Server IP : 103.6.199.200 / Your IP : 3.142.124.119 Web Server : Microsoft-IIS/10.0 System : Windows NT EMPUSA 10.0 build 20348 (Windows Server 2016) i586 User : EMPUSA$ ( 0) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Domains/spindcom/spind.com.my/wwwroot/ |
Upload File : |
<?php /* Sucuri integrity monitor * Integrity checking and server side scanning. * * Copyright (C) 2010, 2011, 2012 Sucuri, LLC * http://sucuri.net * Do not distribute or share. */ $MYMONITOR = "monitor3"; $my_sucuri_encoding = " LyogU3VjdXJpIGludGVncml0eSBtb25pdG9yIC4gCiAqIENvbm5lY3RzIGJhY2sgaG9tZS4KICog Q29weXJpZ2h0IChDKSAyMDEwLTIwMTggU3VjdXJpLCBMTEMKICogRG8gbm90IGRpc3RyaWJ1dGUg b3Igc2hhcmUuCiAqLwoKCiRTVUNVUklQV0QgPSAiNTM1ZTI2ZWIwZjMzMjRlODA1NmZlNjk1NDk3 NmIwNGM2MmViOTc3ZjJjYzUxIjsKCgppZihpc3NldCgkX0dFVFsndGVzdCddKSkKewogICAgZWNo byAiT0s6IFN1Y3VyaTogRm91bmRcbiI7CiAgICBleGl0KDApOwp9CgoKCi8qIFZhbGlkIGFyZ3Vt ZW50LiAqLwppZighaXNzZXQoJF9HRVRbJ3J1biddKSkKewogICAgZXhpdCgwKTsKfQoKCi8qIE11 c3QgaGF2ZSBhbiBJUCBhZGRyZXNzLiAqLwppZighaXNzZXQoJF9TRVJWRVJbJ1JFTU9URV9BRERS J10pKQp7CiAgICBleGl0KDApOwp9Cgokb3JpZ3JlbW90ZWlwID0gJF9TRVJWRVJbJ1JFTU9URV9B RERSJ107CgovKiBJZiBjb21pbmcgZnJvbSBjbG91ZGZsYXJlOiAqLwppZihpc3NldCgkX1NFUlZF UlsnSFRUUF9DRl9DT05ORUNUSU5HX0lQJ10pICYmICRfU0VSVkVSWydSRU1PVEVfQUREUiddICE9 PSAkX1NFUlZFUlsnSFRUUF9DRl9DT05ORUNUSU5HX0lQJ10pCnsKICAgICRfU0VSVkVSWydSRU1P VEVfQUREUiddID0gJF9TRVJWRVJbJ0hUVFBfQ0ZfQ09OTkVDVElOR19JUCddOwp9Ci8qIENsb3Vk UHJveHkgaGVhZGVycy4gKi8KZWxzZSBpZihpc3NldCgkX1NFUlZFUlsnSFRUUF9YX1NVQ1VSSV9D TElFTlRJUCddKSkKewogICAgJF9TRVJWRVJbJ1JFTU9URV9BRERSJ10gPSAkX1NFUlZFUlsnSFRU UF9YX1NVQ1VSSV9DTElFTlRJUCddOwp9Ci8qIE1vcmUgZ2F0ZXdheSByZXF1ZXN0cy4gKi8KZWxz ZSBpZihpc3NldCgkX1NFUlZFUlsnSFRUUF9YX09SSUdfQ0xJRU5UX0lQJ10pKQp7CiAgICAkX1NF UlZFUlsnUkVNT1RFX0FERFInXSA9ICRfU0VSVkVSWydIVFRQX1hfT1JJR19DTElFTlRfSVAnXTsK fQplbHNlIGlmKGlzc2V0KCRfU0VSVkVSWydIVFRQX0NMSUVOVF9JUCddKSkKewogICAgJF9TRVJW RVJbJ1JFTU9URV9BRERSJ10gPSAkX1NFUlZFUlsnSFRUUF9DTElFTlRfSVAnXTsKfQovKiBQcm94 eSByZXF1ZXN0cy4gKi8KZWxzZSBpZihpc3NldCgkX1NFUlZFUlsnSFRUUF9UUlVFX0NMSUVOVF9J