General

Malware Config

Signatures

Files

• 916cb24a2c3a3d3062787350ceb4a0cf_JaffaCakes118

  .rar
• admin.php
• api/poll.php

  .js
• api/uc.php

  .js
• api/新云软件.url

  .url
• config/config_global_default.php

  .ps1
• config/config_ucenter_default.php
• data/ipdata/index.htm
• data/ipdata/tinyipdata.dat
• data/stat_setting.xml
• favicon.ico
• index.php
• install/data/install.sql
• install/data/install_data.sql
• install/images/bg_footer.gif

  .gif
• install/images/bg_repno.gif

  .gif
• install/images/bg_repx.gif

  .gif
• install/images/bg_stepstatus.gif

  .gif
• install/images/close.gif

  .gif
• install/images/stepnum.gif

  .gif
• install/images/style.css
• install/include/install_extvar.php
• install/include/install_function.php

  .ps1
• install/include/install_lang.php
• install/include/install_mysql.php

  .js
• install/include/install_var.php
• install/index.php

  .js
• install/update.php

  .ps1
• member.php
• misc.php
• poll.php
• robots.txt
• source/admincp/admincp_attachment.php
• source/admincp/admincp_credit.php
• source/admincp/admincp_founder.php

  .js
• source/admincp/admincp_global.php
• source/admincp/admincp_index.php
• source/admincp/admincp_log.php
• source/admincp/admincp_login.php
• source/admincp/admincp_main.php

  .js
• source/admincp/admincp_member.php
• source/admincp/admincp_memberprofile.php

  .js
• source/admincp/admincp_menu.php
• source/admincp/admincp_module.php
• source/admincp/admincp_poll.php

  .ps1
• source/admincp/admincp_template.php
• source/admincp/index.htm
• source/admincp/menu/menu_global.php
• source/admincp/menu/menu_index.php
• source/admincp/menu/menu_poll.php
• source/admincp/menu/menu_template.php
• source/class/cache/cache_file.php
• source/class/cache/cache_sql.php
• source/class/class_admincp.php

  .js
• source/class/class_bbcode.php

  .js
• source/class/class_censor.php

  .js
• source/class/class_chinese.php

  .js
• source/class/class_core.php

  .js
• source/class/class_credit.php

  .js
• source/class/class_eaccelerator.php
• source/class/class_ftp.php

  .js
• source/class/class_gifmerge.php

  .js
• source/class/class_image.php

  .js
• source/class/class_membersearch.php

  .ps1
• source/class/class_memcache.php

  .js
• source/class/class_pollupload.php

  .js
• source/class/class_seccode.php

  .js
• source/class/class_template.php

  .js
• source/class/class_tree.php

  .js
• source/class/class_upload.php

  .js
• source/class/class_xcache.php
• source/class/class_xml.php

  .js
• source/class/class_zip.php

  .js
• source/discuzxplus_version.php
• source/function/function_admincp.php

  .js
• source/function/function_cache.php
• source/function/function_core.php

  .ps1
• source/function/function_debug.php

  .ps1
• source/function/function_discuzcode.php
• source/function/function_editor.php

  .ps1
• source/function/function_image.php
• source/function/function_login.php
• source/function/function_mail.php
• source/function/function_member.php
• source/function/function_misc.php

  .ps1
• source/function/function_seccode.php
• source/function/function_sysmessage.php
• source/include/cache/cache_poll.php
• source/include/cron/cron_sample.php
• source/include/cron/index.htm
• source/include/index.htm
• source/include/serverbusy.htm

  .html
• source/language/lang_admincp.php
• source/language/lang_admincp_global.php
• source/language/lang_admincp_index.php
• source/language/lang_admincp_login.php
• source/language/lang_admincp_menu.php
• source/language/lang_admincp_msg.php
• source/language/lang_admincp_poll.php
• source/language/lang_admincp_template.php
• source/language/lang_core.php
• source/language/lang_error.php
• source/language/lang_message.php
• source/language/lang_seccode.php
• source/language/lang_swfupload.php
• source/language/lang_template.php
• source/language/member/index.htm
• source/language/member/lang_template.php
• source/language/poll/index.htm
• source/language/poll/lang_api.php
• source/language/poll/lang_message.php
• source/language/poll/lang_template.php
• source/module/member/member_clearcookies.php

