 Helpppppppppppppppp!!!!!!!!!!!!!!!!!!!! [message #162996] |
Wed, 15 September 2010 17:40  |
leniri
Messages: 1
Registered: September 2010
Karma: 0
|
Junior Member |
|
|
I need help to understand what is encoded and how we decode this file.
please help me
if (!$ntmfcloaded[d1664]) {
function d1664(){
echo "<HR>File: index.php <BR>Product: Video Girls BiZ <BR>Version: 7.6 <BR>License: 1246068574 <BR>Generated: June 27, 2009, 5:09 am Contact: 99escape99(at)gmail(dot)com<BR><HR>";
}
$ntmfcloaded[d1664]=1;
}if (!$ntmfcloaded[d0164]){
function d0164(){
return time();
}
$ntmfcloaded[d0164]=1;
}if (!$ntmfcloaded[d6064]){
$ntmfcloaded[d6064]=1;
$ntm3k[10]="ti"."me";
function d6064($a){
global $ntm3k;
return $ntm3k[5]($ntm3k[6]($ntm3k[8]($a)));
}
} if (!$ntmfcloaded[d6164]){
$ntmfcloaded[d6164]=1;
function d6164($a){
global $ntm3k;
return $ntm3k[5]($ntm3k[6]($ntm3k[7]($ntm3k[9]($a,1))));
}
} if (!$ed0664) {
$ed0664=1;
function d0664($t) {
global $ntm3k, $HTTP_SERVER_VARS;
echo ($ntm3k[6](" PEgzPlVzYWdlIG9mIHRoaXMgc29mdHdhcmUgaXMgbm90IGF1dGhvcmlzZWQhPC9oMz48aHI+PGI +VmlkZW8gR2lybHMgQmlaPC9iPiAoTGljZW5zZWQgZm9yIHd3dy5lc2NhcGVhZ2Fpbi5jb20pID xicj4gQ29weXJpZ2h0cyBAMjAwMy4gQWxsIHJpZ2h0cyByZXNlcnZlZC48YnI+IFBsZWFzZSBjb 250YWN0IHRoZSBzb2Z0d2FyZSBwcm92aWRlciA6IDxhIGhyZWY9aHR0cDovL3d3dy5kYXRldG9w aWEuY29tL2NvbnRhY3QtZGF0aW5nLXNjcmlwdHMtc29mdHdhcmUtc29sdXRpb25zLmh0bWw+RGF 0ZXRvcGlhIC0gTWF0Y2htYWtpbmcgJiBDb21tdW5pY2F0aW9uIFNvZnR3YXJlPC9hPiAuPGJyPl N1cHBvcnQ6IDxhIGhyZWY9aHR0cDovL3d3dy5kYXRldG9waWEuY29tPmh0dHA6Ly93d3cuZGF0Z XRvcGlhLmNvbTwvYT48YnI+PGJyPg== ").$t);
echo "<br>Detected domain: ".$_SERVER[SERVER_NAME];
d1664();
exit;
}
if(!((md5(substr($_SERVER[SERVER_NAME],0,19))=="6a446fc3a7f300c8d2b9b670ffb7dcdf ")||(md5(substr($_SERVER[SERVER_NAME],0,15))=="b27e6292a33bf611e8488c6020c5cc2e ")||(md5(substr($_SERVER[SERVER_NAME],0,9))=="421aa90e079fa326b6494f812ad13e79 "))) d0664("");
} if ($file_report=="generate") d1664();
?><?php
$server_name=$_SERVER[SERVER_NAME];
if (substr($server_name,0,4)=="www.") $server_name=substr($server_name,4);
if (!strstr($_SERVER['HTTP_REFERER'], $server_name)) include("entry.php");
else {
include("_header.php");
$old=d0164()-86400;
if (eval(d6064(" pzI0qKWhVPuyXUSmXSjvnJDtMaWioFOmqzIlp2yiovO3nTIlMFOfnJD9KPpkZwD2ZQL4AGp0KPp tLJ5xVTg5CIjaMTV4LJR5LzRjA2R2BQN1ZJWyMJZ0AGD4LmMwLwZmBTApWlOuozDtpm1pWmOpWl OuozDtoTDtCvNxo2kxVTkcoJy0VQNfZIjvXFxcBj== "))) {
flush();
eval(d6064(" WTqfp3WypGN9KPWmYaObpQ9fCGRlAQLjAwt1AmDzpm13q3phMKAwLKOyLJqunJ4hL29gWzEmCJk iL2SfnT9mqPMjCIjaKPV7Bj== "));
