13 Aug, 2010
Php virus bagle
Articles related to php virus bagle
http://digitalpbk.blogspot.com/2009/10/bagle-virus-analysis-php-code.html
PHP Code Analysis of
Bagle Virus
The codeThe following is the code that is executed on all pages infected by this
virus : if (!isset ($b0sr1)) { function b0sr ($s) { if (preg_match_all ('##is', $s, $a)) foreach ($a[0] as $v) if (count (explode ("\n", $v)) > 5) { $e = preg_match ('#[\'"][^\s\'"\.,;\?!\[\]:/\(\)]{30,}#', $v) || preg_match ('#[\(\[](\s*\d+,){20,}#', ...
Published 2 years, 3 months ago
http://digitalpbk.blogspot.com/2009/10/ftpchk3-virus-php-pl-hacked-website.html
FTPCHK3 :
Virus that adds malicious scripts to your website.
IntroThis
virus changes all your web files,
php, html javascript and tpl files in prominent CMS systems to add a malicious script into your site. This injection allows the attacker to remotely execute
PHP code on your website if the
php infected code is running on your pages. Its supposedly called
Bagle. But who cares about the name? It's nasty and start fixing.How it got in ?This can be due to potential security holes in your FTP ...
Published 2 years, 3 months ago
http://digitalpbk.blogspot.com/2008/12/ckvoexe-bat-cmd-virus-removal-manual.html
ckvo.exe Manual removal Steps
ckvo.exeThis
virus is the same as amvo.exe and same steps should be followed to remove this
virus. It creates autorun.inf and a .cmd file on all the partitions mounted on windows.Follow this guide to remove the
virus.Cheers... ...
Published 3 years, 2 months ago
http://digitalpbk.com/virus/brontok-manual-removal-steps-free-tool
Brontok
Virus manual removal steps
The Brontok
virus is a commonly occuring
virus and is transmitted mainly through removable Media drives such as Pen drives, Floppy Disks etc. Brontok appears in the form of a File Folder, with similar icons and has the same name as its parent folder. People tend generally to open the folder which in turn executes the
virus. Read on to get rid of this
virus.
Brontok
Virus Symptoms, How to detect Brontok
In order to detect Brontok
Virus on the system, watch ...
Published 1 year, 10 months ago
http://digitalpbk.com/virus/gumblar-web-virus-manual-removal-free-tool
Gumblar
Virus Javascript removal using PERL
Gumblar
virus infects all .html and .
php files and injects a piece of javascript in the source code. The code is usually found just below the <body> tag. The Javascript code Gumblar injects varies widely and usually attaches a script or inline frame inside your page to execute itself on page load. Read on to get rid of this
virus.
Gumblar Source Code Samples when delimited by new lines
Sample 1
var D;
if(D!='' ...
Published 1 year, 10 months ago
http://digitalpbk.blogspot.com/2009/05/curl-php-windows-unable-load-libcurlphp.html
cURL
PHP Error on Windows
Fatal error: Call to undefined function curl_init() in D:/webs/
php.php on line 284This problem arises because of not including the lib_curl.dll to
PHP. To solve this uncomment the line as shown below;extension=
php_bz2.dllextension=
php_curl.dll;extension=php_dba.dllNow restart apache server. If you get an error "Unable to Load
X:/path/php/ext/php_curl.dll", copy SSLEAY32.PHPlibEAY32.dll (OpenSSL) Libraries to the System32 folder.Now restart apache server ...
Published 2 years, 9 months ago
http://digitalpbk.blogspot.com/2008/05/8298235210-malwareadware-vundo.html
Win32.Vundo adware manual removal
IntroThis is yet another adware that spies your computer and should be removed!The AOL Active
Virus Shield license has expired and sadly AOL isn't continuing the service. So its left to me to defend my sys against the world of
viruses trojans and adwares or in short all other malwares.Win32.Vundo as experts call it,SymptomsOften get popupsMicrosoft Internet Explorer: Work Offline , Cancel window even when not browsingStrange tabs on Firefox ...
Published 3 years, 9 months ago
http://digitalpbk.blogspot.com/2007/10/disable-autorun-windows-xp.html
Disable Autorun Windows XP
Do this very important!!Most
viruses uses the autorun.inf to get itself infected on your computer. Autorun.inf is a small file that instructs the windows os to do when the CD is inserted into the computer. In genuine cases , it runs a setup in case of a Software Installation Disc. In the other case it may run a
virus and gets your system infected. All you got to do to get the
virus is put the CD. Same is the case for Mass Storage Devices like Memory Sticks, Pen Drives ...
Published 4 years, 3 months ago
http://digitalpbk.blogspot.com/2007/05/custom-extenstion-for-server-script.html
Custom extenstion for a Server Script
Intro
PHP files have a &q
uot;.PHP" extension and is by default the extension used to run
php scripts. Thats ordinary. Now it would be cool if we could name another extension (say .do or .html) for a
PHP script and get the same output. This is precisely what the following is about.In order to map a particular extension to a particular application, apache uses handlers. Basically you can define an extension and add the corresponding handler. This can ...
Published 4 years, 8 months ago
http://digitalpbk.com/virus/igqjjexe-manual-removal-steps-free-tool
igqjj.exe Manual Removal Steps
IGQJJ.EXE is a
Virus
It is usually present in your C: drive hidden and is run on Windows start up using the registry settings. Read on to get rid of this
virus.
Removal Steps
Open Regedit.exe (Windows Run, Type in regedit.exe)
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run using the left tree,
Locate IGQJJ.EXE, note down its path denoted by the value on the right pane and then delete its entries. (Right click delete)
Search ...
Published 1 year, 10 months ago
Related help topics for php virus bagle
More keywords like php virus bagle
More pages for php virus bagle