مشکل Abuse

[ariamovie2]

دوستان کسی میتونه راهنمایی کنه
آیا Abuse فقط روی سرور هست یا کسی که هاست اشتراکی هم داره میتونه همچین مشکلی داشته باشه؟
من هاست اشتراکی دارم که ایمیل دادن بهم که abuse دارم .

Scanning /home/imikanoo:
# Symlink to [/usr/local/apache/domlogs/imikanoo]:
'/home/imikanoo/access-logs'
# Known exploit = [Fingerprint Match] [Hacker Signature Exploit [P0408]]:
'/home/imikanoo/ganteng.php'
# Known exploit = [Fingerprint Match] [Hacker Signature Exploit [P0408]]:
'/home/imikanoo/public_html/ganteng.php'
# Known exploit = [Fingerprint Match] [PHP REQUEST Exploit [P0007]]:
'/home/imikanoo/public_html/index2.php'
# Known exploit = [Fingerprint Match] [PHP Shell Exploit [P0297]]:
'/home/imikanoo/public_html/indexes.php'
# (compressed file: l01de/tyy/primarylogon.php [depth: 1]) Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/lloyds.zip'
# (compressed file: l01de/tyy/verify.php [depth: 1]) Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/lloyds.zip'
# Known exploit = [Fingerprint Match] [PHP REQUEST Exploit [P0007]]:
'/home/imikanoo/public_html/administrator/index.php'
# (compressed file: plupload.silverlight.dll [depth: 1]) MS Windows Binary/Executable [application/x-winexec]:
'/home/imikanoo/public_html/components/com_community/assets/multiupload_js/plupload.silverlight.xap'
# Known exploit = [Fingerprint Match] [Hacker Signature Exploit [P0408]]:
'/home/imikanoo/public_html/images/ganteng.php'
# World writeable directory:
'/home/imikanoo/public_html/images/EYBB/e'
# World writeable directory:
'/home/imikanoo/public_html/images/ghalam/g'
# Known exploit = [Fingerprint Match] [PHP REQUEST Exploit [P0007]]:
'/home/imikanoo/public_html/images/jdownloads/screenshots/28711.php3.j'
# World writeable directory:
'/home/imikanoo/public_html/images/world/w'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/020963915cd05383723ad00248f2e0c7/primarylogon.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/020963915cd05383723ad00248f2e0c7/verify.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/6102b882f191cb16ba9f50bcf2e6cb7c/primarylogon.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/6102b882f191cb16ba9f50bcf2e6cb7c/verify.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/6173415150989b998d4ca28c11ba2911/primarylogon.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/6173415150989b998d4ca28c11ba2911/verify.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/6ef3dbc416a1feedc18ef5a7daf17967/primarylogon.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/6ef3dbc416a1feedc18ef5a7daf17967/verify.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/716152c0fe9c58d224be3a7ca3f1eb3b/primarylogon.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/716152c0fe9c58d224be3a7ca3f1eb3b/verify.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/a3267832fc830d60510ec83ec85cbcba/primarylogon.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/a3267832fc830d60510ec83ec85cbcba/verify.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/cac8151d26950e6963326ecb88aa34c9/primarylogon.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/cac8151d26950e6963326ecb88aa34c9/verify.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/cee0a2869dc700f265579a2c3691af58/primarylogon.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/cee0a2869dc700f265579a2c3691af58/verify.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/e356cb15d2b2e5f10f84e206f5358a23/primarylogon.php'
# Known exploit = [Fingerprint Match] [PHP Phishing Exploit [P0459]]:
'/home/imikanoo/public_html/l01de/e356cb15d2b2e5f10f84e206f5358a23/verify.php'
# Script version check [OLD] [Joomla v1.5.25 < v3.3.3]:
'/home/imikanoo/public_html/libraries/joomla/version.php'
# Regular expression match = [symlink\s*\(]:
'/home/imikanoo/public_html/libraries/pear/archive_tar/Archive_Tar.php'
# (compressed file: SilverlightMediaElement.dll [depth: 1]) MS Windows Binary/Executable [application/x-winexec]:
'/home/imikanoo/public_html/media/widgetkit/widgets/mediaplayer/mediaelement/silverlightmediaelement.xap'
# Regular expression match = [symlink\s*\(]:
'/home/imikanoo/public_html/plugins/system/Zend/OpenId/Consumer/Storage/File.php'

----------- SCAN SUMMARY -----------
Scanned directories: 3408
Scanned files: 23578
Ignored items: 67
Suspicious matches: 36
Viruses found: 0
Fingerprint matches: 27
Data scanned: 684.57 MB
Scan time/item: 0.022 sec
Scan time: 602.918 sec

چجوری باشد رفعش کنم؟

[nginxweb]

درود
دوست عزیز از اکانت
imikanoo
مشکل phishing ایمیل وجود دارد
اکانت فوق را ساسپند نمایید و به دیتاسنتر بگید که حل شده است و سپس به کاربر اخطار دهید و فایلهای php ذکر شده در abuse هم حذف نمایید

[ariamovie2]

درود
دوست عزیز از اکانت
imikanoo
مشکل phishing ایمیل وجود دارد
اکانت فوق را ساسپند نمایید و به دیتاسنتر بگید که حل شده است و سپس به کاربر اخطار دهید و فایلهای php ذکر شده در abuse هم حذف نمایید

ممنون
دو سوال
اکانت ایمیل مشکل داره؟ خوب اگه ساسپدن کنم ایمیل رو ، دیگه نمیشه باهاش کار کرد؟ میخوایم ایمیل بفرستیم اینا چی پس؟
فایلهای php اگر پاک شه ، قالب سایت به مشکل نمیخوره؟

[spsgorgan]

شما باید فورا اکانت رو مسدود کنید خیالشون راحت بشه. 1 2 روز بعدش نرمک نرمک اقدام به حذف کنید.

[ariamovie2]

متوجه نشدید گویا
هاست اشتراکی دارم ها بنده
خود شرکت الان من رو ساسپند کرده
و میگه حل کنید

[مینا-صیفی]

ظاهرا از اسکریپت جوملا استفاده میکنید ؟ اگر بله ؟ لطفا جوملا خود را اپدیت کنید

[ariamovie2]

ینی حتما باید جوملا اپدیت شه؟ بعید میدونم واسه این باشه ها
فیشینگه
آپدیت هم شاید حل نکنه

[مینا-صیفی]

فایل های شما به علت قدیمی بودن مشکلات امنیتی دارد تو این لاگی که برامون فرستادید همش حرف از اکسپلویت فیشینگ و شل داره میگه بعتره همیشه در همه چیز اپدیت باشید با تشکر