Thread: Hacked? - Found some strange directories in my root
View Single Post
Old 27-02-2011, 20:46   #5
dragon
Inactive
 
Join Date: Jan 2004
Posts: 3,898
dragon has reached the bronze age
dragon has reached the bronze agedragon has reached the bronze agedragon has reached the bronze agedragon has reached the bronze agedragon has reached the bronze agedragon has reached the bronze agedragon has reached the bronze agedragon has reached the bronze agedragon has reached the bronze agedragon has reached the bronze age
Re: Hacked? - Found some strange directories in my root
Don't know enough php to understand fully what it's upto although I think it's doing some kind of search/replace possibly injecting it's own code into other php files in the directory?

It also looks to be calling home to either feedback data to it's authors or to receive commands.

If I see one of my friends online who knows PHP i'll ask them about it.

Edit:

My friend replied with "Looks like the cracker is using the site for a link farm (to generate SEO). It also calls Yahoo's search API."

Interesting...
dragon is offline   Reply With Quote