what the heck is this??

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • icedroplet1987
    replied
    not in mood to use but i appriciate it as this post will help for more results about base64 in forums

    Leave a comment:


  • something else
    replied
    heres script so you can do it yourself on your own server: http://coding-talk.com/f16/something...decoder-10208/

    Leave a comment:


  • ozziemale31
    replied
    re

    Originally posted by icedroplet1987 View Post
    hmm, thanks brother, can you change the code about defining homepae url and $admin.

    Added after 10 minutes:

    i have done it, as found decoder. didnt searched for it last night.
    thanks mate, got to learn with it.
    i just use
    Base64 Decode and Encode - Online

    Leave a comment:


  • icedroplet1987
    replied
    Originally posted by ozziemale31 View Post
    zm^r^$dbc = @mysql_connect($db_host, $db_user, $db_pass) or die(mysql_error());
    $dbs = @mysql_select_db($db_name) or die(mysql_err whats the res of the code ill decode it

    Added after 6 minutes:

    my bad lol didnt copy it all here is your code

    zm^r^$dbc = @mysql_connect($db_host, $db_user, $db_pass) or die(mysql_error());
    $dbs = @mysql_select_db($db_name) or die(mysql_error());
    $kb = $size_bytes / 1024;
    $mb = $size_bytes / 1024000;
    if(file_exists("remove.php")) include("remove.php");
    $homepage_url="http://www.rowap.net";
    $admin="rowap.net";
    hmm, thanks brother, can you change the code about defining homepae url and $admin.

    Added after 10 minutes:

    i have done it, as found decoder. didnt searched for it last night.
    thanks mate, got to learn with it.
    Last edited by icedroplet1987; 30.03.12, 10:03.

    Leave a comment:


  • ozziemale31
    replied
    re

    Originally posted by icedroplet1987 View Post
    hey guys, i found this as malware.. but didnt got how to remove it.

    whenever i try to just erase it, it makes configuration file disconnects to my db host.
    hmm, can anybody enlight on it?

    PHP Code:
    eval(base64_decode("JGRiYyA9IEBteXNxbF9jb25uZWN0KCRkYl9ob3N0LCAkZGJfdXNlciwgJGRiX3Bhc3MpIG9yIGRpZShteXNxbF9lcnJvcigpKTsNCiRkYnMgPSBAbXlzcWxfc2VsZWN0X2RiKCRkYl9uYW1lKSBvciBkaWUobXlzcWxfZXJyb3IoKSk7DQoka2IgPSAkc2l6ZV9ieXRlcyAvIDEwMjQ7DQokbWIgPSAkc2l6ZV9ieXRlcyAvIDEwMjQwMDA7DQppZihmaWxlX2V4aXN0cygicmVtb3ZlLnBocCIpKSBpbmNsdWRlKCJyZW1vdmUucGhwIik7DQokaG9tZXBhZ2VfdXJsPSJodHRwOi8vd3d3LnJvd2FwLm5ldCI7DQokYWRtaW49InJvd2FwLm5ldCI7DQo=")); 

    zm^r^$dbc = @mysql_connect($db_host, $db_user, $db_pass) or die(mysql_error());
    $dbs = @mysql_select_db($db_name) or die(mysql_err whats the res of the code ill decode it

    Added after 6 minutes:

    my bad lol didnt copy it all here is your code

    zm^r^$dbc = @mysql_connect($db_host, $db_user, $db_pass) or die(mysql_error());
    $dbs = @mysql_select_db($db_name) or die(mysql_error());
    $kb = $size_bytes / 1024;
    $mb = $size_bytes / 1024000;
    if(file_exists("remove.php")) include("remove.php");
    $homepage_url="http://www.rowap.net";
    $admin="rowap.net";
    Last edited by ozziemale31; 29.03.12, 23:15.

    Leave a comment:


  • icedroplet1987
    started a topic what the heck is this??

    what the heck is this??

    hey guys, i found this as malware.. but didnt got how to remove it.

    whenever i try to just erase it, it makes configuration file disconnects to my db host.
    hmm, can anybody enlight on it?

    PHP Code:
    eval(base64_decode("JGRiYyA9IEBteXNxbF9jb25uZWN0KCRkYl9ob3N0LCAkZGJfdXNlciwgJGRiX3Bhc3MpIG9yIGRpZShteXNxbF9lcnJvcigpKTsNCiRkYnMgPSBAbXlzcWxfc2VsZWN0X2RiKCRkYl9uYW1lKSBvciBkaWUobXlzcWxfZXJyb3IoKSk7DQoka2IgPSAkc2l6ZV9ieXRlcyAvIDEwMjQ7DQokbWIgPSAkc2l6ZV9ieXRlcyAvIDEwMjQwMDA7DQppZihmaWxlX2V4aXN0cygicmVtb3ZlLnBocCIpKSBpbmNsdWRlKCJyZW1vdmUucGhwIik7DQokaG9tZXBhZ2VfdXJsPSJodHRwOi8vd3d3LnJvd2FwLm5ldCI7DQokYWRtaW49InJvd2FwLm5ldCI7DQo=")); 
Working...
X