diff --git a/scan.php b/scan.php index 3982975..03813b8 100644 --- a/scan.php +++ b/scan.php @@ -8,6 +8,7 @@ /* script variables */ $version = '3.1'; $self = basename(__FILE__); +$current = './' $eroot = '../'; $print_infected = true; @@ -429,8 +430,8 @@ error_reporting(E_ALL); "visitorTracker_isMob", "this->privmsg(", "Starting call", - "Hacked", - "boff", + /* "Hacked", - removed pattern due to large volume of false positives */ + /* "boff", - removed pattern due to large volume of false positives */ "r57Shell Edited By Margu", "IRC_socket", "ConfigSpy", @@ -468,6 +469,11 @@ foreach ($tree as $finfo) continue; } + if(realpath($finfo['path'], $current !== FALSE ) + { + continue; + } + if($print_all) print "{$finfo['path']}{$finfo['fname']}....CHECKING"; $tmp = file_get_contents($finfo['path'].$finfo['fname']); preg_match('/[^.\s]*([a-z])$/i', $finfo['fname'], $match);