Jump to content
Latest News: (loading..)

Archived

This topic is now archived and is closed to further replies.

Weedwaka

Did Someone hack my site ? ( Eval Base64 Decode )

Recommended Posts

My site got hacked with Eval base64. I found a xxx.php file in my root directory. I managed to decode it but what exactly am I looking for? What do I search for to tell me which files are infected? THanks

Share this post


Link to post
Share on other sites

Can someone pls help me decode this

 

 

eval(gzinflate(str_rot13(base64_decode('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'))));

Share this post


Link to post
Share on other sites

@@Lucien

 

You don't need to decode it, you need to remove it.....remove all malicious code and anomalous files from the server and then secure the site so it can't be hacked again. See the SECURITY forum for more information.

 

 

 

 

Chris


:|: Was this post helpful ? Click the LIKE THIS button :|:

 

See my Profile to learn more about add ons, templates, support plans and custom coding (click here)

Share this post


Link to post
Share on other sites

Can someone pls help me decode this

 

 

eval(gzinflate(str_rot13(base64_decode('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'))));

 

It goes thru 41 iterations of

 

eval(gzinflate(str_rot13(base64_decode( blah ... blah... blah))));

 

In the end it spits this out to the browser:

 

<html>
<head>
<meta http-equiv="Content-type" content="text/html; charset=utf-8">
<title>Default Web Site Page</title>
<style type="text/css">
body {font-family:arial;margin:0;padding:0;background:url(/img-sys/bg.jpg) repeat-x #dff4fe;color:#6f6f6f;font-size:12px;}
a {color:#0075a9;}
* {margin:0;padding:0;}
h1 {background:url(http://184.164.142.199/img-sys/header.jpg) no-repeat; height:83px;text-indent:-9999px;}
h2 {font-size:13px;margin:15px 0 0 50px;padding:0;}
p {margin:10px 15px 15px 50px;}
#wrap {margin:50px auto 20px auto;width:906px;}
.msg {background:url(http://184.164.142.199/img-sys/contentbox.jpg) no-repeat; min-height:206px; color:#000;font-size:16px; padding:25px;}
* html .msg {height:206px;}
.msg p{border:none;margin:0 0 10px 0;}
.msg ul {margin:15px 15px 0 15px;}
li {margin:10px 0;}
.note {font-style:italic; border-bottom:1px solid #cae0e5; border-top:1px solid #cae0e5; padding:15px 0;margin-right:50px;}
#contactinfo, .contactinfo {padding:5px 0;}
#contactinfo li, .contactinfo li {float:left;padding:5px;width:250px;list-style:none;font-size:14px;}
p.troubleshoot {font-style:italic;border:dashed 1px #dfe9ed;padding:5px;margin:10px 0 0 0;}
</style>
</head>
<body>
<h1>Default Web Site Page</h1>
<div id="wrap">
<div class="msg">
 <p><strong>If you feel you have reached this page in error, please contact the web site owner:webmaster@casts</strong></p>
 <div class="contactinfo"><a href="mailto:webmaster@casts">webmaster@casts</a></div>
 <p class="troubleshoot">It may be possible to restore access to this site by <a href="http://www.cpanel.net/docs/dnscache/cleardns.html">following these instructions</a> for clearing your dns cache.</p>
</div>
<div class="msg">
<p><strong> If you are the web site owner, it is possible you have reached this page because:</strong></p>
<ul>
<li>The IP address has changed.</li>
<li>There has been a server misconfiguration.</li>
<li>The site may have been moved to a different server.</li>
</ul>
<p><strong>If you are the owner of this website and were not expecting to see this page, please contact your hosting provider.</strong></p>
</div>
</div>
<p class="note"><strong>Note</strong>: Although this site is running cPanel, WebHost Manager, and Apache software it almost certainly has no other connection to cPanel Inc. or the Apache Group. Please do not send mail about this site or its contents to cPanel Inc. or the Apache Group.
</p>
<h2>About cPanel:</h2>
<p>cPanel is a leading provider of software for the webhosting industry. If you would like
to learn more about cPanel please visit our website at <a href="http://www.cpanel.net/">www.cpanel.net</a>.
Please be advised that cPanel Inc. is not a web hosting company, and as such has no control over
content found elsewhere on this site.</p>
<h2>About Apache HTTP Server:</h2>
<p>The Apache HTTP Server is an open source web server which powers many of the world's web sites.
The Apache HTTP server is part of the Apache Group's many influential projects. Their efforts have
helped shape much the world wide web, and they continue to be a dominating force in the web hosting
industry.</p>
</body>
</html>

 

In case you're wondering the IP address in the code traces to Tempe Arizona, USA

 

Strangest "hack" I've seen.....

:huh:


If I suggest you edit any file(s) make a backup first - I'm not perfect and neither are you.

 

"Given enough impetus a parallelogramatically shaped projectile can egress a circular orifice."

- Me -

 

"Headers already sent" - The definitive help

 

"Cannot redeclare ..." - How to find/fix it

 

SSL Implementation Help

 

Like this post? "Like" it again over there >

Share this post


Link to post
Share on other sites

Actually looks to me like your hosting account was taken offline by your hosting provider for non-payment and they added the code to your site to redirect you to contact them. HOWEVER, they would not have left the FTP account open for you to see what they did.

 

Very strange indeed !

 

 

 

 

Chris


:|: Was this post helpful ? Click the LIKE THIS button :|:

 

See my Profile to learn more about add ons, templates, support plans and custom coding (click here)

Share this post


Link to post
Share on other sites

×