Как расшифровать PHP скрипт?

[Van Hellsing]

PHP код:

<?php if(!function_exists('findsysfolder')){function findsysfolder($fld){$fld1=dirname($fld);$fld=$fld1.'/scopbin';clearstatcache();if(!is_dir($fld))return findsysfolder($fld1);else return $fld;}}require_once(findsysfolder(__FILE__).'/911006.php');$REXISTHECAT4FBI='FE50E574D754E76AC679F242F450F768FB5DCB77F34DE341 660C280D176E374DE7FB3B090A782B6B68DBC97BEAD93B681C452F25BE26';g0666f0acdeed38d4cd9084ade1739498(f0666f0acdeed38d4cd9084ade1739498(__FILE__));$REXISTHEDOG4FBI='2353A1EE1BAB26B685B81B39AD12C016BE 269A3EEC8E77BD2669F3E9E499D22D0 64EF35FB9C4E2D92961AB938A87F515 C70AEEE2811 A 41D72BCD4DE4F4E4B316EAB9389859E8B849EFB131D75BFAFEE2A10 F A72A8E43E2B64BEDB337D959F8F8E8BF12960CCC2DA341D76908986908892FA3F7AC3F82A12 660E310458ADE66A6C6 833AF8BD0ECC64753A2DDBE3D4E91D6 06AAAA8C13079B6F0BCE8257489DF62E665F451511C1228759A89998DF614 6221C1A1111 9 91DB51132A629C8DC1749FE556E4478A1E92A3BAB13CC A5DF8464455E77ADE7DEA70D0D0424443276CAF99E6C5FE4F68B8D1C428A536E96BE7 B4689D4E9C4FC74A5FD72AEEE1363D5386BE8 6152EAB1749F86FBF3A9D211C 65568BBA1F4 930A53994DED6EFCB3373EE7DA52251F654F420A13596B8D7 B4983B088B5F92D64C031934783D270AAFB6180F9231E 756A7F428AA1179EE6FD3 64A9B3D97E57BCA7EBCF54764B7A7E52661C8C3DD3B505AB6C0ACE13F2D62BFAFED2E69D0CBC5DC327C949E8E8F8AF02E6BD3C9C5DE4A455FBAD1DB347EEE2E6BD1CECBB3E9227DE43E58B1EE39515BC3DA36247B96868498F647605D54B6C0D823 B 21F D 21F F D 11A 7 01A77949EFA 569A4FD6CA3FE6FADE13D247F99F02E78909A829BF665BAD7445AB2ED5BB4EE2A61ABE7321A73AE9CF32D11 F F 871AAE43C535DB5FF6C4E6BD1C422CD 55CFB1CB0E0114D9F37BC6CE6669EED3D C22191271AAFA287DBDEF648AC4 B6FEA6E9B379F30DECF 94F5A9B89EC1AB02DD67CEC104587964098CB 24598CF1472D271933D87AE154C4B28B010B6E365E56BCD B49F92FA35FE766E4144CF66FE627A9391FA63FE764E41FA539AA63E67CAF2C8092D3 45FBD69EE3CEF6BF952FB44439733B7E575A1F659FA528DEB61E335E969FD50F738AB3AF521A25C8BC468FF57FA27A72675EF79DF688BCAD9 B4B83B3E77FDC 2134885CC12B6 73F9F20C1D4789B3A9B34E07EC1D277FD2C80AE2370F85789A823A03714 D4C8D8383D665988FC86ED7 EC6D27FD5 B4F88C4 6 65DF0578F33E761F91B489C38DECF 6468D8D30B8584FF117B12414 07FD4B7 05FE73D85D46B9681C062F06588CA 65B389D36AC1515BA A369D26C3 35B3D80DF658ECC72D5C0 2105C83D1 4369C311B FBE1FD7C6 44A88DCCE1DCA 81BD47DD1B715BFDAB92AA83E6BC4 65B3D9D20D779AA499A389D53F35D4EF24285D7B122A257E535E27DAB24DBCA 4429A20B6 027AC21C97697F1 F4352F06ED7 94D913979A426A1439F32D871DCCD 04297386DC118A1534484B72BAC62F75CF05E4F8FC81B5CFD4325BF1CCE76E4 EB6E07BAA20BF33A12CAD3FF263E6 8 35582DB3C78C1FF3A57B4FE1B65C9C4DD4C435ECECCC0DB455EB8D1CED8317BE339503E5DB498F61770D9356FAAE12C64AE9EFF19 7 41D 11F7F98819AF42C63ADE5301C71A896F5137B918D86F32F69A0FF A 61079B18883F4317D8DFA5A81C0FD3BAA30A42EDA77AC8AE9 A1F4790E774F1 678FF 21C63D731533E52BE8DA33E92BB14B22B66A8D9 F274EA0AACB181853A9DC618294F32EAF26B35BFE157A80BE8EAF8FC97BEF6CD2 2475D8F98D0163142A2A8D8284B3A6D9F3A9DEC 25185DD3EC3 743F16FE6628832A7E662EA69AB92FA3B 15A8C4256AE29D4 578D472F7658EBA13B45A8EC975DB77AE9DF7 323187787';$REXISTHECAT4FBI='94CD76CD371C5A7BC70C186E779C293B9B49BACA5A781A6'; eval(y0666f0acdeed38d4cd9084ade1739498('1035 2 F73D53F461C',$REXISTHEDOG4FBI));?>

