Site Suspended

[fspaint]

Evening,

For some reason, after pruning a load of users from my site and then starting a full update of my website to the latest version of E107, my site has stopped working for some reason. On investigating, I've discovered that a ToS breach has shown on my account for unknown scripts included in the original package. Any way of sorting it out?

website: rnhvirtual.exofire.net

Its a shame as the site is about to public again after a complete rebuild.

Jon

 

[masshuu]

I find it hard to belive a popular CMS would include these files.
From a quick look at the timestamps on the files, i would say that there is a chance your account was compromised. There are 3 new files, one being a mass mailer, one being a shell script, and one being one that i am not sure what it does(its encrypted)
If this is the case, then after an admin looks over your account, you will get the option to make a backup of any important files and then they will wipe the account(your mysql databases will remain) due to the possibly of malicious code getting injected into other php files.

 

[fspaint]

I find it hard to belive a popular CMS would include these files.
From a quick look at the timestamps on the files, i would say that there is a chance your account was compromised. There are 3 new files, one being a mass mailer, one being a shell script, and one being one that i am not sure what it does(its encrypted)
If this is the case, then after an admin looks over your account, you will get the option to make a backup of any important files and then they will wipe the account(your mysql databases will remain) due to the possibly of malicious code getting injected into other php files.

Hi,

I had a feeling that might have happened as it would be wierd for E107 to include such files. I would be grateful if I could get important files backed up so that not everything is lost as first feared.

Thanks,

Jon

 

[fspaint]

Bump? I can fully understand that people are busy and that the admins do this in thier spare time but It would be nice to have a update on this. I've checked all my e107 files and none of the files mentioned above have been found on my PC or in my E107 installation files. It would seem the account has been compromised. Annoyingly.

Jon

 

[descalzo]

starting a full update of my website to the latest version of E107,

Also, where did you get the update?

Some 'helpful' 3rd party 'mirrors' can be questionable.

 

[fspaint]

I got it from the E107 site itself: http://e107.org/edownload.php

Package: e107 0.7.x to 0.7.24 Upgrade (.zip)

Jon

 

[masshuu]

Sorry, i forgot to escalate the thread so an admin can look over your account.