Hello there,My support page is infected with malicious code. Most of the index.php file are injected with the malicious code. Is it okay if I reupload all my original files? Will my open and answered ticket won't get affected with it? Please help. Thanks,Chris

All of your ticket data is stored in the database so the short answer is yes it is okay to reupload the original files.You can actually have multiple install folders that run off the same database. So what I would do personally -- rather than overwritting the files -- is rename the folder.Assuming your osTicket is in a folder called /support, you can rename it to /support-old.Then you can upload your original files into a folder called /support.You can then delete the /support-old folder when the smoke has cleared.--That's the short answer, and hopefully that is all you have to worry about. I design and host websites and so I've seen a few WordPress sites that have been infected with malware. Sometimes the malware is simply extra code that is injected into the (HTML, PHP, etc) files. But other times the malware has also managed to add entries into the database. I'm hoping this is not the case. It's just something to consider. If you upload your "clean" files and discover you still have something foul going on you'll know why.---I've never seen or heard of malware infecting an osTicket installation. I'd be keen to have a look. Please send me a PM with the URL to your old install files (e.g. www.yourdomain.com/support-old).

    Hi Stevland, Thank you so much for your answer. That is all I want to know. I'm just afraid my ticket will be wash out once i overwrite it. I will try your suggestion and PM you with my old support url. Thanks,Chris

    4 years later

    stevland How about the configuration files? Like the custom logo? I am pretty sure the image file was saved somewhere in the folder.

      borgy

      Please don’t cross post on multiple threads. Make a comment on a recent thread or start your own.

      Cheers.

      Write a Reply...