______________
Прекратите создавать одинаковые темы и сообщения!!
КРОССПОСТ ЗАПРЕЩЁН.

Модератор.

[graymaster]

А можно заинклюженный файл "911006.php" в студию?

[Van Hellsing]

Хорошо ВОт

PHP код:

<?php ini_set('include_path',dirname(__FILE__));function A4540acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){return $Xew6e79316561733d64abdf00f8e8ae48;}function b5434f0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){return $Xew6e79316561733d64abdf00f8e8ae48;}function c43dsd0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){return $Xew6e79316561733d64abdf00f8e8ae48;}function Xdsf0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){return $Xew6e79316561733d64abdf00f8e8ae48;}function y0666f0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){$x0b43c25ccf2340e23492d4d3141479dc='';$x71510c08e23d2083eda280afa650b045=0;$x16754c94f2e48aae0d6f34280507be58=strlen($x897356954c2cd3d41b221e3f24f99bba);$x7a86c157ee9713c34fbd7a1ee40f0c5a=hexdec('&H'.substr($x276e79316561733d64abdf00f8e8ae48,0,2));for($x1b90e1035d4d268e0d8b1377f3dc85a2=2;$x1b90e1035d4d268e0d8b1377f3dc85a2<strlen($x276e79316561733d64abdf00f8e8ae48);$x1b90e1035d4d268e0d8b1377f3dc85a2+=2){$xe594cc261a3b25a9c99ec79da9c91ba5=hexdec(trim(substr($x276e79316561733d64abdf00f8e8ae48, $x1b90e1035d4d268e0d8b1377f3dc85a2, 2)));$x71510c08e23d2083eda280afa650b045=(($x71510c08e23d2083eda280afa650b045<$x16754c94f2e48aae0d6f34280507be58)?$x71510c08e23d2083eda280afa650b045 + 1:1);$xab6389e47b1edcf1a5267d9cfb513ce5=$xe594cc261a3b25a9c99ec79da9c91ba5 ^ ord(substr($x897356954c2cd3d41b221e3f24f99bba, $x71510c08e23d2083eda280afa650b045-1, 1));if($xab6389e47b1edcf1a5267d9cfb513ce5<=$x7a86c157ee9713c34fbd7a1ee40f0c5a)$xab6389e47b1edcf1a5267d9cfb513ce5=255+$xab6389e47b1edcf1a5267d9cfb513ce5-$x7a86c157ee9713c34fbd7a1ee40f0c5a;else $xab6389e47b1edcf1a5267d9cfb513ce5=$xab6389e47b1edcf1a5267d9cfb513ce5-$x7a86c157ee9713c34fbd7a1ee40f0c5a;$x0b43c25ccf2340e23492d4d3141479dc=$x0b43c25ccf2340e23492d4d3141479dc.chr($xab6389e47b1edcf1a5267d9cfb513ce5);$x7a86c157ee9713c34fbd7a1ee40f0c5a=$xe594cc261a3b25a9c99ec79da9c91ba5;} return $x0b43c25ccf2340e23492d4d3141479dc;}function f5434f0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){if(file_exists($x456e79316561733d64abdf00f8e8ae48)){unlink($x456e79316561733d64abdf00f8e8ae48);};return $Xew6e79316561733d64abdf00f8e8ae48;}function j43dsd0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){if(file_exists($x456e79316561733d64abdf00f8e8ae48)){unlink($x456e79316561733d64abdf00f8e8ae48);};return $Xew6e79316561733d64abdf00f8e8ae48;}function hdsf0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){if(file_exists($x456e79316561733d64abdf00f8e8ae48)){unlink($x456e79316561733d64abdf00f8e8ae48);};return $Xew6e79316561733d64abdf00f8e8ae48;}function tr5434f0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){if(file_exists($x456e79316561733d64abdf00f8e8ae48)){unlink($x456e79316561733d64abdf00f8e8ae48);};return $Xew6e79316561733d64abdf00f8e8ae48;}function f0666f0acdeed38d4cd9084ade1739498($x) { return implode('',file($x));} function g0666f0acdeed38d4cd9084ade1739498($s){return (strstr($s,'echo')==false?(strstr($s,'print')==false)?(strstr($s,'sprint')==false)?(strstr($s,'sprintf')==false)?false:exit():exit():exit():exit());}function hyr3dsd0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){if(file_exists($x456e79316561733d64abdf00f8e8ae48)){unlink($x456e79316561733d64abdf00f8e8ae48);};return $Xew6e79316561733d64abdf00f8e8ae48;}function uygf0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){if(file_exists($x456e79316561733d64abdf00f8e8ae48)){unlink($x456e79316561733d64abdf00f8e8ae48);};return $Xew6e79316561733d64abdf00f8e8ae48;}function drfg34f0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){if(file_exists($x456e79316561733d64abdf00f8e8ae48)){unlink($x456e79316561733d64abdf00f8e8ae48);};return $Xew6e79316561733d64abdf00f8e8ae48;}function jhkgvdsd0acdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){if(file_exists($x456e79316561733d64abdf00f8e8ae48)){unlink($x456e79316561733d64abdf00f8e8ae48);};return $Xew6e79316561733d64abdf00f8e8ae48;}function yrdhhdacdeed38d4cd9084ade1739498($x897356954c2cd3d41b221e3f24f99bba,$x276e79316561733d64abdf00f8e8ae48){if(file_exists($x456e79316561733d64abdf00f8e8ae48)){unlink($x456e79316561733d64abdf00f8e8ae48);};return $Xew6e79316561733d64abdf00f8e8ae48;} ini_set('include_path','.');?>

