Dear Khun Nararat
1. httpdocsUploadsCoversMails.aspx
2. httpdocsUploadsImages300714202254.jpg
3. httpdocsUploadsCoversspot.php
4. httpdocsUploadsCoversMails.aspx
5. httpdocsUploadsCoversspot.php
6. httpdocsUploadsImages300714202254.jpg
File number 1 and number 4 are same file, file nuber 2 and number 6 are same file, file number 3 and number 5 are same file.
So I found 4 files had infected.
1. httpdocsUploadsCoversMails.aspx
2. httpdocsUploadsImages300714202254.jpg
3. httpdocsUploadsCoversspot.php
4. httpdocsUploadsCoversw.php
Can I remove file w.php in folder httpdocsUploadsCovers also ?
And I want to inform your about new web server for test.
Domain:nachi.cathosting.in.th
control panel:
url: https://122.155.15.77:8443
username: usr00001618
password: catidc@1618
ftp host: 122.155.15.77
ftp port: 21
username: usr00001618
password: catidc@1618
After you upload all files to new web server already, And the website can work properly.
If you want to switch your website from old server to new server, Please let me know.
After process complete, I will sent E-mail to you again.