| Question: |
privet... Our site is Hacker attack You can help |
| Answer: |
Hello. Tell what the site is about, who it atace and what does it mean? |
| Question: |
yildizelektrik.az I сделалhttp://baubaspa.com/http://hhp.az/accunt tural147 |
| Answer: |
your sites were hacked yet 11. why did you come only today? in NS backup was done two days ago, the backup is already infection files here Cho I you antivirus found
/home/tural147/public_html/compinter.net/wp-admin/css/search.php: PHP.Agent-20 FOUND
/home/tural147/public_html/baubaspa.com/wp-admin/css/colors/ocean/ms-settings.php: PHP.Agent-20 FOUND
/home/tural147/wp-conf.php: Trojan.PHP-43 FOUND
/home/tural147/public_html/concordgroup.az/wp-content/plugins/revslider/temp/update_extract/revslider.zip: PHP.Hide FOUND
|
| Answer: |
2014/12/11 DESTINY H M hhp.az Linux mirror
2014/12/11 DESTINY H M yildiz.az Linux mirror
2014/12/11 DESTINY H M baubaspa.com Linux mirror
2014/12/11 H M LLC awarded with DESTINY.az Linux mirror
2014/12/11 DESTINY H M yildizelektrik.az Linux mirror
2014/12/11 DESTINY H M agrobereket.com Linux mirror
2014/12/11 DESTINY H M compinter.net Linux mirror
2014/12/11 DESTINY H gislabinfo.com Linux mirror |
| Question: |
spasiba ya udalit `1) compinter.net papki udalit vse ya fayl i avtomatik cozdat wp-i wp contekt-incules papki |
| Answer: |
you need to replace all the site files except the configuration file, in wordpress it wp-config.php the original distribution of the version of the engine which corresponds to the website then, be sure to change all passwords. remove the modules and theme of your website if they commitlog proishojdeniya http://blog.fox-it.com/2014/11/26/cryptophp-a-week-later-more-than-23-000-sites-affected/ now your account has to be checked by antiviruses |
| Question: |
Can I send you a new password |
| Answer: |
we Have no need in Your parolee. the Password is generally not recommended anyone to pass. |
| Answer: |
here`s what I found first antivirus FILE HIT LIST:
{HEX}php.cmdshell.unclassed.356 : /home/tural147/public_html/baubaspa.com/wp-includes/SimplePie/HTTP/ms-files.php => /usr/local/maldetect/quaran$
{HEX}php.base64.v23au.183 : /home/tural147/public_html/concordgroup.az/wp-content/themes/rambo/images/default/slide/.ini88.php => /usr/local/mal$
{HEX}php.base64.v23au.183 : /home/tural147/public_html/concordgroup.az/wp-content/uploads/2013/02/view1.php => /usr/local/maldetect/quarantine/v$
{CAV}PHP.Hide : /home/tural147/public_html/concordgroup.az/wp-content/plugins/revslider/temp/update_extract/image.php => /usr/local/maldetect/qu$
{HEX}php.base64.v23au.183 : /home/tural147/public_html/concordgroup.az/wp-includes/js/tinymce/plugins/wpeditimage/.themes81.php => /usr/local/ma$
=============================================== |
| Question: |
/home/tural147/public_html/LLC awarded with.az/* fayl/home/tural147/public_html/LLC awarded with.az/*faylya udalit vse fayl corrected? |
| Answer: |
deleting this is not the way to ispravleniya. they will appear again |
| Question: |
I am I going to do? |
| Answer: |
Check your home computers for viruses. Change all passwords. |
| Question: |
ok.sps balwoye izvini ya znayu ruski ocen plaxy ( |
| Answer: |
ok
|
