• Status: Assigned

FS#10310 - Malware detedtec on moudule theme

Hi

I have got some problem for malware... The hosting told me about the next files...

Do you know something about that ?

HEX}php.cmdshell.c99.222 : /home/gourmetc/public_html/modules/pk_flexmenu/uploads/hous.php
{HEX}php.cmdshell.c99.222 : /home/gourmetc/public_html/modules/pk_flexmenu_old/uploads/hous.php
{HEX}php.cmdshell.c99.222 : /home/gourmetc/public_html/modules/pk_vertflexmenu/uploads/hous.php
{HEX}php.cmdshell.c99.222 : /home/gourmetc/public_html/modules/cartabandonmentpro/uploads/hous.php.png

Thanks

This ticket does not depend on any other tickets.

Marek (marek)
Thursday, 16 March 2017, 11:47 GMT+1
Support Team

Hi javier.
Alysum theme has been updated several month ago. Envato had send an email about that to all buyers.
Here is the screenshot of their email: https://www.dropbox.com/s/wgjgxtrmbl0afr3/Screenshot%202017-03-11%2021.41.10.png?dl=0 You can download latest theme version here: https://themeforest.net/downloads

Following files has been updated

- pk_flexmenu.php
- ajax/upload.php

and

- pk_vertflexmenu.php
- ajax/upload.php
javier Molina (jafmolina)
Thursday, 16 March 2017, 11:50 GMT+1

:(

I can fix it yet? HOw can I can Update that?

Thanks a lot

Marek (marek)
Thursday, 16 March 2017, 11:51 GMT+1
Support Team

Just upload mentioned files to your server

javier Molina (jafmolina)
Thursday, 16 March 2017, 11:54 GMT+1

Thanks

I have to delate the old files or just replace it...

And about the php.cmdshell.c99.222 : /home/gourmetc/public_html/modules/pk_vertflexmenu/uploads/hous.php ??

Thanks

Marek (marek)
Thursday, 16 March 2017, 11:55 GMT+1
Support Team

Wait a moment, I'll do that for you.

Marek (marek)
Thursday, 16 March 2017, 11:56 GMT+1
Support Team

Please fill out all necessary fields in your profile https://support.promokit.eu/index.php?do=myprofile to access to your server through FTP

javier Molina (jafmolina)
Thursday, 16 March 2017, 11:58 GMT+1

An the other I have to delaid iT ?

Done :-) I am doing it as soon as i read it.

Thanks a lot..

Marek (marek)
Thursday, 16 March 2017, 11:59 GMT+1
Support Team

I'll remove all alien files

javier Molina (jafmolina)
Thursday, 16 March 2017, 12:03 GMT+1

:-) So many thanks. You know I am waiting to invite you for a beer in spain :)

DO you know how i can check to be sure i haven´t got any thing more . It was tell me for the hosting... but yesterday they told me about another file.

How can I be sure That I don´t need anything more.

So all it was update.. Car abondonet as well?

Thanks

Marek (marek)
Thursday, 16 March 2017, 12:06 GMT+1
Support Team

Now all files has been updated and alien files removed. For now we don't know about any other holes in modules.
Regarding your invite, that's very kind :) I was in Spain last summer, and I always want to return. So if I'll have such plan I'll let you know :)

javier Molina (jafmolina)
Friday, 17 March 2017, 09:40 GMT+1

Thanks I hope all will be ok now ... I wait t meet you in the future :-)

javier Molina (jafmolina)
Friday, 17 March 2017, 10:29 GMT+1

HI

The hostin scan tell me again the next corrupted file. It is a module Normal Files ?

{HEX}php.cmdshell.c99.222 : /home/gourmetc/public_html/modules/pk_flexmenu/uploads/hous.php
{HEX}php.cmdshell.c99.222 : /home/gourmetc/public_html/modules/pk_flexmenu_old/uploads/hous.php
{HEX}php.cmdshell.c99.222 : /home/gourmetc/public_html/modules/pk_vertflexmenu/uploads/hous.php
{HEX}php.cmdshell.c99.222 : /home/gourmetc/public_html/modules/cartabandonmentpro/uploads/hous.php.png

Thanks

Marek (marek)
Friday, 17 March 2017, 10:40 GMT+1
Support Team

you need to delete that files

javier Molina (jafmolina)
Friday, 17 March 2017, 10:47 GMT+1

Done. Now should be ok doen´t you.

Thanks a lot MArek

Marek (marek)
Friday, 17 March 2017, 10:47 GMT+1
Support Team

Yes, right

Beatriz (beita_6)
Monday, 20 March 2017, 12:29 GMT+1

Hello I can't get the new version of that files to fix it, I receive this message in my download panel:

====Avena - Responsive Premium Prestashop 1.6 Theme

Regular License
Download not available

Item removed by either staff or the author
You may still download your License certificate & purchase code (text) for this item.====

I bought your theme few years ago... How can I get that files please?

Loading...