From 8030cec89fa511a6fe2f5ca1769ddc4e4fd3fb92 Mon Sep 17 00:00:00 2001 From: Gabor Gyorvari Date: Fri, 17 May 2019 13:21:04 +0200 Subject: [PATCH] PR-47 comment and duplicate fix --- definitions/patterns_raw.txt | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/definitions/patterns_raw.txt b/definitions/patterns_raw.txt index 67919b1..bef302a 100644 --- a/definitions/patterns_raw.txt +++ b/definitions/patterns_raw.txt @@ -261,16 +261,14 @@ tmhapbzcerff IndoXploit FaisaL Ahmed aka rEd X -#Malware/Attack strings +# WP-VCD Malware https://www.getastra.com/blog/911/how-to-fix-wp-vcd-backdoor-hack-in-wordpress-functions-php/ wp-vcd class.theme-modules.php -file_exists(ABSPATH . 'wp-includes/wp-tmp.php' +wp-tmp.php tmpcontentx function wp_temp_setupx -wp-tmp.php derna.top/code.php stripos($tmpcontent, $wp_auth_key) -#https://www.getastra.com/blog/911/how-to-fix-wp-vcd-backdoor-hack-in-wordpress-functions-php/ #Miscellaneous uname -a