| Question: |
Good evening, tell me why the site is disabled? http://alupkame.info/ |
| Answer: |
Hello. we do Yeon was turned off. you did kaki UTB changes on the website? |
| Answer: |
once again, you hacked. please take measures to protect. |
| Question: |
Good evening, the site is still not working( so the error CloudLinux Test Page |
| Answer: |
Hello. website doesn`t work not \"still\" but disabled due to received you`re complaint that you were sent in the mail. You reported about the hacking of the website, the message was ignored by You, anything from your side nebylo taken, as a result, a hacker uploaded a phishing page Client EMAIL
Department: Support
Subject: [PL-191970] Phishing hosted on www.alupkame.info
Priority: Medium
---
Our company investigates computer crime incidents on behalf of banks and
other companies.
A phishing site was found to be operating on your network and targeting
Wells Fargo Personal Banking customers:
IP coil.dnsline.ru
hXXp://www.alupkame.info/libraries/wellsfargo/
<http://www.alupkame.info/libraries/wellsfargo/>
If possible, please provide the following information to assist our
investigation:
- Web server and FTP server log files for the past several days
- Copies of all phishing files, hack tools, or other hacker files
Finally, we kindly request that you disable or remove the phishing files
as soon as possible.
If we have contacted you in error, or there is a better way for us to
report this incident, please let us know.
Thank you for your assistance,
Matthew Woods
PhishLabs Security Operations
EMAIL
+IP1
http://www.phishlabs.com/
--- why nothing nebylo made for clearing of site and safety? |
| Question: |
let`s go and delete this folder |
| Answer: |
in addition, you must fully check the website and to eliminate the possibility of repeated complaints. need of proveritb CoE website files, to change all passwords. If you want, we can provide You a clean account, and you will take clean, checked the files there. |
| Question: |
if I moved to the latest version of backup (i.e., functional, not compromised website) + the existing database, will everything work fine? |
| Answer: |
you`ll find out after the transfer of backup. test it before migrating. |
| Answer: |
by the way, check the folder /libraries/wellsfargo/ became. |
| Question: |
can I now go to the control panel? my ip ip |
| Answer: |
panel access and ftp |
| Question: |
on the hosting have backup from 06.2014 everything is OK, the folder wellsfargo there but it is empty, unlike the folders that we have now. I propose to restore this backup, with all but the base |
| Answer: |
where is the file backup? |
| Question: |
the exact folder can not say, in the ACP panel under backups.. they where on the server do not know |
| Answer: |
did you check that backup? |
| Question: |
there is this same folder, but. suspicious files are missing, you can just delete it |
| Answer: |
and besides that folder? you few easy just hacked |
| Question: |
Yes, but the backup for June, there everything was fine |
| Answer: |
how do you know that everything was fine? you had on a few easy spam complaints and to replace the main page ,now the complaint is more serious fishing.. you read the message , they even require materials deolu, logs and files phishing. what version of your cms? what modules and plugins are installed? as long updated? |
| Question: |
version 2.5.24 joomla Components: Kunena forum, Datso photo gallery, news, K2, Jce editor, blog EasyBlog, plugin login Slogin + something else.Can all folders to put rotting on read/write, scan AI-Bolit http://www.revisium.com/ai/+ recommend |
| Answer: |
Jce vulnerable version of joomla you have quite a legacy AI-Bolit we vaam now run, check out how to make the log |
| Answer: |
AI-BOLIT-REPORT-12-08-2014_22-10-224075.html |
| Question: |
Checked every link, most just deleted. is that where the program is wrong |
| Answer: |
Change all parelli cPanel and FTP accounts. |
| Question: |
changed the password so that the new does not fit, but the email does not go to mail( I can send the password. and included.Thank you |
| Answer: |
Details sent to EMAIL
|
