Posted April 5, 20213 yr comment_168763 Как удалить или убрать вирус с доменного имени https://MicroMotors.cc Forcepoint ThreatSeeker - Подозрительный контент (проверялось на https://csi.forcepoint.com/ и https://www.virustotal.com/gui/home/search ) Возможно нужно какой-то файл добавить на сам форум, чтоб этого вируса не было... Буду благодарен за любую помощь. Edited April 5, 20213 yr by AnWey
April 5, 20213 yr comment_168764 Посмотри htaccess и config_global.php, может там чего лишнего добавили.
April 5, 20213 yr Author comment_168765 8 минут назад, Respected сказал: Посмотри htaccess и config_global.php, может там чего лишнего добавили. В .htaccess <IfModule mod_rewrite.c> Options -MultiViews RewriteEngine On RewriteBase / RewriteCond %{REQUEST_FILENAME} !-f RewriteRule \.(js|css|jpeg|jpg|gif|png|ico|map)(\?|$) /404error.php [L,NC] SecFilterEngine Off SecFilterScanPOST Off RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] </IfModule> В conf_global <?php $INFO = array ( 'sql_host' => 'localhost', 'sql_database' => 'имя', 'sql_user' => 'имя', 'sql_pass' => 'пароль', 'sql_port' => порт, 'sql_socket' => '', 'sql_tbl_prefix' => '', 'sql_utf8mb4' => true, 'board_start' => код, 'installed' => true, 'base_url' => 'https://micromotors.cc/', 'guest_group' => 2, 'member_group' => 3, 'admin_group' => 4, );
April 6, 20213 yr Author comment_168789 Написал на хостинг провайдера, получил в ответ такой вот сканер, я так понял ЭТИ файлы нужно удалить ? ----------- SCAN REPORT ----------- TimeStamp: Tue, 6 Apr 2021 16:15:06 +0300 (/usr/sbin/cxs --background --baction high --bayes --breport medium --clamdsock /var/clamd --dbreport --defapache nobody --doptions Mv --exploitscan --nofallback --filemax 1000000 --noforce --html --ignore /etc/cxs/cxs.ignore --options mMfuSGcChenDZR --qoptions Mv --report /home/anweypro/cxs-anweypro-2021-04-06.log --sizemax 1000000 --ssl --summary --sversionscan --timemax 90 --unofficial --user anweypro --virusscan --vmrssmax 2000000 --voptions mfuhe) Scanning /home/,,,: '/home/,,,/MicroMotors.cc/datastore/advancedtagsprefixes_nodeSettingsCache.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/advancedtagsprefixes_prefixCache.dd39226156.php' # Bayes exploit probability score [high probability] '/home/,,,/MicroMotors.cc/datastore/content_blocks_1.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/manifest.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/metaTags.dd39226156.php' # Bayes exploit probability score [high probability] '/home/,,,/MicroMotors.cc/datastore/profileFields.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/widget_fileFeed_73auf3cxa_2baae50fc230a3a179392d445eff5afe.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/widget_fileFeed_73auf3cxa_62ec1d6bfc9490d3f2c43702e8200344.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/widget_gstats_12uzxwhua_081795503abd9b1f43f349f49d465087.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/widget_gstats_12uzxwhua_72eedfd91cc8b5177d27d34c02604750.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/widget_topicFeed_oycemfb1i_1e7b8d88181400e608cad26ebc7ec4ef.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/widget_topicFeed_oycemfb1i_86ec2d2262269c1abdf12536b7535502.dd39226156.php' # Bayes exploit probability score [medium probability] '/home/,,,/MicroMotors.cc/datastore/widget_videoboxStats_pk1okrkh2_dd4b4c471e0f1f77ae7a527bd48a6533.dd39226156.php' # Bayes exploit probability score [medium probability]
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.