Visualizza post
Questa sezione ti permette di visualizzare tutti i post inviati da questo utente. N.B: puoi vedere solo i post relativi alle aree dove hai l'accesso.
./virus-find.php -> contiene eval(gzinflate(base64_decode
./virus-find.php -> contiene RewriteRule
./virus-find.php -> contiene document.write
./portal/htaccess.txt -> contiene RewriteRule
./portal/tmp/install_4c65d99fa3820/media/system/js/mootools-1.2.3.1-more.js -> contiene document.write
./portal/templates/ja_teline_ii/index.php -> contiene document.write
./portal/templates/ja_teline_ii/highslide/highslide-full.js -> contiene document.write
Non posso leggere: ./portal/templates/ja_sulfur/css/colors/default-ie.php Verificare manualmente il contenuto!
./portal/templates/ja_senecio/scripts/mootools.v1.1.js -> contiene document.write
./portal/templates/ja_senecio/scripts/opacity.js -> contiene document.write
./portal/templates/ja_senecio/ja_menus/ja_transmenu/ja.transmenu.js -> contiene document.write
./portal/templates/ja_norite/libs/cufon/js/cufon-yui.js -> contiene document.write
./portal/templates/ja_norite/libs/cufon/js/cufon.js -> contiene document.write
Non posso leggere: ./portal/templates/ja_norite/layouts/blocks/usertools/tools-mega.php Verificare manualmente il contenuto!
./portal/templates/ja_norite/js/ja.ddmod.js -> contiene document.write
./portal/templates/ja_lime/libs/cufon/js/cufon-yui.js -> contiene document.write
./portal/templates/ja_lime/libs/cufon/js/cufon.js -> contiene document.write
Non posso leggere: ./portal/templates/ja_lime/layouts/blocks/usertools/tools-mega.php Verificare manualmente il contenuto!
./portal/templates/ja_lime/js/ja.ddmod.js -> contiene document.write
./portal/templates/ja_kyanite_ii/libs/cufon/js/cufon-yui.js -> contiene document.write
./portal/templates/ja_kyanite_ii/libs/cufon/js/cufon.js -> contiene document.write
./portal/templates/ja_kyanite_ii/layouts/blocks/head.php -> contiene document.write
Non posso leggere: ./portal/templates/ja_kyanite_ii/layouts/blocks/usertools/tools-mega.php Verificare manualmente il contenuto!
./portal/templates/ja_kyanite_ii/js/ja.ddmod.js -> contiene document.write
./portal/templates/beez/index.php -> contiene document.write
./portal/plugins/system/piwik.php -> contiene document.write
./portal/plugins/system/legacy/html.php -> contiene document.write
./portal/plugins/hwdvs-videoplayer/jwflv.view.php -> contiene document.write
./portal/plugins/hwdvs-videoplayer/jwflv_v5.view.php -> contiene document.write
Non posso leggere: ./portal/plugins/hwdvs-thirdparty/rtmp.php Verificare manualmente il contenuto!
./portal/plugins/editors/tinymce/jscripts/tiny_mce/tiny_mce_gzip.js -> contiene document.write
./portal/plugins/editors/tinymce/jscripts/tiny_mce/tiny_mce.js -> contiene document.write
./portal/plugins/editors/tinymce/jscripts/tiny_mce/tiny_mce_popup.js -> contiene document.write
./portal/plugins/editors/tinymce/jscripts/tiny_mce/tiny_mce_src.js -> contiene document.write
./portal/plugins/editors/tinymce/jscripts/tiny_mce/themes/advanced/jscripts/charmap.js -> contiene document.write
./portal/plugins/editors/tinymce/jscripts/tiny_mce/themes/advanced/jscripts/image.js -> contiene document.write
./portal/plugins/editors/tinymce/jscripts/tiny_mce/themes/advanced/jscripts/link.js -> contiene document.write
Redirect 301 /index.php http://www.tyou.it/portal##
# @version $Id: htaccess.txt 10492 2008-07-02 06:38:28Z ircmaxell $
# @package Joomla
# @copyright Copyright (C) 2005 - 2008 Open Source Matters. All rights reserved.
# @license http://www.gnu.org/copyleft/gpl.html GNU/GPL
# Joomla! is Free Software
##
#####################################################
# READ THIS COMPLETELY IF YOU CHOOSE TO USE THIS FILE
#
# The line just below this section: 'Options +FollowSymLinks' may cause problems
# with some server configurations. It is required for use of mod_rewrite, but may already
# be set by your server administrator in a way that dissallows changing it in
# your .htaccess file. If using it causes your server to error out, comment it out (add # to
# beginning of line), reload your site in your browser and test your sef url's. If they work,
# it has been set by your server administrator and you do not need it set here.
#
#####################################################
## Can be commented out if causes errors, see notes above.
Options +FollowSymLinks
#
# mod_rewrite in use
RewriteEngine On
########## Begin - Rewrite rules to block out some common exploits
## If you experience problems on your site block out the operations listed below
## This attempts to block the most common type of exploit `attempts` to Joomla!
#
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]
#
########## End - Rewrite rules to block out some common exploits
# Uncomment following line if your webserver's URL
# is not directly related to physical file paths.
# Update Your Joomla! Directory (just / for root)
# RewriteBase /
########## Begin - Joomla! core SEF Section
#
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !^/index.php
RewriteCond %{REQUEST_URI} (/|\.php|\.html|\.htm|\.feed|\.pdf|\.raw|/[^.]*)$ [NC]
RewriteRule (.*) index.php
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
#
########## End - Joomla! core SEF SectionScansione dei files probabilmente infettati
Eseguire la rimozione dei files malevoli solo in specifiche directory
Eseguire la rimozione di tutti i files htaccess infettati
./virus.php -> contiene eval(gzinflate(base64_decode
./virus.php -> contiene RewriteRule
./virus.php -> contiene document.writeGentile Cliente,in merito alla Sua segnalazione, La informiamo che abbiamo effettuato le opportune verifiche, individuando alcuni file nei quali è stato inserito un Javascript malevolo.Abbiamo effettuato dei controlli approfonditi presso il Server dove è ospitato il Suo sito, senza rilevare la presenza di eventuali problemi o accessi non autorizzati e, pertanto, La invitiamo a verificare di non avere script non aggiornati all'interno del Suo dominio, assicurandosi di avere sempre installate le ultime versioni degli script usati, in modo che terze persone non possano usare eventuali buchi di sicurezza delle applicazioni per accedere al Suo spazio web.
./portal/default.php:<?php eval(gzinflate
Eliminato codice malevolo
jtablesession::Store Failed
DB function failed with error number 1142
INSERT command denied to user 'Sql211515'@'62.149.141.174' for table 'jos_session' SQL=INSERT INTO `jos_session` ( `session_id`,`time`,`username`,`gid`,`guest`,`client_id` ) VALUES ( '235c48b7782e81bf741af3e93d9533a8','1283765977','','0','1','0' )
|
|