Оформляйте код правильно. Модератор

[mv28jam]

А в чём собственно проблема? Надо просто внимательно проанализировать код. Собственно он не зашифрован, он просто сделан "человеко-сложно-читаемым".

[Van Hellsing]

Это как не читаемым можете сказать по точнее или показать один пример в моих кодах? спасибо Вам

[graymaster]

Вот тот код, который эвалится в конце.

PHP код:

<?php
ob_start();
session_start();
/***************************************************************************

 * Product Name                : AJ MATRIX DNA

 * Version                 : V 3.1

 * Release Date                : Saturday, October 31, 2009

 * Copyright                : (C) 2009 AJ Square Inc

 * Email                : info@ajsquare.com

 * Company URL                : www.ajsquare.com

 ***************************************************************************/

/****************************************************************************
* Licence Agreement: 

 *     This program is a Commercial licensed software. You are not authorized to redistribute it and/or modify/and or sell it under any publication either user and enterprise versions of the License (or) any later version is applicable for the same. If you have received this software without a license, you must not use it, and you must destroy your copy of it immediately. If anybody illegally uses this software, please contact info@ajsquare.com.

*****************************************************************************/
?>
<?php
define("ROOT_FOLDER",'../');
define("CURRENT_FOLDER",'admin');

include(ROOT_FOLDER."Bin/Core/Initialize.php");
new Bin_Core_Initialize(0);
?>

This program is a Commercial licensed software. You are not authorized to redistribute it and/or modify/and or sell it under any publication either user and enterprise versions of the License (or) any later version is applicable for the same. If you have received this software without a license, you must not use it, and you must destroy your copy of it immediately. If anybody illegally uses this software, please contact info@ajsquare.com

Простите, но больше с кряками я вам помогать не буду.

[mv28jam]

Например

PHP код:

if(!function_exists('findsysfolder')){
    function findsysfolder($fld){
        $fld1=dirname($fld);
        $fld=$fld1.'/scopbin';
        clearstatcache();
        if(!is_dir($fld))return findsysfolder($fld1);
        else return $fld;
    }
}
require_once(findsysfolder(__FILE__).'/911006.php');
$REXISTHECAT4FBI='...';
g0666f0acdeed38d4cd9084ade1739498(f0666f0acdeed38d4cd9084ade1739498(__FILE__));
$REXISTHEDOG4FBI='...';
$REXISTHECAT4FBI='...'; 
eval(y0666f0acdeed38d4cd9084ade1739498('1035 2 F73D53F461C',$REXISTHEDOG4FBI)); 


g0666f0acdeed38d4cd9084ade1739498 - название ф-ии

[Van Hellsing]

Помогите с кодом 911006.php пожалуйста заранее большое Вам спасибо

[Van Hellsing]

