Tento seznam modulů reprezentuje bezpečnostní riziko:
- explorerpro (action.php)
- sampledatainstall (sampledatainstall-ajax.php)
- bamegamenu (ajax_phpcode.php)
- smartprestashopthemeadmin
- jmsslider
- groupcategory
- verticalmegamenus
- supercheckout (Knowband – verze 6.0.0 – 6.0.6)
- jmarketplace (addproduct.php)
- productlistattributes (verze 1.4.3)
- colorpictures (ajax/upload.php)
- vtemskitter
- cartabandonmentpro (views/js/fileman/php/movefile.php)
- apmarketplace (ajax.php)
- fieldvmegamenu (ajax/upload.php)
- simpleslideshow (uploadimage.php)
- productpageadverts (uploadimage.php)
- homepageadvertise2 (uploadimage.php)
- vm_advancedconfigurator (js/dropzone/upload.php)
- megamenu (uploadify/uploadify.php)
- columnadverts (uploadimage.php)
- euplatesc (validation.php)
- createordersmagavenue (ajax.php)
- giftcertificate (giftcertificate/lib/voucherengine/ajax_engine.php)
- plblog (plblog/frontent/js/jscripts/tiny_mce/tiny_mce_popup.js)
- pkfacebook (pkfacebook/ajax/facebookConnect.php)
- popupnotification (popupnotification/ajax/fb_login.php)
- apppagebuilder (appagebuilder/apajax.php)
Seznam budu postupně doplňovat.
Podezřelé IP adresy z kterých probíhají útoky:
- 181.215.178.225
- 20.199.81.236
- 217.170.207.111
- 195.123.246.212
- 45.197.141.250
- 106.15.179.255
- 5.34.181.22
- 185.123.53.44
- 176.105.254.157
- 159.203.128.213
- 195.123.246.212
- 170.247.220.118
- 45.72.113.101
- 95.164.159.191
- 81.161.229.142
- 193.109.120.16
- 185.220.102.244
- 98.142.251.110
Seznam souborů, které jsou často napadené virem:
- cache/tcpdf/index.php
- classes/Dispatcher.php
- classes/Tools.php
- classes/controller/Controller.php
- classes/controller/FrontController.php
- classes/controller/ModuleAdminController.php
- classes/controller/ModuleFrontController.php
Seznam modulů, které jsou často napadené virem:
- gsitemap
Složky, které je potřeba zkontrolovat:
- /js/jquery/plugins/select2
- /img
- /img/p (update.php)
- /js/jquery/plugins/tabpane/EQW9t4.php