  .ps1
• source/module/member/member_logging.php

  .js
• source/module/member/member_register.php
• source/module/misc/misc_error.php
• source/module/misc/misc_getcode.php
• source/module/misc/misc_initsys.php
• source/module/misc/misc_so.php
• source/module/misc/misc_swfupload.php
• source/module/module_poll.php
• source/module/poll/poll_index.php

  .ps1
• static/image/admincp/add.gif

  .gif
• static/image/admincp/admincp.css
• static/image/admincp/ajax_loader.gif

  .gif
• static/image/admincp/bg_button.gif

  .gif
• static/image/admincp/bg_custom.gif

  .gif
• static/image/admincp/bg_custom_t.gif

  .gif
• static/image/admincp/bg_header.gif

  .gif
• static/image/admincp/bg_input.gif

  .gif
• static/image/admincp/bg_list.gif

  .gif
• static/image/admincp/bg_login.gif

  .gif
• static/image/admincp/bg_menu.gif

  .gif
• static/image/admincp/bg_menu2.gif

  .gif
• static/image/admincp/bg_repno.gif

  .gif
• static/image/admincp/bg_repx.gif

  .gif
• static/image/admincp/bg_repx_h.gif

  .gif
• static/image/admincp/bg_repx_hb.gif

  .gif
• static/image/admincp/bg_repx_hc.gif

  .gif
• static/image/admincp/bg_repx_hd.gif

  .gif
• static/image/admincp/blog.gif

  .gif
• static/image/admincp/btn_add2menu.gif

  .gif
• static/image/admincp/btn_block.gif

  .gif
• static/image/admincp/btn_block_2.gif

  .gif
• static/image/admincp/btn_block_3.gif

  .gif
• static/image/admincp/btn_map.gif

  .gif
• static/image/admincp/close.gif

  .gif
• static/image/admincp/cls.gif

  .gif
• static/image/admincp/color.jpg

  .jpg
• static/image/admincp/couplebanner.gif

  .gif
• static/image/admincp/custom.gif

  .gif
• static/image/admincp/desc.gif

  .gif
• static/image/admincp/feed.gif

  .gif
• static/image/admincp/float.gif

  .gif
• static/image/admincp/footerbanner.gif

  .gif
• static/image/admincp/getcolor.htm

  .html .js polyglot
• static/image/admincp/greenplugin.gif

  .gif
• static/image/admincp/headerbanner.gif

  .gif
• static/image/admincp/intercat.gif

  .gif
• static/image/admincp/interthread.gif

  .gif
• static/image/admincp/loading1.gif

  .gif
• static/image/admincp/loading2.gif

  .gif
• static/image/admincp/login_header.gif

  .gif
• static/image/admincp/login_title.gif

  .gif
• static/image/admincp/logo.gif

  .gif
• static/image/admincp/ofc.swf
• static/image/admincp/process.gif

  .gif
• static/image/admincp/processbg.gif

  .gif
• static/image/admincp/scrolld.gif

  .gif
• static/image/admincp/scrollu.gif

  .gif
• static/image/admincp/stylepreview.gif

  .gif
• static/image/admincp/subnavbanner.gif

  .gif
• static/image/admincp/text.gif

  .gif
• static/image/admincp/thread.gif

  .gif
• static/image/admincp/threadlist.gif

  .gif
• static/image/admincp/transparent.gif

  .gif
• static/image/admincp/watermarkpreview.jpg

  .jpg
• static/image/common/access_allow.gif

  .gif
• static/image/common/access_disallow.gif

  .gif
• static/image/common/access_normal.gif

  .gif
• static/image/common/activitysmall.gif

  .gif
• static/image/common/ad.gif

  .gif
• static/image/common/addbuddy.gif

  .gif
• static/image/common/addicn.gif

  .gif
• static/image/common/agree.gif

  .gif
• static/image/common/ajaxaction.gif

  .gif
• static/image/common/album_upload.swf
• static/image/common/alipay_logo.gif

