Wordpress el paštą spamina

Subject: Warning: 500 emails have just been sent by kalbejimop Today at 02:08

The kalbejimop account has just finished sending 500 emails.

There could be a spammer, the account could be compromised, or just sending more emails than usual.

After some processing of the /etc/virtual/usage/kalbejimop.bytes file, it was found that the highest sender was [email protected], at 501 emails.

The top authenticated user was kalbejimop, at 501 emails.

This accounts for 100% of the emails. The higher the value, the more likely this is the source of the emails.

An authenticated username is the user and password value used at smtp time to authenticate with exim for delivery.

The most common path that the messages were sent from is /home/kalbejimop/domains/kalbejimopotemes.net/public_html/wp-content/themes/sparkling, at 498 emails (99%).

The path value may only be of use if it's pointing to that of a User's home directory.

If the path is a system path, it likely means the email was sent through smtp rather than using a script.

The top sending script was /home/kalbejimop/domains/kalbejimopotemes.net/public_html/wp-content/themes/sparkling/config.php(7) : regexp code(1) : eval()'d code(1505) : eval()'d code(1) : eval()'d code:775, at 480 emails, (96%).

Because the bulk of the emails have been sent by the script, please check it to confirm it has not been compromised.

This warning was generated because the 500 email threshold was hit.

================================

Automated Message Generated by DirectAdmin

Kaip būtų galima sutvarkyti šia bėdą? Per naktį prisiuntė kelis tūkstančius laiškų. Spam fulters nepadeda.

Subject: Warning: 500 emails have just been sent by kalbejimop Today at 02:08

 

The kalbejimop account has just finished sending 500 emails.

There could be a spammer, the account could be compromised, or just sending more emails than usual.

 

After some processing of the /etc/virtual/usage/kalbejimop.bytes file, it was found that the highest sender was [email protected], at 501 emails.

 

The top authenticated user was kalbejimop, at 501 emails.

This accounts for 100% of the emails. The higher the value, the more likely this is the source of the emails.

An authenticated username is the user and password value used at smtp time to authenticate with exim for delivery.

 

 

The most common path that the messages were sent from is /home/kalbejimop/domains/kalbejimopotemes.net/public_html/wp-content/themes/sparkling, at 498 emails (99%).

The path value may only be of use if it's pointing to that of a User's home directory.

If the path is a system path, it likely means the email was sent through smtp rather than using a script.

 

The top sending script was /home/kalbejimop/domains/kalbejimopotemes.net/public_html/wp-content/themes/sparkling/config.php(7) : regexp code(1) : eval()'d code(1505) : eval()'d code(1) : eval()'d code:775, at 480 emails, (96%).

Because the bulk of the emails have been sent by the script, please check it to confirm it has not been compromised.

 

 

This warning was generated because the 500 email threshold was hit.

 

================================

Automated Message Generated by DirectAdmin

 

 

Kaip būtų galima sutvarkyti šia bėdą? Per naktį prisiuntė kelis tūkstančius laiškų. Spam fulters nepadeda.

Pašalinti virusus ir užtaisyti skyles ir nebesiųs :)

50eur ir sutvarkau. Tikriausiai wordpress nulauze

Pašalinti virusus ir užtaisyti skyles ir nebesiųs :)

Pašalinti, užtaisyti, bet kaip tai padaroma?

€30 - sutvarkysiu

Kai laiku neupdatini sistemos, per saugumo spragas įlenda botai ir pasikoreguoja sistema spaminimui ar kitiems tikslams

The top sending script was /home/kalbejimop/domains/kalbejimopotemes.net/public_html/wp-content/themes/sparkling/config.php(7) : regexp code(1) : eval()'d code(1505) : eval()'d code(1) : eval()'d code:775, at 480 emails, (96%).

config.php failo net nėra tarp dizaino https://github.com/puikinsh/Sparkling , pasinaudok https://wordpress.org/plugins/gotmls/

config.php failo net nėra tarp dizaino https://github.com/puikinsh/Sparkling , pasinaudok https://wordpress.org/plugins/gotmls/

Tik ten dabar tiek yra išmėtyta papildomų failų per visas direktorijas, kad šio vieno failo ištrinimas yra bevertis:)

Prisirašiau apsaugų, spamo nebegaunu.

Gauti spamo ir negausi:) O apsaugos nepadės standartinės, kol nebus panaikinti visi failai.

Su spamu viskas ok, tik dar meta tokią klaidą norint atnaujinti wp:

Downloading update from https://downloads.wordpress.org/release/wordpress-4.2.3-no-content.zip…

Unpacking the update…

Could not create directory.

Installation Failed

gal kas esate susidūrę?