Comment on One of my Drupal sites was hackedComments−mechazawa12yAfter checking en.php (Sorry didn't have time to check more files) I found two ip's. You could use unphp to deobfuscate the code a bit but You'll have to do a lot of it by hand which should not be that hard.125.89.44.28 <- Chinese 62.122.75.2 <- Polish
Comments
After checking en.php (Sorry didn't have time to check more files) I found two ip's. You could use unphp to deobfuscate the code a bit but You'll have to do a lot of it by hand which should not be that hard.
125.89.44.28 <- Chinese 62.122.75.2 <- Polish