Jump to content

Alerte Serveur Ovh : Action : Kill (Cpu) , Modif Des Fichiers De L'extérieur ?


denis4

Recommended Posts

Bonjour,

 

J'utilise Prestashop 1.5.3.1 depuis peu, et déjà une attaque.

 

J'ai reçu le message du serveur ovh :

Action : kill (cpu) - Execution time : 3s - pourcent : 96.6.

J'ai lancé une demande d'information dans les parametres avancés et :

 

il manque : .gitignore

 

des fichiers on été modifiés :

  • CONTRIBUTORS.md
  • config/defines.inc.php
  • config/xml/modules_list.xml
  • modules/blocknewsletter/mails/index.php
  • modules/blocknewsletter/mails/de/index.php
  • modules/blocknewsletter/mails/de/newsletter_conf.html
  • modules/blocknewsletter/mails/de/newsletter_conf.txt
  • modules/blocknewsletter/mails/de/newsletter_verif.html
  • modules/blocknewsletter/mails/de/newsletter_verif.txt
  • modules/blocknewsletter/mails/de/newsletter_voucher.html
  • modules/blocknewsletter/mails/de/newsletter_voucher.txt
  • modules/blocknewsletter/mails/en/index.php
  • modules/blocknewsletter/mails/en/newsletter_conf.html
  • modules/blocknewsletter/mails/en/newsletter_conf.txt
  • modules/blocknewsletter/mails/en/newsletter_verif.html
  • modules/blocknewsletter/mails/en/newsletter_verif.txt
  • modules/blocknewsletter/mails/en/newsletter_voucher.html
  • modules/blocknewsletter/mails/en/newsletter_voucher.txt
  • modules/blocknewsletter/mails/es/index.php
  • modules/blocknewsletter/mails/es/newsletter_conf.html
  • modules/blocknewsletter/mails/es/newsletter_conf.txt
  • modules/blocknewsletter/mails/es/newsletter_verif.html
  • modules/blocknewsletter/mails/es/newsletter_verif.txt
  • modules/blocknewsletter/mails/es/newsletter_voucher.html
  • modules/blocknewsletter/mails/es/newsletter_voucher.txt
  • modules/blocknewsletter/mails/fr/index.php
  • modules/blocknewsletter/mails/fr/newsletter_conf.html
  • modules/blocknewsletter/mails/fr/newsletter_conf.txt
  • modules/blocknewsletter/mails/fr/newsletter_verif.html
  • modules/blocknewsletter/mails/fr/newsletter_verif.txt
  • modules/blocknewsletter/mails/fr/newsletter_voucher.html
  • modules/blocknewsletter/mails/fr/newsletter_voucher.txt
  • modules/blocknewsletter/mails/it/index.php
  • modules/blocknewsletter/mails/it/newsletter_conf.html
  • modules/blocknewsletter/mails/it/newsletter_conf.txt
  • modules/blocknewsletter/mails/it/newsletter_verif.html
  • modules/blocknewsletter/mails/it/newsletter_verif.txt
  • modules/blocknewsletter/mails/it/newsletter_voucher.html
  • modules/blocknewsletter/mails/it/newsletter_voucher.txt
  • modules/blockwishlist/mails/index.php
  • modules/blockwishlist/mails/de/index.php
  • modules/blockwishlist/mails/de/wishlink.html
  • modules/blockwishlist/mails/de/wishlink.txt
  • modules/blockwishlist/mails/de/wishlist.html
  • modules/blockwishlist/mails/de/wishlist.txt
  • modules/blockwishlist/mails/en/index.php
  • modules/blockwishlist/mails/en/wishlink.html
  • modules/blockwishlist/mails/en/wishlink.txt
  • modules/blockwishlist/mails/en/wishlist.html
  • modules/blockwishlist/mails/en/wishlist.txt
  • modules/blockwishlist/mails/es/index.php
  • modules/blockwishlist/mails/es/wishlink.html
  • modules/blockwishlist/mails/es/wishlink.txt
  • modules/blockwishlist/mails/es/wishlist.html
  • modules/blockwishlist/mails/es/wishlist.txt
  • modules/blockwishlist/mails/fr/index.php
  • modules/blockwishlist/mails/fr/wishlink.html
  • modules/blockwishlist/mails/fr/wishlink.txt
  • modules/blockwishlist/mails/fr/wishlist.html
  • modules/blockwishlist/mails/fr/wishlist.txt
  • modules/blockwishlist/mails/it/index.php
  • modules/blockwishlist/mails/it/wishlink.html
  • modules/blockwishlist/mails/it/wishlink.txt
  • modules/blockwishlist/mails/it/wishlist.html
  • modules/blockwishlist/mails/it/wishlist.txt
  • modules/cashondelivery/cashondelivery.php
  • modules/cashondelivery/index.php
  • modules/followup/mails/index.php
  • modules/followup/mails/de/followup_1.html
  • modules/followup/mails/de/followup_1.txt
  • modules/followup/mails/de/followup_2.html
