刚才安装了360的后门查杀发现2条问题
第一条问题[*]复制代码第二条[*] 1,[*] 'config.inc.php' => 1,
[*] 'admin/area.inc.php' => 1,
[*] 'admin/config.inc.php' => 1,
[*] 'admin/data.inc.php' => 2,
[*] 'admin/database.inc.php' => 1,
[*] 'admin/log.inc.php' => 1,
[*] 'admin/menu.inc.php' => 1,
[*] 'admin/scan.inc.php' => 23,
[*] 'admin/template/count.tpl.php' => 1,
[*] 'admin/template/msg.tpl.php' => 1,
[*] 'admin/template/scan.tpl.php' => 1,
[*] 'admin/template/setting.tpl.php' => 1,
[*] 'admin/update.inc.php' => 1,
[*] 'api/avatar/upload.php' => 1,
[*] 'api/oauth/baidu/callback.php' => 1,
[*] 'api/oauth/msn/callback.php' => 1,
[*] 'api/oauth/netease/callback.php' => 1,
[*] 'api/oauth/qq/callback.php' => 1,
[*] 'api/oauth/qq/index.php' => 1,
[*] 'api/oauth/qq/post.php' => 1,
[*] 'api/oauth/qq/qzone.php' => 1,
[*] 'api/pay/kq99bill/notify.php' => 1,
[*] 'api/pay/paypal/notify.php' => 1,
[*] 'api/pay/paypal/send.inc.php' => 1,
[*] 'api/pay/yeepay/send.inc.php' => 1,
[*] 'include/cache_shmop.class.php' => 1,
[*] 'include/captcha.class.php' => 1,
[*] 'include/fields.func.php' => 1,
[*] 'include/file.func.php' => 1,
[*] 'include/global.func.php' => 2,
[*] 'include/ip.class.php' => 1,
[*] 'include/post.func.php' => 2,
[*] 'include/seo.inc.php' => 1,
[*] 'include/session_apc.class.php' => 1,
[*] 'include/session_eaccelerator.class.php' => 1,
[*] 'include/session_file.class.php' => 1,
[*] 'include/session_memcache.class.php' => 1,
[*] 'include/session_mysql.class.php' => 1,
[*] 'include/session_redis.class.php' => 1,
[*] 'include/session_shmop.class.php' => 1,
[*] 'include/session_wincache.class.php' => 1,
[*] 'include/session_xcache.class.php' => 1,
[*] 'include/sql.func.php' => 1,
[*] 'include/template.func.php' => 1,
[*] 'install/index.php' => 1,
[*] 'module/brand/admin/install.inc.php' => 1,
[*] 'module/buy/admin/install.inc.php' => 1,
[*] 'module/down/admin/install.inc.php' => 1,
[*] 'module/exhibit/admin/install.inc.php' => 1,
[*] 'module/group/admin/install.inc.php' => 1,
[*] 'module/group/admin/template/order_stats.tpl.php' => 1,
[*] 'module/job/admin/install.inc.php' => 1,
[*] 'module/know/admin/install.inc.php' => 1,
[*] 'module/mall/admin/install.inc.php' => 1,
[*] 'module/mall/admin/template/order_stats.tpl.php' => 1,
[*] 'module/member/admin/promo.inc.php' => 1,
[*] 'module/member/admin/sendmail.inc.php' => 1,
[*] 'module/member/admin/sendsms.inc.php' => 1,
[*] 'module/member/admin/template/cash_stats.tpl.php' => 1,
[*] 'module/member/admin/template/charge_stats.tpl.php' => 1,
[*] 'module/member/admin/template/pay_stats.tpl.php' => 1,
[*] 'module/member/message.inc.php' => 1,
[*] 'module/photo/admin/install.inc.php' => 1,
[*] 'module/quote/admin/install.inc.php' => 1,
[*] 'module/quote/price.inc.php' => 1,
[*] 'module/sell/admin/install.inc.php' => 1,
[*] 'module/special/admin/install.inc.php' => 1,
[*] 'module/special/type.inc.php' => 1,
[*] 'module/video/admin/install.inc.php' => 1,
[*] 'upgrade/config.inc.php' => 1,
[*] 'upgrade/index.php' => 1,
[*] 'wap/index.php' => 1,
[*] );
[*] $filedir or $filedir = $sys;
[*] $fileext or $fileext = $bd_ext;
[*] $code or $code = $bd_code;
[*] $codenum or $codenum = 1;
[*] $code = str_replace('\|', '|', preg_quote(stripslashes($code)));
[*] $code = convert($code, DT_CHARSET, $charset);
[*] $files = array();
[*] foreach(glob(DT_ROOT.'/*.*') as $f) {
[*] $files[] = $f;
[*] }
[*] foreach($filedir as $d) {
[*] $files = array_merge($files, get_file(DT_ROOT.'/'.$d, $fileext));
[*] }
[*] $lists = $mirror = array();
[*] if(is_file(DT_ROOT.'/file/md5/'.DT_VERSION.'.php')) {
[*] $content = substr(trim(file_get(DT_ROOT.'/file/md5/'.DT_VERSION.'.php')), 13);
[*] foreach(explode("\n", $content) as $v) {
[*] list($m, $f) = explode(' ', trim($v));
[*] $mirror[$m] = $f;
[*] }
[*] }
[*] foreach($files as $f) {
[*] $content = file_get($f);
[*] if(preg_match_all('/('.$code.')/i', $content, $m)) {
[*] $r = $c = array();
[*] foreach($m as $v) {
[*] in_array($v, $c) or $c[] = $v;
[*] }
[*] $r['num'] = count($c);
[*] if($r['num']".$v['num'].",\r\n";
[*] }
[*] file_put(DT_ROOT.'/file/temp/white.txt', $white);
[*] */
[*] $find = count($lists);
[*]} else {
[*] $files = glob(DT_ROOT.'/*');
[*] $dirs = $rfiles = array();
[*] foreach($files as $f) {
[*] $bn = basename($f);
[*] if(is_file($f)) {
[*] $rfiles[] = $bn;
[*] } else {
[*] if($bn == 'file') continue;
[*] $dirs[] = $bn;
[*] }
[*] }
[*] $code = $bd_code;
[*] $fileext = $bd_ext;
[*]}
[*]include tpl('scan');
[*]?>复制代码官方给看看，是不是真有木马
第一个是木马 第二个是系统文件
页:
[1]