0

i am using Magento CE 1.9.1.0 and i just noticed an admin account called _auto_update with an email of [email protected] . I never created this user and i dont recall it being there when i downloaded and installed magento. I didnt install any modules recently and none of the modules i previously installed did this. I only applied the needed security patches to this installation and nothing else. Where did this user come from? P.S i have a test website is just about identical to this production website but this user does not exist

Improve this question
3
  • May be your site hacked....have you use latest security patches.. please take all backup of magento db and files and after delete that user. and apply security patches
    – Amit Bera ♦
    Commented May 24, 2015 at 7:40
  • Ya thats what im thinking but i've applied all the needed security patches, i have 5994 and 5344 applied but 1533 didnt apply, i saw somewhere that is already applied to magento v1.9.1. Also the store passes the shoplyft bug test.
    – user3450236
    Commented May 24, 2015 at 7:54
  • If you tried to apply 1533 and it didn't apply, crack open the patch file and check why it didn't apply. I removed the downloader files from my install which causes one of the patches to fail auto patching, so I had to do it manually
    – Barry Carlyon
    Commented May 27, 2015 at 7:51

1 Answer 1

Reset to default
3

There is no auto update feature and certainly no auto update that requires a magento admin user. So you have been hacked. Likely before you applied the patches.

There are many guides on stack exchange that explain what to do in this case.

Improve this answer
0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.