Solutions for your inquiries

  hosting
<< Back       Hacked?

Question: Hello. There were some strange folders in root and in folders of websites...like Pee0406, ekafj28...
Answer:

Hello. we sent you a notice about hacking and spamming from Your account. Yes , it`s hacking content

Here is the fact that you have already removed antivirus

/home/odin/public_html/ivfilarmonia.ru/wp-content/data.php: PHP.Shell-42 FOUND
/home/odin/public_html/backup/language/kunena.php: PHP.Shell-84 FOUND
/home/odin/public_html/plugins/user/EUCookieDirectiveLite.php: PHP.Shell-84 FOUND
/home/odin/public_html/vasilisa/wp-admin/class.wp-styles.php: PHP.Shell-84 FOUND
/home/odin/public_html/muzey-cvetaevyh.ru/language/banners.php: PHP.Shell-84 FOUND
/home/odin/public_html/muzey-cvetaevyh.ru/language/simplepie.php: Win.Trojan.Shell-68 FOUND

this means that your sites are completely under the control of a hacker.

now Your website is additionally scanned by antivirus. You will be given a report

Question: and where it was sent, not received..
Question: what to do??
Question: I have on all sites is almost the limit ip Soit..
Answer:

sent on [email protected]

wait for the report.

Question: OK
Question: Do not prompt ,what percentage already scanned ?
Answer:

http://step37.ru/AI-BOLIT-REPORT-__-55884-12-04-2016_18-48.html

criticisms
Vulnerabilities in scripts (10)
/home/odin/public_html/stepold/wp-content/themes/Avenue/timthumb.php - RCE : TIMTHUMB CVE-2011-4106,CVE-2014-4663
/home/odin/public_html/stepnew/libraries/joomla/session/session.php - RCE : https://docs.joomla.org/Security_hotfixes_for_Joomla_EOL_versions
/home/odin/public_html/stepnew/backup/libraries/joomla/session/session.php - RCE : https://docs.joomla.org/Security_hotfixes_for_Joomla_EOL_versions
/home/odin/public_html/libraries/joomla/session/session.php - RCE : https://docs.joomla.org/Security_hotfixes_for_Joomla_EOL_versions
/home/odin/public_html/backup/libraries/joomla/session/session.php - RCE : https://docs.joomla.org/Security_hotfixes_for_Joomla_EOL_versions
/home/odin/public_html/wp-content_old1/themes/Avenue/timthumb.php - RCE : TIMTHUMB : CVE-2011-4106,CVE-2014-4663
/home/odin/public_html/omegatex/drupal-7.31/includes/database/database.inc - SQLI : DRUPAL : CVE-2014-3704
/home/odin/public_html/muzey-cvetaevyh.ru/libraries/joomla/session/session.php - RCE : https://docs.joomla.org/Security_hotfixes_for_Joomla_EOL_versions
/home/odin/public_html/muzey-cvetaevyh.ru/administrator/components/com_rsform/helpers/rsform.php - RCE : RSFORM : rsform.php LINE 1605
/home/odin/public_html/vasilisa/wp-content/plugins/cherry-plugin/admin/import-export/upload.php - NI : Cherry Plugin

Question: what would you recommend?
Answer:

advise to contact the experts on this, vopro

https://revisium.com/ru/order

Question: Thank you!
Answer:

Thank you, that appealed to customer support.


<< Back