  • modules/followup/mails/de/followup_2.txt
  • modules/followup/mails/de/followup_3.html
  • modules/followup/mails/de/followup_3.txt
  • modules/followup/mails/de/followup_4.html
  • modules/followup/mails/de/followup_4.txt
  • modules/followup/mails/de/index.php
  • modules/followup/mails/en/followup_1.html
  • modules/followup/mails/en/followup_1.txt
  • modules/followup/mails/en/followup_2.html
  • modules/followup/mails/en/followup_2.txt
  • modules/followup/mails/en/followup_3.html
  • modules/followup/mails/en/followup_3.txt
  • modules/followup/mails/en/followup_4.html
  • modules/followup/mails/en/followup_4.txt
  • modules/followup/mails/en/index.php
  • modules/followup/mails/es/followup_1.html
  • modules/followup/mails/es/followup_1.txt
  • modules/followup/mails/es/followup_2.html
  • modules/followup/mails/es/followup_2.txt
  • modules/followup/mails/es/followup_3.html
  • modules/followup/mails/es/followup_3.txt
  • modules/followup/mails/es/followup_4.html
  • modules/followup/mails/es/followup_4.txt
  • modules/followup/mails/es/index.php
  • modules/followup/mails/fr/followup_1.html
  • modules/followup/mails/fr/followup_1.txt
  • modules/followup/mails/fr/followup_2.html
  • modules/followup/mails/fr/followup_2.txt
  • modules/followup/mails/fr/followup_3.html
  • modules/followup/mails/fr/followup_3.txt
  • modules/followup/mails/fr/followup_4.html
  • modules/followup/mails/fr/followup_4.txt
  • modules/followup/mails/fr/index.php
  • modules/followup/mails/it/followup_1.html
  • modules/followup/mails/it/followup_1.txt
  • modules/followup/mails/it/followup_2.html
  • modules/followup/mails/it/followup_2.txt
  • modules/followup/mails/it/followup_3.html
  • modules/followup/mails/it/followup_3.txt
  • modules/followup/mails/it/followup_4.html
  • modules/followup/mails/it/followup_4.txt
  • modules/followup/mails/it/index.php
  • modules/mailalerts/mails/index.php
  • modules/mailalerts/mails/de/customer_qty.html
  • modules/mailalerts/mails/de/customer_qty.txt
  • modules/mailalerts/mails/de/index.php
  • modules/mailalerts/mails/de/new_order.html
  • modules/mailalerts/mails/de/new_order.txt
  • modules/mailalerts/mails/de/productcoverage.html
  • modules/mailalerts/mails/de/productcoverage.txt
  • modules/mailalerts/mails/de/productoutofstock.html
  • modules/mailalerts/mails/de/productoutofstock.txt
  • modules/mailalerts/mails/en/customer_qty.html
  • modules/mailalerts/mails/en/customer_qty.txt
  • modules/mailalerts/mails/en/index.php
  • modules/mailalerts/mails/en/new_order.txt
  • modules/mailalerts/mails/en/productcoverage.html
  • modules/mailalerts/mails/en/productcoverage.txt
  • modules/mailalerts/mails/en/productoutofstock.html
  • modules/mailalerts/mails/en/productoutofstock.txt
  • modules/mailalerts/mails/es/customer_qty.html
  • modules/mailalerts/mails/es/customer_qty.txt
  • modules/mailalerts/mails/es/index.php
  • modules/mailalerts/mails/es/new_order.html
  • modules/mailalerts/mails/es/new_order.txt
  • modules/mailalerts/mails/es/productcoverage.html
  • modules/mailalerts/mails/es/productcoverage.txt
  • modules/mailalerts/mails/es/productoutofstock.html
  • modules/mailalerts/mails/es/productoutofstock.txt
  • modules/mailalerts/mails/fr/customer_qty.html
  • modules/mailalerts/mails/fr/customer_qty.txt
  • modules/mailalerts/mails/fr/index.php
  • modules/mailalerts/mails/fr/new_order.html
  • modules/mailalerts/mails/fr/new_order.txt
  • modules/mailalerts/mails/fr/productcoverage.html
  • modules/mailalerts/mails/fr/productcoverage.txt
  • modules/mailalerts/mails/fr/productoutofstock.html
  • modules/mailalerts/mails/fr/productoutofstock.txt
  • modules/mailalerts/mails/it/customer_qty.html
  • modules/mailalerts/mails/it/customer_qty.txt
  • modules/mailalerts/mails/it/index.php
  • modules/mailalerts/mails/it/new_order.html
  • modules/mailalerts/mails/it/new_order.txt
  • modules/mailalerts/mails/it/productcoverage.html
  • modules/mailalerts/mails/it/productcoverage.txt
  • modules/mailalerts/mails/it/productoutofstock.html
