infected by malicious code

EzGenerator V4 forum

Return to “Ezgenerator v4 Customer Forum”

[You can only see part of this thread as you are not logged in to the forums]
Fernet
Wed Sep 20, 2017 8:00 am

x

infected by malicious code

Hello Galina, Miro, Atanas and MEB,
I've created a lot of projects in EzGenerator, but now it's a security issue and I do not know what to do with it.
Since Sunday, a robot has invaded my 7domains.
Over the day I will restore it. At night, malware will come, and so on ...
What with this??

I attach an email from a web host:

Dear customer,

we have found following files infected by malicious code on virtual server seznet.cz. We renamed them (added suffix .malware) in order to prevent abuse of your web space to cyber attacks or sending spam.

But remember, that this is only a temporary measure that does not solve the real vulnerability which was abused to infect your website. The vulnerability is usually in outdated version of used CMS or any of its plugins or themes.

Please go through renamed files and check or possibly delete them ASAP and update your CMS including all plugins and themes to the latest available versions. Otherwise it is just a matter of time when the abuse of your website occours again. In that case we would have to suspend the hosting services and their unlocking will be charged according to the valid price list.

We have found the malware in following files:
www/ezg_data/photoblog.php (contains {HEX}Malware.Expert.generic.str.replace.function.execute.0)
www/ezg_data/functions.php (contains {HEX}Malware.Expert.generic.str.replace.function.execute.0)
www/ezg_data/blog.php (contains {HEX}Malware.Expert.generic.str.replace.function.execute.0)
www/ezg_data/lister.php (contains {HEX}Malware.Expert.generic.str.replace.function.execute.0)

Thanks for a possible solution
Josef

matthewfarmery
Wed Sep 20, 2017 12:48 pm

x

Re: infected by malicious code

That is worrying, what is worse is that develop...

Fernet
Wed Sep 20, 2017 1:19 pm

x

Re: infected by malicious code

All infected domain use MYSQL for all live page...

matthewfarmery
Wed Sep 20, 2017 3:08 pm

x

Re: infected by malicious code

is your friend using the same webhost? because,...

Fernet
Wed Sep 20, 2017 3:53 pm

x

Re: infected by malicious code

Yes, we have the same hosting. Currently solved...

Fernet
Thu Sep 21, 2017 10:49 am

x

Re: infected by malicious code

Hello, So everything is different ...Ezgenerato...

matthewfarmery
Thu Sep 21, 2017 11:22 am

x

Re: infected by malicious code

That is good to hear, I assume your friend got ...


Return to “Ezgenerator v4 Customer Forum”