Because the attack isn't from a human being looking at your computer targeting you. You are so small and insignificant. Nobody would sit there and specifically attack your shit. It's a bot that crawls around the Internet looking for particular vulnerabilities on its own. It's probably just looking for insecure Wordpresses and exploiting a particular vulnerability.
Seriously, the fact that you do not know this kind of thing already is clear evidence you do not have enough experience and knowledge to administer a production server on the net. Get a managed hosting solution where someone else will take care of it for you.
Dumping my server and paying for hosting is certainly on my radar. However, if this domain has evil code running on it how do I find it and remove it so that it does not follow me to a different host?
The domain is many years old with thousands of files outside of WordPress.
Why the hate directed at someone who is looking to improve their knowledge base?
Dumping my server and paying for hosting is certainly on my radar. However, if this domain has evil code running on it how do I find it and remove it so that it does not follow me to a different host?
The domain is many years old with thousands of files outside of WordPress.
Why the hate directed at someone who is looking to improve their knowledge base?
It's not hate. It's for your own good.
See, there is no way for me to actually answer your questions. There are so many possibilities and no simple answers. You could be rootkitted. You could just have some bad stuff injected into your WordPress files. It could be any of hundreds of possible things. Only an expert with access to the machine would be able to find out. Even then, there might be no chance for real recovery if proper precautions weren't taken beforehand. For example, if the infection is in your backups, even restoring them won't save you.
Administering a publicly accessible server on the Internet is something that, sadly, has no learning curve. It's like a video game where the first and only enemy is the end boss. You'll only be able to beat it if you start out max level from the beginning. Even one mistake or one lapse in maintenance opens you up to devastating failure.
There's nothing I can teach you by forum post, or even with phone calls, that will level you up enough to do everything properly. This is why you pay someone else to do it for you.
Where can I start to find out how the WordPress files are being modified? How does an attacker inject code into an existing file in a WordPress installation?
As a side question, is there an iptable rule I can add that will block all of China? I go through my logs routinely and block at the class C level via iptables every time an IP tries to brute force me 100 times or more.
I have been hacked before and have generally been able to rind and close the hole that was used. This hack of injecting code into my WordPress files has me stumped. It is trivialy easy to find the most recently edited files and look for changes but I can not figure out HOW it is being done.
There are numerous domains on my server all running the same version of WordPress but only this one is ever targeted.
I have found multiple instances of others having this exact same problem but the threads never explain how they closed the security hole. The threads only cover what I already know regarding recovering uncorrupted versions of said files.
My Thinkpad T530 stopped working yesterday. When you hit the power button it lights up for about a second then shuts off. I opened it up to see if I could find the issue and saw this (still not sure how it happened):
Am I fucked? It's still under warranty, but I have surgery in about a week and I really want to have my laptop during the recovery, so I was wondering if there was any chance of fixing it myself.
Hey, I'm having some trouble with inputs. Sometimes, some of my USB ports don't work when I boot my computer. Additionally, Thrice when I've started my computer, one of my screens didn't work until I unplugged it and plugged it back in.
Is there anything I can do that allows me to not buy a new motherboard? Thank you.
So, the other day, I was trying to download a music file and received a message saying that it could not download due to an I/O device error (write to disk). I tried restarting the computer, and I am still getting the error. Also, downloading files, such as wallpapers, in Chrome takes forever. I know there is enough space on the drive (654 GB free). I've tried running a Chkdsk /r E: and nothing shows up (I sometimes see a flash of a window that shows up, then disappears). I have been slowly, but surely, moving/consolidating things that I want to keep, but even sometimes I will get a slow load on a movement of a file.
The Motherboard and CPU are around 7 years old. The Hard drive and Ram are about 4 years old. My video card is the newest piece of hardware and it is around 9 months old.
I tried looking this up in the forums, but there were a lot of unrelated search results (I/O, I/O error, I/O Hard drive). I am guessing, most likely, that I probably need to replace the hard drive. I know that I should probably be getting around to replacing various other parts (everything but my C drive and video card). I am not even sure how to trouble shoot the issue to see if there is any way to fix it.
Can you hear your hard disk chugging every time you try to access a file? If so then your hard disk is about to fail. If you have anything super precious that you need to download get Spinrite and allow it to to run on the highest setting, once that is done grab all the files you want off of it and replace the drive.
If the hard drive isn't chugging then something else is messing with the install(s), wipe the disk and reinstall your OS get all the Windows updates and device drivers up to date then make an image of that for future use. Then start installing all other applications.
Usually you get blue screens when RAM, CPU and motherboard are having issues (not always the case but usually). You can stress test these by running Prime 95, it should cause a blue screen pretty quickly on any of the modes.
So, I don't hear a lot of noise when accessing the drive. Windows is on a different drive, so would I still need to reinstall my OS? My main concern about keeping the drive is that I have close to 500 gb of data on it (most of my Steam downloads) and am not looking forward to transferring everything over to a replacement drive. I am working on at least getting the pictures/wallpapers I want to keep onto a thumb drive so I can delete them off of the hard drive to make the transfer faster.
