| Question: |
Good day!It seems my account was hacked today. In file Manager, found that in 1-30 nights have changed some files (date changes), access to all the passwords I have.Also the admin with this email:Subject \"account Details for Guide accurate selection of school chair for use in car in car hire with driver in Moscow, order a car, rent a car.\"The contents of the \"Hello Administrator,a New user has registered on the website for rental cars with driver in Moscow, order a car, rent a car..This e-mail contains the details of this registration:Name - guidelines for accurate selection of school chair for use in car e-mail - EMAIL user Name - sloppycomplemenПожалуйста do not reply to this message as it is generated automatically and sent for notification only.\" |
| Answer: |
Hello. which files were changed? what was the nature of the changes? what is the version of the engine? what are the modules installed? |
| Question: |
The nature of the changes I will not tell You, because not really in the know. Found in file Manager in the column Last Modified Today at 1:27 in multiple folders. Also lost all the backups. The Engine, Joomla 1.5.11. |
| Answer: |
you have an outdated engine, you need to take steps to transition the website to a new , more secure version. unfortunately, the templates may not be compatible. you never said what kind of site it is. just let us know which folders were the changes |
| Question: |
The website avto4corp.ru. Can I upload the latest backup from the computer to the file Manager, and You restore? |
| Answer: |
specify that the full backup? download, restore. |
| Question: |
Here`s a backup-4.2.2014_18-42-28_paul67.tar.gzИли there is an easier way to clean it? |
| Answer: |
this backup was created when there were no problems with the site? |
| Question: |
Yes, just after deep cleaning the regular hacking. Tell me if you deleted the backups, then entered CPanel? |
| Answer: |
backups are stored in the root account to delete the files, the entrance to the bar is not required. ostanavlivali account of backup-4.2.2014_18-42-28_paul67.tar.gz ? |
| Answer: |
download backup file |
| Question: |
I haven`t uploaded! After a couple of hours will fill and unsubscribe. OK? |
| Answer: |
OK |
| Question: |
Backup filled backup-4.2.2014_18-42-28_paul67.tar.gz in the file Manager. Waiting for recovery! |
| Answer: |
account restored from your backup |
| Question: |
Yes, everything is OK. Now I remember the password, there are several options! And how many times in a row before locking you can make a mistake with the password in CPanel? |
| Answer: |
15 times
Details sent to EMAIL
|
| Question: |
Does not boot neither my site nor CPanel? Probably blocked due to wrong passwords... |
| Answer: |
csf.deny: IP # lfd: (htpasswd) Failed web page login from IP (RU/Russian Federation/ppp94-29-87-72.pppoe.spdop.EN): 25 in the last 3600 secs - Thu Jun 19 21:16:43 2014 the Block is cleared. please Check now. |
