Sponsored Content
Top Forums Shell Programming and Scripting Script to delete a rogue header added by hacker Post 302605188 by SwankPad on Tuesday 6th of March 2012 09:25:13 PM
Old 03-06-2012
Script to delete a rogue header added by hacker

Hi,

Someone hacked my site(s) and appended a header to every .php file in every domain. With several Word Press sites, you can imagine how many files that is! I hand edited some, but it is just a huge task to edit the thousands of files.

I was a long time Linux scripter, but have not done it in years. I need help!

The offending code is nicely set inside php tags. So, if I can delete it either by start characters "<?php" to the first "?>" or more simply, delete up to and including the first "?>" or even the first ">", that would do it.

I have tried a few things like sed and awk, but sed seems to work on lines and not a character by character and this code does not have a newline after it...

I can find the files with grep -l base64_decode *.php or something along those lines.

I hope I am not being a bother. I am pretty tired after working on this for hours. I know someone can write this off the top of their head.

All the files look like this:

<?php /**/ eval(base64_decode("aWYoZnVuY3Rpb25fZXhpc3RzKCdvYl9zdGFydCc.....gfSAgb2Jfc3RhcnQoJ21yb2JoJyk7ICB9ICB 9"));?><? real code for file.....

And there are no other ">" until that one that marks the end of the virus code...

Much thanks!
-Swank
 

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Cannot kill hacker process with my script

I want to kill a process of xterm that is run by hacker with my login name. So, I write a shell script to do my goal. I run 2 xterm and then I run my script on a first xterm. it should kill the process of a second xterm but it doesn't.Why? Here is my code : #!/bin/ksh myps=$(ps -f|grep... (7 Replies)
Discussion started by: thsecmaniac
7 Replies

2. Shell Programming and Scripting

help to create script for added date to list users

hi my friends im asking for the possibility to creat a script in ubuntu for added date to list users for doing this : - search in debug connected user of all connected users - if a new user is connect for the first time to my server the script record the date of the connection and added it... (1 Reply)
Discussion started by: amzioujda
1 Replies

3. UNIX for Dummies Questions & Answers

Delete header row and reformat from tab delimited to fixed width

Hello gurus, I have a file in a tab delimited format and a header row. I need a code to delete the header in the file, and convert the file to a fixed width format, with all the columns aligned. Below is a sample of the file:... (4 Replies)
Discussion started by: chumsky
4 Replies

4. Shell Programming and Scripting

how to delete the older files other than the recently added 5 files

Number of files will get created in a folder automatically daily.. so i hav to delete the older files other than the recently added 5 files.. Could u help me through this..?? (5 Replies)
Discussion started by: shaal89
5 Replies

5. UNIX for Dummies Questions & Answers

Email Script not working when added to cron[solved]

Hi I have written an email script in python which sends email to the given id. I have customized the script for generating space alert inside a shell script as shown below df -h /microfocus > /tmp/spacereport ## Filter the %usage to variable per per=$(awk '{if (NR==3){print $4}}'... (0 Replies)
Discussion started by: rakeshkumar
0 Replies

6. UNIX for Dummies Questions & Answers

Printing the contents of a file in a script with added chars

I have the contents of file1 1 2 3 4 5 6 7 8 9 i'm trying to figure out how to add chars to them so it would display as this, if it's possible 1 . 2 . 3 \ 4 . 5 . 6 \ 7 . 8 . 9 \ thanks! (1 Reply)
Discussion started by: austing5
1 Replies

7. UNIX and Linux Applications

Script to delete few rows from a file and then update header

HJKL1Name00014300010800000418828124201 L201207022012070228XAM 00000000031795404 001372339540000000000000000000000 COOLTV KEYA Zx00 xI-50352202553 00000000 00000000 G000000000000 00000000 ... (10 Replies)
Discussion started by: mirwasim
10 Replies

8. Programming

Dynamically added text fields passed to PHP script

If I am posting this to the wrong section please move it somewhere it fits. I apologize if this is not the correct section. I have a site where I want to have form that in a "Visitor name" section to be able to add fieldets as needed. I think I have that worked out. So the below code is the... (4 Replies)
Discussion started by: GroveTuckey
4 Replies

9. Shell Programming and Scripting

Shell script worked correctly until I added variable :(

Hi everyone, I have been using a shell script for the last 6 months to copy a database from a POS system, then analyse the database and print the current sales total. This has worked flawlessly, the only issue was that I had hard coded the IP address of the POS and occasionally I would need to... (23 Replies)
Discussion started by: gjws
23 Replies

10. UNIX for Dummies Questions & Answers

Validation to be added in the shell script

I need help with one of my shell script. The script is working fine but i need to add two condition - i need to get rid of all the below ftp messages and need to have only ftp completed or failed message. example when i run the script i get below lines - Connected to xxxx 220 (vsFTPd... (1 Reply)
Discussion started by: chandraprakash
1 Replies
head(1) 						      General Commands Manual							   head(1)

NAME
head - Displays the beginning of files SYNOPSIS
Current Syntax head [-c bytes] [-n lines] [file...] Obsolescent Syntax head [-lines] [file...] STANDARDS
Interfaces documented on this reference page conform to industry standards as follows: head: XCU5.0 Refer to the standards(5) reference page for more information about industry standards and associated tags. OPTIONS
The default count is 10. [Tru64 UNIX] Specifies the number of bytes to display. If the last byte written is not a newline character, a newline character is appended to the output. Specifies the number of lines to display Works exactly as -n lines. Obsolescent. OPERANDS
Path name of the input file. If you do not specify a file, head reads standard input. DESCRIPTION
The head command copies the standard input to standard output, ending output of each file at the specified point. NOTES
The obsolescent form is subject to withdrawal at any time. EXIT STATUS
The following exit values are returned: Successful completion. An error occurred. EXAMPLES
To display the first 5 lines of a file called test, enter: head -n 5 test To display the first ten lines of all files (except those with a name beginning with a period), enter: head * ENVIRONMENT VARIABLES
The following environment variables affect the execution of head: Provides a default value for the internationalization variables that are unset or null. If LANG is unset or null, the corresponding value from the default locale is used. If any of the internationalization vari- ables contain an invalid setting, the utility behaves as if none of the variables had been defined. If set to a non-empty string value, overrides the values of all the other internationalization variables. Determines the locale for the interpretation of sequences of bytes of text data as characters (for example, single-byte as opposed to multibyte characters in arguments and input files). Determines the locale for the format and contents of diagnostic messages written to standard error. Determines the location of message catalogues for the processing of LC_MESSAGES. SEE ALSO
Commands: cat(1), more(1), pg(1), sed(1), tail(1) Standards: standards(5) head(1)
All times are GMT -4. The time now is 03:08 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy