Question about possible malicious files - Joomla! Forum - community, help and support
my host has deactivated outbound emails, saying it's joomla 2.5 installation.
they told me remove files fix it, i'm curious if these necessary files or not. purged cache, checking here before asking host if that's enough, since other attempts didn't help.
----from host---------
- cross check , remove following malicious files:
[minimum required score: 5.0]
(sun feb 2 16:23:21 2014 : 0755) /home/removed/public_html/plugins/modcache.php [20.0] {hidden,}
(fri jan 24 05:07:35 2014 : 0644) /home/removed/public_html/plugins/vbqooijw.php [9.9] {webshell,}
(sun feb 2 16:23:21 2014 : 0755) /home/removed/public_html/plugins/xmlcache.php [20.0] {hidden,}
(sun feb 2 12:49:21 2014 : 0644) /home/removed/public_html/plugins/s2knn.php [9.9] {webshell,}
(sun feb 2 13:07:43 2014 : 0644) /home/removed/public_html/plugins/system/sef/robotsfsp.php [clamav] {php.trojan.spambot }
they told me remove files fix it, i'm curious if these necessary files or not. purged cache, checking here before asking host if that's enough, since other attempts didn't help.
----from host---------
- cross check , remove following malicious files:
[minimum required score: 5.0]
(sun feb 2 16:23:21 2014 : 0755) /home/removed/public_html/plugins/modcache.php [20.0] {hidden,}
(fri jan 24 05:07:35 2014 : 0644) /home/removed/public_html/plugins/vbqooijw.php [9.9] {webshell,}
(sun feb 2 16:23:21 2014 : 0755) /home/removed/public_html/plugins/xmlcache.php [20.0] {hidden,}
(sun feb 2 12:49:21 2014 : 0644) /home/removed/public_html/plugins/s2knn.php [9.9] {webshell,}
(sun feb 2 13:07:43 2014 : 0644) /home/removed/public_html/plugins/system/sef/robotsfsp.php [clamav] {php.trojan.spambot }
none of files core joomla files. looks site has been hacked , these malicious files have been put there hacker. should remove these files. go through steps here (viewtopic.php?f=432&t=475313) clean site. luck.
Comments
Post a Comment