What would you do as first thing if your website was hacked? Taking the site from net? or rollback a backup? not realy or? Did you made any experiences in this way?
That depends on several factors. This includes things such as the sensitivity of your site's data and cost of losing or corrupting data hosted on your site.
I believe the first thing to do is to assess the level of threat in terms of the level of damage and cost to repair. The next thing to do is act accordingly.
- Understand that your web host understands how important your site is.
- Wipe the OS and re-install from backups. Don't ask your host to have a "quick look" to see if they can clean it up (this will prolong the downtime.)
- Learn from the experience (as it's almost guaranteed you do not have everything 100% backed up and a disaster recovery plan written)