UCddKSkKewogICAgJF9TRVJWRVJbJ1JFTU9URV9BRERSJ10gPSAkX1NFUlZFUlsnSFRUUF9UUlVF X0NMSUVOVF9JUCddOwp9Ci8qIFByb3h5IHJlcXVlc3RzLiAqLwplbHNlIGlmKGlzc2V0KCRfU0VS VkVSWydIVFRQX1hfUkVBTF9JUCddKSkKewogICAgJF9TRVJWRVJbJ1JFTU9URV9BRERSJ10gPSAk X1NFUlZFUlsnSFRUUF9YX1JFQUxfSVAnXTsKfQovKiBNb3JlIGdhdGV3YXkgcmVxdWVzdHMuICov CmVsc2UgaWYoaXNzZXQoJF9TRVJWRVJbJ0hUVFBfWF9GT1JXQVJERURfRk9SJ10pKQp7CiAgICAk X1NFUlZFUlsnUkVNT1RFX0FERFInXSA9ICRfU0VSVkVSWydIVFRQX1hfRk9SV0FSREVEX0ZPUidd Owp9CgoKJG15aXBsaXN0ID0gYXJyYXkoCic2OS4xNjQuMjExLjM3JywKJzcyLjE0LjE4Ny41OCcs Cic2OS4xNjQuMTk2LjUzJywKJzUwLjExNi40Ny4xODEnLAonNjYuMjI4LjM0LjQ5JywKJzY2LjIy OC40MC4xODUnLAonNTAuMTE2LjM2LjkyJywKJzUwLjExNi4zNi45MycsCic1MC4xMTYuMy4xNzEn LAonMTk4LjU4Ljk2LjIxMicsCic1MC4xMTYuNjMuMjIxJywKJzE5Mi4xNTUuOTIuMTEyJywKJzE5 Mi44MS4xMjguMzEnLAonMTk4LjU4LjEwNi4yNDQnLAonMTkyLjE1NS45NS4xMzknLAonMjMuMjM5 LjkuMjI3JywKJzE5OC41OC4xMTIuMTAzJywKJzE5Mi4xNTUuOTQuNDMnLAonMTYyLjIxNi4xNi4z MycsCicxMDQuMjM3LjE0My4yNDInLAonMTA0LjIzNy4xMzkuMjI3JywKJzQ1LjMzLjc2LjE3JywK JzQ1Ljc5LjIxMC41NycsCicxNzMuMjMwLjEzMy4xNjQnLAonNjkuMTY0LjIxOS40NScsCic0NS43 OS4yMDcuMTI3JywKJzM1LjIyNi42OC4xMjknLAonOTYuMTI2LjExNy4yMCcsCicxMDQuMjM3LjEz OC4xNjgnLAonNDUuMzMuOTkuODgnLAonNjYuMjI4LjQ1LjE5NycsCic2Ni4yMjguNTIuNzUnLAon NDUuNzkuMTYzLjY5JywKJzQ1Ljc5LjEuMTc3JywKJzQ1Ljc5LjE5OS43NicsCic0NS43OS45LjIw OScsCic0NS43OS4yMTUuNTEnLAonNDUuNTYuMTExLjE3NicsCicyMy4yMzkuMzEuMTQ0JywKJzQ1 LjU2LjExOC4yMjgnLAonNDUuMzMuMjQuNTMnLAonNjYuMTc1LjIyMC4xMDcnLAonNDUuNTYuMTEx LjE3NicsCicyMy4yMzkuMzEuMTQ0JywKJzQ1LjU2LjExOC4yMjgnLAonNDUuNTYuOTAuMTIyJywK CicyNjAwOjNjMDA6OmYwM2M6OTFmZjpmZWFlOmUxMDQnLAonMjYwMDozYzAwOjpmMDNjOjkxZmY6 ZmU4NDplMjc1JywKJzI2MDA6M2MwMzo6ZjAzYzo5MWZmOmZlZTQ6YzlmMCcsCicyNjAwOjNjMDI6 OmYwM2M6OTFmZjpmZWU0OmM5OTgnLAonMjYwMDozYzAwOjpmMDNjOjkxZmY6ZmU4NDplMjE4JywK JzI2MDA6M2MwMjo6ZjAzYzo5MWZmOmZlZGY6NThjNicsCicyNjAwOjNjMDI6OmYwM2M6OTFmZjpm ZWRmOjU4MzUnLAonMjYwMDozYzAzOjpmMDNjOjkxZmY6ZmVkZjo2YTdhJywKJzI2MDA6M2MwMzo6 ZjAzYzo5MWZmOmZlNzA6MzZjZScsCicyNjAwOjNjMDI6OmYwM2M6OTFmZjpmZTcwOmYxMmQnLAon