload to your server.

Now go to your desktop where your old site is and check all the files in your active skin folder that they are clean, once satisfied upload them to your site, check also the local.config.php file and when your in there change your database password and save, then upload that to your core and you should be back to normal.

If you have modified the other scripts you will need to re modify them again to your needs but basically thats the easiest thing to do.

By doing this, will the pilot roster and flight list disappear?

[mark1million]

The flights and pilots will remain as your using the same database if that's what you mean.

There will be no need for your members to rejoin, all their data will still be there.