StevenTing

Bill/TCH, can anyone verify why access is denied currently? Is this something initiated by TCH or a symptom of the hack. Can't even log into the R1 Backup service.

Okay, at first glance, things look fixed. The first page looks good but when you click any link, everything else is broken after that. I can't get into cpanel so not much I can do right now.

Another site is broken. www.CrusaderWeaponry.com

ONe of my sites wasn't cleaned properly. www.VacationPointExchange.com Seems like files were removed but haven't been restored yet.

Can other's log into their sites and the WHM console?

Happened to one of my sites too but it was just fixed. Another symptom,I cannot long into cpanel for any of my sites. Not sure if this is TCH related or hack related. I'll worry about it in a couple of hours.

I look forward to the report. On a side note I say go back to the dew and drop the marlboro's. It'll be better for all of us.

Bill should have a Mt. Dew Throwback. It's even better.

I should also mention that a full restore does not affect your database so you don't have anything to lose.

Full restore works pretty well. However it does not remove additional files that were added. It will overwrite existing files which fixes a majority of problems. For example the front page extension folders didn't originally have index.php files but were newly creates. The restore didn't remove those but the script from TCH may have removed those.

I would check a couple folders deep. If you use frontage extensions it also copied files in there. I never found anything more than 2 folders deep.

Make sure you select the Cpanel login from the drop down and enter your server name as well. It should work.

I should also say, you can get to the Restore feature directly from Cpanel. It's called R1Soft Restore Backups under the Files section.

Log into Cpanel. On the left side, it says Expand Stats. Click that, and you will see a section called Server Name.

Looks like my sites are fixed.