benim sistemde soruyor, pack. exe calısmadan nce, ondan yle dedim. Arkadasa bulasmıştır evet.

başlat> çalıştır > rstrui. exe Hayırlısı...

çalıştırıp kurmadıysan sorun yok da ne demek eskide kaldı o :) sistemine virüs bulaşmış antivürüs programları bulamayacaktır ama sen yinede avira antivir ile tarat. virüsün nasıl bulaştığına gelince, büyük ihtimalle tarayıcı, adobe ve ya java ile bulaşmıştır yani eski sürüm kullandığından dolayı otomatik çalışmıştır exe.

http://gdfgdfgdgdfgdfg.in. ua/undo/red. php <! doctype html><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><title>Google</title> <script>window. google={kEI:"j945TaKANIGO_AabnNxi", kEXPI:"25657,28010,28186,28233", kCSI: , ml:function , pageState:"#", kHL:"tr", time:function , log:function {var a=new Image, e=google, g=e. lc, f=e. li;a. onerror=(a. onload=(a. onabort=function ));g =a;b=b||"/gen_204?atyp=i&ct="+c+"&cad="+d+"&zx="+google. time ;a. src=b;e. li=f+1}, lc: , li:0, j:{en:1, l:function , e:function , b:location. hash&&location. hash!="#", bv:3, pl: , mc:0, sc:0.5}, Toolbelt: };(function {var c=google. j;window. onpopstate=function ;for(var d=0, b;b= ;)(function {c =function }) }) ; window. google. sn="webhp";var i=window. google. timers= ;window. google. startTick=function {i ={t: , bfr:! }};window. google. tick=function ;google. startTick ;try catch window. google. jsrt_kill=1; </script> <style id=gstyle>body #gog td . gac_m td form body, td, a, p,. h . h . q . ts td . ts em . lst . tiah . ds input . lsb:active,. gac_sb:active a. gb1, a. gb2, a. gb3, a. gb4 #gog #gbar,#guser #gbar #guser . gbh,. gbd . gbh #gbs,. gbm . gbm . gb1 #gbar. gbsup . gb1,. gb3 . gb2 . gb2,. gb3 a. gb1, a. gb2, a. gb3, a. gb4 a. gb2:hover body input a a:hover, a:active . fl a a:visited a. gb1, a. gb4 a. gb3:hover #ghead a. gb2:hover . sblc . sblc a . lsbb . ftl,#fll a . lsb . lsb:active . lst:focus #addlang a . gac_v div . gac_v. gac_v2,. gac_bt </style><script>var _gjwl=location;function _gjuc {var b=_gjwl. href. indexOf ;if(b>=0){var a=_gjwl. href. substring(b+1);if(/ q=/. test &&a. indexOf -1&&!/ cad=h /. test }return 0}function _gjp ; google. y= ;google. x=function ;if window. google= ;window. google. crm= ;window. google. cri=0;window. clk=function {if {var a=encodeURIComponent||escape, c=new Image, h=window. google. cri++;window. google. crm =c;c. onerror=(c. onload=(c. onabort=function ));if(b&&b. substring(0,6)!="&sig2=")b="&sig2="+b;c. src= . join }return true}; window. gbar={qs:function , tg:function {var o= ;for o =e ;google. x(o, function )}};</script></head><body bgcolor=#ffffff text=#000000 link=#0000cc vlink=#551a8b alink=#ff0000 onload="try catch ;if new Image . src='/images/srpr/nav_logo27. png'" ><textarea id=csi style=display:none name=csi></textarea><script>if document. body. style. visibility='hidden';</script><iframe name=wgjf style=display:none src="/blank.html" onload="google. j. l " onerror="google. j. e "></iframe><textarea id=wgjc style=display:none name=wgjc></textarea><textarea id=wwcache style=display:none name=wwcache></textarea><textarea id=csi style=display:none name=csi></textarea><textarea id=hcache style=display:none name=hcache></textarea><div id=main><div id=ghead><div id=gog><div id=gbar><nobr><b class=gb1>Web</b> <a href="http://www.google.com.tr/imghp?hl=tr&tab=wi" onclick=gbar. qs class=gb1>Grseller</a> <a href="http://news.google.com.tr/nwshp?hl=tr&tab=wn" onclick=gbar. qs class=gb1>Haberler</a> <a href="http://translate.google.com.tr/?hl=tr&tab=wT" onclick=gbar. qs class=gb1>Çeviri</a> <a href="http://blogsearch.google.com.tr/?hl=tr&tab=wb" onclick=gbar. qs class=gb1>Bloglar</a> <a href="http://www.google.com.tr/realtime?hl=tr&tab=wY" onclick=gbar. qs class=gb1>Gerçek zamanlı</a> <a href="http://mail.google.com/mail/?hl=tr&tab=wm" class=gb1>Gmail</a> <a href="http://www.google.com.tr/intl/tr/options/" onclick="this. blur ;gbar. tg ;return!1" aria-haspopup=true class=gb3><u>Diğer</u> <small>&#9660;</small></a><div class=gbm id=gbi><a href="http://www.google.com/calendar/render?hl=tr&tab=wc" class=gb2>Takvim</a> <a href="http://picasaweb.google.com.tr/home?hl=tr&tab=wq" onclick=gbar. qs class=gb2>Fotoğraflar</a> <a href="http://docs.google.com/?hl=tr&tab=wo&authuser=0" class=gb2>Dokümanlar</a> <a href="http://www.google.com.tr/reader/?hl=tr&tab=wy" class=gb2>Reader</a> <a href="http://sites.google.com/?hl=tr&tab=w3" class=gb2>Sites</a> <a href="http://groups.google.com.tr/grphp?hl=tr&tab=wg" onclick=gbar. qs class=gb2>Gruplar</a> <div class=gb2><div class=gbd></div></div><a href="http://www.google.com.tr/intl/tr/options/" class=gb2>daha fazlası </a> </div></nobr></div><div id=guser width=100%><nobr><span id=gbn class=gbi></span><span id=gbf class=gbf></span><b class=gb4>angelsdemos@gmail.com</b> | <span id=gbe><a