  • modules/mailalerts/mails/it/productoutofstock.txt
  • modules/referralprogram/mails/index.php
  • modules/referralprogram/mails/de/index.php
  • modules/referralprogram/mails/de/referralprogram-congratulations.html
  • modules/referralprogram/mails/de/referralprogram-congratulations.txt
  • modules/referralprogram/mails/de/referralprogram-invitation.html
  • modules/referralprogram/mails/de/referralprogram-invitation.txt
  • modules/referralprogram/mails/de/referralprogram-voucher.html
  • modules/referralprogram/mails/de/referralprogram-voucher.txt
  • modules/referralprogram/mails/en/index.php
  • modules/referralprogram/mails/en/referralprogram-congratulations.html
  • modules/referralprogram/mails/en/referralprogram-congratulations.txt
  • modules/referralprogram/mails/en/referralprogram-invitation.html
  • modules/referralprogram/mails/en/referralprogram-invitation.txt
  • modules/referralprogram/mails/en/referralprogram-voucher.html
  • modules/referralprogram/mails/en/referralprogram-voucher.txt
  • modules/referralprogram/mails/es/index.php
  • modules/referralprogram/mails/es/referralprogram-congratulations.html
  • modules/referralprogram/mails/es/referralprogram-congratulations.txt
  • modules/referralprogram/mails/es/referralprogram-invitation.html
  • modules/referralprogram/mails/es/referralprogram-invitation.txt
  • modules/referralprogram/mails/es/referralprogram-voucher.html
  • modules/referralprogram/mails/es/referralprogram-voucher.txt
  • modules/referralprogram/mails/fr/index.php
  • modules/referralprogram/mails/fr/referralprogram-congratulations.html
  • modules/referralprogram/mails/fr/referralprogram-congratulations.txt
  • modules/referralprogram/mails/fr/referralprogram-invitation.html
  • modules/referralprogram/mails/fr/referralprogram-invitation.txt
  • modules/referralprogram/mails/fr/referralprogram-voucher.html
  • modules/referralprogram/mails/fr/referralprogram-voucher.txt
  • modules/referralprogram/mails/it/index.php
  • modules/referralprogram/mails/it/referralprogram-congratulations.html
  • modules/referralprogram/mails/it/referralprogram-congratulations.txt
  • modules/referralprogram/mails/it/referralprogram-invitation.html
  • modules/referralprogram/mails/it/referralprogram-invitation.txt
  • modules/referralprogram/mails/it/referralprogram-voucher.html
  • modules/referralprogram/mails/it/referralprogram-voucher.txt
  • modules/sendtoafriend/mails/index.php
  • modules/sendtoafriend/mails/de/index.php
  • modules/sendtoafriend/mails/de/send_to_a_friend.html
  • modules/sendtoafriend/mails/de/send_to_a_friend.txt
  • modules/sendtoafriend/mails/en/index.php
  • modules/sendtoafriend/mails/en/send_to_a_friend.html
  • modules/sendtoafriend/mails/en/send_to_a_friend.txt
  • modules/sendtoafriend/mails/es/index.php
  • modules/sendtoafriend/mails/es/send_to_a_friend.html
  • modules/sendtoafriend/mails/es/send_to_a_friend.txt
  • modules/sendtoafriend/mails/fr/index.php
  • modules/sendtoafriend/mails/fr/send_to_a_friend.html
  • modules/sendtoafriend/mails/fr/send_to_a_friend.txt
  • modules/sendtoafriend/mails/it/index.php
  • modules/sendtoafriend/mails/it/send_to_a_friend.html
  • modules/sendtoafriend/mails/it/send_to_a_friend.txt
  • override/index.php
  • override/classes/_Tools.php
  • override/classes/index.php
  • override/classes/cache/index.php
  • override/classes/controller/index.php
  • override/classes/db/index.php
  • override/classes/exception/index.php
  • override/classes/helper/index.php
  • override/classes/log/index.php
  • override/classes/module/index.php
  • override/classes/order/index.php
  • override/classes/pdf/index.php
  • override/classes/range/index.php
  • override/classes/shop/index.php
  • override/classes/stock/index.php
  • override/classes/tax/index.php
  • override/classes/webservice/index.php
  • override/controllers/index.php
  • override/controllers/admin/index.php
  • override/controllers/admin/templates/index.php
  • override/controllers/front/index.php

