Nov 02, 10:50 AM
Hello,
This notice is to inform you that a recent scan of your server has returned results for outdated/insecure scripts, installations or otherwise suspicious material. The results of the scan are as follows:
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/plugins/open/newopen/newopen/newopen/newopen/sshards/ok/u/a/pdf_secure/OT.php
Type: SMW-SA-06226-mlw.phish-3
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/index.php
Type: SMW-SA-05495-mlw-0
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/Doc/Sign/verification.php
Type: SMW-SA-06549-mlw.phish-7
Filename: /home/paradig/domains/paradigmmusic.net/public_html/wp-content/plugins/open/newopen/newopen/newopen/newopen/sshards/ok/u/a/pdf_secure/OT.php
Type: SMW-SA-06226-mlw.phish-3
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/plugins/open/newopen/newopen/newopen/newopen/sshards/ok/u/a/pdf_secure/AA1.php
Type: SMW-SA-06226-mlw.phish-3
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/plugins/open/newopen/newopen/newopen/newopen/sshards/ok/u/a/pdf_secure/YY1.php
Type: SMW-SA-06504-mlw.phish-3
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/plugins/open/newopen/newopen/newopen/newopen/sshards/ok/u/a/pdf_secure/LL1.php
Type: SMW-SA-06226-mlw.phish-3
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/plugins/Doc/Sign/verification.php
Type: SMW-SA-06549-mlw.phish-7
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/Doc/Sign/index.php
Type: SMW-SA-06550-mlw.phish-1
Filename: /home/paradig/domains/paradigmmusic.net/public_html/wp-content/themes/paradigmmusic/header.php
Type: SMW-SA-03926-bkdr-3
Filename: /home/paradig/domains/paradigmmusic.net/public_html/fonts/paradigmmusic/header.php
Type: SMW-SA-03926-bkdr-3
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/plugins/open/newopen/newopen/newopen/newopen/sshards/ok/u/a/pdf_secure/OF.php
Type: SMW-SA-06226-mlw.phish-3
Filename: /home/paradig/backups/test/cpmove-paradig/homedir/public_html/wp-content/plugins/Doc/Sign/index.php
Type: SMW-SA-06550-mlw.phish-1
Filename: /home/paradig/domains/paradigmmusic.net/public_html/wp-content/plugins/Doc/Sign/index.php
Type: SMW-SA-06550-mlw.phish-1
Me
Nov 08, 9:50 AM
continuing--Suggested Actions Per Results
Any known Exploit Files should be manually reviewed and remove if determined to be illegitimate. You should also check the status of any software being used in the account and make sure the software is running the latest most secure version. The most common cause of malware or compromised accounts is outdated software.
In cases where there are a large volume of results, it may be best to first take some time to identify any old/unused installations, make local backups if necessary and then remove them from the server entirely.
It is recommended that you change any passwords on the account as a precaution. This includes but is not limited to any software admin logins, database user passwords and the control/FTP account password.
Please let us know if you have any questions and/or how you would like to proceed. Once a substantial portion of the results have been addressed we can run a new scan. Thank you.
visit our website | log in to your account | get support
Copyright © HostRocket, All rights reserved.