4images Forum & Community
Welcome, Guest. Please login or register.
Did you miss your activation email?
July 29, 2014, 08:49:50 PM

Login with username, password and session length
Search:     Advanced search
Togle to toolbar
Translate this page with =>
Translate this page >
* Home Help Search Login Register
 
+  4images Forum & Community
|-+  4images Issues / Ausgaben
| |-+  Discussion & Troubleshooting (Moderators: Acidgod, ivan, Rembrandt)
| | |-+  How Do I detect Malware ?
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Print
Author Topic: How Do I detect Malware ?  (Read 2012 times)
__G__
Sr. Member
****
Offline Offline

Posts: 286

Thank You
-Given: 8
-Receive: 0


View Profile
« on: December 28, 2012, 07:13:59 AM »

Hi My 4homepages is infected and google blacklisted my website Sad Anyhow So I downloaded the whole site to my local pc now from ftp So How Do I detect where the code is hiding is there a scanner ? Which will remove that code. I have no idea from where should I begin Can someone please shed some light on this.
Logged
Rembrandt
Moderator
4images Guru
*****
Offline Offline

Posts: 4014

Thank You
-Given: 102
-Receive: 842

Vienna


View Profile WWW
« Reply #1 on: December 28, 2012, 07:21:47 AM »

Hi!
website ?
Logged

Meine 4Images Modifikationen  Now over 100 Modification Online!    Meine 4images Demo Seite


Please do not PM me asking for help unless you've been specifically asked to do so. Such PMs will be deleted without answer. (forum rule #6)
__G__
Sr. Member
****
Offline Offline

Posts: 286

Thank You
-Given: 8
-Receive: 0


View Profile
« Reply #2 on: December 28, 2012, 10:52:20 AM »

I sent you in PM the website


UPdate


I have just pm you with the ftp access.
« Last Edit: December 28, 2012, 01:22:36 PM by __G__ » Logged
Rembrandt
Moderator
4images Guru
*****
Offline Offline

Posts: 4014

Thank You
-Given: 102
-Receive: 842

Vienna


View Profile WWW
« Reply #3 on: December 28, 2012, 02:15:30 PM »

So..  i found this:
 " <?php eval(gzinflate(base64_decode.......e.t.c..... ?> "
in lang/english/main.php
in lang/deutsch/main.php

i hope i have all....

Next:
1.) Do not longer login on your FTP or Web Interface
2.) Check with a Powerfull Antivirus Program your Home PC . (There is very Important, the most Trojaner on the websites come from own PC per FTP.)
3.) If your Sytem clean change all your FTP and SQL passwords.
4.) Do not call your website
5.) Login on your FTP and remove the Code, check all your *.php and *html files on your FTP server.
6.) Have you all this done, call your website and check with the Online Antivirus Program your website.

mfg Andi

Logged

Meine 4Images Modifikationen  Now over 100 Modification Online!    Meine 4images Demo Seite


Please do not PM me asking for help unless you've been specifically asked to do so. Such PMs will be deleted without answer. (forum rule #6)
__G__
Sr. Member
****
Offline Offline

Posts: 286

Thank You
-Given: 8
-Receive: 0


View Profile
« Reply #4 on: December 29, 2012, 12:44:47 AM »

Thanks a lot I will now remove those codes. You just saved my life Thank you so muchhhhh


So just to ask you the code you found on those main files have you removed it already ? if yes Thank you so much The mods and admins of this website has always been so helpful God bless you
Logged
Rembrandt
Moderator
4images Guru
*****
Offline Offline

Posts: 4014

Thank You
-Given: 102
-Receive: 842

Vienna


View Profile WWW
« Reply #5 on: December 29, 2012, 06:44:54 AM »

Yes i have removed it..

mfg Andi
Logged

Meine 4Images Modifikationen  Now over 100 Modification Online!    Meine 4images Demo Seite


Please do not PM me asking for help unless you've been specifically asked to do so. Such PMs will be deleted without answer. (forum rule #6)
Pages: [1] Print 
« previous next »
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!
Page created in 0.137 seconds with 20 queries.