mysql - Site compromised: ZMEU attack -


my site has been compromised zmeu attacks. in logs find suspicious user agents named - zmeu.

enter image description here

the site returns 500 internal server error. there no related error logs in apache error log. there several dummy files on in server. removed of them.

but still site down.

what main target such attacks?(what files modified , how them back?)

where should fix issues?

if has undergone such situation please give advise.

update: wordpress site not working. there other apps in sub directories working fine.

thanks in advance,

you restore backup in situation.

it tough sort through , reverse 100%. hacker have changed modification times on files, you'll never able tell has been accessed or not, without combing through every line.


Comments

Popular posts from this blog

javascript - AngularJS custom datepicker directive -

javascript - jQuery date picker - Disable dates after the selection from the first date picker -