SMF Support > SMF 2.0.x Support

Can't get rid of Trojan.PHP-43

<< < (2/11) > >>

Yoshi:

--- Quote from: Мel on July 14, 2012, 05:39:01 AM ---There are not many mods, just a several and all of them are from here. I could get a list, if needed.
Infected files are every time different.

--- End quote ---
Can you attach the file it reports the next time, then, so we can check if anything's wrong with it?

Мel:
I've run a scan and it's clear for now. Whenever I'd find a trojan, I'd attach an infected file.

Ricky.:
Generally, there are some idiotic figures in this world who maintain list of sites they hack or infect in their hacking community or forums, users regularly checks them and someone clean or fixes their forum, they again intimate hacker and then hacker again try to heck it. Generally they leave some script which is undetectable to programs but when they execute them, they get full access to your serer through http based file browser. .. so, it may be clean for now , if it infects again then must be some hidden script in your files. They even hide them encrypted so that remains undetected to scanners.. (happened with me.. I have been behind these trolls from a good time).. ~~

Мel:
Ricky, so what am I supposed to do about that?

Ricky.:
If it appears again then you have to figure out its origin. I had simply deleted everything apart of db and had even checked db to see if there is anything unusual , then downloaded everything fresh and uploaded. Since then I never saw them again. In my site, they came in through an old WP installation.

Navigation

[0] Message Index

[#] Next page

[*] Previous page