1

I have downloaded an entire copy of a website that has been used as a spam relay. I think I have tracked down the problem to a loophole in a contact form (now closed, but was not used, but still accessible hence why it was missed), however I would like to check the website files for injected code.

Will a standard anti virus such as BitDefender do the job, or can anyone recommend a scanner (preferably standalone) that can scan PHP files and find known injections.

Thanks in advance for any answers

closed as off-topic by Jens Erat, Stephane, RoraΖ, AviD Apr 29 '15 at 11:59

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

  • 3
    hello and welcome to security.se Please be aware that requests for product recommendation are not considered suitable for this site. However, given your specific question, I suggest you rewrite it to ask how you should vet you PHP code (since AVs will simply not work in your case anyway). – Stephane Apr 29 '15 at 9:43
  • See: Malware scanner for websites code – kenorb Jul 27 '16 at 0:04
1

No, malicious code in your PHP file is not a virus or a trojan. Most end user anti-malware tools do not scan for these types of things.

The malicious actions in your web app may be legitimate commands that make sense in a different context. You may want to look into static code analysis tools which analyze code for software design errors.

Not the answer you're looking for? Browse other questions tagged or ask your own question.