[WPCoreMailSys] Automatically added plugin sending Spam mails

  • clemixx

    (@clemixx)


    9 years, 9 months ago

    Hey guys,

    the last couple of days I played around with several plugins for creating forms and sending mails to the customer. Now I got an mail from my hoster that there were mails sent out from my account via ‘/wp-includes/class-phpmailer.php’. While this is a core file, I was curious how this can happen. I found in my /plugins folder a plugin with the name ‘WPCoreMailSys’. I never installed a plugin called like this and it is also not shown in my WP admin dashboard. Inside the folder there is just one file called ‘WPCoreMailSys.php’ which looks like it is responsible for my issue. I could not even find anything in Google about this name. So what I want is just A) Did someone ever hear about this plugin? or if not B) I just want to warn those guys who will google the name. I deleted the folder and will just see if there are still any issues occuring. I can just not really name the plugin which was responsible for the install.

    Cheers
    clemixx
    🙂

Viewing 4 replies - 1 through 4 (of 4 total)
  • ninegolfy

    (@ninegolfy)

    9 years, 9 months ago

    Hello! Just wondering I found this plugin in my folder as well.

    So, do you just remove this folder and done ? and need any further to protect it ?

    I found those e-mail were in a form of FAX message header and body mail

    cheers,
    Golf

    Thread Starter clemixx

    (@clemixx)

    9 years, 9 months ago

    Yeah I removed it and nothing happened again so far. Additionally I found those suspicious files in my root folder named ‘Criminal Case against_You.B26__Fujitsu_fi-7260 LMI_DRD.rar’ or ‘criminal case against_you.L85.BVF.IT6.rar’. Might be the same cause and I removed them as well.

    Where did you see those emails?

    ninegolfy

    (@ninegolfy)

    9 years, 9 months ago

    did see same things and already remove those files both in plugin folder and root’s rar files

    but doubt that still should be a hole or an infected file or not.

    Thread Starter clemixx

    (@clemixx)

    9 years, 9 months ago

    Why do you think so?

    You should remove of course the plugin which was responsible for that.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘[WPCoreMailSys] Automatically added plugin sending Spam mails’ is closed to new replies.