Rex infection
-
This morning when login in I was asked to verify the login, a verification code was sent to the site e-mail which I followed the was able to login, then as i always do to check Wordfence dashboard to my surprise there are 383 malicious/infected files and a reference to a “rex” folder, see:
any one with this issue, it is a big one.
/mnt/stor11-wc1-dfw1/406091 /mnt/stor11-wc1-dfw1/406091/https://www.alaskafishingchartersdirectory.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.bahamasfishingchartersdirectory.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.barrenterprisesnc.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.beaddesignsbyricardo.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.brunswickautoassistance.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.capefearrestaurants.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.capefearreviews.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.fishingchartermexico.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.fishingcharterscanada.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.fishingcharterssouthcarolina.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.floridafishingcharterdirectory.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.fugitivecharters.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.georgiafishingchartersdirectory.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.michiganfishingchartersdirectory.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.michiganfishingchartersdirectory.com/web/content/wp-content/plugins/tfxadatcja/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.mikestidham.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.nauticalairbrushdesigns.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.oakislanddeli.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.oakislandmoose.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.paracordedc.net/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.rlb-inc.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.southport-oakisland-charters.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.southportyachtsales.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.thelazyturtleoceanfrontgrille.com/web/content/rex/lock360.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.tonyromero.us/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.truecolorsmca.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.virginiafishingchartersdirectory.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.waymorecontracting.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.wilmingtontimes.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL /mnt/stor11-wc1-dfw1/406091/https://www.windingriverliving.com/web/content/rex/x/index.php CLOUDSITES.PHP.Backdoor.UNOFFICIAL
The page I need help with: [log in to see the link]
- The topic ‘Rex infection’ is closed to new replies.