eval(base64_decode) added automatically in my webpages

Discussion in 'Security' started by nehrav, Nov 18, 2009.

  1. Carl29

    Carl29 Active Member

    Messages:
    114
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    51
    #21
    Hi nehrav,
    I just found out yesterday that all the sites on my server had the same encoded string at the top of every page.
    Ive contacted my server support team, and they found out the even my backups were infected.
    What did you do to clean up the server?

    Thanks
     
    Carl29, Feb 26, 2010 IP
  2. nehrav

    nehrav Peon

    Messages:
    46
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #22
    Carl, in my case my own system was malware infected.
    So whenever I get connected to the server from my FTP, malware send a mail from the backend to hackers.
    I can clean your code, for more you can ping me on
     
    nehrav, Feb 26, 2010 IP