You wouldn't have to reinstall the OS if the OS is not on the affected drive. It's actually fairly simple to transfer everything to a new drive. There is a bunch of backup software available that will clone one drive onto another all at once. I use Macrium Reflect.
You should have mentioned multiple drives! Are your problems all associated with the one drive? Can you do any read/write outside of chrome with the impacted drive?
Okay, so I finally pulled out my tower and hit it with some canned air, and now the hard drive isn't having any issues with picture downloads (haven't tried a large file yet). However, now my second monitor isn't working. I plugged everything in with the power off, and when the system booted up, one monitor worked fine, and the other cycles through an off state with a brief flicker and then turns off again... it takes about 10 seconds for the cycle to complete. It's also the monitor that shows my windows bar, so I unplugged that monitor and am only using one at the moment. The monitor was working fine before i disconnected everything for the cleaning.
Okay, so I tested the monitor on Ro's computer and it worked fine, and hers (same brand/model) worked on mine. I disconnected everything and plugged everything back in and now both monitors work. Thanks for the help and trouble shooting tips
Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 6/24/2014 7:19:10 AM Event ID: 42 Task Category: (64) Level: Information Keywords: (4) User: N/A Computer: Steve-PC Description: The system is entering sleep.
Sleep Reason: Application API
So my laptop is entering sleep mode on its own and I still do not know what is triggering it other than "Application API".
A little more information. Both log events like the one above are proceeded by this:
Log Name: System Source: Service Control Manager Date: 6/24/2014 7:18:57 AM Event ID: 7036 Task Category: None Level: Information Keywords: Classic User: N/A Computer: Steve-PC Description: The Windows Image Acquisition (WIA) service entered the paused state.
Had a quite surreal experience this morning. So I went to my PC to check my e-mails and look up something. I noticed that it had restarted overnight since it was in Ubuntu rather than Windows (I use my PC primarily for gaming, so I'm mostly in Windows). The reboot wasn't entirely unexpected, since my work PC installed some Windows updates yesterday and I thought the same was happening to my PC.
I restarted the thing but the boot sequences was an absolute crawl. It did the sequence correctly, and the motherboard internal Asus OS also seemed to respond fine (which I checked on a later reboot), but going beyond that the thing was on a snail's pace. For example it took like 5 minutes for it to get to the screen that lets me choose whether to boot in Ubuntu or Windows, and then it loaded in segments and was very sluggish on my arrow key inputs (only went this far because I wanted to see whether it would speed up later in the process).
Anyway, I made a couple more attempts but then I shut the thing down with a long press on the on-off switch and then took a shower looking to try again later. In the shower I was pondering if a hardware failure could be the cause and what it could be. However, when I tried after the shower it seemed to be working fine again.
The PC is on observation for now, whether it does the same thing again. It might have been a problem with the RAM or BIOS as far as I can tell (the RAM because the problem now seems fixed after the PC was without power for a longer time, long enough for the RAM to reset, and the BIOS because the boot sequence didn't work properly). The hard drive seems to be working fine and the boot sequence doesn't even really use it when it started to crawl.
Maybe I'm just talking out of my ass though and/or am overlooking something essential. Any help here?
So basically the same thing happened today, six months after the first instance. Could not check whether it was working fine now since I had to leave for work, so last known status is that my computer is super-slow.
Okay, got home, started the computer and it was still slow. So I move my desk, pull out all the cables, pull out the tower from the slot in the desk, put it on the side, open it up to see whether the fan is running or perhaps a cable is loose or something, put all the cables back on, and it runs fine.
So I put all back together, back under the desk upright, and its slow again. Now have it lying on the floor of my room and its running fine again.
Just what the heck is going on with this thing. Everything on the inside seems fine, and I didn't even remove it from the slot in the desk when the same thing happened back in April.
First, it could be that you are rootkitted. The slowness was occurring so early in the boot process, that it couldn't be another kind of malware or anything that wouldn't load until the OS is loaded.
It could be issues with your storage devices. The slowness is starting right as it starts reading from your disks. Maybe because of hardware faults the disk is occasionally detected improperly, or has lots of errors, so it works very slowly. Try taking all drives out, and booting off of a USB stick.
It could be issues with power, relating to PSU, motherboard, and/or CPU being on the fritz. It's theoretically possible for there to be a situation where under a certain non-complete power fault that the computer would run, but the CPU would go very very slowly. A similar situation could also happen due to overheating, but you seem to have already checked that. Overheating should also be setting off audible alarms. Make sure you have a PC speaker connected, so you can hear them. Also, check the BIOS settings for the voltages and temperatures.
Actually, the slowness seems to happen before it accesses any storage device whatsoever.
I am going to check the power supply, which seems the most reasonable guess and the most plausible why the PC is running fine on the side but slow while upright.