  .gif
• static/image/common/alipaysmall.gif

  .gif
• static/image/common/ann_icon.gif

  .gif
• static/image/common/app_add.gif

  .gif
• static/image/common/app_set.gif

  .gif
• static/image/common/appsetting.gif

  .gif
• static/image/common/arrow.gif

  .gif
• static/image/common/arrow_down.gif

  .gif
• static/image/common/arrow_down_big.gif

  .gif
• static/image/common/arrow_left.gif

  .gif
• static/image/common/arrow_right.gif

  .gif
• static/image/common/arrow_right_big.gif

  .gif
• static/image/common/arrow_top.gif

  .gif
• static/image/common/arrwd.gif

  .gif
• static/image/common/arw.gif

  .gif
• static/image/common/arw_d.gif

  .gif
• static/image/common/arw_d2.gif

  .gif
• static/image/common/arw_l.gif

  .gif
• static/image/common/arw_r.gif

  .gif
• static/image/common/attachimg.gif

  .gif
• static/image/common/attachinfobg.gif

  .gif
• static/image/common/attachmediacode.gif

  .gif
• static/image/common/attachurl.gif

  .gif
• static/image/common/atten.gif

  .gif
• static/image/common/attention.gif

  .gif
• static/image/common/attinbg.gif

  .gif
• static/image/common/back.gif

  .gif
• static/image/common/background.png

  .png
• static/image/common/bb_fly.gif

  .gif
• static/image/common/bb_qq.gif

  .gif
• static/image/common/bb_sub.gif

  .gif
• static/image/common/bb_sup.gif

  .gif
• static/image/common/bg.png

  .png
• static/image/common/bg_doing.png

  .png
• static/image/common/bg_doing_ico.jpg

  .jpg
• static/image/common/bg_home.png

  .png
• static/image/common/bg_ifm.jpg

  .jpg
• static/image/common/bg_ifm_y.jpg

  .jpg
• static/image/common/bg_share.png

  .png
• static/image/common/bg_usergroup.png

  .png
• static/image/common/bigbtn.gif

  .gif
• static/image/common/bodybg.gif

  .gif
• static/image/common/default.jpg.thumb.jpg

  .jpg
• static/image/common/default.small.thumb.jpg

  .jpg
• static/image/common/loading.gif

  .gif
• static/image/common/soflash.swf
• static/image/common/upload.swf
• static/image/common/zoom.png

  .png
• static/image/index.htm
• static/js/admincp.js

  .js
• static/js/bbcode.js

  .js
• static/js/calendar.js

  .js
• static/js/common.js

  .js
• static/js/getcode.js

  .js
• static/js/jquery-1.4.2.min.js

  .js
• static/js/jquery.lazyload.mini.js

  .js
• static/js/poll.js

  .js
• static/js/swfobject.js

  .js
• template/common/common.css
• template/common/footer.htm
• template/common/footer_ajax.htm
• template/common/getcode.htm

  .html .js polyglot
• template/common/header.htm

  .html
• template/common/header_ajax.htm
• template/common/images/btn.gif

  .gif
• template/common/images/btn_js.jpg

  .jpg
• template/common/images/imgzoom_tb.gif

  .gif
• template/common/images/message.png

  .png
• template/common/images/popupcredit_bg.gif

  .gif
• template/common/images/zoomtool.gif

  .gif
• template/common/nav_footer.htm

  .ps1
• template/common/nav_header.htm

  .ps1
• template/common/showmessage.htm
• template/member/login.htm

  .js
• template/member/register.htm

  .js
• template/poll/common/footer.htm
• template/poll/common/header.htm

  .html .js polyglot
• template/poll/default/images/bg.jpg

  .jpg
• template/poll/default/images/bg01.jpg

  .jpg
• template/poll/default/images/bg02.jpg

  .jpg
• template/poll/default/images/bg03.jpg

  .jpg
• template/poll/default/images/bg_vf.jpg

  .jpg
• template/poll/default/images/bg_vh.jpg

  .jpg
• template/poll/default/images/btn.gif

  .gif
• template/poll/default/images/btn_poll.gif

  .gif
• template/poll/default/images/btn_submit.gif

  .gif
• template/poll/default/images/btn_view.gif

  .gif
• template/poll/default/images/hover.png

  .png
• template/poll/default/images/img.gif

  .gif
• template/poll/default/images/logo.png

  .png
• template/poll/default/images/pic.png

  .png
• template/poll/default/images/pic01.png

  .png
• template/poll/default/images/pllb.png

  .png
• template/poll/default/images/pt_icn.png

  .png
• template/poll/default/images/topnav.png

  .png
• template/poll/default/images/zoom.gif

  .gif
• template/poll/default/index_image.htm

  .js
• template/poll/default/index_normal.htm
• template/poll/default/poll.css
• uc_client/client.php

