Jump to content

Prestashop core files reset after attack - Dynamic Files in PrestaShop


Recommended Posts

Hello everyone,

Our team is facing difficult time, after an attack to our e-shop we tried various in-house cleaning solutions unfortunately non have worked so far, our last resort now is to migrate / swap core Prestashop files ( clean ) from fresh installation to our e-shop implementation while preserving dynamic files such as:

  • /img
  • /modules
  • /translations etc.

In short: the idea here is to keep on using same database ( preserving orders, products, etc ) while factory resetting all core files except dynamically generated ones.

My question is:

  • if someone have faced exactly the same or similar situation and knows a tool or alternative conceptual approach that would ease up this problem?

Any help will be appreciated, thanks!

Link to comment
Share on other sites

Hi sorry this happened to you, they obusificate the code that adds...

the best do it yourself approach is to consider 'install fresh' prestashop and use  migrator to bring over catalog.  this requires re-installing and configuring modules and theme, there are many other public facing folders and files you did not replace...when new shop ready, you can resync migrator, back up production, delete all  domain files and migrate your new shop files into domain.

change ftp passwords

remove 'free' or other untrusted modules...ps allows people to post free modules that are not validated by ps software...been bad idea since day 1....

if you hosting control panel is plesk, this can find some/most file virus...we recommend plesk over  cpanel for years...

https://www.plesk.com/extensions/imunify360/

 

you can also contact a ps agency...to find the core hack....and fix...

we offer a module, that detects file changes and provides alerts/reports...but note it does not do virus scan, use imunivy

https://prestaheroes.com/products/prestavault-malware-trojan-virus-protection?variant=40653346603215

 

 

  • Like 1
Link to comment
Share on other sites

On 3/10/2025 at 12:23 PM, Kornelijus said:
  • if someone have faced exactly the same or similar situation and knows a tool or alternative conceptual approach that would ease up this problem?

 

Check for hosting and see if they provide Virus/malware scan services. That will be the best solution. 

 

  • Confused 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...