Hi!
I installed gallery2 the other day. Right the next day I realized that my index-page of my website had been changed. It was changed to index.php(by RAVENOUS_HACKER).
Making a virus search I found the trojan.php.c99.shell in your galley2_preinstall file.
Just wanted to let you know.
Thanks.
Eli
Posts: 2258
Where did you get this gallery 2 preinstaller from?
____
http://ckdake.com/ - If you found my help useful, please consider donating to Gallery.
Posts: 2
As far as I can remember either from the
http://codex.gallery2.org/Gallery2:Preinstaller
or http://codex.gallery2.org/Gallery2:Download#Packages page:
http://downloads.sourceforge.net/gallery/preinstaller-2.2.5.zip
Posts: 2258
Strange, those all do point to that last URL you linked, and I verified that it's what is supposed to be there.
Could you email me the "infected" one so that I can take a look at it and see if it's the problem here?
Are you on shared hosting? Do you have any other PHP apps installed on your web host?
____
http://ckdake.com/ - If you found my help useful, please consider donating to Gallery.