DedeCMS Stubborn Trojan Backdoor Removal Tool (for checking and cleaning DedeCMS programs that have been infected with malicious code or hacked)

Published: 2013-08-06

```html

DownloadDedeCMSStubborn Trojan Backdoor Removal Tool (script tool comes from the Internet), after extracting, edit and modify the initial password, then upload to thewwwrootroot directory, then access it and execute the scan according to the prompts.

Note:1.The root directory must contain thedatadirectory and the/data/common.inc.phpfile. If they do not exist, it will report the error “Please put this file in the root directory of your site, at the same level asindex.php”.

2.If there are too many files, the execution time is longer and it may time out. You can change the value ofini_set("memory_limit", "100m")toini_set("memory_limit", "500m"); the maximum cannot exceed1000M.

The following is a check example:

After verification: Item1can be deleted; the patch in Item2must be applied to ensure it will not be invaded again; the suspicious data or files found in Items3-5are indeed data and Trojan files maliciously added and can be directly cleaned; Item6lists administrator names. If you are sure they are not users you use, you can delete them. You must keep the administrator name you use.

Attached: Processing flow after malicious code is inserted into the DedeCMS program:

1.First, use Virus Scan >> Manually Remove Trojans to clean the corresponding virus code. If it cannot be cleaned, log in toftp, download the files locally, manually delete the virus code, and then upload them to the host to overwrite the corresponding files.

2.Use the above (“DedeCMS Stubborn Trojan Backdoor Removal Tool”) method to thoroughly check and clean, and apply the latest patch.

3.To prevent being injected again and having virus code added, it is recommended to enable百度云加速to reduce the risk of website intrusion.

```