href="/url?sa=p&pref=ig&pval=3&q=http://www.google.com.tr/ig%3Fhl%3Dtr%26source%3Diglk&usg=AFQjCNGtb2M6j0lwBUY2Y_lwPqEGgzQdTw" class=gb4>iGoogle</a> | </span><a href="/preferences?hl=tr" onclick="this. blur ;gbar. tg ;return!1" aria-haspopup=true aria-owns=gbg class=gb3><u>Ayarlar</u> <small>&#9660;</small></a> | <a id="gb_71" href="http://www.google.com.tr/accounts/ClearSID?continue=http%3A%2F%2Fwww.google.com%2Faccounts%2FLogout%3Fcontinue%3Dhttp%3A%2F%2Fwww. google.com.tr%2F" class=gb4>Oturumu kapat</a><div class=gbm id=gbg><a href="/preferences?hl=tr" class=gb2>Arama ayarları</a> <a href="https://www.google.com/accounts/ManageAccount?hl=tr" class=gb2>Google Hesabı ayarları</a> </div></nobr></div><div class=gbh style=left:0></div><div class=gbh style=right:0></div></div></div><center><span id=body><center><br clear=all id=lgpd><div id=lga><div style="padding:28px 0 3px"><div align=left style="background:url(/intl/en_com/images/srpr/logo1w. png) no-repeat;height:110px;width:276px" title="Google" id=logo onload="window. lol&&lol "><div nowrap style="color:#777;font-size:16px;font-weight:bold;left:214px;position:relative;top:70px">Türkiye</div></div></div><br></div><form action="/search" name=f><table cellpadding=0 cellspacing=0><tr valign=top><td width=25%> </td><td align=center nowrap><input name=hl type=hidden value=tr><input name=source type=hidden value=hp><input type=hidden name=biw><input type=hidden name=bih><div class=ds style="height:32px;margin:4px 0"><div style="position:relative;zoom:1"><input autocomplete="off" maxlength=2048 name=q class="lst tiah" title="Google&#39;da Ara" value="" size=57 style="background:#fff;border:1px solid #ccc;border-bottom-color:#999;border-right-color:#999;color:#000;font:18px arial, sans-serif bold;margin:0;padding:5px 8px 0 6px;padding-right:38px;vertical-align:top"><img src="/textinputassistant/tia. png" width=27 height=23 alt="" style="position:absolute;cursor:pointer;right:5px;top:4px;z-index:300" onclick="var s=document. createElement ;s. src='/textinputassistant/0/tr_tia. js';google. append ;"/></div></div><br style="line-height:0"><span class=ds ><span class=lsbb><input name=btnG type=submit value="Google&#39;da Ara" class=lsb onclick="this. checked=1"></span></span><span class=ds><span class=lsbb><input name=btnI type=submit value="Kendimi Şanslı Hissediyorum" class=lsb onclick="this. checked=1"></span></span></td><td nowrap width=25% align=left class="fl sblc"><a href="/advanced_search?hl=tr">Gelişmiş arama</a><a href="/language_tools?hl=tr">Dil araçları</a></td></tr></table></form><div style="font-size:83%;min-height:3.5em"><br></div><div id=res></div></center></span> <span id=footer><center id=fctr><div style="font-size:10pt"><div id=fll style="margin:19px auto 19px auto;text-align:center"><a href="/intl/tr/ads/">Google'la Reklam Fırsatları</a><a href="/services/">İşletme Çzümleri</a><a href="/intl/tr/about.html">Google Hakkında</a><a href="http://www.google.com/ncr">Google.com in English</a></div></div><p style="color:#767676;font-size:8pt">&copy; 2011 - <a href="/intl/tr/privacy.html">Gizlilik</a></p></center></span> </div> <script>function _gjp google. j = ;</script><script>function wgjp ;</script></center><div id=xjsd></div><div id=xjsi><script>if google. y. first= ;google. dlj=function {window. setTimeout(function ,0)}; if google. y. first= ;if {google. dstr= ;google. rein= ;if google. dlj('/extern_js/f/CgJ0chICdHIrMEU4ACwrMFo4ACwrMA44ACwrMBc4ACwrMCc4ACwrMDw4ACwrMFE4ACwrMAo4AEAdLCswFjgALCswGTgALCswITgAQAEsKzAlOM-IASwrMCo4ACwrMCs4ACwrMDU4ACwrMEA4ACwrMEE4ACwrME04ACwrME44ACwrMFM4ACwrMFQ4ACwrMF84ACwrMGk4ACwrMB04ASwrMBg4ACwrMCY4ACyAAiiQAiw/J0WBBWoZ4Ts. js');google. xjs=1}google. neegg=1;google. mc = ;google. mc = google. mc. concat( , , , , , , , , , ]);google. y. first. push(function {try{var form=document. f||document. f||document. gs;google. ac. i(form, form. q,'','','', );(function { function e {var a=null;if else if a=new XMLHttpRequest;return a}function f {if window. execScript ;else if {var b=null;window. eval("var _et_ = 1;");if else b=false;if window. eval ;else }}function g {var b=a;if(b&&b. length>0) f }function h {if(a. readyState 4&&(a. status 200||a. status 304))try catch }function i {if(window. google&& {window. google. cp=window. google. cp|| ;window. google. cp. o= ;var a=e ;if {a. open("GET","/ig/cp/get?hl=tr&gl=tr&bundleJs=1", true);a. onreadystatechange=function ;a. send }}}i ; }) ; ;}catch if google. History&&google. History. initialize });if </script></div><script>(function { var b, d, e, f;function g {if else }function h var i=document. getElementsByTagName ;b=i. length;d=0;for(var j=0, k;j<b;++j){k=i ;if ++d;else if else }e=b-d;function l if window. addEventListener ;else if window. attachEvent ;google. timers. load. t. prt=(f= . getTime ; }) ; </script>

