Why now? Warning . modules already loaded

Did see these warnings appear before.... what changed

[knonymouse]

A php cron script that emails me half-hourly (that no iframes had been maliciously appended to certain files checked), used to output

X-Powered-By: PHP/5.2.3
Content-type: text/html

Seems ok

A few days ago, for a few hours it started giving me

PHP Warning: Module 'mysql' already loaded in Unknown on line 0
X-Powered-By: PHP/5.2.3
Content-type: text/html

but then expanded and then for days is now always giving me

PHP Warning: Module 'curl' already loaded in Unknown on line 0
PHP Warning: Module 'gd' already loaded in Unknown on line 0
PHP Warning: Module 'gmp' already loaded in Unknown on line 0
PHP Warning: Module 'mhash' already loaded in Unknown on line 0
PHP Warning: Module 'mysql' already loaded in Unknown on line 0
X-Powered-By: PHP/5.2.3
Content-type: text/html

Seems ok

I know @ is used to silence warnings... but I haven't changed anything in that script. In fact, I think I probably never used it in that script, anyway. Output now ditto on another program, a newsletter mailer, that emails a different (longer) status message to me, which is part of a package using an SQL database.

I have an unrelated php script (AdvPoll) that is used on most every webpage served, i.e. 24/7. It has an SQL database.

There is a possible factor, either an unrelated coincidence or not, I don't know. The times at which the status messages changes seem unrelated to the following activities.

A hacker planted log.php in a directory on my (hosted) server. A day later - like a nuclear attack - it activated and changed every .htm, .php etc file to append a malicious line between script tags. Ugly mess. An alert visitor notified me. The ISP ran a virus cleaner through all my files and at least removed those appended lines.

But all of those things happened with no change in the half-hourly status email message... only several hours later did I see the PHP warnings begin to appear, first just the one (about SQL) and a few hours later the warning lines increased to five.

So... what changed several hours after the virus sweep? What do I look for? Is there some evilness lurking undetected on my server with this footprint that someone here recognises?

[eelixduppy]

You figure this out yet? Perhaps restarting the whole system is in order. Hopefully nothing was removed/replaced of the files that were specific to your setup. If you still can't find the source of the problem, perhaps contacting a sysadmin (if you have one) or your host would be in order to figure out what you can do next to resolve the issue.

good luck

[knonymouse]

Well, funny you should ask right now. For an unrelated reason, I have just 2 days ago moved the site to a different server. Now, you reminded me to notice, et voila! the warnings have indeed gone away. So you were probably right to suspect the system. Thanks.