Dreaded eval base64 files on my server need help decoding

Discussion in 'PHP' started by scriptreseller, Nov 17, 2012.

  1. #1
    Basicly found some files on the server encoded a few times having trouble decoding them any hep would be great


    there are 3 files from the looks of it.

    I have had to past it in pastbin as it was to big to add to the post

    http://pastebin.com/Pw3aUdpR





    any help would be much appreciated
     
    scriptreseller, Nov 17, 2012 IP
  2. ronaldsg

    ronaldsg Peon

    Messages:
    17
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    1
    #2
    Replace eval with echo to see decoded php source.
     
    ronaldsg, Nov 18, 2012 IP
  3. abhirampathak3

    abhirampathak3 Peon

    Messages:
    44
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    A dumb little script for removing the eval(base64()):
    for i in $(find . -name '*.php')
    do
    sed -i -r 's#eval\(base64_decode\([^\)]+\)\);##g' "${i}"
    done
     
    abhirampathak3, Nov 19, 2012 IP