Holy S**T - Have I been Hacked or something

W

wazzzup

Guest

• Sep 18, 2008

• #1

Ok I need a PHP expert to tell me WTF if this sile all about and what it does.

It just appearded on 2 of my site ! I deleted it of corse !

The file comes under the name of currency.php

I have attached a txt version of the file.

If someone is kind enough and give me some input it would be very very very appreciated !

 

BlackBeret

Regular Member

Jul 12, 2008

257

62

• Sep 18, 2008

• #2

There is no attachment in your post

 

W

wazzzup

Guest

• Sep 18, 2008

• #3

Now I don't now much about php, but by the look of it, this script is taking over BIG $%?&* TIME !!

Any expert here car to explain what this shit does !

 

polymorphs

Newbie

May 1, 2008

45

33

• Sep 19, 2008

• #4

The short answer is it would appear so.

search for yayang.c0.uk and read the threads on the old guy scripts forums.

 

bhnoobz

BANNED

Jul 26, 2008

394

113

• Sep 19, 2008

• #5

how about you upgrade all the CMS/blog/whatever shit you use on your sites.. I'm sure you're using some outdated script that has known injection vulnerabilities.

 

BuzzKill

Regular Member

Aug 30, 2007

431

222

• Sep 19, 2008

• #6

Looks like its all over the place hxxp://202.117.3.11/cs.php

 

W

wazzzup

Guest

• Sep 19, 2008

• #7

Thanks for the input

I will definatletly look into some modules used in some of my joomla sites that's probably where the vulnerabilities are !