http://cattia.com/m28sx.html Arkadaşlar sitenin ne olduğunu bilmiyorum biri bana mail atmış mailimden açtım bişeyler oldu ne olduğunu bilmiyorum ama bilgisi olanlar bakabilir mi virüs keylogger gibi bişi geldi ama ne bilmiyorum

evet % 99. kullandığın sistem xp mi? kullandığın antivirüs avira' dan başka birşey mi? cevabın evetse bulaşmıştır

"insanın başına ya meraktan ya da yapraktan birşeyler gelirmiş" tıklamayın :D Allah Türktür.

view-source:cattia.com/m28sx.html yapınca <head> <meta HTTP-EQUIV="REFRESH" content="0; url=http://gdfgdfgdgdfgdfg.in. ua/undo/red. php"> </head> oluyor view-source:http://gdfgdfgdgdfgdfg.in. ua/undo/red. php view-source:http://www.google.com.tr/ ... said addicted.

sahte antivirus tarayıcısı buraya ynlendiriyor: h++p://46.252.129.81/index. php?eC8X2=S&26b=M0C0813P4N1R&8Aao=64&UIJ=afAVjGAVwemUIfWcsBU0A&l4Ai=HgrAChTfTd0BgMMWVMhBw&uB=RZC11UycAAFNQMQ0yAGAPAXRxeA94ZiRRQkU%3D&05=2W9M1LQF318&LPV=K9JSP4114LPkkxQRM4Ik9BV2dbJ0lVIwk6LztbUCgyOVkuVU&09=82C54DVSKG05QN&JE8=BB&M3hJ4=RNC2g&oW5=cmZzB9IVF#9 ordan buraya h++p://46.252.129.81/?q251=o17fce pack. exe diye bir şey kurmanı istiyor, çalıstırıp kurmadıysan sorun yok

site link kaldırsan iyi olur başkaları tıklar onlarada bulaşabilir.

bulaştı yani virüs yle mi