| Question: |
I tried to delete parts of the site, unloaded, piece by piece website. Searched for viruses with the help of wp plugins here. Turn on the website |
| Answer: |
we did not shut it off. you have again exceeded the limit
ispeak 348362 0.0 0.0 321108 12824 ? S 11:04 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 362470 0.0 0.0 15996 321108 ? S 11:09 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 369706 0.0 0.0 321108 16388 ? S 11:11 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 376598 0.0 0.0 321108 16384 ? S 11:13 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 384368 0.0 0.0 321108 16388 ? S 11:16 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 390313 0.0 0.0 321108 16388 ? S 11:18 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 395732 0.0 0.0 16392 321108 ? S 11:20 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 402084 0.0 0.0 321108 16384 ? S 11:23 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 418392 0.0 0.0 321108 16388 ? S 11:30 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 423380 0.0 0.0 321276 16396 ? S 11:32 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 428308 0.0 0.0 321108 16388 ? S 11:34 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 445947 0.0 0.0 16392 321108 ? S 11:42 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 463260 0.0 0.0 321108 16388 ? S 11:49 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 474392 0.0 0.0 321108 16388 ? S 11:54 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 479448 0.0 0.0 321108 16388 ? S 11:56 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 491816 0.0 0.0 16400 321108 ? S 12:01 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 496898 0.0 0.0 321108 16404 ? S 12:03 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 513874 0.0 0.0 321108 16364 ? S 12:10 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 524582 0.0 0.0 321108 18540 ? S 12:15 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
ispeak 530259 0.0 0.0 18524 321108 ? S 12:17 0:00 /usr/bin/php /home/ispeak/public_html/lesson/wp-includes/theme-compat/stats43.php
file is the same |
| Answer: |
{HEX}php.base64.v23au.184 : ./stats43.php
===============================================
Linux Malware Detect v1.4.2 < EMAIL > |
| Question: |
Working on the website. Again the limit is exhausted... the site is unavailable. So to understand ... but what exactly does this virus do?That refers to ? |
| Answer: |
ispeak 423797 0.0 0.0 11496 321108 ? S 05:19 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 437464 0.0 0.0 11376 321108 ? S 05:25 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 462832 0.0 0.0 321108 11364 ? S 05:35 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 472815 0.0 0.0 17964 321108 ? S 05:41 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 477336 0.0 0.0 321108 18552 ? S 05:44 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 541478 0.0 0.0 321108 18560 ? S 06:11 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 556548 0.0 0.0 321108 18560 ? S 06:19 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 566402 0.0 0.0 321108 18552 ? S 06:25 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 570771 0.0 0.0 321108 18552 ? S 06:27 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 576994 0.0 0.0 321108 18560 ? S 06:30 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 583481 0.0 0.0 321108 18552 ? S 06:33 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 591266 0.0 0.0 321108 18548 ? S 06:36 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 608839 0.0 0.0 321108 18532 ? S 06:44 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 614909 0.0 0.0 321108 18560 ? S 06:46 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 621107 0.0 0.0 18544 321108 ? S 06:49 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 639858 0.0 0.0 321108 18548 ? S 06:57 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 647679 0.0 0.0 321108 18556 ? S 07:00 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 654550 0.0 0.0 321108 18532 ? S 07:03 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 660834 0.0 0.0 321108 18552 ? S 07:05 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
ispeak 695131 0.1 0.0 321108 18520 ? S 07:19 0:00 /usr/bin/php /home/ispeak/public_html/teens/dump70.php
|