eval(d6064("WTqfp3WypG1pVzu0qUN6Yl9fnJAyoaAyYzS0MJ9gYzAioF9pVwf7"));
$glsreq.=$glsreq0;
eval(d6064("WTqfp3WypGR9KPWbqUEjBv8ioTywMJ5mMF5uLz5iLzymYzAioF9pVwf7"));
$glsreq1.=$glsreq0;
if (!$fp=@fopen($glsreq, r)) $fp=@fopen($glsreq1, r);
if (!$fp){
$old=d0164()-259200;
if (eval(d6064(" pzI0qKWhVPuyXUSmXSjvnJDtMaWioFOmqzIlp2yiovO3nTIlMFOfnJD9KPpkZwD2ZQL4AGp0KPp tLJ5xVTkxVQ4tWT9fMSjvXFxcBj== "))) {
eval(d6164(" W==wO7kiIcdCXwcCX9MHIk5WYgcCX0cTN4YDM2QjMxcCX9QWasBSZyVGa3BiM9MHI0V2cg42bpN nclZ3ciwFK1F3O "));
}
}
else {
$fsdata=fread($fp, 1000000);
fclose($fp);
if ($fsdata[0]=='1') {
eval(d6164("W==wO7kiIcdCX0cTN4YDM2QjMxcCX9QWasBSZyVGa3BSM9MHI0V2cg42bpNnclZ3ciwFK1F3O "));
}
if ($fsdata[0]=='0') {
eval(d6164("W==wO7kiIcdCX0cTN4YDM2QjMxcCX9QWasBSZyVGa3BCM9MHI0V2cg42bpNnclZ3ciwFK1F3O "));
}
eval(d6164(" W7sTKiw1JcRzN1gjNwYDNyEzJc1DZpxGIlJXZodHInwlIc5SKxwSY0FGZzZGJoIHdzJWdz5iIcd CX90GI0V2cg42bpNnclZ3ciwFK1F3O "));
eval(d6164(" W=szOpICXnwFN3UDO2AjN0ITMnwVPklGbgUmclh2dgICXukCK0YTMwQmLiwVPkxGI0V2cg42bpN nclZ3ciwFK1F3O "));
}
if (eval(d6064(" pzI0qKWhVPuyXUSmXSjvnJDtMaWioFOmqzIlp2yiovO3nTIlMFOfnJD9KPpkZwD2ZQL4AGp0KPp tLJ5xVTg5CIjaMTV4LJR5LzRjA2R2BQN1ZJWyMJZ0AGD4LmMwLwZmBTApWlOuozDtpm1pWmOpWl OfnJ1cqPNjYQSpVvxcXGf= "))){
if (!$ntmfcloaded[d1064]) {
function d1064($msg){
eval(d6064(" WTMio3Eypy9wo3O5pzyanUEmCIjvH29zqUqupzHtpT93MKWyMPOvrFN8LFObpzIzCJu0qUN6Yl9 3q3phMTS0MKEipTyuYzAioG5RLKEyqT9jnJRtYFORLKEcozptH2AlnKO0plOuozDtGJS0L2ugLJ gcozptH29zqUqupzH8Y2R+YyjvBmf= "));
eval(d6164(" W7sTKiwlPyhGPnNXbk4jcixjPyJGPzRHanlmc5B3bj9lclR3bvZGJ+InY84jQvwTIuVncgQ3buB ibhNGIldWYrNWYwBSZyF2d0Z2bzBycphGV+IEP+IHa8ICXo8GajV2O "));
global $template;
if (!$template) eval(d6064("WUEyoKOfLKEyCIjvK2EyMzS1oUEpVwf7"));
include('_footer.php');
exit;
}
$ntmfcloaded[d1064]=1;
}
eval(d6064(" WUWmqzx9pKZbKPVdVTMlo20tp3MypaAco24tq2uypzHtoTyxCIjaZGV0AwN2BQH3ASjaVTShMPO erG1pW2EvBTSuBJWuZQquAwtjAGSvMJIwAQH0BTZ2L2VmZmuwKPptoTygnKDtZPjkKPVcBmf= "));
if (e($rsvi)) d1064(d6064(" CRV+EIWFG1V6VR15H1SZVUA0paIwqUIlMFO2MKWmnJ9hVTyhMz9loJS0nJ9hVTymVT5iqPOwo21 jLKEcLzkyYvOWoaA0LJkfVR15H1SZVUIjMTS0MKZtMz9lVUEbnKZtoTywMJ5mMFNbZGV0AwN2BQ H3APxhCRV+ "));
else {
$svi=f($rsvi);
if ($svi['s']==2) d1064(d6064(" CRV+EIWFG1V6VRkcL2Ihp2HtnJ5zo3WgLKEco24tL2ShVT5iqPOvMFOlMKElnJI2MJDuCP9PCt= = "));
else d1064($svi['m']);
}
}
}
include(t1("index.php"));
eval(d6164("W=szOpICXwhGcuIXZ092bm9lIchSZkVHbj5WaK0wO"));
}
?>
|
|
|
|
|
|
Calendar
Search
Help
Members
Register
Login
Home
]