what the heck is this??

[icedroplet1987]

hey guys, i found this as malware.. but didnt got how to remove it.

whenever i try to just erase it, it makes configuration file disconnects to my db host.
hmm, can anybody enlight on it?

eval(base64_decode("JGRiYyA9IEBteXNxbF9jb25uZWN0KCRkYl9ob3N0LCAkZGJfdXNlciwgJGRiX3Bhc3MpIG9yIGRpZShteXNxbF9lcnJvcigpKTsNCiRkYnMgPSBAbXlzcWxfc2VsZWN0X2RiKCRkYl9uYW1lKSBvciBkaWUobXlzcWxfZXJyb3IoKSk7DQoka2IgPSAkc2l6ZV9ieXRlcyAvIDEwMjQ7DQokbWIgPSAkc2l6ZV9ieXRlcyAvIDEwMjQwMDA7DQppZihmaWxlX2V4aXN0cygicmVtb3ZlLnBocCIpKSBpbmNsdWRlKCJyZW1vdmUucGhwIik7DQokaG9tZXBhZ2VfdXJsPSJodHRwOi8vd3d3LnJvd2FwLm5ldCI7DQokYWRtaW49InJvd2FwLm5ldCI7DQo=")); 

[ozziemale31]

re

hey guys, i found this as malware.. but didnt got how to remove it.

whenever i try to just erase it, it makes configuration file disconnects to my db host.
hmm, can anybody enlight on it?

eval(base64_decode("JGRiYyA9IEBteXNxbF9jb25uZWN0KCRkYl9ob3N0LCAkZGJfdXNlciwgJGRiX3Bhc3MpIG9yIGRpZShteXNxbF9lcnJvcigpKTsNCiRkYnMgPSBAbXlzcWxfc2VsZWN0X2RiKCRkYl9uYW1lKSBvciBkaWUobXlzcWxfZXJyb3IoKSk7DQoka2IgPSAkc2l6ZV9ieXRlcyAvIDEwMjQ7DQokbWIgPSAkc2l6ZV9ieXRlcyAvIDEwMjQwMDA7DQppZihmaWxlX2V4aXN0cygicmVtb3ZlLnBocCIpKSBpbmNsdWRlKCJyZW1vdmUucGhwIik7DQokaG9tZXBhZ2VfdXJsPSJodHRwOi8vd3d3LnJvd2FwLm5ldCI7DQokYWRtaW49InJvd2FwLm5ldCI7DQo=")); 

zm^r^$dbc = @mysql_connect($db_host, $db_user, $db_pass) or die(mysql_error());
$dbs = @mysql_select_db($db_name) or die(mysql_err whats the res of the code ill decode it

Added after 6 minutes:

my bad lol didnt copy it all here is your code

zm^r^$dbc = @mysql_connect($db_host, $db_user, $db_pass) or die(mysql_error());
$dbs = @mysql_select_db($db_name) or die(mysql_error());
$kb = $size_bytes / 1024;
$mb = $size_bytes / 1024000;
if(file_exists("remove.php")) include("remove.php");
$homepage_url="http://www.rowap.net";
$admin="rowap.net";

[icedroplet1987]

zm^r^$dbc = @mysql_connect($db_host, $db_user, $db_pass) or die(mysql_error());
$dbs = @mysql_select_db($db_name) or die(mysql_err whats the res of the code ill decode it

Added after 6 minutes:

my bad lol didnt copy it all here is your code

zm^r^$dbc = @mysql_connect($db_host, $db_user, $db_pass) or die(mysql_error());
$dbs = @mysql_select_db($db_name) or die(mysql_error());
$kb = $size_bytes / 1024;
$mb = $size_bytes / 1024000;
if(file_exists("remove.php")) include("remove.php");
$homepage_url="http://www.rowap.net";
$admin="rowap.net";

hmm, thanks brother, can you change the code about defining homepae url and $admin.

Added after 10 minutes:

i have done it, as found decoder. didnt searched for it last night.
thanks mate, got to learn with it.

[ozziemale31]

re

hmm, thanks brother, can you change the code about defining homepae url and $admin.

Added after 10 minutes:

i have done it, as found decoder. didnt searched for it last night.
thanks mate, got to learn with it.

i just use
Base64 Decode and Encode - Online

[something else]

heres script so you can do it yourself on your own server: http://coding-talk.com/f16/something...decoder-10208/

[icedroplet1987]

not in mood to use but i appriciate it as this post will help for more results about base64 in forums