Original Article at WordPress eval base64_decode Hack.Troubleshoot eval(base64_decode This post describes the impact of eval(base64_decode on Zo Nicholas’ WordPress based Author blog. 1. The Symptoms The first symptoms noticed were a change of the layout of the site: the site was not anymore browser centered but hanging on the left edge of the scree. Checking out the site from server side, we notice that all index.php files show a modified first line starting like so: then follows a long, long string of encrypted code. Also we find unusual php files which have been added on server side. Surprisingly all added content does not trigger a change of the date of the file (last modified). 2. The analysis 2.1 First we went to decode the above hack: Decoding can be easily done from TOASTEDspam. 2.2 We run an exploit scan on the site To scan the site we use the Exploit Scan Plug-in and get: 79 severe level matches: Further 39 Warnings were detected. Besides, the scan came forth with 520 noteworthy matches. 3. Troubleshooting eval (base64_decode While the Exploit scan indicates where the hack may have impacted, the result may not be complete. As you can see from the above, manual troubleshooting can easily mess [...]
Copyright © Yorgo Nestoridis - Original Article at WordPress eval base64_decode Hack.
Related posts:NewsCast Data Base Maintenance
WordPress 2.9 update on Semiomantics
BuddyPress Yorgoo Media
Facebook Profile Picture Hack
YORGOO Press Important Update
Copyright © 2011 Yorgo Nestoridis. Visit the original article at http://yorgonestoridis.com/yorgo-nestoridis-development/troubleshooting/hosting-5-important/.Further Recovery possible Vouliagmeni, March 8, 2009 — by Yorgo Nestoridis 1. Back-ups: as on ChiHosters we offer serverside back-up fetures to resellers at a minimal cost: as soon as our own site is back up and functional we will put this feature back on offer. 2. As we have reported earlier (Update 4), all automated back-ups have been installed and are running. 3. Further Recovery: We continue to spend hard bucks and time on further recovery. All further recoveries need to be done manually and it takes about 1 hour per user account (pro rates apply), whereas I am aware that some resellers have quite a lot of them. Here is the deal: there are some sites with hardly any content where it s easier to do new set-ups. Let’s not waste time and money on those. Owners must send us a list with usernames (only User names) which they want us to recover: please don’t include accounts with hardly any content as the time needed is the same as for a content rich site, but it’s simply not worth doing it. Please send the lists to my personal email [...]
Related posts:Hosting Update 4
Hosting Update 3
Hosting South Africa
Hosting South Africa
New Hosting South Africa Theme Released
Copyright © 2011 Yorgo Nestoridis. Visit the original article at http://yorgonestoridis.com/yorgo-nestoridis-development/troubleshooting/hosting-update-4/.Tsunami Aftermath The reloading of the back-ups have been completed from server side. All sites which do not show now, are irremediably lost unless the site owner has personal back-ups which could be loaded. The situation is serious and it reminds me of the shock after a Tsunami or after a major Earthquake. First the shock, then the anger and then , … yes, then the brave will get up and rebuild. Rebuild better, safer, differently, but REBUILD! We are all in the same boat and victim of an unfortunately more common event online than many may be aware of. Right now we are dressing a list of damage in order to define priorities. Please comment this article to let us know, which of your URL’s are missing. Please consider that your domains must point to the server using the DNS settings as indicated in Hosting Update 3. We will dress separate lists for sites at Ycademy.net, Semiomantics.net, YORGOOBlaster.com, so please don’t post these URLs for the time being. Hosting Sellers and Resellers: In most cases we need to rebuild the reseller sites — this is definitely a priority. We [...]
Related posts:Hosting South Africa
Hosting Update 3
Hosting South Africa
New Hosting South Africa Theme Released
Hosting South Africa
Copyright © 2011 Yorgo Nestoridis. Visit the original article at http://yorgonestoridis.com/yorgo-nestoridis-development/troubleshooting/hosting-update-3/.All new Servers are up and running   All newly built servers are up and running and we are completing data restore from the back-up in the Network Attached Storage. At present we are loading accounts with the user names beginning with ‘r’. Later today we expect all acounts to be restored to the level of that back-up.  IMPORTANT Please point your domains’ DNS settings to: ns21.myviphosting.com ns22.myviphosting.com ns92.myviphosting.com ns93.myviphosting.com  Hosting Resellers Please apply the above to all domains you host., however: if you use your own name servers, modify the name servers to: ns1…    38.114.169.92 ns2…    38.114.169.93 If your Nameservers are: ns1.yorgobiz.net and ns2.yorgobiz.net you don’t need to change anything. Your WHM should be back, however the accounts may not be loaded and visible there.  Loss of Data The back-up entails a roll back. The most recent accounts will therefore not be loaded and need to be created again. Older accounts will come in with the content up to the date of the back-up. If you dispose of more recent back-ups, just load them or if you need help, contact our support desk [...]
Related posts:Hosting South Africa
Hosting South Africa
Hosting South Africa News 105
New Hosting South Africa Theme Released
Hosting South Africa YORGOO Blaster
July 9, 2011
0