Удалить вирус (бэкдор) с сайта.

Добрый день!

На мой сайт поступила жалоба о рассылке спама с моего сервера.

Нужно изучить логи, удалить вредоносный код и закрыть уязвимости.

Письмо с жалобой прилагаю.

Уважаемый клиент!

К сожалению, вынуждены сообщить, что в адрес Вашего сервера поступила жалоба.

This is an abuse report for an email message sent by mail server www.neoluxe.ru [5.183.188.87] on Mon, 16 Jan 2023 00:45:22 -0300

If you believe that this report is a mistake, request to recipient the release of this sender at https://matrix.spfbl.net/NOu_jC8dMfqUbfiVSWg8SUYskQf6FFYZcHk2_RQ3j4m502Y2Z21hAQklVzwV7UkYylDPMFMryc7mriglXv9hnRurHbxeTLxHX3RGRezHQvA

If you have any question about this abuse, contact the mail box administrator [[email protected]].

For more information about this abuse format below, see https://tools.ietf.org/html/rfc5965

Feedback-Type: abuse

User-Agent: SPFBL/3.1

Version: 1

Original-Mail-From: [[email protected]]

Original-Rcpt-To: [[email protected]]

Arrival-Date: Mon, 16 Jan 2023 00:45:22 -0300

Reporting-MTA: dns; inn.innserver12.net

Source-IP: 5.183.188.87

Authentication-Results: inn.innserver12.net; [email protected]; spf=pass

Removal-Recipient: [email protected]

Follows some headers of this email message:

Subject: PASSWORD UPDATE ALERTS!!

From: [[email protected]]

To: [[email protected]]

Date: Mon, 16 Jan 2023 00:45:19 -0300

Message-ID: [[email protected]]

Content-Type: text/html; charset=UTF-8

Пожалуйста, свяжитесь с нами в течение 12 часов и сообщите, что Вы сделали, для решения данной проблемы и какие действия были предприняты, чтобы избежать подобного в будущем.

Мы рассчитываем на ваше внимание к вопросу.

Dear Customer, unfortunately, have to inform You that the complaint was admitted to the address of Your server.

This is an abuse report for an email message sent by mail server www.neoluxe.ru [5.183.188.87] on Mon, 16 Jan 2023 00:45:22 -0300

If you believe that this report is a mistake, request to recipient the release of this sender at https://matrix.spfbl.net/NOu_jC8dMfqUbfiVSWg8SUYskQf6FFYZcHk2_RQ3j4m502Y2Z21hAQklVzwV7UkYylDPMFMryc7mriglXv9hnRurHbxeTLxHX3RGRezHQvA

If you have any question about this abuse, contact the mail box administrator [[email protected]].

For more information about this abuse format below, see https://tools.ietf.org/html/rfc5965

Feedback-Type: abuse

User-Agent: SPFBL/3.1

Version: 1

Original-Mail-From: [[email protected]]

Original-Rcpt-To: [[email protected]]

Arrival-Date: Mon, 16 Jan 2023 00:45:22 -0300

Reporting-MTA: dns; inn.innserver12.net

Source-IP: 5.183.188.87

Authentication-Results: inn.innserver12.net; [email protected]; spf=pass

Removal-Recipient: [email protected]

Follows some headers of this email message:

Subject: PASSWORD UPDATE ALERTS!!

From: [[email protected]]

To: [[email protected]]

Date: Mon, 16 Jan 2023 00:45:19 -0300

Message-ID: [[email protected]]

Content-Type: text/html; charset=UTF-8

Please contact us within 12 hours and let us know what you have done to solve this problem and what steps have been taken to avoid this in the future.

We trust your kind attention on the matter.