Hi there!

Thank you for bringing this to our attention, and I sincerely apologize for the inconvenience caused.

To assist you more effectively, may I kindly request temporary administrative access to your site? This will allow me to thoroughly investigate and resolve the issue for you.

Before sharing the credentials, I strongly recommend taking a complete backup of your site to ensure all data remains secure.

Looking forward to your response.

Best regards

https://pvundwaerme.de/administrator/

I apologize for the inconvenience caused. Could you please check now and let me know if the issue is resolved on your end?

Looking forward to your response.

Best regards

yes it works, thank you

There is also a problem with malicious files appearing on the server, which are deleted and then come back.

I apologize for the inconvenience caused. Could you please check now and let me know if the issue is resolved on your end?

Looking forward to your response.

Best regards

I tried to delete the indicated file now, but it comes back after deletion? Is this normal?

We have the same problem on the website https://kunst-schmiede.pl/ Can this be checked?

Please check the hidden content area

ok sorry, I'm sending the login details again

ok

this is how the website works now. I also have a request regarding the website www.pvundwaerme.de Can you check these files on the server? They supposedly have a virus and when you try to remove them they come back and I don't know if they come back clean or with the virus.

/home/klient.dhosting.pl/havertra/pvundwaerme.de/pvundwaerme.de/libraries/system.php /home/klient.dhosting.pl/havertra/pvundwaerme.de/pvundwaerme.de/bin/cms.php /home/klient.dhosting.pl/havertra/pvundwaerme.de/pvundwaerme.de/modules/mod_menu/tmpl/menu.html /home/klient.dhosting.pl/havertra/pvundwaerme.de/pvundwaerme.de/images/banners/osmbanner3.png /home/klient.dhosting.pl/havertra/pvundwaerme.de/pvundwaerme.de/media/system/images/indent9.png /home/klient.dhosting.pl/havertra/pvundwaerme.de/pvundwaerme.de/options.php /home/klient.dhosting.pl/havertra/pvundwaerme.de/pvundwaerme.de/plugins/content/joomla/content.php /home/klient.dhosting.pl/havertra/pvundwaerme.de/pvundwaerme.de/templates/system/images/j_button2_center.png /home/klient.dhosting.pl/havertra/pvundwaerme.de/pvundwaerme.de/templates/system/online.php

I apologize for the inconvenience caused. Could you please check now and let me know if the issue is resolved on your end?

Looking forward to your response.

Best regards

I hope so, files come back after deletion and I don't know if this is how it's supposed to be. maybe so. Thank you

with https://www.motowiwa.pl/ and https://atom-guben.de/ there is the same problem

https://atom-guben.de/administraotr/

and https://www.issima-instytut.eu/

https://www.issima-instytut.eu/administrator/

and https://atom-gubin.pl/administrator/

could you please confirm is your www.pvundwaerme.de issue solved?

yes, but I have a problem with six other pages

Please check www.artstal.de and let me know if the issue solved?

yes, the site www.artstal.de is working at the moment. What about the rest?

Ok, thank you very much

Could you please share www.motowiwa.pl server access?

ok

Please check atom-gubin.pl/

I think atom-gubin.pl it's ok

Please check www.motowiwa.pl/

www.motowiwa.pl It's ok

Please check atom-guben.de

atom-guben.de It's ok

and here is the server access for the website www.pvundwaerme.de there is still a problem because Google shows different descriptions than we have. I'm sending image https://www.pvundwaerme.de/images/g1.png

and yesterday these two pages were not checked. Could you please check them?

User accounts on the issima website have been deleted, the pages seem to be working fine.

Can I ask another question about the https://www.pvundwaerme.de/images/g1.png

please check again

Could you please look at this page?

I kindly ask you to check this page https://ecokatrina.de/ and https://ecokatrina.pl/ there is the same problem.

the website https://ecokatrina.pl/ the correct page is not displayed, there is another Turkish website and https://ecokatrina.de/ is ok

What is the currect page for ecokatrina.pl/

looks the same as the website https://ecokatrina.de/ only in Polish

on the website https://ecokatrina.pl/ in SP Page Builder all Pages have disappeared. When I want to create a new page, I get an error: Request failed with status code 500.

In the morning I made a copy of the website files via FTP and the website was working, but it didn't work SP Page Builder and now the website is not working again. on the https://ecokatrina.pl/ server I can make a copy only via FTP and only from the last 3 days

server access:

and FTP

ok

Please check now.

the website works but it's not the same website, there is a German website on the Polish website. There are two folders on the ftp: ecokatrina.pl and ecokatrina.de. There is also a folder called ecokatrina.pl under the website www.ecokatrina.pl.

Could you please share the backup you said you restore earlier?

located on ftp backup/web/current/ecokatrina_pl

Please check now

Is this how it works or will it be ok now?