Downloaded or ftp-ed a backup of your hacked site- have a virus?

Trijnie · Post by **Trijnie** » Thu Jul 27, 2006 11:35 pm

Hello,

I'm sure not everyone realises that the hacked sites have actual virusses/ trojans in them. Please be carefull.

Downloading it back to your own hard-drive could make your own local OS instable, so it cannot be trusted anymore. Virusscanners and Firewalls act as if they still work (all upgrading and all) yet these upgrading actions are fake, as in it will not add upgrades to the programm anymore since the virus has instructed them to not to.

Trijnie

Michelle Bisson · Post by **Michelle Bisson** » Fri Jul 28, 2006 12:12 am

Thanks Trijnie for sharing this with us!

crash777 · Post by **crash777** » Fri Jul 28, 2006 1:23 am

Yeah, I backed up several of my hacked sites.. I found a virus in one of them...
My scanner found it though... and quickly deleted it. It was a php file.

stoopid crackers...pfff

Elpie · Post by **Elpie** » Fri Jul 28, 2006 1:35 am

Of all the hacked sites I have been dealing with, only one has had a virus injected into it. It was also the only site that had the database compromised. I downloaded the site and my antivirus found it and deleted it.
All other sites have been subjected to defacing attacks. Those site owners have been lucky.

Post by **infograf768** » Fri Jul 28, 2006 4:49 am

Me have Mac, me not know virus.

cgraham149 · Post by **cgraham149** » Fri Jul 28, 2006 5:56 am

It is true that anti-virus software will pick those files up as Trojans....because that is what they are and that is what was used to break into so many site with the SQL injection issue.

However, if someone did download a copy to their hard drive and didn't have antivirus, there wouldn't be too much to worry about unless the following were also issues:

1) they were connected directly to the internet - no firewall
2) the machine they downloaded to was also a server running PHP
3) the hacker had the ability to activiate the script which would require them to know what IP address and what directory it was stored in.

These trojans are not self operating. You would have to download it and then run the PHP file. The ones that I have seen do not phone home to let the hacker know you are infected.

It is always better safe than sorry.

Always have updated anti-virus
Always have a firewall
Never run your personal computer as a server connected directly to the Internet

Cheers

The Joomla! Forum™

Downloaded or ftp-ed a backup of your hacked site- have a virus?

Downloaded or ftp-ed a backup of your hacked site- have a virus?

Re: Downloaded or ftp-ed a backup of your hacked site- have a virus?

Re: Downloaded or ftp-ed a backup of your hacked site- have a virus?

Re: Downloaded or ftp-ed a backup of your hacked site- have a virus?

Re: Downloaded or ftp-ed a backup of your hacked site- have a virus?

Re: Downloaded or ftp-ed a backup of your hacked site- have a virus?