Auto detect File Name?

BuyAds

Hello everyone.

It is possible to autodetect a file when uploaded and to alert me per email?

I got infected by cryptoPHP with the social.png file.

I have root access to WHM so is there a option for it?

Thank you everyone!

Mark_R

what you are asking for isn't a proper solution, its temporary shit. what if social.png will be named differently the next day? it wont get detected and it continues to harm you.

you definitly have to improve your overall security defense.

BuyAds

yeah you are right so any solution?

Nomad

Disable php execution on uploads folder?

Mark_R

@BuyAds said:
yeah you are right so any solution?

I'm not familiar with WHM, try Nomad's suggestion.

BuyAds

@Nomad said:
Disable php execution on uploads folder?

Hello Sir, how to do it?

Nomad

Err, dunno.
If it's apache create a .htaccess file in that directory and put this in?

<FilesMatch "\.(php|php\.)$"> Order Allow,Deny Deny from all </FilesMatch>

Or better, google it for more solid info along with knowledge? (:

BuyAds

And this will not allow me to upload .php files?

Nomad

No, it will.
It will just prevent php from being run.

BuyAds

Ow ok. Thank you! What about cron.php files? They cant be run also right?

Sady

There was a python script to find CryptoPHP, you can simply modify it to mail you if there is some detection of malware. Then simply use that modified script in Cron. If you want to get that accomplished & doesn't know how to do that then simply leave a message for me

BuyAds

@Sady said:
There was a python script to find CryptoPHP, you can simply modify it to mail you if there is some detection of malware. Then simply use that modified script in Cron. If you want to get that accomplished & doesn't know how to do that then simply leave a message for me

Thank you for the comment.
Yes i was running it but it stops after 1h. Only the domain check it works. If you can help with the cron ill be very thankful!

Falzo

maybe have a look at maldet