-
You MUST read the Babiato Rules before making your first post otherwise you may get permanent warning points or a permanent Ban.
Our resources on Babiato Forum are CLEAN and SAFE. So you can use them for development and testing purposes. If your are on Windows and have an antivirus that alerts you about a possible infection: Know it's a false positive because all scripts are double checked by our experts. We advise you to add Babiato to trusted sites/sources or disable your antivirus momentarily while downloading a resource. "Enjoy your presence on Babiato"
Perfex - Powerful Open Source CRM By MSTdev v3.1.6
- Thread starter emyhunk
- Start date
Babak updated Perfex - Powerful Open Source CRM with a new update entry:
Perfex CRM v2.8.2
Read the rest of this update entry...
Perfex CRM v2.8.2
Read the rest of this update entry...
Dear @Babak or @NullMaster Can anyone provide the nulled version of "
Timesheets and Leave Management for Perfex CRM ?
Thanks a lot in advance
Timesheets and Leave Management for Perfex CRM ?
Thanks a lot in advance
@Babak
Please recheck this as it has a backdoor. Its in the SURVEYS Module that comes default with the script.
It will generate a file called k.php That will run php scripts at will.
EG This isnt the correct version of this file. It is altered. modules/surveys/vendor/phpoffice/phpspreadsheet/.phpcs.xml.dist
/vendor/markbaker/matrix/infection.json.dist
Also creates a makefile.php. Wiped out 1 of our servers yesterday. I narrowed it down to that as this script was all that was on it.
KevDev was one of the handles.
Please recheck this as it has a backdoor. Its in the SURVEYS Module that comes default with the script.
It will generate a file called k.php That will run php scripts at will.
EG This isnt the correct version of this file. It is altered. modules/surveys/vendor/phpoffice/phpspreadsheet/.phpcs.xml.dist
/vendor/markbaker/matrix/infection.json.dist
Also creates a makefile.php. Wiped out 1 of our servers yesterday. I narrowed it down to that as this script was all that was on it.
KevDev was one of the handles.
Last edited:
The surveys, backup, goals, theme_style & menu_setup are premodules and served by Perfex with every update...doesnt matter if they r updated or not.
I rechecked all premodules from 2.4.4 on. Is it possible that u dont update the modules folder ?
Last dev update in the survey module was on 2.8.1 and before it was 2.5.1 !
The provided versions 2.8.1 and 2.8.2 r clean !
Otherwise, is it possible that ur structure was open in any way so someone could add malicious files ? Just a thought.
Sorry what happened to your server.
No those files are in the file downloaded from Babiato. I actually just deleted the ENTIRE [SURVEYS] folder and it doesn't happen anymore. Was using like 75% of my server before I found / deleted the trigger files - it and then he [the hacker] wiped it entirely out in response.. Again be careful with that. I am not complaining [as I fixed the issue] I am just giving a heads up. It had absolutely nothing do with that @Efacid but all good. Its a sleeper. You can see the code in the downloaded files. [SURVEYS] folder. This obv isnt the dev as no dev would wipe out an entire server in response to that. And it was actually triggered after we loaded a bunch of leads - like 1000+ from an excel sheet. I saw in the server records. [DevMike] was the handle.
We reinstalled all - deleted that folder for now - and all works PERFECT with no more issues [even after upload]
We reinstalled all - deleted that folder for now - and all works PERFECT with no more issues [even after upload]
Last edited:
No those files are in the file downloaded from Babiato. I actually just deleted the ENTIRE [SURVEYS] folder and it doesn't happen anymore. Was using like 75% of my server before I found / deleted the trigger files - it and then he [the hacker] wiped it entirely out in response.. Again be careful with that. I am not complaining [as I fixed the issue] I am just giving a heads up. It had absolutely nothing do with that @Efacid but all good. Its a sleeper. You can see the code in the downloaded files. [SURVEYS] folder. This obv isnt the dev as no dev would wipe out an entire server in response to that. And it was actually triggered after we loaded a bunch of leads - like 1000+ from an excel sheet. I saw in the server records. [DevMike] was the handle.
We reinstalled all - deleted that folder for now - and all works PERFECT with no more issues [even after upload]
I was used old version and i deleted to all files because installing for new version but i have doubt now. What should i do?
Can u suggest if this script can be used as it is? Will it create issues?No those files are in the file downloaded from Babiato. I actually just deleted the ENTIRE [SURVEYS] folder and it doesn't happen anymore. Was using like 75% of my server before I found / deleted the trigger files - it and then he [the hacker] wiped it entirely out in response.. Again be careful with that. I am not complaining [as I fixed the issue] I am just giving a heads up. It had absolutely nothing do with that @Efacid but all good. Its a sleeper. You can see the code in the downloaded files. [SURVEYS] folder. This obv isnt the dev as no dev would wipe out an entire server in response to that. And it was actually triggered after we loaded a bunch of leads - like 1000+ from an excel sheet. I saw in the server records. [DevMike] was the handle.
We reinstalled all - deleted that folder for now - and all works PERFECT with no more issues [even after upload]
thanx for the heads upWe just actually bought Perfex - to get that back [surveys main mod] - and that added code is not there.
You dont need that ofcourse but if you share with us we glad to be that.We just actually bought Perfex - to get that back [surveys main mod] - and that added code is not there.
Similar threads
