Hello,
after the attack I followed the instructions, but I had a backup from day 21 which was already slightly infected.
I have updated the MODX version to 2.6.5-pl and deleted files manually, the files are not enabled, but somehow they are called and the console has an error message. I searched the whole system, I can not find a record and according to information from the Internet, the blob prefix is generated from JavaScript, I searched the Java Total Commander files, I found nothing, I am asking for help.
