exe files in various directories

27 Aug 2012, 1:11 PM

New Zenner

Join Date:: Feb 2007
Posts:: 11
Plugin Contributions:: 0

exe files in various directories

Hello

I've just updated my site to v1.5, looks like it still works. :D

I've notice a number of exe files in various directories. are these suppose to be there? or are these viruses. file size is 243,971

e.g includes/modules/modules.exe
includes/modules/product_music/product_music.exe
includes/functions/functions.exe

27 Aug 2012, 2:36 PM

rodg

Deceased

Join Date:: Jan 2007
Location:: Australia
Posts:: 6,263
Plugin Contributions:: 4

Re: exe files in various directories

sahail312:

Hello

I've just updated my site to v1.5, looks like it still works. :D

I've notice a number of exe files in various directories. are these suppose to be there? or are these viruses. file size is 243,971

e.g includes/modules/modules.exe
includes/modules/product_music/product_music.exe
includes/functions/functions.exe

There shouldn't be ANY .exe files in any part of a zencart installation.

If you have upgraded from V1.3.8 the chances are that the store was hacked before you did the upgrade.
Upgrades DO NOT remove any files that aren't supposed to be there. you'll need to delete them manually and do a thorough inspection of the entire site for any other suspicious files (such as .php files in your images folder, etc, etc).

Sorry to be the bearer of bad news.

Cheers
Rod

NOTE: We are sorry that Rod is no longer with us.
We are grateful for all his contributions to the Zen Cart community.

Ozpost - The Ultimate Shipping module for Australian Merchants. Click these links for its Homepage, or Download from Zen-Cart.com.

27 Aug 2012, 7:15 PM

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,515
Plugin Contributions:: 176

Re: exe files in various directories

http://www.zen-cart.com/wiki/index.php/Recovering_From_Hacks

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.