Site Files Missing, Quarantined Site

This article explains how to address quarantined site files.  Dealing with quarantined site files due to malware is a crucial aspect of maintaining a secure and healthy website.  If site files are quarantined the website will not be visible and it will appear that the site files are missing from the server.  An email may have been received from our Systems team indicating that the site was hacked.  The steps below explain how to address site files that are quarantined and the location of the files.  

Troubleshooting

1. The files will need to be checked by a security expert before putting the site files back into production
2. If reinstalling infected files without cleaning them first, the hosting account may be suspended
   TIP: If the quarantined site is a WordPress site, outdated plugins, themes, or core files are often the cause of a hack.  iThemes weekly posts a list of recent plugin vulnerabilities and fixes.
3. All passwords including AMP, FTP, cPanel, and any site administrative passwords should be updated.
   TIP: Review the article on Recovering After a Hack for additional advice on securing hacked sites.
4. Quarantined files are located at /home/userna5/quarantine
   REPLACE: Replace userna5 with the cPanel username.
   1. These files are typically inaccessible once quarantined, except by the root user
   2. Reach out to Support to have access to these files restored