Actually, the slowness seems to happen before it accesses any storage device whatsoever.
I am going to check the power supply, which seems the most reasonable guess and the most plausible why the PC is running fine on the side but slow while upright.
Buy a new PSU. Try it out. If it doesn't improve, return the new one and it will cost you nothing.
Comments
Seriously, the fact that you do not know this kind of thing already is clear evidence you do not have enough experience and knowledge to administer a production server on the net. Get a managed hosting solution where someone else will take care of it for you.
The domain is many years old with thousands of files outside of WordPress.
Why the hate directed at someone who is looking to improve their knowledge base?
See, there is no way for me to actually answer your questions. There are so many possibilities and no simple answers. You could be rootkitted. You could just have some bad stuff injected into your WordPress files. It could be any of hundreds of possible things. Only an expert with access to the machine would be able to find out. Even then, there might be no chance for real recovery if proper precautions weren't taken beforehand. For example, if the infection is in your backups, even restoring them won't save you.
Administering a publicly accessible server on the Internet is something that, sadly, has no learning curve. It's like a video game where the first and only enemy is the end boss. You'll only be able to beat it if you start out max level from the beginning. Even one mistake or one lapse in maintenance opens you up to devastating failure.
There's nothing I can teach you by forum post, or even with phone calls, that will level you up enough to do everything properly. This is why you pay someone else to do it for you.
As a side question, is there an iptable rule I can add that will block all of China? I go through my logs routinely and block at the class C level via iptables every time an IP tries to brute force me 100 times or more.
I have been hacked before and have generally been able to rind and close the hole that was used. This hack of injecting code into my WordPress files has me stumped. It is trivialy easy to find the most recently edited files and look for changes but I can not figure out HOW it is being done.
There are numerous domains on my server all running the same version of WordPress but only this one is ever targeted.
I have found multiple instances of others having this exact same problem but the threads never explain how they closed the security hole. The threads only cover what I already know regarding recovering uncorrupted versions of said files.
Am I fucked? It's still under warranty, but I have surgery in about a week and I really want to have my laptop during the recovery, so I was wondering if there was any chance of fixing it myself.
Is there anything I can do that allows me to not buy a new motherboard? Thank you.
The Motherboard and CPU are around 7 years old. The Hard drive and Ram are about 4 years old. My video card is the newest piece of hardware and it is around 9 months old.
I tried looking this up in the forums, but there were a lot of unrelated search results (I/O, I/O error, I/O Hard drive). I am guessing, most likely, that I probably need to replace the hard drive. I know that I should probably be getting around to replacing various other parts (everything but my C drive and video card). I am not even sure how to trouble shoot the issue to see if there is any way to fix it.
If so then your hard disk is about to fail. If you have anything super precious that you need to download get Spinrite and allow it to to run on the highest setting, once that is done grab all the files you want off of it and replace the drive.
If the hard drive isn't chugging then something else is messing with the install(s), wipe the disk and reinstall your OS get all the Windows updates and device drivers up to date then make an image of that for future use. Then start installing all other applications.
Usually you get blue screens when RAM, CPU and motherboard are having issues (not always the case but usually). You can stress test these by running Prime 95, it should cause a blue screen pretty quickly on any of the modes.
Shouldn't be the issue but sometimes you can get a slightly bent pin or crimped cable.
Other than that, try the video card in another machine.
Windows 7
Power saving is set to never turn off. Closing the lid is set to do nothing.
Is there some other setting I am missing that may be making my laptop go into hibernation?
A little more information. Both log events like the one above are proceeded by this:
Anybody got an idea what could be going on?
So I move my desk, pull out all the cables, pull out the tower from the slot in the desk, put it on the side, open it up to see whether the fan is running or perhaps a cable is loose or something, put all the cables back on, and it runs fine.
So I put all back together, back under the desk upright, and its slow again.
Now have it lying on the floor of my room and its running fine again.
Just what the heck is going on with this thing. Everything on the inside seems fine, and I didn't even remove it from the slot in the desk when the same thing happened back in April.
First, it could be that you are rootkitted. The slowness was occurring so early in the boot process, that it couldn't be another kind of malware or anything that wouldn't load until the OS is loaded.
It could be issues with your storage devices. The slowness is starting right as it starts reading from your disks. Maybe because of hardware faults the disk is occasionally detected improperly, or has lots of errors, so it works very slowly. Try taking all drives out, and booting off of a USB stick.
It could be issues with power, relating to PSU, motherboard, and/or CPU being on the fritz. It's theoretically possible for there to be a situation where under a certain non-complete power fault that the computer would run, but the CPU would go very very slowly. A similar situation could also happen due to overheating, but you seem to have already checked that. Overheating should also be setting off audible alarms. Make sure you have a PC speaker connected, so you can hear them. Also, check the BIOS settings for the voltages and temperatures.
I am going to check the power supply, which seems the most reasonable guess and the most plausible why the PC is running fine on the side but slow while upright.