URGETN!!! Please Read And Help Me!

Hello all, today I received this email from my web host DREAM HOST

Hello,

We have detected numerous spam (phishing) emails having originated from
your 'shandaman' account. It would appear that spammers have somehow
exploited an insecure script/software under the account in order to send
out unsolicited bulk email. If you check your email, you will likely see
a number of these having bounced back to you.

We would appreciate it if you could go through your account and update
any and all 3rd party scripts under it - particularly those that either
include email functionality or interact with the file system in some
manner. Old versions of WordPress, PHPBB, etc. are common causes for this
sort of thing, as are openly available upload scripts. You should also
look to see if any suspicious files can be found that you did not upload
yourself.

We have been unable to identify the script or domain that was used, and
technically any material under the account could have been exploited. As
such, we have disabled _all_ domains under your shandaman account. Please
do not re-enable any of these domains until you can personally vouch that
they are completely 100% secure.

Also: Please note that as this is the 2nd isolated case of phishing
associated with your account - a very serious matter. If this happens
again, I am afraid that we will have no choice but to disable your
account entirely. We cannot have insecure 3rd party software installed on
our servers.

Jeff,
Click to expand...

I replied saying...

OK, well I have to get this problem figured out, so with your help I am sure I can get it done right. To begin with ALL of the Wordpress installs that I have came from DreamHost one click installs. I do not have any phpbb on the server that I am aware of? Do you see any? Have you changed any of the Wordpress systems since I have been hosting with you for the last 3 months? Am I supposed to update the wordpress systems from your site on a regular basis to eliminate old versions? Do the Wordpress versions change on a regular basis? If so, how often do I update those and do I go to the same dream host one click install section on your website? If you are secure with the wordpress system that came from Dream Host and you put up the sites so I can work on them, I will "IMMEDIATELY" disable the accounts that have CubeCart and Vbulletin installed, and remove FormMail.cgi / .pl from the sites that use it I will run these through a massive check and filter system and then contact you before any of those would be put back up, to let you know what I have found. There are no other 3rd Party Systems on our account! Will you be satisfied with this?

Shannon
Click to expand...

Ok, now that you are fully equipped with what was said thus far, I have some questions about the Vbulletin, FormMail.cgi and Cubecart Systems, has anyone seen or hear any reports about phishing emails through these systems. I need my sites to be secure, and I am willing to upgrade any systems if that is the case. Please help me asap!

Log in or Sign up

URGETN!!! Please Read And Help Me!

truedesign4u Banned

Log in or Sign up

URGETN!!! Please Read And Help Me!

truedesign4u Banned

Useful Searches