Renzki's hack report

2006-04-24 @ 05:13 in Blaogy Dev

I got a very urgent call for help from Renzki this afternoon. All his joomla sites got a parse error somewhere in mosce.php file.

After checking googles and joomla forum I understood that it's a hack... or more precisely a worm virus. It's very annoying. Almost in all directories, I see files like remote.php guest.php packages.php tests.php create.php etc... and also .htaccess files. those files contain quite the same script, they are base64_encode-ed so we can understand the files from decoding them.


 (tohiny)

Momba ahy
hery

Ho hitanao ato ny isandroko. Angoniko ato mba hovakiako indray any aoriana any :-)

calendar
« Aprily 2006 »
At Ta Ar Ak Zo As Ah
          1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30
Rohy
  • Blogroll
Tahiry