(get) working and latest yetishare v4

[goodguy]

hi, I found this somewhere while googling and I've checked at localhost and seems it working well!! but required ioncube loader

demo: http://i.imgur.com/Y5uADor.png


download: http://www66.zippyshare.com/v/87083542/file.html

[serhat]

tested working :D
but not sure if its backdored, could somebody verify?

[HeavyHell]

(11-02-2014 10:48 PM)serhat Wrote:  tested working :D
but not sure if its backdored, could somebody verify?

virustotal

[goodguy]

yeah some reps here please

[pnv]

i doubt that virustotal can find some shits in scripts, anyway thank's for sharing!
and, as i see on their site, i doesnt need ioncube loaders

[PuNisHeR]

thank you brother ;) +rep

[atchodas]

thx ;) +rep

[atchodas]

hmm retail 4.0 version not required ioncube loader, this is modified files... and possible with backdoor....

[topnaweb]

Yeap...

Code:

<?php //004e5
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__o​c.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');if(function_exists(​'dl')){@dl($__ln);}if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__​);if(strlen($__id)>1&and$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;br​eak;}}}if(function_exists('dl')){@dl($__ln);}}else{die('The file '.__FILE__." is corrupted. Ensure that you use binary mode when transferring files with FTP and disable the 'TAR smart cr/lf feature' if using WinZIP\n");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the website operator. If you are the website operator please use the <a href="http://www.ioncube.com/lw/">ionCube Loader Wizard</a> to assist with installation.');exit(199);
?>
E¿¦gIäo;–Ü@ÖüqLG©çÁÈ´
}—ྫྷ|ƒ’í‡ÂýWQÒ§T$Ly    ÑÍ13{É*FÆŽd¤a4*FUrïiMvYiѳᥛ pÂäÐåÕ3ÃæötC8Ã6è"h1L1Wl,0ؾEü¤À-‹$ÑkǏ3y%²ÏƬandµ$ø]%Ô#¤ÉMðñì¹t«øÓRö©bA¦«ÓÆÆQL4”R@ÕÔqP\ƒ]Í>ıÜOl¨ÎG¨`BÄ_0·å±%}¯ÐøYù£†5L©kÔ9íJ”éaX½nÃ\~:‘ƒkVí‚Žªà¿ …¶¿T?¦Hžšh—ت@µ)tI/ÈO¡M¨Ñ
~ã
öbÕ²@Œƒ^-¼bG®ž¾ÄÊÉžbªˆÐIp’^‹Šåxx÷û™êG§‰ÆG=(x‡À¾ó9»çä‚¢¤õ`Æ4åœÕâÒú>‘ÑëÀ¤Zp‰Ûï?u}YÇ!˜ó»4'íöz£;íÇåŒñ2¾uŽ“C_9‡µû΃ðÖŒp‰â^]T楻‰ó©´’“0
î({IFß#H›!+•Ö;,»ÙöåD¢(uŒiþÚ4µR{‘†t
ñÀïƦ-§T:7?äCýerzô{=r‰X21ñyÛ²zt—í¼ÖMVÛ
½I¤a°‹›:áand‰¤Mćìb‘ÉŽ–ôE-“cËŽi“3”OPE„t5GàÌ\ùRèQêšcoÂîiæJäÊŠ{虹#SeRj ._pÓ̝öÉ$؃uî¸Fð‰-X¸£ZVq3¡;ËPRnpÿ65˜•ª¤¢ál±>Œ(;!Ébàt ¾ÈyŠÑzÚtm¦ˆql­JED4
RGÄ C„Ž:d@.ºø¸ôøQ£Û3ñTg–ñ‡ÃðtžIE„ø†¡ïpå÷ýO©kÈQª2ï¯õ TJ{Ì–ƒvX
ŸÿXŒ«â›Ñ}ï³P¾Fd¬Á~ïý¯MÑ„>Øebí1¾߆[ÄèÃ/UÛ:Eù¦èw~Ðã"òZ*ó³–ktÉž„Tjc±ÙOf˜4qõsîY´óQ\Ä|{°ôžØ~~¶ºúé·H-|#‘Ôo>
|†Ôð‰t/ªk­™`äµnƒþ»£[‰S„nGSô7]d¹¨Œò''—SèÇŸXöƒ£²4ç’÷j?†Èà‚ou}úq»°;®@\íÈÁÕñÙ0k­3Fã‘ؐç¼?UXn´ûˆoÌßvt·×
­/õCtô#I‚–!'ùWWþà®tfz†šŒ™î£|0´and¤´”
Ð

[inrev]

so we just take review now