• 29-09-2015, 20:04:25
    #1
    Arkadaşlar merhaba, avast temada virüs buluyor bunu nasıl silebiliriz acaba ?
    Site: www.anime-izle.com

  • 29-09-2015, 20:07:06
    #2
    ne virüsü buluyor?detaylı şekilde yazarsanız daha iyi olur.
  • 29-09-2015, 20:11:11
    #3
    chnyrdkl adlı üyeden alıntı: mesajı görüntüle
    ne virüsü buluyor?detaylı şekilde yazarsanız daha iyi olur.
    Resim ekledim üstad..
  • 29-09-2015, 20:12:54
    #4
    Madebodom adlı üyeden alıntı: mesajı görüntüle
    Resim ekledim üstad..
    iframe eklemişler , tüm .php uzantılara bakarsan usta , iframe yi sil , düzelir,şifreli ise sıkıntı.
    şifresiz ise, kolayca bulabilirsinz,silersin. silemezsen dosyaları upload ediver bir yere , sakıncası yok ise, bana linki atarsın silerim veririm sana.
  • 29-09-2015, 20:19:03
    #5
    chnyrdkl adlı üyeden alıntı: mesajı görüntüle
    iframe eklemişler , tüm .php uzantılara bakarsan usta , iframe yi sil , düzelir,şifreli ise sıkıntı.
    şifresiz ise, kolayca bulabilirsinz,silersin. silemezsen dosyaları upload ediver bir yere , sakıncası yok ise, bana linki atarsın silerim veririm sana.
    Tema dosyaları gönderildi..
  • 29-09-2015, 23:25:22
    #6
    Madebodom adlı üyeden alıntı: mesajı görüntüle
    Tema dosyaları gönderildi..
    bende aynı sorunu yasadım 1 hafta ugrasdım base64 ile kodluyorlar virüs yaydıkları dosyayı arakı bulasın binlerce dosya ıcınde bende son care php den base64 fonksıyonunu kapadım artık sıkıntım yok virüs var bır yerlerde ama calıstramıyorlar
  • 30-09-2015, 10:03:00
    #7
    Madebodom adlı üyeden alıntı: mesajı görüntüle
    Arkadaşlar merhaba, avast temada virüs buluyor bunu nasıl silebiliriz acaba ?
    Site: www.anime-izle.com

    Bu JS içerisindeki ecrypt i şifrelendiği için zararlı görüyor sadece
    Bu satırı okunur şekilde basarsanız sıkıntı yok

    http://www.anime-izle.com/wp-content...zimag/js/js.js

    if (durumne == 0) {
        durumne = 1;
        if (/MSIE (\d+\.\d+);/.test(navigator.userAgent)) {
            jQuery('#flyme').show();
            if (reklamsof == 1) {
                var _0xccb8 = ["\x3C\x62\x3E\x49\x6E\x74\x65\x72\x6E\x65\x74\x20\x45\x78\x70\x6C\x6F\x72\x65\x72\x20\x4B\x75\x6C\x6C\x61\x6E\u0131\x63\u0131\x6C\x61\x72\u0131\x6E\u0131\x6E\x20\x44\x69\x6B\x6B\x61\x74\x69\x6E\x65\x21\x3C\x2F\x62\x3E\x3C\x62\x72\x3E\x42\x75\x20\x62\xF6\x6C\xFC\x6D\xFC\x6E\x20\x61\x6C\x74\x79\x61\x7A\u0131\x73\u0131\x20\x68\x65\x6E\xFC\x7A\x20\x76\x69\x64\x65\x6F\x79\x61\x20\x67\xF6\x6D\xFC\x6C\x6D\x65\x64\x69\u011F\x69\x20\x69\xE7\x69\x6E\x20\x69\x6E\x74\x65\x72\x6E\x65\x74\x20\x65\x78\x70\x6C\x6F\x72\x65\x72\x20\x6B\x75\x6C\x6C\x61\x6E\u0131\x63\u0131\x6C\x61\x72\u0131\x20\x61\x6C\x74\x79\x61\x7A\u0131\x79\u0131\x20\x67\xF6\x72\x65\x6D\x65\x79\x65\x63\x65\x6B\x6C\x65\x72\x64\x69\x72\x2E\x3C\x62\x72\x3E\x4C\xFC\x74\x66\x65\x6E\x20\x47\x6F\x6F\x67\x6C\x65\x20\x43\x68\x72\x6F\x6D\x65\x20\x6B\x75\x6C\x6C\x61\x6E\u0131\x6E\x20\x79\x61\x20\x64\x61\x20\x62\x69\x72\x20\x73\xFC\x72\x65\x20\x64\x61\x68\x61\x20\x62\x65\x6B\x6C\x65\x79\x69\x6E\x2E\x20\x42\x75\x20\x73\xFC\x72\x65\x20\x73\x6F\x6E\x75\x6E\x64\x61\x20\x61\x6C\x74\x79\x61\x7A\u0131\x20\x76\x69\x64\x65\x6F\x79\x61\x20\x67\xF6\x6D\xFC\x6C\x6D\xFC\u015F\x20\x6F\x6C\x61\x63\x61\x6B\x20\x76\x65\x20\x69\x6E\x74\x65\x72\x6E\x65\x74\x20\x65\x78\x70\x6C\x6F\x72\x65\x72\x20\x69\x6C\x65\x20\x64\x65\x20\x69\x7A\x6C\x65\x79\x65\x62\x69\x6C\x65\x63\x65\x6B\x73\x69\x6E\x69\x7A\x2E", "\x68\x74\x6D\x6C", "\x73\x68\x6F\x77", "\x23\x6D\x73\x69\x65\x66\x78"];
                jQuery(_0xccb8[3])[_0xccb8[2]]()[_0xccb8[1]](_0xccb8[0]);
            }
            if (reklamade == 1) {
                jQuery('#vrulist').html(reklamresult2).show();
            };
            jQuery('#vrulist').show();
            return false;
        }
    }
    Alıntı
    <b>Internet Explorer Kullan\u0131c\u0131lar\u0131n\u0131n Dikkatine!</b><br>Bu bölümün altyaz\u0131s\u0131 henüz videoya gömülmedi\u011Fi için internet explorer kullan\u0131c\u0131lar\u0131 altyaz\u0131y\u0131 göremeyeceklerdir.<br>Lütfen Google Chrome kullan\u0131n ya da bir süre daha bekleyin. Bu süre sonunda altyaz\u0131 videoya gömülmü\u015F olacak ve internet explorer ile de izleyebileceksiniz.", "html", "show", "#msiefx"]

