Sucuri Malware Labs

Sucuri on Twitter Sucuri on Facebook Sucuri on LinkedIn

Backdoor: PHP:EVAL:GZINFLATE:B64Home  |  Notes  |  Malware data  |  Signatures  |  Tools  |  About

Description: We detected a highly encoded (and malicious) code hidden under a loop of gzinflate/gzuncompress/base64_decode calls. After decoded, it goes through an eval call to execute the code.

Affecting: Any web site (often through outdated WordPress, Joomla, vBulletin, osCommerce and stolen passwords).

Clean up: You can also sign up with us and let our team remove the malware for you.

Malware dump:


For all our web-based malware signatures, go here: http://labs.sucuri.net/?malwaredb