06-15-2015, 11:06 PM
M A V I C wrote:
I'm not sure why you think the PHP install has been compromised. It's probably just scripts that are installed. Most shared hosts don't even give users the ability to mess modules.
Either way, unless you're a pro you're not going to be sure that you've pulled all of the malicious PHP scripts and scrubbed your SQL DB well enough to say for sure that they aren't compromised so it's probably best to start with a clean slate on a new server.