Spam emails
 

Any one else having the same issue "a hacker is spending 100s of emails through my vb site." All my plugins are from vb.org(up to date) and I don't use any nulled scripts.

The email that is sent

I had contacted Payspree support and they had banned the affiliate account. However I still this vulnerability which send email.

The only way to stop it is disabling Plugins & hooks in AdminCP settings. Even when I disable all the plugin except CMS, blog, FB login, the emails are generated and sent.

Any action of relief ? :confused:

Did you look at your web server logs? You might be able to figure out which vb script is being called to send them.

The log is


replaced username is my CP username

OK, that's some sort of emailing log (I don't know exactly what that is), but what I mean is the web server access log. For instance if the problem is in some_script.php then it seem like you would see a lot of those in a row in your access log.

where can I find ? CPanel or WHM ? and if possible which section/category

Ah...I wish I could tell you but to be honest I don't know. I'm not familiar with CPanel. We just use ssh and the apache logs are in a directory. You could ask your host, if that's easy, otherwise I'm sure someone else here will know.

BTW, I'm not sure this will lead to finding the problem, but it seems like a good place to start.

Thanks for the head up. There is a feature called "Raw Access Log".
Will check and get back with more information.

--------------- Added [DATE]1334768864[/DATE] at [TIME]1334768864[/TIME] ---------------

I deleted around 10 plugins and I am using only those most popular (and reliable) plugins.

Din see any emails bouncing yet(enabled the plugins for 6+ hours)