• 25-07-2014, 15:17:55
    #1
    Merhaba hizmet sağlayacım ftpde virus buldu

    detaylı temizlik yapacak arkadaşa ücretini vereceğim..
    tekliflerinizi p.m atin ayrica yolda göstebilirsiniz yardımcı arkadaşlar varsa=)

    (4) motorcuy, Scanning /home/motorcuy:
    # Script version check [OLD] [SMF v2.0.2 < v2.0.8]:
    '/home/motorcuy/forum/index.php'
    # Regular expression match = [decode regex: 8]:
    '/home/motorcuy/forum/Sources/Subs-Post.php'
    # (decoded file [depth: 0]) Regular expression match = [decode regex: 8]:
    '/home/motorcuy/forum/Sources/Subs-Post.php'
    # Regular expression match = [decode regex: 8]:
    '/home/motorcuy/forum/Sources/Subs-Post.php~'
    # (decoded file [depth: 0]) Regular expression match = [decode regex: 8]:
    '/home/motorcuy/forum/Sources/Subs-Post.php~'
    # Regular expression match = [decode regex: 8]:
    '/home/motorcuy/forum/mobile/include/Subs-Post.php'
    # (decoded file [depth: 0]) Regular expression match = [decode regex: 8]:
    '/home/motorcuy/forum/mobile/include/Subs-Post.php'
    # Script version check [OLD] [SMF v2.0.2 < v2.0.8]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/forum/index.php'
    # Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/forum/Sources/Subs-Post.php'
    # (decoded file [depth: 0]) Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/forum/Sources/Subs-Post.php'
    # Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/forum/Sources/Subs-Post.php~'
    # (decoded file [depth: 0]) Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/forum/Sources/Subs-Post.php~'
    # Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/forum/mobile/include/Subs-Post.php'
    # (decoded file [depth: 0]) Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/forum/mobile/include/Subs-Post.php'
    # Script version check [OLD] [Wordpress v3.3.2 < v3.9.1]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/tv/wp-includes/version.php'
    # Suspicious directory:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/cache/supercache/www.motorcuyuz.com'
    # Script version check [OLD] [WP All In One SEO Ext v1.6.14.3 < v2.1.7]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/plugins/all-in-one-seo-pack/all_in_one_seo_pack.php'
    # Script version check [OLD] [WP Contact Form 7 Ext v3.1.2 < v3.8.1]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/plugins/contact-form-7/wp-contact-form-7.php'
    # Script version check [OLD] [WP FD Feedburner Ext v1.45 < v1.46]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/plugins/feedburner-plugin/fdfeedburner.php'
    # Script version check [OLD] [WP Google XML Sitemaps Ext v3.2.7 < v4.0.7]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/plugins/google-sitemap-generator/sitemap.php'
    # Script version check [OLD] [WP Super Cache Ext v1.0 < v1.4]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/plugins/wp-super-cache/wp-cache.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/footer.php.1405976977_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/themes/blogify/footer.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/index.php.1405976977_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/themes/blogify/index.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/page.php.1405976977_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/themes/blogify/page.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/index.php.1405976978_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-content/themes/blogify2/index.php'
    # Script version check [OLD] [Wordpress v3.3.2 < v3.9.1]:
    '/home/motorcuy/public_html/2.0.2. virüssüz*/wp-includes/version.php'
    # Script version check [OLD] [SMF v2.0.2 < v2.0.8]:
    '/home/motorcuy/public_html/forum/index.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/index.php.1405976990_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/forum/index.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/index.php~.1405976990_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/forum/index.php~'
    # Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/forum/Sources/Subs-Post.php'
    # (decoded file [depth: 0]) Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/forum/Sources/Subs-Post.php'
    # Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/forum/Sources/Subs-Post.php~'
    # (decoded file [depth: 0]) Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/forum/Sources/Subs-Post.php~'
    # Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/forum/mobile/include/Subs-Post.php'
    # (decoded file [depth: 0]) Regular expression match = [decode regex: 8]:
    '/home/motorcuy/public_html/forum/mobile/include/Subs-Post.php'
    # Script version check [OLD] [WP All In One SEO Ext v1.6.14.5 < v2.1.7]:
    '/home/motorcuy/public_html/tv/wp-content/plugins/all-in-one-seo-pack/all_in_one_seo_pack.php'
    # Script version check [OLD] [WP Contact Form 7 Ext v3.2 < v3.8.1]:
    '/home/motorcuy/public_html/tv/wp-content/plugins/contact-form-7/wp-contact-form-7.php'
    # Script version check [OLD] [WP Google XML Sitemaps Ext v3.2.7 < v4.0.7]:
    '/home/motorcuy/public_html/tv/wp-content/plugins/google-sitemap-generator/sitemap.php'
    # Script version check [OLD] [Wordpress v3.4.1 < v3.9.1]:
    '/home/motorcuy/public_html/tv/wp-includes/version.php'
    # (compressed file: Moxie.dll [depth: 1]) MS Windows Binary/Executable [application/x-winexec]:
    '/home/motorcuy/public_html/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_addgallery_page/static/plupload-2.1.1/Moxie.xap'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/footer.php.1405977070_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/wp-content/themes/blogify/footer.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/index.php.1405977070_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/wp-content/themes/blogify/index.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/page.php.1405977070_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/wp-content/themes/blogify/page.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/index.php.1405977071_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/public_html/wp-content/themes/blogify2/index.php'
    # (compressed file: SilverlightMediaElement.dll [depth: 1]) MS Windows Binary/Executable [application/x-winexec]:
    '/home/motorcuy/public_html/wp-includes/js/mediaelement/silverlightmediaelement.xap'
    # (compressed file: Moxie.dll [depth: 1]) MS Windows Binary/Executable [application/x-winexec]:
    '/home/motorcuy/public_html/wp-includes/js/plupload/plupload.silverlight.xap'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/footer.php.1405977087_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/sozluk/footer.php'
    # (quarantined to /root/quarantine/cxsuser/motorcuy/index.php.1405977087_1) Known exploit = [Fingerprint Match] [PHP Defacement Exploit [P0752]]:
    '/home/motorcuy/sozluk/index.php'

    ----------- SCAN SUMMARY -----------
    Scanned directories: 1992
    Scanned files: 25163
    Ignored items: 49
    Suspicious matches: 48
    Viruses found: 0
    Fingerprint matches: 12
    Data scanned: 1408.75 MB
    Scan time/item: 0.008 sec
    Scan time: 204.564 sec
  • 26-07-2014, 01:43:26
    #2
    Üyeliği durduruldu
    Kullandığın scriptleri, eklentileri vs. ne var ne yok güncelle.
    Virüs değil bunlar, düşük versiyon uyarısı.
  • 26-07-2014, 15:04:07
    #3
    @EftalBulut; bel ki yardımcı olabilir.