| Question: |
not working sites |
| Answer: |
Zdravstvuite. With your sites have sent spam. Report what ip you budete to work on a solution. you need to check and clean the sites as well as change all passwords. administrator passwords, user passwords database, all, absolutely all passwords. upgrade the engines and modules are consistent with sites. Now the sites are checked by anti-virus |
| Question: |
IP |
| Answer: |
the log sent by EMAIL, if it comes of course after such distribution. |
| Answer: |
all sites are infected.... ./artisolix.md/w71256058n.php: Trojan.PHP-43 FOUND
./artisolix.md/w74576671n.php: Trojan.PHP-43 FOUND
./artisolix.md/w68844633n.php: Trojan.PHP-43 FOUND
./caleatur.com.md/w71178205n.php: Trojan.PHP-43 FOUND
./caleatur.com.md/w17322231n.php: Trojan.PHP-43 FOUND
./caleatur.com.md/w89128323n.php: Trojan.PHP-43 FOUND
./caleatur.com.md/w21506819n.php: Trojan.PHP-43 FOUND
./caleatur.com.md/w51375478n.php: Trojan.PHP-43 FOUND
./caleatur.com.md/w39846990n.php: Trojan.PHP-43 FOUND
./ladi.com.md/w10564152n.php: Trojan.PHP-43 FOUND
./ladi.com.md/w41458510n.php: Trojan.PHP-43 FOUND
./ladi.com.md/w54894068n.php: Trojan.PHP-43 FOUND
./ladi.com.md/w18178324n.php: Trojan.PHP-43 FOUND
./ladi.com.md/w64877119n.php: Trojan.PHP-43 FOUND
./ladi.com.md/w44003476n.php: Trojan.PHP-43 FOUND
./evropa.md/w81536339n.php: Trojan.PHP-43 FOUND
./evropa.md/w36157659n.php: Trojan.PHP-43 FOUND
./evropa.md/w50514302n.php: Trojan.PHP-43 FOUND
./evropa.md/w70137124n.php: Trojan.PHP-43 FOUND
./evropa.md/w74261302n.php: Trojan.PHP-43 FOUND
./evropa.md/w61305943n.php: Trojan.PHP-43 FOUND
./ecatelena-plast.com.md/w29525239n.php: Trojan.PHP-43 FOUND
./ecatelena-plast.com.md/w32944115n.php: Trojan.PHP-43 FOUND
./ecatelena-plast.com.md/w24008876n.php: Trojan.PHP-43 FOUND
./ecatelena-plast.com.md/w70801622n.php: Trojan.PHP-43 FOUND
./ecatelena-plast.com.md/w49244916n.php: Trojan.PHP-43 FOUND
./ecatelena-plast.com.md/w63416377n.php: Trojan.PHP-43 FOUND
./spectrdesign.md/w26813090n.php: Trojan.PHP-43 FOUND
./spectrdesign.md/w42153628n.php: Trojan.PHP-43 FOUND
./spectrdesign.md/w24888413n.php: Trojan.PHP-43 FOUND
./spectrdesign.md/w63591951n.php: Trojan.PHP-43 FOUND
./spectrdesign.md/w52084602n.php: Trojan.PHP-43 FOUND
./spectrdesign.md/w69415199n.php: Trojan.PHP-43 FOUND
./luxor.com.md/w34088056n.php: Trojan.PHP-43 FOUND
./luxor.com.md/w48658153n.php: Trojan.PHP-43 FOUND
./luxor.com.md/w24018352n.php: Trojan.PHP-43 FOUND
./luxor.com.md/w39398176n.php: Trojan.PHP-43 FOUND
./luxor.com.md/w72678148n.php: Trojan.PHP-43 FOUND
./luxor.com.md/w15114545n.php: Trojan.PHP-43 FOUND
./restaurantnunta.com/w46155826n.php: Trojan.PHP-43 FOUND
./restaurantnunta.com/w72858750n.php: Trojan.PHP-43 FOUND
./restaurantnunta.com/w65825265n.php: Trojan.PHP-43 FOUND
./restaurantnunta.com/w67713897n.php: Trojan.PHP-43 FOUND
./restaurantnunta.com/w85042645n.php: Trojan.PHP-43 FOUND
./restaurantnunta.com/w28111119n.php: Trojan.PHP-43 FOUND
./zeon.md/w54778700n.php: Trojan.PHP-43 FOUND
./zeon.md/w74145923n.php: Trojan.PHP-43 FOUND
./zeon.md/w51644899n.php: Trojan.PHP-43 FOUND
./zeon.md/w32893702n.php: Trojan.PHP-43 FOUND
./zeon.md/w26563511n.php: Trojan.PHP-43 FOUND
./zeon.md/w27784363n.php: Trojan.PHP-43 FOUND
./juniscart.com/w76411601n.php: Trojan.PHP-43 FOUND
./juniscart.com/w22527556n.php: Trojan.PHP-43 FOUND
./juniscart.com/w20192793n.php: Trojan.PHP-43 FOUND
./juniscart.com/w63642633n.php: Trojan.PHP-43 FOUND
./juniscart.com/w83386648n.php: Trojan.PHP-43 FOUND
./juniscart.com/w81783338n.php: Trojan.PHP-43 FOUND
./sibarit-s.ru/w66165323n.php: Trojan.PHP-43 FOUND
./sibarit-s.ru/w72608312n.php: Trojan.PHP-43 FOUND
./sibarit-s.ru/w12045107n.php: Trojan.PHP-43 FOUND
./sibarit-s.ru/w33892704n.php: Trojan.PHP-43 FOUND
and that`s not all |
| Question: |
cleaning and change passwords |
| Answer: |
how did they get in? the old cms & infected sites perience? weak passwords? what will be done to eliminate the problem? |
| Question: |
one of the sites was weak password |
| Question: |
update all passwords, strip files from viruses |
| Answer: |
you noujno to check all the files of the websites. after checking the two antivirus we run the script aibolit/ if spam will still prodolzhalsya, we will not be able to provide You with hosting. take care of site security |
| Question: |
thank you |
| Answer: |
OK
|
| Question: |
/www/solutionsaluminium.San can удалитьstudy_in_australia.htmw16504367n.phpw44853800n.phpw60686425n.rrnet write access PLEASE DELETE |
| Answer: |
file viruses are now being removed by antivirus |
| Question: |
I have everything else cleared and removed |
| Question: |
but in order to change the passwords for the admin sites and updates I need, they were included |
| Answer: |
your ip for open access |
