tested working :D
but not sure if its backdored, could somebody verify?
(11-02-2014 10:48 PM)serhat Wrote: [ -> ]tested working :D
but not sure if its backdored, could somebody verify?
virustotal
yeah some reps here please
i doubt that virustotal can find some shits in scripts, anyway thank's for sharing!
and, as i see on their site, i doesnt need ioncube loaders
thank you brother ;) +rep
hmm retail 4.0 version not required ioncube loader, this is modified files... and possible with backdoor....
Yeap...
Code:
<?php //004e5
if(!extension_loaded('ionCube Loader')){$__oc=strtolower(substr(php_uname(),0,3));$__ln='ioncube_loader_'.$__oc.'_'.substr(phpversion(),0,3).(($__oc=='win')?'.dll':'.so');if(function_exists('dl')){@dl($__ln);}if(function_exists('_il_exec')){return _il_exec();}$__ln='/ioncube/'.$__ln;$__oid=$__id=realpath(ini_get('extension_dir'));$__here=dirname(__FILE__);if(strlen($__id)>1&and$__id[1]==':'){$__id=str_replace('\\','/',substr($__id,2));$__here=str_replace('\\','/',substr($__here,2));}$__rd=str_repeat('/..',substr_count($__id,'/')).$__here.'/';$__i=strlen($__rd);while($__i--){if($__rd[$__i]=='/'){$__lp=substr($__rd,0,$__i).$__ln;if(file_exists($__oid.$__lp)){$__ln=$__lp;break;}}}if(function_exists('dl')){@dl($__ln);}}else{die('The file '.__FILE__." is corrupted. Ensure that you use binary mode when transferring files with FTP and disable the 'TAR smart cr/lf feature' if using WinZIP\n");}if(function_exists('_il_exec')){return _il_exec();}echo('Site error: the file <b>'.__FILE__.'</b> requires the ionCube PHP Loader '.basename($__ln).' to be installed by the website operator. If you are the website operator please use the <a href="http://www.ioncube.com/lw/">ionCube Loader Wizard</a> to assist with installation.');exit(199);
?>
E¿¦gIäo;–Ü@ÖüqL G©çÁÈ´
}—ྫྷ|ƒ’í‡ÂýWQÒ§T$Ly ÑÍ13{É*FÆŽd¤a4*FUrïi MvYiѳᥛ pÂäÐåÕ3ÃæötC8Ã6è"h1L1Wl,0ؾEü¤À-‹$ÑkÇ3y%²ÏƬand µ$ø]%Ô#¤ÉMðñì¹t«øÓRö©b A¦«ÓÆÆQL4”R@ÕÔqP\ƒ]Í>ıÜOl¨ÎG¨`BÄ_0·å±%}¯ÐøYù£†5L©kÔ9íJ”éaX½nÃ\~:‘ƒkVí‚Žªà¿ …¶¿T?¦Hžšh—ت@µ)tI/ÈO¡M¨Ñ
~ã
öbÕ²@Œƒ^-¼bG®ž¾ÄÊÉžbªˆÐIp’^‹Šåxx ÷û™êG§‰ÆG= (x‡À¾ó 9»çä‚¢¤õ`Æ4åœÕâÒú>‘ÑëÀ¤ Zp‰Ûï?u}YÇ!˜ó»4'íöz£;íÇåŒñ2 ¾uŽ“C_9‡µû΃ðÖŒp‰â^]T楻‰ó©´’“0
î({IFß#H›!+•Ö;,»ÙöåD¢(uŒiþÚ4µR{‘†t ñÀïƦ-§T:7?äCýerzô{=r‰X21ñyÛ²zt—í¼ÖMVÛ
½I¤a°‹›:áand‰¤Mćìb‘ÉŽ–ôE-“cËŽi“3”OPE„t5GàÌ\ùRèQêšcoÂîiæJäÊŠ{虹#SeRj ._pÓÌöÉ$؃uî¸Fð‰-X¸£ZVq3¡;ËPRnpÿ65˜•ª¤¢ál±>Œ(;!Ébàt ¾ÈyŠÑzÚtm¦ˆqlJED4
RGÄ C„Ž:d@. ºø¸ôøQ£Û3ñTg–ñ‡ÃðtžIE„ø†¡ïpå÷ýO©kÈQª2ï¯õ TJ{Ì–ƒvXŸ ÿXŒ«â›Ñ}ï³P ¾F d¬Á~ïý¯MÑ„>Øebí1¾ß†[ÄèÃ/UÛ:Eù¦èw~Ðã"òZ*ó ³–ktÉž„Tjc±ÙOf˜4qõsîY´ óQ\Ä|{°ôžØ~~¶º úé·H-|#‘Ôo>|†Ôð‰t/ªk™`äµnƒþ»£[‰S„nGSô7 ]d¹¨Œò''—SèÇŸXöƒ£²4ç’÷j?†Èà‚ou}úq»°;®@\íÈÁÕñ Ù0k3Fã‘Øç¼?U Xn ´ûˆoÌßvt·×
/õ Ctô#I‚–! 'ùWWþà®tfz†šŒ™î£|0´and¤´”
Ð
so we just take review now