unknown application appears in /public_html

• 

  wendyhuber · Member · May 23, 2012 at 5:25 pm

  • Copy link
  • Add topic to favorites

  Does any one know about this type of occurrence?

  I signed up for WEBSITEDEFENDER and was alerted with this

  New applications were detected in the following directories on your web server.
  A new instance of WordPress was detected in /home/wendyhub/public_html

  WEBSITEDEFENDER gave this answer for a solution:

  You should investigate the origin of this new application. If it was installed without authorization then it could indicate a malicious intrusion.

  I looked and found this, “d4564dc9e9625dfe9fa06df71fcfc17b85d3e56a.php,” file in /public_html which looks malicious. I deleted it yesterday. All is working onsite except I am still getting spammed even using my (CCF) Custom Contact Form using capcha text.

  I installed custom contact form (free) yesterday and today received 3 spam messages. Do you think malware has integrated into my site?
  What can you tell me about this?
  Do you think the php file is the application referenced here by WEBSITEDEFENDER?

  Any help is appreciated.

  The blog I need help with is: (visible only to logged in users)

• 

  timethief · Member · May 23, 2012 at 6:31 pm

  • Copy link

  I looked and found this, “d4564dc9e9625dfe9fa06df71fcfc17b85d3e56a.php,” file in /public_html which looks malicious.

  This is the WordPress.com support forum and we do not have access to php files. That means you are posting to the wrong support forum. You need to post to http://wordpress.org as you are asking about a WordPress.org install. One this support forum we only provide support to those who have blogs hosted by WordPress.com.
  For clarity read > http://support.wordpress.com/com-vs-org/

• 

  wendyhuber · Member · May 23, 2012 at 7:33 pm

  • Copy link

  Thank you for the clarification.

• 

  timethief · Member · May 23, 2012 at 7:38 pm

  • Copy link

  You’re welcome and best wishes with your site.