| Question: |
Good afternoon. Tell me, please, why does not my site pravlib.ru and hosting his files to get not get? |
| Answer: |
Hello. your server received a complaint in spamming now check it for viruses. On 26 Mar, 04:52, [email protected] wrote:
> backdoor Listing created for 136.243.158.19 [Evidence ID: 405785160]
>
> Quick links:
>
> DB Lookup: http://www.sorbs.net/lookup.shtml?136.243.158.19
> Entry Summary:
http://www.sorbs.net/cgi-bin/db?button=Check%20Entry&Entry=136.243.158.19
> Entry Detail:
http://www.sorbs.net/cgi-bin/db?IP=136.243.158.19&view=Detail&type=Virus&button=Show%20Detail%20for&max=102&offset=0
> Header Detail (if you have permission):
http://www.sorbs.net/cgi-bin/db?IP=136.243.158.19&view=Headers&type=Virus&button=Show%20Headers&HOSTNET=n&ID=405785160
> Entry Manage (Support):
http://www.sorbs.net/cgi-bin/support?IP=136.243.158.19&type=Virus&blocked=yes&other=&HOSTNET=n&OS=&skill=&stage=3&databutton-Virus-136.243.158.19/32-n=Manage%20Entry
>
>
>
> Feedback-Type: abuse
> Version: 1
> Source-IP: 136.243.158.19
> Feedback-Agent: Automated Email reports SORBS (SORBS::Tools::ARF V2014.1.7.12.31.37)
> Received-Date: Fri, 24 Mar 2017 23:27:56 +0000
>
>
> backdoor Listing created for 136.243.158.19
> the type of Virus detected: JS:Trojan.JS.Agent.SV
>
> You do not have permission to see the headers or body of the message in an Email! |
| Answer: |
reports in the folder var/www/ |
| Question: |
But to the server via, for example, the frigate, I can not get to see and clean the viruses... |
| Answer: |
why not? describe read more |
| Question: |
I wrote something: Connected. Connected. Connected. USER 1politica 220 ProFTPD 1.3.4 a Server (Debian) [::ffff:136.243.158.19] 220 ProFTPD 1.3.4 a Server (Debian) [::ffff:136.243.158.19] TYPE I 331 Password required for 1politica 331 Password required for 1politica SYST 200 Type set to I TYPE A 215 UNIX Type: L8 215 UNIX Type: L8 PASV 200 Type set to A 200 Type set to A |
| Answer: |
You enter the panel with these data? |
| Question: |
Well through a browser with the data stored in the file Manager consists of, but through falsely or frigate does not work |
| Answer: |
change the password and then try with him |
| Question: |
I tried for one of the users - did not help |
| Answer: |
What details you specify in Filezila? |
| Question: |
For example, volgacar.ru host 136.243.158.19, login volgacar, password aquakfy84 |
| Answer: |
Try reset parallle this user. |
| Question: |
Set new password to 123456, so I filled in fissile http://prntscr.com/eq0iha - not included |
| Question: |
Set new password to 123456, so I filled in fissile http://prntscr.com/eq0iha - not included |
| Answer: |
Try just using a quick connection |
| Answer: |
details: host 136.243.158.19, volgacar username, password 123456 the Entrance is in FileZila. Verify your IP. |
| Question: |
I`m sorry, can I asked you to make a restriction on the ip. I have changed my ip 91.231.229.49 |
| Answer: |
restrictions on the ip, no parola 123456 should not be!!! |
| Question: |
I put it just to simply check |
| Question: |
Changed to normal aquakfy84 - can`t connect |
| Answer: |
where you can`t log in? |
| Question: |
I can`t go in through filezilla and frigat none of the accounts server, for example, 136.243.158.19/www/pravlib.EN pravlib username and password aquakfy84 and other... |
| Answer: |
what error do you see? give log of connection |
| Question: |
Cheers, let. Don`t know what you changed, but finally allowed ) Thank you |
| Answer: |
ok
|
| Question: |
New problem, when I try just using the browser to visit the site pravlib.ru, just downloaded the file, and not open the page |
| Answer: |
we open a website pravlib.ru and no file is downloaded |
| Question: |
C mozily is also opened, and with chrome not opening |
| Answer: |
clear the cache |
| Question: |
did not help |
| Answer: |
the problem is in your browser, in all browsers, the site offers the same |
| Question: |
OK thanks, I will understand |
| Answer: |
ok
|
| Question: |
The problem is not resolved. In Opera the same website pravlib.ru doesn`t open. The inside pages give a 404 error. And again I can not go through the frigate |
| Question: |
Another problem with the connection to the database at the sites on the server... http://prntscr.com/eqpubd |
| Answer: |
please wait. |
| Question: |
And I`m still waiting... |
| Answer: |
Specify the name of the database |
| Question: |
It`s not working |
| Question: |
All database user galany4_galany4 |
| Answer: |
please wait. |
| Answer: |
changed the settings in a couple of hours amps. check to see should all work. |
| Question: |
And most importantly, how it all began - the viruses. One of the sites (1politica.com) on wordpress is completely contaminated by the virus, I deleted it. Perhaps you have a backup from two weeks ago is clean without virus? |
| Answer: |
No such backup we have, we don`t keep such old backups. |
| Question: |
A week ? |
| Answer: |
Specify the path to the folder that should be restored, we will check backup. |
| Question: |
/var/www/1politica/data/www/1politica.com |
| Answer: |
please Wait. |
| Answer: |
available is the following: admin-2_full-2017-03-19.tar.gz admin-2_full-2017-03-30.tar.gz admin-2_full-2017-03-31.tar.gz |
| Question: |
Let`s see in 19, the main thing that there were no viruses |
| Answer: |
the viruses you have skoreevsego a long time, we do not know if there is a virus |
| Question: |
then I have to pump and check... |
| Answer: |
download it on a dedicated ftp server address сервера138.201.226.208 username and password for your account |
| Question: |
Infected backup... Well, okay, will do from scratch and the files and all the modules I used to just access through file managers... I still can`t go through falsely, and without it I can`t even imagine how to work with files (not using the same browser) |
| Answer: |
To connect using filezilla, use IP: 136.243.158.19 log: galany4 pas: aquakfy84 |
| Question: |
Now with these details I can`t go... |
| Question: |
Something has changed. Go found )) |
| Answer: |
ok
|
| Question: |
Good afternoon. Again work sites. Again some kind of virus? |
| Answer: |
what kind Of sites are we talking? |
| Question: |
About all on the server: volgacar.ru, pravlib.ru and so on |
| Answer: |
please Wait. |
| Answer: |
please Check now.
|
