johannes Posted July 29, 2018 Share Posted July 29, 2018 Is it possible to renew account johnnyt ? I think the reason is inactivity can't think of another reason thanks, Johannes Link to comment Share on other sites More sharing options...
johannes Posted July 29, 2018 Author Share Posted July 29, 2018 <p>Sorry in mobile view I did not see the posting rules</p><p> </p><p>Account name: johnnyt</p><p>Server: tommy</p><p>domains:</p><p>adalbert-feltz.at</p><p>johannesteichert.info </p> Link to comment Share on other sites More sharing options...
Byron Posted July 29, 2018 Share Posted July 29, 2018 This account has a compromised CMS installation that has been affected by the recent AnonymousFox hack and cannot be unsuspended. An invitation will be sent to you shortly so you can create a new account. Please restore your data using a backup. The data from your old account cannot be recovered or returned to you due to the possibility of the account having been used for Phishing. As a reminder, when selecting a CMS, we highly recommend that users not use WordPress. WP and it's extensions are notorious for having security issues such as the one you (and everyone else on Tommy) experienced, and it has the worst security track record of any CMS out there. Using a different program will help prevent this from happening again. 1 Link to comment Share on other sites More sharing options...
johannes Posted July 30, 2018 Author Share Posted July 30, 2018 Ok, that's disappointing Just out of curiosity, can you tell which of my WordPress installations were affected ? Link to comment Share on other sites More sharing options...
wolstech Posted July 30, 2018 Share Posted July 30, 2018 The compromised installation was the install using database johnnyt_wp738, which appears to be for adalbert-feltz.at. Malware is present in numerous other places outside this install though. The installation listed above is just the one that had the AnonymousFox user added to it. Link to comment Share on other sites More sharing options...
johannes Posted July 30, 2018 Author Share Posted July 30, 2018 thanks for the info Link to comment Share on other sites More sharing options...
johannes Posted July 30, 2018 Author Share Posted July 30, 2018 is it possible to get access to my files a last time? ... my last backup is a little while back... Link to comment Share on other sites More sharing options...
wolstech Posted July 30, 2018 Share Posted July 30, 2018 Depends which files you need. I can't provide access due to possible phishing (which is what the hacker was ultimately planning to use the compromised accounts for...) and I can't provide any PHP files because they're infected, but if there's images/databases/etc. you need, I may be able to fetch those for you and drop them in the home folder of your new account. Link to comment Share on other sites More sharing options...
johannes Posted July 30, 2018 Author Share Posted July 30, 2018 wow this would be great,if possible the uploaded media files from public_html/adalbert-feltz.at/wp-content/uploads,a database export of the johnnyt_wp738 database (to extract the posts and additional css)new account name is johnnylt you can also sent per email it to me if you dont want to make an infected database accessible on the host. thanks Link to comment Share on other sites More sharing options...
wolstech Posted July 30, 2018 Share Posted July 30, 2018 The files have been placed in your home folder. Please note that the contents of one of the subfolders was infected and has been discarded. In addition, the users table of thejohnnyt_wp738 database was truncated before export due to malicious user accounts being present. Link to comment Share on other sites More sharing options...
johannes Posted August 4, 2018 Author Share Posted August 4, 2018 thank you so much this helped tremendously!!! will remember this event when I create another website, probably choose a static site generator like lektor or jekyll. Link to comment Share on other sites More sharing options...
Recommended Posts