So I was act to check out what was going on with a site that seems to be hit with some form of the Pharma SQL Injection Hack. The client says that this has been going on since Fall 11.
I would like to just start over from scratch but the site has tons of plugins (63 to be exact). I've updated all of them and would like to carry over the settings to a new install. Is this even possible?
I searched around the ftp and did not find any obvious traces of malicious files in the plugins folders, but I am concerned that copying over the updated plugins folder to a new install will bring the malicious code along with it.
Also, the webhost does not have a backup of their database since this happened so long ago.