Download
2016-12-18, 00:06:14
sorry it took so long to look at your archive like i said 5 minutes.
you have at least 2 php shells running, which is being used to modify index.php, i have no idea what else might have been modified, i did not do a full site inspection since it was so obvious to find these.
I have no idea where they might have came from or how they were added to your site, but i suspect crappy plugins, like imagizer or some other stuff you have that should not be used, like why is there a plugin in your root directory called plugin cycle ? no idea what that is. could also be any other plugin or upload capable plugin, but i have a feeling you were infected from inside your host, because there is a non GS folder with a shell in it with the name of the domain.
either way you need a full clean fresh install and remove all this extra crap that is not part of your site, maxosx folders?
themes not used
plugin snot used or not needed
old site ?
backups?
you have at least 2 php shells running, which is being used to modify index.php, i have no idea what else might have been modified, i did not do a full site inspection since it was so obvious to find these.
I have no idea where they might have came from or how they were added to your site, but i suspect crappy plugins, like imagizer or some other stuff you have that should not be used, like why is there a plugin in your root directory called plugin cycle ? no idea what that is. could also be any other plugin or upload capable plugin, but i have a feeling you were infected from inside your host, because there is a non GS folder with a shell in it with the name of the domain.
either way you need a full clean fresh install and remove all this extra crap that is not part of your site, maxosx folders?
themes not used
plugin snot used or not needed
old site ?
backups?
