dmacomber

  • Total activity 10
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 0
  • Subscriptions 4

Activity overview

Latest activity by dmacomber

  • dmacomber commented,

    1. Community
    2. Email
    3. Find scripts responsible for sending out spam

    CrazyPanda, Again, in my case, here is my /home/domain/public_html/php.ini file ..... [/home/.../public_html]# cat php.ini register_globals = Off extension=pdo.so extension=pdo_mysql.so mail.add_...

  • dmacomber commented,

    1. Community
    2. Email
    3. Find scripts responsible for sending out spam

    In my case I had to edit /home/"TheSite"/public_html/php.ini The next question after deleting the malicious script is to find out how it got there and what to do when it keeps coming back.

  • dmacomber commented,

    1. Community
    2. Email
    3. Block individual email from sending spam from server

    I had similar situation. So this is what I did My immediate action was to put an exim custom filter rule to forward those emails back to me. Most had the same "Pizza Hut Coupon" subject, so they ...

  • dmacomber commented,

    1. Community
    2. Security
    3. Malicious php script keeps coming back.

    Quizknows, Thanks for the info. I found over 800 entries for November in the log for the PHP script from the same IP. I couldn't get the stat for the file since I deleted it. I guess I could blo...

  • dmacomber created a post,

    Malicious php script keeps coming back.

    1. Community
    2. Security

    Hi, I have a malicious script /home/MySite/public_html/sites/all/modules/references/menu87.php that sends out spam from a non-existent email address from my domain. I delete it and a few days lat...

    • dmacomber
    • 3 followers
    • 3 comments
    • 0 votes

  • dmacomber commented,

    1. Community
    2. Email
    3. Hundreds of emails being sent from fake email accounts

    I had a very similar situation recently. Just a hunch but look for a menu87.php ( find / -name menu87.php) deep in that domains public_html directory. delete it and restart services. or do below...