  .js
• uc_client/control/app.php
• uc_client/control/cache.php
• uc_client/control/domain.php
• uc_client/control/feed.php
• uc_client/control/friend.php
• uc_client/control/index.htm
• uc_client/control/mail.php
• uc_client/control/pm.php
• uc_client/control/tag.php
• uc_client/control/user.php
• uc_client/index.htm
• uc_client/lib/db.class.php

  .js
• uc_client/lib/index.htm
• uc_client/lib/sendmail.inc.php
• uc_client/lib/uccode.class.php

  .js
• uc_client/lib/xml.class.php

  .js
• uc_client/model/app.php

  .js
• uc_client/model/base.php

  .js
• uc_client/model/cache.php

  .js
• uc_client/model/domain.php

  .js
• uc_client/model/friend.php

  .js
• uc_client/model/index.htm
• uc_client/model/mail.php

  .js
• uc_client/model/misc.php

  .js
• uc_client/model/note.php

  .js
• uc_client/model/pm.php

  .js
• uc_client/model/tag.php

  .js
• uc_client/model/user.php

  .js
• uc_server/admin.php
• uc_server/api/dbbak.php

  .js
• uc_server/avatar.php
• uc_server/control/admin/admin.php
• uc_server/control/admin/app.php
• uc_server/control/admin/badword.php
• uc_server/control/admin/cache.php
• uc_server/control/admin/credit.php
• uc_server/control/admin/db.php

  .js
• uc_server/control/admin/domain.php
• uc_server/control/admin/feed.php

  .js
• uc_server/control/admin/frame.php

  .js
• uc_server/control/admin/log.php
• uc_server/control/admin/mail.php

  .js
• uc_server/control/admin/note.php

  .js
• uc_server/control/admin/plugin.php

  .js
• uc_server/control/admin/pm.php
• uc_server/control/admin/seccode.php
• uc_server/control/admin/setting.php

  .js
• uc_server/control/admin/ucfiles.md5
• uc_server/control/admin/user.php
• uc_server/control/app.php
• uc_server/control/credit.php
• uc_server/control/domain.php
• uc_server/control/feed.php
• uc_server/control/friend.php
• uc_server/control/index.htm
• uc_server/control/mail.php
• uc_server/control/pm.php
• uc_server/control/pm_client.php

  .ps1
• uc_server/control/tag.php
• uc_server/control/user.php
• uc_server/control/version.php
• uc_server/crossdomain.xml
• uc_server/data/avatar/index.htm
• uc_server/data/backup/index.htm
• uc_server/data/index.htm
• uc_server/data/logs/index.htm
• uc_server/images/admincp.css
• uc_server/images/bg_login.gif

  .gif
• uc_server/images/bg_repno.gif

  .gif
• uc_server/images/bg_repx.gif

  .gif
• uc_server/images/bg_repx_h.gif

  .gif
• uc_server/images/bg_repx_hb.gif

  .gif
• uc_server/images/bg_repx_hc.gif

  .gif
• uc_server/images/bg_repx_hd.gif

  .gif
• uc_server/images/bg_repy.gif

  .gif
• uc_server/images/bg_tab_line.gif

  .gif
• uc_server/images/camera.swf
• uc_server/images/correct.gif

  .gif
• uc_server/images/default/btnbg.gif

  .gif
• uc_server/images/default/citeicon.gif

  .gif
• uc_server/images/noavatar_big.gif

  .gif
• uc_server/images/noavatar_middle.gif

  .gif
• uc_server/images/noavatar_small.gif

  .gif
• uc_server/index.php
• uc_server/install/db.class.php

  .js
• uc_server/install/func.inc.php

  .ps1
• uc_server/install/images/bg_footer.gif

  .gif
• uc_server/install/images/bg_repno.gif

  .gif
• uc_server/install/images/bg_repx.gif

  .gif
• uc_server/install/images/bg_stepstatus.gif

  .gif
• uc_server/install/images/close.gif

  .gif
• uc_server/install/images/stepnum.gif

  .gif
• uc_server/install/lang.inc.php
• uc_server/install/style.css
• uc_server/install/uc.sql
• uc_server/install/var.inc.php
• uc_server/js/ajax.js