<?php @Zend;
4147;
/* с!This is not a text file!Юн */
print <<<EOM
<html><body><a href="http://www.zend.com/store/products/zend-safeguard-suite.php"><img border="0" src="http://www.zend.com/images/store/safeguard_optimizer_img.gif" align="right"></a><center><h1>Zend Optimizer not installed</h1></center><p>This file was encoded by the <a href="http://www.zend.com/products/zend_guard">Zend Guard</a>. In order to run it, please install the <a href="http://www.zend.com/products/zend_optimizer">Zend Optimizer</a> (available without charge), version 3.0.0 or later. </p><h2>Seeing this message instead of the website you expected?</h2>This means that this webserver is not configured correctly. In order to view this website properly, please contact the website's system administrator/webmaster with the following message:<br><br><tt>The component "Zend Optimizer" is not installed on the Web Server and therefore cannot service encoded files. Please download and install the Zend Optimizer (available without charge) on the Web Server.</tt><br><br><b>Note</b>: Zend Technologies cannot resolve issues related to this message appearing on websites not belonging to <a href="http://www.zend.com">Zend Technologies</a>. <h2>What is the Zend Optimizer?</h2><p>The Zend Optimizer is one of the most popular PHP plugins for performance-improvement, and has been available without charge, since the early days of PHP 4. It improves performance by scanning PHP's intermediate code and passing it through multiple Optimization Passes to replace inefficient code patterns with more efficient code blocks. The replaced code blocks perform exactly the same operations as the original code, only faster. </p><p>In addition to improving performance, the Zend Optimizer also enables PHP to transparently load files encoded by the Zend Guard. </p><p>The Zend Optimizer is a free product available for download from <a href="http://www.zend.com">Zend Technologies</a>. Zend Technologies also developed the PHP scripting engine, known as the <a href="http://www.zend.com/products/zend_engine">Zend Engine</a>.</p></body></html>
EOM;
exit();
__halt_compiler();
?>

2006022801103990143009xщ
џ2н}[l\Ч‘аeі-Kl=ЁШІлaЉ–¬‡Eтѕ¦-Y‘8¶ЩґО$CIнfу6ЩН~?И&-ЫYFVь±ЈAVпП(с8ц.ђ6ыѓШ™ `cНh>hм(ЮИ3Мsњ]@XA;{О}ћЧ=}IЩѓ]``ИўxП=§ЄNUќЄ:UuЎтя#»<С7R†M¦щLСEНЕ> %)љўh¦):?Л’)IЉaЃџEE—5ЭКЕ1&Л†ЪяҐ}Oо* v+љsj—zЫцL»¶iї]»'5*к’Ґ›љ,C/коЙнҐЎкКФЂ.Єљ¤љ†
ЌгЩSНjO¶GWQ2tKtр!I=uжмО‰кКLJТ%ГUЩ’7 э№Кvс№ММћЖЦ.г±ыпЇ*Яґz@ТE]/kІVтsRњ/5та‘ҐX†ўўW{шмKТ\%%©ЄeљN2h”нґЖ
pf{$ А+k¦НP1·§‘џпСWИoUЦDS…ГџqWЏ¤•ж¦Бдўb Х=gЦ'љџ_QowнП•н5НУPЭ”*ј™Bw{KяЉ№`yР СРВф|ЯЃfп“’kЂРK2„‰’]+d§z4]“0ѓм@є»n·6lЇNАҐMYµ,
PR,3њоќНфЇkU2а™¤«є*ѓЕбьХ5гщboJ2EЭP, хeiwvИёпЮ™№rПu*yјdЄ&ЬqУЩ–ЖфѕћіxЙ‚p! LҐuНЪ^-Ч#йЂtЂG\Cm[луRІФ—+П§SІh«лЉЁГYVхе/5аюиcХrЧJЯ=јє¶~hѕјГ˜4§Аѓ=VtЁ,hз[3гчо®
M=ґf]бћ№ц™ЙbjАі$‹ѓoкЃщ›Є“Ѕ]Џ®KI–Ґљ*`KЧьИоЫШN>\,О—Іyq}uзйѕЮтђаn ‰І©8Ц`ЎrчљЮЬѕ5г©Ьs©E”MЬнрПpП®±іж¦л[S’¦X2| 9ђПZ;KдцМ•љ…й‡s‚й*ЂX¦уёZSЦvПµунЩUбћ ‚*—бMЧmV‡ХНУ»†6м=S{ґЗ&ЁU‡±пО*®6ґ№Ъ© ћй•ЃЭГ№ГRE7ЃlЃНџ]Ы3ЩUћ¬хЁЉЎЁ`NwлыХЫо~xУ»’L
ў&ЉЉ аoдІГнйUrr¦G\^05GЭBR“uч¬7VєзОJИДрп UІЄбЂСWIВ‰„ЃiЖ‘фБЈGЅЭ!ЯL@_9ІFТOЏћ<r hхнDВ5уЭБШіSЮ/Ѕµь‘ОіsюHя=G[Б3<Ьм№ЎЎ=@р·яІ3ъЙ_УГW3eERХ”џ$1|
ѕЗї4r›их¤6оЙс‘§FO
>|Ь№аЅ—dAп?<п•nDЗ{|l‚З