Jump to content

Vulnerability or virus?


Otto Vintila

Recommended Posts

In my presta 1.6 i discovered few strange files:

AL7epO3FZmr.php

aPLoAjKxe3w.php

pneCIVygmWF.php

Also php.ini contain:

safe_mode = Off

disable_functions = NONE

safe_mode_gid = OFF

open_basedir = OFF

exec = ON

shell_exec = ON

The files are encoded with Zeura.

Does anyone have any idea what we have here?

Thank you in advance!

AL7epO3FZmr.php aPLoAjKxe3w.php php.ini pneCIVygmWF.php

Edited by OttovonB (see edit history)
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...