Notifications
Clear all

utf8popa.php & utf8zubi.php?

3 Posts
2 Users
0 Reactions
1,338 Views
(@anarchicq)
Posts: 115
Estimable Member
Topic starter
 

I am in the process of changing the ownership of one of my archives and so I was downloading the archive to my hard drive and I noticed that I had two failed transfers
utf8popa.php in the stories folder and /stories/274/utf8zubi.php

The permission on both files is 000

Something seems fishy to me and a google search found absolutely nothing.

What are these files for? Are they malicious?


Silent Hill & Repo!
eFiction:3.5.1
Latest Patche(s):Yes
bridged?:No
modified?:Yes.
PHP:2.11.9.4
MySQL:5.0.32

 
Posted : 30/05/2012 3:02 pm
(@lyndsie)
Posts: 1263
Member Moderator
 

There shouldn't be any PHP files in the stories folder anywhere, and that doesn't fit the name of anything I've ever seen that's eFiction related. Unless you've modded your eFiction somehow that you think can account for it, I would operate on the assumption that your site has been compromised. Delete the files and do a thorough search for more. Also you should check the actual contents of files to ensure nothing has been inserted.


 
Posted : 30/05/2012 3:52 pm
(@anarchicq)
Posts: 115
Estimable Member
Topic starter
 

It was "just" a bunch of jibberish.
A few months ago my fic archives got hacked and were re-directing to another site.
I thought I got it clean but I guess that's how it got hacked.
Files deleted. Passwords changed.


Silent Hill & Repo!
eFiction:3.5.1
Latest Patche(s):Yes
bridged?:No
modified?:Yes.
PHP:2.11.9.4
MySQL:5.0.32

 
Posted : 30/05/2012 4:04 pm
Share: