Luis Manson Posted January 31, 2013 Share Posted January 31, 2013 Just found this on cache/cat 7a8a823f8b7c.pHp ============================================================================== ========================= END =================================== ========================= /interface/blog/xmlrpc.php?sid=14eb97dd10564a7e7e42c90ca9aa66de& =================================== ============================================================================== Link to comment Share on other sites More sharing options...
Aiwa Posted January 31, 2013 Share Posted January 31, 2013 doesn't look legit to me... Link to comment Share on other sites More sharing options...
Luis Manson Posted January 31, 2013 Author Share Posted January 31, 2013 me neither, i tried to decode it, but i was not able to do it :S Link to comment Share on other sites More sharing options...
AtariAge Posted February 1, 2013 Share Posted February 1, 2013 I just found a very similar file in my cache directory. ..Al Link to comment Share on other sites More sharing options...
bfarber Posted February 1, 2013 Share Posted February 1, 2013 That looks like a leftover file from a previous exploit and should be removed. It is certainly not a file IP.Board utilizes. Link to comment Share on other sites More sharing options...
AtariAge Posted February 1, 2013 Share Posted February 1, 2013 That looks like a leftover file from a previous exploit and should be removed. It is certainly not a file IP.Board utilizes. Oh, I removed it alright. With prejudice! Link to comment Share on other sites More sharing options...
Dmacleo Posted February 1, 2013 Share Posted February 1, 2013 wold think anything using pHp (capitol H) would never be legit. Link to comment Share on other sites More sharing options...
Luis Manson Posted February 1, 2013 Author Share Posted February 1, 2013 yesturday i had chmod 000 the file in the meanwhile Link to comment Share on other sites More sharing options...
Rhett Posted February 2, 2013 Share Posted February 2, 2013 Here is an article you can use to help clean up your site if needed http://community.invisionpower.com/resources/guides.html/_/knowledge-base/how-to-clean-your-site-from-infection-r266 Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.