Vesta Control Panel - Forum

Community Forum
https://forum.vestacp.com/

Server Is Sending Spam Email

https://forum.vestacp.com/viewtopic.php?f=12&t=8740

Page 1 of 1

Server Is Sending Spam Email

Posted: Wed Jul 01, 2015 4:01 pm
by msk19994
Hey Guys
I have no idea why my server is sending spam
according to the logs

Code: Select all

2015-07-01 17:45:56 1ZAKCy-0000FV-9B <= <> R=1Z9VFh-0004IB-55 U=exim P=local S=1445
2015-07-01 17:45:56 1ZAKCy-0000FV-9B lowest numbered MX record points to local host: imgrill.com
2015-07-01 17:45:56 1ZAKCy-0000FV-9B == [email protected] R=dnslookup defer (-1): lowest numbered MX record points to local host
2015-07-01 17:45:56 1ZAKCy-0000FV-9B Frozen
2015-07-01 17:45:56 1Z9agZ-0002T7-Ic Unfrozen by errmsg timer
2015-07-01 17:45:56 1Z9agZ-0002T7-Ic == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:45:56 1Z9cXy-000BTT-3V Message is frozen
2015-07-01 17:45:56 1Z9q09-0006fa-NN Message is frozen
2015-07-01 17:45:56 1ZA4em-0004wO-Ub Message is frozen
2015-07-01 17:45:56 1Z9eYc-0009vp-83 Message is frozen
2015-07-01 17:45:56 1ZAIg6-0000PS-Hl Message is frozen
2015-07-01 17:45:56 1Z9jzS-0001sg-Rj Message is frozen
2015-07-01 17:45:56 1ZAHMw-0005Gx-6N Message is frozen
2015-07-01 17:45:56 1ZA3x8-000FSE-AF Message is frozen
2015-07-01 17:45:56 1Z9adb-0001Sm-8g == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:45:56 1ZAC4Z-00098D-8w Message is frozen
2015-07-01 17:45:56 1Z9HXB-0008Wz-FS == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:56 1Z9h2U-000D6l-Rw Message is frozen
2015-07-01 17:45:56 1ZACGu-0001wC-L1 Message is frozen
2015-07-01 17:45:56 1Z9aC1-000Aub-T2 == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:45:56 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:56 1Z93AO-00017k-9O SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2433: host mta5.am0.yahoodns.net [98.136.217.203]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:56 1Z9ZPS-000EmH-NC SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1805: host mta5.am0.yahoodns.net [98.136.216.26]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [66.196.118.34]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [66.196.118.240]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1Z9ZPS-000EmH-NC SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1805: host mta5.am0.yahoodns.net [66.196.118.35]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1Z9ZPS-000EmH-NC == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1805: host mta5.am0.yahoodns.net [66.196.118.35]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:57 1ZAKCz-0000G2-Bc <= <> R=1Z9ZPS-000EmH-NC U=exim P=local S=1456
2015-07-01 17:45:57 1ZAKCz-0000G2-Bc lowest numbered MX record points to local host: imgrill.com
2015-07-01 17:45:57 1ZAKCz-0000G2-Bc == [email protected] R=dnslookup defer (-1): lowest numbered MX record points to local host
2015-07-01 17:45:57 1ZAKCz-0000G2-Bc Frozen
2015-07-01 17:45:57 1Z9XSH-000Aao-Sm == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:45:57 1ZAA1S-0001Bj-Du Message is frozen
2015-07-01 17:45:57 1ZA6Jo-0007kW-VD Message is frozen
2015-07-01 17:45:57 1Z9dsn-000Fn5-B9 == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:57 1ZA6Qo-0009gq-0e Message is frozen
2015-07-01 17:45:57 1Z9y27-0000zK-9M Message is frozen
2015-07-01 17:45:57 1ZA0FT-000Ezf-Hj Message is frozen
2015-07-01 17:45:57 1Z9OmH-0005mk-QH == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:57 1ZAA9m-0002Vl-9T Message is frozen
2015-07-01 17:45:57 1ZAB0d-000Giv-TM Message is frozen
2015-07-01 17:45:57 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z93AO-00017k-9O SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2433: host mta6.am0.yahoodns.net [98.136.217.202]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [98.136.216.25]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [98.136.217.203]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [66.196.118.240]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:58 1Z9fHs-0002ih-GZ SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1788: host mta6.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z93AO-00017k-9O SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2433: host mta6.am0.yahoodns.net [63.250.192.45]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z93AO-00017k-9O == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2433: host mta6.am0.yahoodns.net [63.250.192.45]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [66.196.118.35]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z9OmH-0005mk-QH == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:59 1ZAA9m-0002Vl-9T Message is frozen
2015-07-01 17:45:59 1ZAB0d-000Giv-TM Message is frozen
2015-07-01 17:45:59 1ZA6l9-0001OV-O8 Message is frozen
2015-07-01 17:45:59 1Z9bc0-000EgB-ND == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:45:59 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [66.196.118.37]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:45:59 1Z9fHs-0002ih-GZ SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1788: host mta6.am0.yahoodns.net [66.196.118.34]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9boD-0001Su-2L SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [66.196.118.34]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9boD-0001Su-2L == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1829: host mta7.am0.yahoodns.net [66.196.118.34]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9gLM-0001f6-JT Message is frozen
