deleted website files!

[czeaiter54]

my account was recently un-suspended. But now all my website file are gone ! ... how can i get these back!?

 

[Livewire]

There's no hosting account linked to this username; that said, I was able to identify the account by email.

Look in your home directory for a public_html_compromised folder - yours was suspended due to the installed software having been compromised, so we would have erased the infected files and moved everything else to public_html_compromised so the site didn't go live and get immediately re-exploited. We do this because we can't lift a suspension on a compromised account twice.

Be advised, if at all possible I would strongly recommend abandoning those files and starting fresh - there's no guarantee that -all- the infected files were removed, although I did erase the two I was able to confirm beyond reasonable doubt were compromised.

 

[czeaiter54]

thank you.

what were the names of the deleted files ?

 

[Livewire]

I believe they were the contents of the mod_bing module inside the modules folder; they weren't actually plugins/modules at all, and were uploaded just prior to the compromise being detected.