fixes & patterns

scan.php

@@ -225,7 +225,6 @@ error_reporting(E_ALL);
     "return rawurlencode\(rawurlencode\(",
     "=array_map\(\"ba\".\"se6\".\"4\".\"_decode\",array\(\'\',str_replace\(",
     "d.=sprintf\(\(substr\(urlencode\(print_r\(array\(",
-    "eval\(gzinflate\(base64_decode\(",
     "eval\(gzinflate\(str_rot13\(base64_decode\(",
     "eval\(gzinflate\(base64_decode\(str_rot13\(",
     "eval\(gzinflate\(base64_decode\(base64_decode\(",
@@ -482,6 +481,8 @@ error_reporting(E_ALL);
     "facebook\.com\/luan\.santo\.5437",
     "wtuds",
     "eval(atob",
+    "PCT4BA6ODSE_",
+    "@base64_decode\(\$",
 );
 
 foreach ($tree as $finfo)