Hacked? Exploid Scanner

Hallo,

ich habe heute mal den Exploid Scanner installiert und folgende Meldung erhalten.

Zitat

1. "ShellBOT" This may be a script used by hackers to get control of your server.
   
   
   1. /home/www/wordpress/wp-content/plugins/exploit-scanner/exploit-scanner.php [INDENT]> "CSS styling to hide parts of a web page",
      "ShellBOT" => "This may be a script used by hackers to get control of your server.",
      "uname -a" => "Tells a hacker what operating system your server is running",
      "shell_exec" => "Executes a server command like ls, cd, wget, etc. This may be a
      [/INDENT]
2. "uname -a" Tells a hacker what operating system your server is running
   
   
   1. /home/www/wordpress/wp-content/plugins/exploit-scanner/exploit-scanner.php [INDENT] by hackers to get control of your server.",
      "uname -a" => "Tells a hacker what operating system your server is running",
      "shell_exec" => "Executes a server command like ls, cd, wget, etc. This may be a script used by hackers.",
      "YW55cmVzdWx0cy5uZXQ=" => "Base64 encoded text found in PHP
      [/INDENT]
3. "shell_exec" Executes a server command like ls, cd, wget, etc. This may be a script used by hackers.
   
   
   1. /home/www/wordpress/wp-content/plugins/exploit-scanner/exploit-scanner.php [INDENT]at operating system your server is running",
      "shell_exec" => "Executes a server command like ls, cd, wget, etc. This may be a script used by hackers.",
      "YW55cmVzdWx0cy5uZXQ=" => "Base64 encoded text found in PHP code that redirects visitors from Google.",
      "<u style='display:none'>" => "H
      [/INDENT]
   2. /home/www/wordpress/wp-includes/Text/Diff/Engine/shell.php [INDENT] *
      * This class uses the Unix `diff` program via shell_exec to compute the
      * differences between the two input arrays.
      *
      * $Horde: framework/Text_Diff/Diff/Engine/shell.php,v 1.8 2008/01/04 10:07:50 jan Exp $
      *
      * Copyright 2007-2008 The Horde Project (http://www.horde.org/)
      *
      * See the enclo
      $to_lines));
      fclose($fp);
      $diff = shell_exec($this->_diffCommand . ' ' . $from_file . ' ' . $to_file);
      unlink($from_file);
      unlink($to_file);
      

      if (is_null($diff)) {
      // No changes were made
      return array(new Text_Diff_Op_copy($from_lines))
      [/INDENT]

   3. /home/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/PSpellShell.php [INDENT]rror("PSpell support was not found.");
      

      $data = shell_exec($cmd);
      @unlink($this->_tmpfile);

      $returnData = array();
      $dataArr = preg_split("/[\r\n]/", $data, -1, PREG_SPLIT_NO_EMPTY);

      foreach ($dataArr as $dstr) {
      $matches = array();

      // Skip this line.
      if (strpos($dstr, "@") ===
      throwError("Error opening tmp file.");

      $data = shell_exec($cmd);
      @unlink($this->_tmpfile);

      $returnData = array();
      $dataArr = preg_split("/\n/", $data, -1, PREG_SPLIT_NO_EMPTY);

      foreach($dataArr as $dstr) {
      $matches = array();

      // Skip this line.
      if (strpos($dstr, "@") === 0)
      [/INDENT]

Alles anzeigen

Ist das jetzt normaler Wordpress Code oder Schadcode?