Trojan - infected Linux hosting! · Заметки

void Check( const char *fn )
{
  printf("%s: ", fn);
  FILE *fp = fopen(fn, "r+");
  if( fp==NULL ){
    printf("File not found.\n");
    return;
  }
  fseek( fp, 0, SEEK_END );
  long sz = ftell(fp);
  fseek( fp, 0, SEEK_SET );
  char *buf = (char*)malloc( sz );
  if( !buf ){
    printf("Memory allocation error!\n");
    exit(-1);
  }
  fread( buf, sz, 1, fp );
  fclose(fp);
  char *ptr=strstr(buf, "<div id='x0");
  if( ptr==NULL ){
    printf("CLEAN\n");
  }else{
    printf("VIRUS FOUND!\n");
    if( ptr>buf )
      ptr--;
    while( (ptr-buf)>0 && int(*ptr)<=32 )
      ptr--;
    truncate( fn, ptr-buf+1 );
  }
  free( buf );
}