[fsug-tvm] Spamming Script from OpenCart Project

--001a1143dd189983e4052bf00bf9
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hello,

This is an offtopic, a help seeking message.

We have done a project on OpenCart which is residing in our VPS. Somehowm
one malicious script is creating Spam Emails. We have found out that php
file and cleared it. But this repeats again and dynamically such spam
sending scripts are being generated. This makes entire vps server fail and
other serious problems.

We have inspected for base64 encryption and other normal method find such
malicious code but none to find. We have changed  passwords several times
but still the issue persists.


Is there any one here who has some experience on this ? the problem is we
cannot locate which files creates spam sending scripts dynamically.


please help


thank you


**
Jai Bhim
-- JeevZ --

*Jeevachaithanyan Sivanandan
+919446196667
http://jeevanism.wordpress.com/
-- I Take Refuge On The Enlightened Wisdom --
-- =E0=B4=AC=E0=B5=81=E0=B4=A6=E0=B5=8D=E0=B4=A7=E0=B4=82,=E0=B4=A7=E0=B5=
=BC=E0=B4=AE=E0=B4=82, =E0=B4=B8=E0=B4=82=E0=B4=98=E0=B4=82  =E0=B4=B6=E0=
=B4=B0=E0=B4=A3=E0=B4=82 =E0=B4=97=E0=B4=9A=E0=B5=8D=E0=B4=9B=E0=B4=BE=E0=
=B4=AE=E0=B4=BF --
*







This email has been sent from a virus-free computer protected by Avast.
www.avast.com <https://www.avast.com/sig-email>
<#DDB4FAA8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

--=20
--=20
"Freedom is the only law".=20
"Freedom Unplugged"
http://www.ilug-tvm.org

You received this message because you are subscribed to the Google
Groups "ilug-tvm" group.
To control your subscription visit http://groups.google.co.in/group/ilug-tv=
m/subscribe
To post to this group, send email to ilug-tvm-/[email protected]
To unsubscribe from this group, send email to
ilug-tvm-unsubscribe-/[email protected]



For details visit the google group page: http://groups.google.com/group/ilu=
g-tvm?hl=3Den

---=20
You received this message because you are subscribed to the Google Groups "=
Free Software Users Group,  Thiruvananthapuram" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to ilug-tvm+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/[email protected]
For more options, visit https://groups.google.com/d/optout.

--001a1143dd189983e4052bf00bf9
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-family:trebuche=
t ms,sans-serif;font-size:small">Hello,<br><br></div><div class=3D"gmail_de=
fault" style=3D"font-family:trebuchet ms,sans-serif;font-size:small">This i=
s an offtopic, a help seeking message. <br><br></div><div class=3D"gmail_de=
fault" style=3D"font-family:trebuchet ms,sans-serif;font-size:small">We hav=
e done a project on OpenCart which is residing in our VPS. Somehowm one mal=
icious script is creating Spam Emails. We have found out that php file and =
cleared it. But this repeats again and dynamically such spam sending script=
s are being generated. This makes entire vps server fail and other serious =
problems. <br><br></div><div class=3D"gmail_default" style=3D"font-family:t=
rebuchet ms,sans-serif;font-size:small">We have inspected for base64 encryp=
tion and other normal method find such malicious code but none to find. We =
have changed=C2=A0 passwords several times but still the issue persists.<br=
><br><br></div><div class=3D"gmail_default" style=3D"font-family:trebuchet =
ms,sans-serif;font-size:small">Is there any one here who has some experienc=
e on this ? the problem is we cannot locate which files creates spam sendin=
g scripts dynamically. <br><br><br></div><div class=3D"gmail_default" style=
=3D"font-family:trebuchet ms,sans-serif;font-size:small">please help<br><br=
><br></div><div class=3D"gmail_default" style=3D"font-family:trebuchet ms,s=
ans-serif;font-size:small">thank you <br></div><div class=3D"gmail_default"=
 style=3D"font-family:trebuchet ms,sans-serif;font-size:small"><br><br clea=
r=3D"all"></div><div><div class=3D"gmail_signature">**<br>Jai Bhim<br>-- Je=
evZ --<br><br>*Jeevachaithanyan Sivanandan<br>+919446196667<br><a href=3D"h=
ttp://jeevanism.wordpress.com/" target=3D"_blank">http://jeevanism.wordpres=
s.com/</a><br>-- I Take Refuge On The Enlightened Wisdom --<br>-- =E0=B4=AC=
=E0=B5=81=E0=B4=A6=E0=B5=8D=E0=B4=A7=E0=B4=82,=E0=B4=A7=E0=B5=BC=E0=B4=AE=
=E0=B4=82, =E0=B4=B8=E0=B4=82=E0=B4=98=E0=B4=82=C2=A0 =E0=B4=B6=E0=B4=B0=E0=
=B4=A3=E0=B4=82 =E0=B4=97=E0=B4=9A=E0=B5=8D=E0=B4=9B=E0=B4=BE=E0=B4=AE=E0=
=B4=BF -- <br>*<br><br><br><br><br><br><br></div></div>
</div><div id=3D"DDB4FAA8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br>
<table style=3D"border-top:1px solid #aaabb6">
	<tr>
		<td style=3D"width:470px;padding-top:20px;color:#41424e;font-size:13px;fo=
nt-family:Arial,Helvetica,sans-serif;line-height:18px">This email has been =
sent from a virus-free computer protected by Avast. <br><a href=3D"https://=
www.avast.com/sig-email" target=3D"_blank" style=3D"color:#4453ea">www.avas=
t.com</a>
		</td>
	</tr>
</table><a href=3D"#DDB4FAA8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width=3D"1" heigh=
t=3D"1"></a></div>

<p></p>

-- <br />
-- <br />
&quot;Freedom is the only law&quot;. <br />
&quot;Freedom Unplugged&quot;<br />
<a href=3D"http://www.ilug-tvm.org">http://www.ilug-tvm.org</a><br />
&nbsp;<br />
You received this message because you are subscribed to the Google<br />
Groups &quot;ilug-tvm&quot; group.<br />
To control your subscription visit <a href=3D"http://groups.google.co.in/gr=
oup/ilug-tvm/subscribe">http://groups.google.co.in/group/ilug-tvm/subscribe=
</a><br />
To post to this group, send email to ilug-tvm-/[email protected]<br />
To unsubscribe from this group, send email to<br />
ilug-tvm-unsubscribe-/[email protected]<br />
&nbsp;<br />
&nbsp;<br />
&nbsp;<br />
For details visit the google group page: <a href=3D"http://groups.google.co=
m/group/ilug-tvm?hl=3Den">http://groups.google.com/group/ilug-tvm?hl=3Den</=
a><br />
<br />
--- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Free Software Users Group,  Thiruvananthapuram&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:ilug-tvm+unsubscribe-/[email protected]">ilug-tvm+u=
nsubscribe-/[email protected]</a>.<br />
For more options, visit <a href=3D"https://groups.google.com/d/optout">http=
s://groups.google.com/d/optout</a>.<br />

--001a1143dd189983e4052bf00bf9--