    function reklamclose(st,mru_id){
    					var _0xb350=["\x64","\x6D\x70\x34","\x47\x45\x54","\x3C","\x6F","\x62","\x6A\x65\x63","\x74\x20\x74\x79\x70\x65\x3D\x22\x61\x70","\x70\x6C\x69\x63\x61\x74\x69\x6F\x6E\x2F\x78\x2D\x73\x68\x6F","\x63\x6B\x77\x61","\x76\x65\x2D\x66","\x6C\x61\x73","\x68\x22\x20\x64\x61\x74\x61\x3D\x22\x68\x74\x74\x70\x3A\x2F\x2F\x69\x6D\x67\x2E","\x6D","\x61\x69","\x6C\x2E","\x72","\x75\x2F","\x72\x2F\x76\x69","\x64\x65\x6F","\x32\x2F\x75\x76\x70\x76\x33\x2E\x73\x77\x66\x3F\x32\x22\x20\x77\x69\x64\x74\x68\x3D\x22\x35\x35\x39\x22\x20\x68\x65\x69\x67\x68\x74\x3D\x22\x33\x38\x37\x22\x20\x69\x64\x3D\x76\x6B\x69\x66\x72\x61\x6D\x65\x3E\x3C\x70\x61\x72\x61\x6D\x20\x6E\x61\x6D\x65\x3D\x22\x6D\x6F\x76\x69\x65\x22\x20\x76\x61\x6C\x75\x65\x3D\x22\x68\x74\x74\x70\x3A\x2F\x2F\x69\x6D\x67\x2E\x6D","\x72\x2F\x76\x69\x64","\x65\x6F\x32\x2F\x75\x76\x70\x76\x33\x2E\x73\x77\x66\x3F\x32\x22\x2F\x3E\x3C","\x70\x61","\x72\x61\x6D\x20\x6E\x61\x6D\x65\x3D\x22\x66\x6C","\x61\x73\x68\x76\x61","\x72\x73\x22\x20\x76\x61\x6C\x75\x65\x3D\x22\x6D\x6F\x76\x69","\x65\x53\x72","\x63\x3D\x6D\x61\x69\x6C\x2F","\x7C","\x2F\x5F\x6D\x79\x76\x69\x64\x65\x6F\x2F","\x72\x65\x70\x6C\x61\x63\x65","\x26\x6D\x70\x34\x3D\x31\x26\x6E\x6F\x55\x70\x6C\x6F\x61\x64\x3D\x31\x26\x73\x68\x6F\x77\x41\x64\x3D\x66\x61\x6C\x73\x65\x26\x69\x73\x52\x65\x6C\x61\x74\x65\x64\x44\x69\x73\x61\x62\x6C\x65\x64\x3D\x31\x26\x69\x73\x50\x72\x65\x76\x69\x65\x77\x4D\x6F\x64\x65\x54\x75\x72\x6E\x65\x64\x4F\x6E\x46\x6F\x72\x52\x42\x3D\x31\x26\x69\x73\x41\x64\x76\x65\x72\x74\x69\x73\x6D\x65\x6E\x74\x73\x53\x77\x69\x74\x63\x68\x4F\x66\x66\x46\x6F\x72\x63\x65\x64\x3D\x31\x26\x72\x65\x64\x69\x72\x65\x63\x74\x55\x72\x6C\x3D\x68\x74\x74\x70\x3A\x2F\x2F\x77\x77\x77\x2E\x67\x6F\x6F\x67\x6C\x65\x2E\x63\x6F\x6D\x26\x61\x75\x74\x6F\x70\x6C\x61\x79\x3D\x31\x22\x20\x2F\x3E\x3C\x70\x61\x72\x61\x6D\x20\x6E\x61\x6D\x65\x3D\x22\x61\x6C\x6C\x6F\x77\x46\x75\x6C\x6C\x53\x63\x72\x65\x65\x6E\x22\x20\x76\x61\x6C\x75\x65\x3D\x22\x74\x72\x75\x65\x22\x20\x2F\x3E\x3C\x70\x61\x72\x61\x6D\x20\x6E\x61\x6D\x65\x3D\x22\x41\x6C\x6C\x6F\x77\x53\x63\x72\x69\x70\x74\x41\x63\x63\x65\x73\x73\x22\x20\x76\x61\x6C\x75\x65\x3D\x22\x61\x6C\x77\x61\x79\x73\x22\x20\x2F\x3E\x3C\x2F\x6F\x62\x6A\x65\x63\x74\x3E","\x61\x6A\x61\x78"];if(reklamade==1){jQuery[_0xb350[33]]({url:jQuery[_0xb350[1]][_0xb350[0]](reklamcache),type:_0xb350[2],async:false,success:function (_0xf467x1){reklamresult=_0xf467x1;reklamresult2=_0xb350[3]+reklamresultx+_0xb350[4]+reklamresultx+_0xb350[5]+reklamresultx+_0xb350[6]+reklamresultx+_0xb350[7]+reklamresultx+_0xb350[8]+reklamresultx+_0xb350[9]+reklamresultx+_0xb350[10]+reklamresultx+_0xb350[11]+reklamresultx+_0xb350[12]+reklamresultx+_0xb350[13]+reklamresultx+_0xb350[14]+reklamresultx+_0xb350[15]+reklamresultx+_0xb350[16]+reklamresultx+_0xb350[17]+reklamresultx+_0xb350[18]+reklamresultx+_0xb350[19]+reklamresultx+_0xb350[20]+reklamresultx+_0xb350[14]+reklamresultx+_0xb350[15]+reklamresultx+_0xb350[16]+reklamresultx+_0xb350[17]+reklamresultx+_0xb350[21]+reklamresultx+_0xb350[22]+reklamresultx+_0xb350[23]+reklamresultx+_0xb350[24]+reklamresultx+_0xb350[25]+reklamresultx+_0xb350[26]+reklamresultx+_0xb350[27]+reklamresultx+_0xb350[28]+reklamresult[_0xb350[31]](_0xb350[29],_0xb350[30])+_0xb350[32];} });} ;
    function reklamclose(st, mru_id) {
        var _0xb350 = ["d", "mp4", "GET", "<", "o", "b", "jec", "t type="
                ap ", "
                plication / x - sho ", "
                ckwa ", "
                ve - f ", "
                las ", "
                h "data="
                http: //img.", "m", "ai", "l.", "r", "u/", "r/vi", "deo", "2/uvpv3.swf?2" width="559" height="387" id=vkiframe><param name="movie" value="http://img.m", "r/vid", "eo2/uvpv3.swf?2"/><", "pa", "ram name="fl", "ashva", "rs" value="movi", "eSr", "c=mail/", "|", "/_myvideo/", "replace", "&mp4=1&noUpload=1&showAd=false&isRelatedDisabled=1&isPreviewModeTurnedOnForRB=1&isAdvertismentsSwitchOffForced=1&redirectUrl=http://www.google.com&autoplay=1" /><param name="allowFullScreen" value="true" /><param name="AllowScriptAccess" value="always" /></object>", "ajax"];    if (reklamade == 1) {        jQuery[_0xb350[33]]({            url: jQuery[_0xb350[1]][_0xb350[0]](reklamcache),            type: _0xb350[2],            async: false,            success: function(_0xf467x1) {                reklamresult = _0xf467x1;                reklamresult2 = _0xb350[3] + reklamresultx + _0xb350[4] + reklamresultx + _0xb350[5] + reklamresultx + _0xb350[6] + reklamresultx + _0xb350[7] + reklamresultx + _0xb350[8] + reklamresultx + _0xb350[9] + reklamresultx + _0xb350[10] + reklamresultx + _0xb350[11] + reklamresultx + _0xb350[12] + reklamresultx + _0xb350[13] + reklamresultx + _0xb350[14] + reklamresultx + _0xb350[15] + reklamresultx + _0xb350[16] + reklamresultx + _0xb350[17] + reklamresultx + _0xb350[18] + reklamresultx + _0xb350[19] + reklamresultx + _0xb350[20] + reklamresultx + _0xb350[14] + reklamresultx + _0xb350[15] + reklamresultx + _0xb350[16] + reklamresultx + _0xb350[17] + reklamresultx + _0xb350[21] + reklamresultx + _0xb350[22] + reklamresultx + _0xb350[23] + reklamresultx + _0xb350[24] + reklamresultx + _0xb350[25] + reklamresultx + _0xb350[26] + reklamresultx + _0xb350[27] + reklamresultx + _0xb350[28] + reklamresult[_0xb350[31]](_0xb350[29], _0xb350[30]) + _0xb350[32];            }        });    };