07.02.2012 18:37
Cemaliozan] Merhaba arkadaşlar adlı üyeden alıntı
#!/usr/bin/perl # http://digitalpbk.blogspot.com/2009/10/ftpchk3-virus-php-pl-hacked-website.html use strict; `grep -Rn aWYoIWlzc2V0KCRiMHNyMSkpe2Z1bmN0aW9u * | cut -d ':' -f 1 > listofinfected`; open FP,"listofinfected"; my $file; while($file = ){ print "Testing $file ... "; chomp($file); if(-e ($file)){ open VI,$file; my @filecon = ; close VI; if($filecon[0] =~ m/aWYoIWlzc2V0KCRiMHNyMSkpe2Z1bmN0aW9u/){ $filecon[0] =~ s/(<\?.*?\?>)//g; rename($file,$file.".infected"); open VI,">$file"; print VI join('',@filecon); close VI; print $file." Fixed !!"; } } print "\n"; } close(FP); `grep -Rn ftpchk3.php * | cut -d ':' -f 1 > listofinfected2`; open FP,"listofinfected2"; my $file; while($file = ){ print "Testing $file ... "; chomp($file); if(-e ($file)){ open VI,$file; my @filecon = ; close VI; my $fc = join('',@filecon); $fc =~ s|document.write('