FiveM Malware Cleanup and/or Rebuild

My current FiveM Windows host has been hit by a cipher-style infection. I will hand you full Remote Desktop access so you can dive straight into the file system, resources folder and SQL database.

First choice: completely eradicate every malicious script, backdoor or encrypted “cipher” file while keeping the server online and stable. Should any core resource be beyond rescue, roll it back from the backup I took earlier this week.

Fallback plan: if the infection proves too deep, spin up a fresh instance and rebuild it to mirror today’s live environment—maps, cars, databases, permissions, the lot—using that same backup as the baseline. I don’t have a clean list of must-keep plugins, so you’ll need to compare backup vs live and copy across only legitimate resources.

When you are done I expect:
• Server boots with no cipher processes or suspicious outbound traffic
• Essential resources load without errors in the console
• Players can join, spawn and use commands normally for at least one hour of testing

Ideal skill set includes solid FiveM resource structure knowledge, Windows server hardening, and malware forensics. If you can script quick sanity checks in Lua or batch/PowerShell to automate future scans, that’s a bonus I’ll happily tip for.