 

C'est un peu long mais que puis je faire ?

Link to comment
Share on other sites

Bonjour,

 

Pour ma part je suis sceptique sur cette fonction de fichier modifiés : en effet, sur plusieurs sites PS 1.5.x que j'ai sous la main, je vois des fichiers soit disant modifiés qui ne le sont pas en vrai... Pas au point et bogué il semblerait.

 

En fait, vous avez eu une surcharge serveur surement du au fait de votre configuration PrestaShop ou d'un hébergement sous dimensionné.

 

Le cache est activé et la compilation Smarty est désactivée ? En tout cas, rien de tout cela permet de croire à une attaque, rassurez-vous ;)

Link to comment
Share on other sites

Bonjour,

 

J'ai un hégergement mutualisé et c'est la première fois que j'ai cette alerte.

 

Et si j'ai un problème de configuration ce serait du à quoi ? Je n'ai quasi rien modifié sur Prestashop. J'ai entré des articles (30), 4 catégories, en fait des choses simple.

Link to comment
Share on other sites

Pas de panique.

 

C'est juste ovh qui essaie de remettre ses serveurs mutu à niveau.

 

Les erreurs okillerd donnaient avant simplement une erreur 500. Maintenant tu es prévenu par mail que ton site bouffe de la ressource.

 

Voir ici : http://www.prestashop.com/forums/topic/228749-alerte-serveur-ovh-action-kill-cpu-modif-des-fichiers-de-lexterieur/

 

 

Pour le moment cela n'engage à rien et le système d'alerte est suspendu en attendant de revoir le contenu de ce mail auto.

 

Enfin cela veut dire que tu as des erreurs 500 et non un piratage.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...