BuddyPress.org | mareksgregs | Activity https://buddypress.org/members/mareksgregs/activity/ Activity feed for mareksgregs. Mon, 06 Apr 2026 18:43:52 +0000 https://buddypress.org/?v= en-US 30 hourly 2 a1356a1eca8da9cf554930ef0a7ab965 mareksgregs replied to the topic Untraceable spam user in the forum How-to & Troubleshooting https://buddypress.org/support/topic/untraceable-spam-user/#post-166963 Wed, 26 Jun 2013 17:24:33 +0000 I’ve already removed the plugin. Since I didn’t even use it.
Do I really need to change database password too? How could they even access my database?

]]> acab207025eb9cd435c8900438de4d5c mareksgregs replied to the topic Untraceable spam user in the forum How-to & Troubleshooting https://buddypress.org/support/topic/untraceable-spam-user/#post-166959 Wed, 26 Jun 2013 17:08:46 +0000 The scan found only one problem, which is:

This file may contain malicious executable code
Filename: wp-content/plugins/user-meta/framework/init.php
File type: Not a core, theme or plugin file.
Issue first detected: 45 secs ago.
Severity: Critical
Status New
This file is a PHP executable file and contains an eval() function and base64() decoding…

[Read more]

]]> 7d8499dbc7b1f90baf35a4ac41648ecc mareksgregs replied to the topic Untraceable spam user in the forum How-to & Troubleshooting https://buddypress.org/support/topic/untraceable-spam-user/#post-166901 Wed, 26 Jun 2013 07:47:51 +0000 I deleted the user from the database yesterday(in which it didn’t have an email either) yesterday. And it hasn’t come back yet. I think it may be finally gone. 🙂

]]> 1f58f0641e232c9c98071ecc429ced1c mareksgregs replied to the topic Untraceable spam user in the forum How-to & Troubleshooting https://buddypress.org/support/topic/untraceable-spam-user/#post-166824 Tue, 25 Jun 2013 07:25:58 +0000 @jconti What am I supposed to look for in those files?
And I found the user in the users database. Should I delete it?

]]> 687fe2e481ee0cdcccb506152e2e2d45 mareksgregs replied to the topic Untraceable spam user in the forum How-to & Troubleshooting http://buddypress.org/support/topic/untraceable-spam-user/#post-166769 Mon, 24 Jun 2013 17:42:43 +0000 I think I found out why it says Error – 101 too. When I click “Recheck”, it says “The selected user couldn’t be found on users table”.
So does that mean that it’s beyond user database? o_o

Edit: There’s still no email.

]]> d38bcbb1d476a884b685246186ebb66c mareksgregs replied to the topic Untraceable spam user in the forum How-to & Troubleshooting http://buddypress.org/support/topic/untraceable-spam-user/#post-166767 Mon, 24 Jun 2013 17:38:30 +0000 I just deleted the user again, and it re-appeared 5 seconds later, but this time Wangguard logged an IP! This means progress!

Any suggestions for how to ban the IP now?

]]> 7f2cbe6fa4fb812cddc42db1f8db988b mareksgregs replied to the topic Untraceable spam user in the forum How-to & Troubleshooting http://buddypress.org/support/topic/untraceable-spam-user/#post-166763 Mon, 24 Jun 2013 17:11:52 +0000 @ubernaut I tried that Wangguard plugin (thanks for introducing it to me by the way, it’s awesome) and when I scanned the user, it’s status came back as “Error – 101”

I don’t see how my site could be hacked though. Perhaps the problem is in one of my plugins. Unlikely though. All of my active plugins are legit and shouldn’t have spam bots in…[Read more]

]]> b8c2fee76ab3ac9ba5f5c1a2985b8124 mareksgregs replied to the topic Untraceable spam user in the forum How-to & Troubleshooting http://buddypress.org/support/topic/untraceable-spam-user/#post-166753 Mon, 24 Jun 2013 16:33:02 +0000 @ubernaut Oh I forgot to mention, there isn’t an email associated with the account either.
I think that something in the files may be creating it over and over again. Would that be possible?

]]> 65312cb4b266cd678d623d5506bf3b40 mareksgregs started the topic Untraceable spam user in the forum How-to & Troubleshooting http://buddypress.org/support/topic/untraceable-spam-user/ Mon, 24 Jun 2013 11:56:21 +0000 I have a user by the username of “user.firstnameuser.lastname” and it keeps spamming the Groups section of my site.
I’ve deleted it for about 30 times by now. But it just keeps coming back. And what’s really odd is that it has no Registration IP or any IP associated with it. The sign up is not showing up in the Activity log either.

Is there a way…[Read more]

]]>