I got hacked and recovered, but now I can't enter file manager

Support and Discussion
,
1

Update: after updating to the new patched cp, it’s solved.

On the night of the weekend I found out all my sites either ran like snails or couldn’t access due to “server busy”.
Cyberpanel access is denied, ssh access is also denied.
I’m not a tech person and the server documentary told me to use VCN or something but it’s beyond my ability.

I found some previous discussion and suspect it’s a crypto mining malware.

So I restarted the server then I gained a very short time to access normally, with the help of chatgpt I found the malicious process and killed it.

But now when I try to access the file manager, it still has the malware behavior: red warning message boxes keep flying out non-stop:
“type object ‘ProcessUtilities’ has no attribute 'outputExcutionerooooooooooooooooooooooo”
(God knows how many Os are there…)

error
error1816×788 99.6 KB

and it keep flying out in high speed, if not for the screenshot I can’t even see what’s written.

Anyone know how to solve this issue?
Thanks!!

2

Can this problem be solved by upgrading to 2.3.8?
I upgraded and the situation seems to be the same.

Version:2.3.6

3

It was a long story, after upgrading it was OK then the next day all the sites went 503.
Following the official remove malware and upgrade instruction it seemed fine but some malware was still there.
After two weeks, finally, I think everything got back to normal.
PS. System snapshot is very important.

4

Are there any relevant documents that I can refer to?

5

Check this post:

6

Thanks for your help
After updating the version to 2.3.8 via SSH, the problem is solved

1 Like
7

This topic was automatically closed 3 hours after the last reply. New replies are no longer allowed.