Trojan Backdoor.PHP.phpshell.l detected in backup|Old Forum|Forum Archive|XCloner

The free forums are no longer in use. It remains available as read-only archive.

Avatar
Lost password?
Advanced Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
The forums are currently locked and only available for read only access
sp_TopicIcon
Trojan Backdoor.PHP.phpshell.l detected in backup
September 20, 2008
12:00 am
Avatar
templecloud
Guest
Guests

Hi,

I've just created a backup of my main site which is still on Joomla 1.0.12 intending to clone it to a subdirectory while setting up a 1.5 site that I can transfer the content to. But while downloading the backup my Kaspersky anti-virus suddenly informed me that the download contained the Trojan: Backdoor.PHP.phpshell.l

I have no idea how this got on my site, or where it is to get rid of it... any thoughts anyone?

I can't clone the site directly via ftp as that never works for me... so normally I download files to my pc then ftp them to the new location. I can move them via file manager...

If I manage to clone the site, then copy the content over do you think I will transfer the trojan too? Haven't encountered anything like this before so don't know quite what to do.

Help please!

Frances

September 20, 2008
12:00 am
Avatar
admin
Guest
Guests

Most probably on of the files from your site is infected which that virus, so to fix it, you would need to locate and delete that! Most probably the trojan will get transfered as a file over the cloned host unless you find the original source

Regards, Ovidiu

Forum Timezone: America/Chicago
Most Users Ever Online: 867
Currently Online:
Guest(s) 12
Currently Browsing this Page:
1 Guest(s)
Top Posters:
mlguru: 30
Django29: 29
D: 21
Andy: 21
Marcus: 20
Jamie F: 19
Member Stats:
Guest Posters: 738
Members: 10080
Moderators: 2
Admins: 3
Forum Stats:
Groups: 3
Forums: 7
Topics: 2397
Posts: 8236
Newest Members:
Manuele Freddo_1
Moderators: TriP: 0, Steve Burge: 0
Administrators: Ovidiu Liuta: 2484, Victor Drover: 1, Valentin Barbu: 0