2015-07-01 17:46:00 1Z9aM5-000DKO-O8 Unfrozen by errmsg timer
2015-07-01 17:46:00 1Z9aM5-000DKO-O8 == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:46:00 1Z9mDS-00062l-7b Message is frozen
2015-07-01 17:46:00 1ZAC6N-000A4w-Sg Message is frozen
2015-07-01 17:46:00 1Z9L5z-000BnH-O6 == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:00 1Z9dyK-000Gr0-4l Message is frozen
2015-07-01 17:46:00 1Z9lYG-000GZs-Bu Message is frozen
2015-07-01 17:46:00 1Z9UpD-000GrP-90 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2417: host mta7.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9fHs-0002ih-GZ SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1788: host mta6.am0.yahoodns.net [66.196.118.35]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z8zaP-000DQV-KR == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:00 1Z9W31-000Cd8-P1 Unfrozen by errmsg timer
2015-07-01 17:46:00 1Z9W31-000Cd8-P1 == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:46:00 1ZAHr4-0009er-T2 Message is frozen
2015-07-01 17:46:00 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [66.196.118.33]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:00 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9UpD-000GrP-90 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2417: host mta7.am0.yahoodns.net [66.196.118.33]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9fHs-0002ih-GZ SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1788: host mta6.am0.yahoodns.net [98.138.112.38]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9ZLY-000DJ3-S7 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9ZLY-000DJ3-S7 == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=1753: host mta7.am0.yahoodns.net [63.250.192.46]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1ZAKD3-0000H3-Ld <= <> R=1Z9ZLY-000DJ3-S7 U=exim P=local S=1442
2015-07-01 17:46:01 1ZAKD3-0000H3-Ld lowest numbered MX record points to local host: imgrill.com
2015-07-01 17:46:01 1ZAKD3-0000H3-Ld == [email protected] R=dnslookup defer (-1): lowest numbered MX record points to local host
2015-07-01 17:46:01 1ZAKD3-0000H3-Ld Frozen
2015-07-01 17:46:01 1Z9pDt-00007m-0l Message is frozen
2015-07-01 17:46:01 1Z91AX-000D5S-Rw == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:01 1ZA8Zx-0002rL-G9 Message is frozen
2015-07-01 17:46:01 1Z9hln-0008sO-Tm Message is frozen
2015-07-01 17:46:01 1Z9xJg-0009JY-R3 == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:01 1ZACEH-000GLL-9z Message is frozen
2015-07-01 17:46:01 1ZA9Ye-000D5l-V9 Message is frozen
2015-07-01 17:46:01 1Z9csL-000GsY-KS Message is frozen
2015-07-01 17:46:01 1ZA90A-0007kc-JH Message is frozen
2015-07-01 17:46:01 1Z9bLW-000BFW-6I SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [98.136.217.202]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1ZA04o-000Cob-Od == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:01 1Z9pvK-000647-A6 Message is frozen
2015-07-01 17:46:01 1Z9bLW-000BFW-6I == [email protected] R=dnslookup T=remote_smtp defer (-45): SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=2371: host mta6.am0.yahoodns.net [98.136.217.202]: 421 4.7.0 [TS01] Messages from 62.210.96.57 temporarily deferred due to user complaints - 4.16.55.1; see http://postmaster.yahoo.com/421-ts01.html
2015-07-01 17:46:01 1Z9vvO-000A3T-EM Message is frozen
2015-07-01 17:46:01 1ZAKD3-0000HL-OC <= <> R=1Z9bLW-000BFW-6I U=exim P=local S=1436
2015-07-01 17:46:01 1ZAKD3-0000HL-OC lowest numbered MX record points to local host: imgrill.com
2015-07-01 17:46:01 1ZAKD3-0000HL-OC == [email protected] R=dnslookup defer (-1): lowest numbered MX record points to local host
2015-07-01 17:46:01 1ZAKD3-0000HL-OC Frozen
2015-07-01 17:46:01 1Z9aBl-000Apd-Iy Unfrozen by errmsg timer
2015-07-01 17:46:01 1Z9aBl-000Apd-Iy == [email protected] routing defer (-51): retry time not reached
2015-07-01 17:46:01 1ZAHuT-000A6D-Pf Message is frozen
2015-07-01 17:46:01 1ZACOY-0007iB-RS Message is frozen
2015-07-01 17:46:01 1ZAJmZ-0008WJ-Aj Message is frozen
2015-07-01 17:46:01 1Z9hRw-0002vS-Ug Message is frozen
2015-07-01 17:46:01 1ZA6H0-0006vj-5P Message is frozen
2015-07-01 17:46:01 1ZAB6v-0003pi-AL Message is frozen
2015-07-01 17:46:01 1Z9hgJ-0006uc-VI Message is frozen
2015-07-01 17:46:01 1Z9gkV-0008Dj-Et Message is frozen
2015-07-01 17:46:01 1Z9MSv-0004t9-LQ == [email protected] R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2015-07-01 17:46:01 1Z9bOa-000C1V-Qh Message is frozen
2015-07-01 17:46:01 1Z9pZU-0002wh-7a Message is frozen
2015-07-01 17:46:01 1Z9fPL-0004og-3c Message is frozen
2015-07-01 17:46:01 1Z9giZ-0007Tf-2s Message is frozen
2015-07-01 17:46:01 1Z9l6V-000CWt-P5 Message is frozen
2015-07-01 17:46:01 1ZA3XC-000BbK-LK Message is frozen
I have disabled all the domains belonging to the ip 62.210.96.57 but still the spam

I have just used

Code: Select all

exim -bp|grep "<"|awk {'print $3'}|xargs exim -Mrm
to remove the mail queue to check if new que forms or not if not then its fixed i assume

Re: Server Is Sending Spam Email

Posted: Wed Jul 01, 2015 7:02 pm
by skurudo
It's can be shell script or something like this

See

Code: Select all

exim -Mvb XXXXXXXX
and

Code: Select all

exim -Mvh XXXXXXXX
where XXXXXXXX - spam message ID

you can see, what script send this

Re: Server Is Sending Spam Email

Posted: Thu Jul 02, 2015 7:05 am
by msk19994
Example i have

Code: Select all

 0m  2.4K 1ZAYWc-000BFJ-GK <> *** frozen ***
          [email protected]

 0m  2.4K 1ZAYWc-000BFL-JS <> *** frozen ***
          [email protected]
and then i tried what u said

Code: Select all

exim -Mvh 1ZAYWc-000BFL-JS
It says

Code: Select all

142P Received: from exim by imgrill.com with local (Exim 4.72)
        id 1ZAYWc-000BFL-JS
        for [email protected]; Thu, 02 Jul 2015 09:03:10 +0200
038  Date: Thu, 02 Jul 2015 09:03:10 +0200
044I Message-Id: <[email protected]>
037  X-Failed-Recipients: [email protected]
029  Auto-Submitted: auto-replied
055F From: Mail Delivery System <[email protected]>
029T To: [email protected]
059  Subject: Mail delivery failed: returning message to sender
Another one i tried was

Code: Select all

180P Received: from admin by imgrill.com with local (Exim 4.72)
        (envelope-from <[email protected]>)
        id 1ZAYUI-000Ayr-7S
        for [email protected]; Thu, 02 Jul 2015 09:00:46 +0200
022T To: [email protected]
035  Subject: 1 HotDown4Tonight Message
065  X-PHP-Originating-Script: 502:system93.php(1487) : eval()'d code
037  Date: Thu, 2 Jul 2015 07:00:46 +0000
046F From: Brenda Logan <[email protected]>
059I Message-ID: <[email protected]>
014  X-Priority: 3
068  X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
018  MIME-Version: 1.0
085  Content-Type: multipart/alternative;
        boundary="b1_abc2fae24dd2622a98f42271ee11734c"
032  Content-Transfer-Encoding: 8bit

Re: Server Is Sending Spam Email

Posted: Thu Jul 02, 2015 7:11 am
by skurudo

Code: Select all

065  X-PHP-Originating-Script: 502:system93.php(1487) : eval()'d code
Search system93.php and delete this spam-script:

Code: Select all

find /home -type f -name "system93.php"

Re: Server Is Sending Spam Email

Posted: Thu Jul 02, 2015 12:02 pm
by msk19994
skurudo wrote:

Code: Select all

065  X-PHP-Originating-Script: 502:system93.php(1487) : eval()'d code
Search system93.php and delete this spam-script:

Code: Select all

find /home -type f -name "system93.php"
You Sir are awesome
I was using normal find command but no idea it wasnt showing up,
Thanks Mate

Re: Server Is Sending Spam Email

Posted: Thu Jul 02, 2015 12:21 pm
by skurudo
msk19994 wrote:You Sir are awesome I was using normal find command but no idea it wasnt showing up,
Thanks Mate
No prob, you're welcome. ;-)
All times are UTC
Page 1 of 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/