Virus in Gallery2-preinstall

Eliason

Joined: 2008-08-07
Posts: 2
Posted: Thu, 2008-08-07 10:30

Hi!

I installed gallery2 the other day. Right the next day I realized that my index-page of my website had been changed. It was changed to index.php(by RAVENOUS_HACKER).

Making a virus search I found the trojan.php.c99.shell in your galley2_preinstall file.

Just wanted to let you know.

Thanks.
Eli

 
ckdake
ckdake's picture

Joined: 2004-02-18
Posts: 2258
Posted: Thu, 2008-08-07 12:36

Where did you get this gallery 2 preinstaller from?

____
http://ckdake.com/ - If you found my help useful, please consider donating to Gallery.

 
Eliason

Joined: 2008-08-07
Posts: 2
Posted: Thu, 2008-08-07 19:09
 
ckdake
ckdake's picture

Joined: 2004-02-18
Posts: 2258
Posted: Fri, 2008-08-08 12:19

Strange, those all do point to that last URL you linked, and I verified that it's what is supposed to be there.

Could you email me the "infected" one so that I can take a look at it and see if it's the problem here?

Are you on shared hosting? Do you have any other PHP apps installed on your web host?

____
http://ckdake.com/ - If you found my help useful, please consider donating to Gallery.