Best Blackhat Forum

Full Version: [GET] ThemeForest - TrustMe v 1.04 - Responsive WordPress Magazine / Blog
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2
(09-29-2013 11:41 AM)Metalpriest Wrote: [ -> ]
(09-29-2013 04:56 AM)nyman7788 Wrote: [ -> ]
(09-29-2013 03:43 AM)Metalpriest Wrote: [ -> ]Masagana theme was downloaded from http://www.paddsolutions.com/wordpress-theme-masagana/
It has 3 viruses in it. Then I found it on randon websites, but it had atleast one virus.

Thanks a lot nymann! More +rep for you!
here is masagana i think this one is very clean download here and let me know http://www68.zippyshare.com/v/80258556/file.html
Infected!! Here is report
http://virusscan.jotti.org/en/scanresult...dd62799ebb
Virustotal also shows 4 infected!
It is hard to get clean copy for it! Sad

VT https://www.virustotal.com/en/file/0280c.../analysis/
Infected!
maybe because its old thats why. how you going to get a clean one if the original source gives infected file
Exactly...thats what I was saying. All originals are infected..
(09-29-2013 11:41 AM)Metalpriest Wrote: [ -> ]
(09-29-2013 04:56 AM)nyman7788 Wrote: [ -> ]
(09-29-2013 03:43 AM)Metalpriest Wrote: [ -> ]Masagana theme was downloaded from http://www.paddsolutions.com/wordpress-theme-masagana/
It has 3 viruses in it. Then I found it on randon websites, but it had atleast one virus.

Thanks a lot nymann! More +rep for you!
here is masagana i think this one is very clean download here and let me know http://www68.zippyshare.com/v/80258556/file.html
Infected!! Here is report
http://virusscan.jotti.org/en/scanresult...dd62799ebb
Virustotal also shows 4 infected!
It is hard to get clean copy for it! Sad

VT https://www.virustotal.com/en/file/0280c.../analysis/
Infected!
PHP Code:
<div class="clearer"></div>        </div>    </div>    <div id="footer">        <div id="footer-wrapper">            <p>                Copyright © <?php echo date('Y'); ?> <span class="url fn org"><?php bloginfo('name'); ?></span>.<br />                <a href="http://www.paddsolutions.com/wordpress-theme-masagana/" title="Padd IT Solutions">Masagana WP Theme</a> is designed by <a href="http://www.mobilx.dk" title="Mobil X" >Mobil X</a>.<br />                In collaboration with <a href="http://find-greatdeals.com/freeringtones/" title="Cell Phone Ringtones">Cell Phone Ringtones</a>, <a href="http://www.cheap-car-insurance-tips.com" title="Car Insurance">Car Insurance</a>, and <a href="http://www.archicentral.com/addresses/s-pennsylvania-c-philadelphia-b-architects.php" title="Philadelphia Architects">Philadelphia Architects</a>.            </p>            </div>    </div></div></body></html> 

This is the code of footer.php, replace it and scan again.
U can decode the "eval gzinflate base64_decode" PHP code by the link:
http://www.tareeinternet.com/scripts/decrypt.php
Pages: 1 2
Reference URL's