Помоги разобрать список подозрительных файлов

Posted 3 января, 201311 yr

Start scanning account ****** with ShellFinder: 

/home/p96113/www//base.w-masters.ru/ips_kernel/sabre/Sabre/HTTP/BasicAuth.php: Suspicious(base64_decode): lode(':', base64_decode(substr($a
/home/p96113/www//base.w-masters.ru/admin/applications/core/modules_public/global/share.php: Suspicious(base64_decode):  IPSText::base64_decode_urlSafe( 
/home/p96113/www//base.w-masters.ru/admin/sources/classes/virusChecker/lib_known_names.php: Suspicious(r57): 'r57.php',
/home/p96113/www//diz-like.ru/engine/go.php: Suspicious(base64_decode):  @base64_decode ( $url );
/home/p96113/www//diz-like.ru/forum/cache/skin_cache/cacheid_65/skin_emails.php: Suspicious(c99): 94492ddc0fc9937 = is_ar
/home/p96113/www//diz-like.ru/forum/cache/skin_cache/cacheid_18/skin_search.php: Suspicious(c99): _a67cf1ae1c9910504beb5f
/home/p96113/www//diz-like.ru/forum/cache/skin_cache/cacheid_77/skin_legends.php: Suspicious(c99): e6bc444ff7c992adba810($
/home/p96113/www//diz-like.ru/forum/ips_kernel/sabre/Sabre/HTTP/BasicAuth.php: Suspicious(base64_decode): lode(':', base64_decode(substr($a
/home/p96113/www//diz-like.ru/forum/admin/applications/core/modules_public/global/share.php: Suspicious(base64_decode):  IPSText::base64_decode_urlSafe( 
/home/p96113/www//diz-like.ru/forum/admin/sources/classes/virusChecker/lib_known_names.php: Suspicious(r57): 'r57.php',
/home/p96113/www//w-masters.ru/engine/go.php: Suspicious(base64_decode):  @base64_decode ( $url );
/home/p96113/www//w-masters.ru/forum/cache/skin_cache/cacheid_13/skin_search.php: Suspicious(c99): 6bc4afc674c99 = is_arra
/home/p96113/www//w-masters.ru/forum/cache/skin_cache/cacheid_13/skin_mlist.php: Suspicious(c99): 72f32bf873c9905057d85($
/home/p96113/www//w-masters.ru/forum/cache/skin_cache/cacheid_8/skin_legends.php: Suspicious(c99): 966bbb0388c999 = is_arr
/home/p96113/www//w-masters.ru/forum/cache/skin_cache/cacheid_27/skin_legends.php: Suspicious(c99): b460ac2fb3c999cc8f0de50
/home/p96113/www//w-masters.ru/forum/cache/skin_cache/cacheid_7/skin_online.php: Suspicious(c99): count_044ac99bf6ef26e01
/home/p96113/www//w-masters.ru/forum/ips_kernel/sabre/Sabre/HTTP/BasicAuth.php: Suspicious(base64_decode): lode(':', base64_decode(substr($a
/home/p96113/www//w-masters.ru/forum/admin/applications/core/modules_public/global/share.php: Suspicious(base64_decode):  IPSText::base64_decode_urlSafe( 
/home/p96113/www//w-masters.ru/forum/admin/sources/classes/virusChecker/lib_known_names.php: Suspicious(r57): 'r57.php',
/home/p96113/www//wfhuck.ru/ips_kernel/sabre/Sabre/HTTP/BasicAuth.php: Suspicious(base64_decode): lode(':', base64_decode(substr($a
/home/p96113/www//wfhuck.ru/admin/applications/core/modules_public/global/share.php: Suspicious(base64_decode):  IPSText::base64_decode_urlSafe( 
/home/p96113/www//wfhuck.ru/admin/sources/classes/virusChecker/lib_known_names.php: Suspicious(r57): 'r57.php',
Start scanning account **** with ClamAV: 

/home/*****/www/diz-like.ru/forum/site.html: JS.Obfus-210 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 1522712
Engine version: 0.97.6
Scanned directories: 4556
Scanned files: 47718
Infected files: 1
Data scanned: 491.30 MB
Data read: 301.22 MB (ratio 1.63:1)
Time: 199.343 sec (3 m 19 s)

Извиняюсь за ссылки но я не смог бы их вырезать.

Edited 3 января, 201311 yr by Pashok(one)