[support] Strange thing happened in my site - virus attack(?)

John Summerfield summer at js.id.au
Wed Jun 20 03:00:43 UTC 2012


On 20/06/12 05:43, Kim, Soonho (IFPRI) wrote:
> Dear all,
>
> I found something strange happened in my site. As you see the attached, a user named "Anonymous" tried to update wiki pages every day.
> The wiki page is only accessed by a certain user group (definitely not "Anonymous" user).  What "Anonymous" have done was just to un-publish page.
> Is there anyone who is familiar with this strange case? Is there any way to delete the user and to protect this?
>
> Thanks so much for your help in advance.

D7
admin/people
D6
admin/users

I'm not convinced that someone created an account called "Anonymous" 
though. However, the above will check that.


Carefully review your permissions.

Use one of the antispam modules.

Consider tightening your registration process.



>
> Best Regards,
> Soonho
>
>
>
>


-- 


John Summerfield


More information about the support mailing list