Product Root Location

[Za42]

Hello there,

Joomla v3.5.1 Virtuemart v3.0.16

I was recently hacked and have restored from a backup.

However, quite a few products were uploaded between the hack and the restore. The product images is easy to find, but where is the product info located?

Once again, thanks for all and any help!

[jenkinhill]

In the database.

BUT how do you know that the backup copy does not contain the back door that the hacker used? Often an actual hack changing the site takes place some weeks or months after the bakdoor was created.

This is how I resore hacked sites:  http://forum.virtuemart.net/index.php?topic=133102.msg461082#msg461082

[Za42]

Hello Kelvyn,

As always, thanks for your help.

I restored to a backup taken in December -6 months prior, and have left it a few days to see what else comes. I was initially alerted by google that there was injected content in Mid April. All my initial restores resulted with random Zip files being placed in my root directory within 24 hours, which were then unpacked and created directores & URLs of their own.

So far, touch wood, there have been no further files placed in. I've also updated everything, changed all passwords possible, and installed some firewall / virus software, as well as a file change monitor. Would be nice to get the work back that I've lost though, so will try restoring the database and wait to see what comes... Hopefully nothing...

[GJC Web Design]

If you are sure your vm tables are clean then it is just a case of replacing the virtuemart category and product tables -- thats all them mentioning cat or prod
plus the media one  ..
keep backups, be methodical and it should be doable