  .js
• uc_server/js/calendar.js

  .js
• uc_server/js/common.js

  .js
• uc_server/js/index.htm
• uc_server/js/pm_editor.js

  .js
• uc_server/lib/db.class.php

  .js
• uc_server/lib/index.htm
• uc_server/lib/seccode.class.php

  .js
• uc_server/lib/sendmail.inc.php
• uc_server/lib/template.class.php

  .js
• uc_server/lib/uccode.class.php

  .js
• uc_server/lib/upload.class.php

  .js
• uc_server/lib/xml.class.php

  .js
• uc_server/model/admin.php

  .js
• uc_server/model/app.php

  .js
• uc_server/model/badword.php

  .js
• uc_server/model/base.php

  .js
• uc_server/model/cache.php

  .js
• uc_server/model/cron.php

  .js
• uc_server/model/domain.php

  .js
• uc_server/model/feed.php

  .js
• uc_server/model/friend.php

  .js
• uc_server/model/index.htm
• uc_server/model/mail.php

  .js
• uc_server/model/misc.php

  .js
• uc_server/model/note.php

  .js
• uc_server/model/plugin.php

  .js
• uc_server/model/pm.php

  .js
• uc_server/model/setting.php

  .js
• uc_server/model/tag.php

  .js
• uc_server/model/user.php

  .js
• uc_server/model/version.php

  .js
• uc_server/plugin/filecheck/plugin.php

  .js
• uc_server/plugin/filecheck/plugin.xml

  .xml
• uc_server/plugin/filecheck/plugin_filecheck.htm
• uc_server/view/default/admin.lang.php
• uc_server/view/default/admin_admin.htm
• uc_server/view/default/admin_app.htm

  .js
• uc_server/view/default/admin_badword.htm
• uc_server/view/default/admin_cache.htm
• uc_server/view/default/admin_credit.htm

  .ps1
• uc_server/view/default/admin_db.htm

  .js
• uc_server/view/default/admin_domain.htm
• uc_server/view/default/admin_feed.htm
• uc_server/view/default/admin_frame_header.htm

  .html .js polyglot
• uc_server/view/default/admin_frame_index.htm

  .html
• uc_server/view/default/admin_frame_main.htm

  .js
• uc_server/view/default/admin_frame_menu.htm

  .html .js polyglot
• uc_server/view/default/admin_log.htm
• uc_server/view/default/admin_login.htm
• uc_server/view/default/admin_mail.htm
• uc_server/view/default/admin_note.htm
• uc_server/view/default/admin_pm.htm
• uc_server/view/default/admin_pm_clear.htm
• uc_server/view/default/admin_pm_send.htm
• uc_server/view/default/admin_setting.htm
• uc_server/view/default/admin_tag.htm
• uc_server/view/default/admin_user.htm
• uc_server/view/default/footer.htm
• uc_server/view/default/footer_ajax.htm
• uc_server/view/default/footer_client.htm
• uc_server/view/default/header.htm

  .html .js polyglot
• uc_server/view/default/header_ajax.htm
• uc_server/view/default/header_client.htm

  .html
• uc_server/view/default/index.htm
• uc_server/view/default/main.lang.php
• uc_server/view/default/message.htm

  .js
• uc_server/view/default/message_client.htm

  .js
• uc_server/view/default/messages.lang.php
• uc_server/view/default/plugin_footer.htm
• uc_server/view/default/plugin_header.htm
• uc_server/view/default/pm_blackls.htm
• uc_server/view/default/pm_editorbar.htm

  .html
• uc_server/view/default/pm_ls.htm
• uc_server/view/default/pm_nav.htm

  .html .js polyglot
• uc_server/view/default/pm_send.htm
• uc_server/view/default/pm_view.htm

  .js
• uc_server/view/default/templates.lang.php
• uc_server/view/default/user_avatar.htm
• uc_server/view/index.htm