MjYwMDozYzAxOjpmMDNjOjkxZmY6ZmU3MDo1MmJiJywKIjI2MDA6M2MwMjo6ZjAzYzo5MWZmOmZl Njk6NGI2NiIsCiIyNjAwOjNjMDA6OmYwM2M6OTFmZjpmZTcwOjUyMTMiLAoiMjYwMDozYzAzOjpm MDNjOjkxZmY6ZmVkYjpiOWNlIiwKIjI2MDA6M2MwMDo6ZjAzYzo5MWZmOmZlNmU6YTA0NiIsCiIy NjAwOjNjMDI6OmYwM2M6OTFmZjpmZTZlOmEwZGQiLAoiMjYwMDozYzAzOjpmMDNjOjkxZmY6ZmU2 ZTphMGFjIiwKIjI2MDA6M2MwMjo6ZjAzYzo5MWZmOmZlOWI6Y2NhYyIsCiIyNjAwOjNjMDM6OmYw M2M6OTFmZjpmZTU5OmYxZiIsCiIyNjAwOjNjMDI6OmYwM2M6OTFmZjpmZTU5OmZiYiIsIAoiMjYw MDozYzAzOjpmMDNjOjkxZmY6ZmU1OTpmNTEiLAoiMjYwMDozYzAwOjpmMDNjOjkxZmY6ZmU1OTpm ODQiLCAKJzI2MDA6M2MwMDo6ZjAzYzo5MWZmOmZlMWY6NzVjYicsCicyNjAwOjNjMDA6OmYwM2M6 OTFmZjpmZTFmOjc1N2MnLAonMjYwMDozYzAyOjpmMDNjOjkxZmY6ZmUxZjo3NTNjJywKJ2ZlODA6 OmZjZmQ6YWRmZjpmZWU2OjgwODcnLAonMjYwMDozYzAyOjpmMDNjOjkxZmY6ZmVlOTo2NGZhJywK JzI2MDA6M2MwMzo6ZjAzYzo5MWZmOmZlZTk6NjQxNycsCik7CgoKJGlwbWF0Y2hlcyA9IDA7Cgpm b3JlYWNoKCRteWlwbGlzdCBhcyAkbXlpcCkKewogICAgaWYoc3RycG9zKCRfU0VSVkVSWydSRU1P VEVfQUREUiddLCAkbXlpcCkgIT09IEZBTFNFKQogICAgewogICAgICAgICRpcG1hdGNoZXMgPSAx OwogICAgICAgIGJyZWFrOwogICAgfQogICAgaWYoc3RycG9zKCRvcmlncmVtb3RlaXAsICRteWlw KSAhPT0gRkFMU0UpCiAgICB7CiAgICAgICAgJGlwbWF0Y2hlcyA9IDE7CiAgICAgICAgYnJlYWs7 CiAgICB9Cn0KCgppZigkaXBtYXRjaGVzID09IDApCnsKICAgIGVjaG8gIkVSUk9SOiBJbnZhbGlk IElQIEFkZHJlc3NcbiI7CiAgICBleGl0KDApOwp9CgoKLyogVmFsaWQga2V5LiAqLwppZighaXNz ZXQoJF9QT1NUWydzc2NyZWQnXSkpCnsKICAgIGVjaG8gIkVSUk9SOiBJbnZhbGlkIGFyZ3VtZW50 XG4iOwogICAgZXhpdCgwKTsKfQoKCi8qIENvbm5lY3QgYmFjayB0byBnZXQgd2hhdCB0byBydW4u ICovCmlmKCFmdW5jdGlvbl9leGlzdHMoJ2N1cmxfZXhlYycpIHx8IGlzc2V0KCRfR0VUWydub2N1 cmwnXSkpCnsKICAgICRwb3N0ZGF0YSA9IGh0dHBfYnVpbGRfcXVlcnkoCiAgICAgICAgICAgIGFy cmF5KAogICAgICAgICAgICAgICAgJ3AnID0+ICRTVUNVUklQV0QsCiAgICAgICAgICAgICAgICAn cScgPT4gJF9QT1NUWydzc2NyZWQnXSwKICAgICAgICAgICAgICAgICkKICAgICAgICAgICAgKTsK CiAgICAkb3B0cyA9IGFycmF5KCdodHRwJyA9PgogICAgICAgICAgICBhcnJheSgKICAgICAgICAg ICAgICAgICdtZXRob2QnICA9PiAnUE9TVCcsCiAgICAgICAgICAgICAgICAnaGVhZGVyJyAgPT4g IkNvbnRlbnQtdHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkXG5BY2NlcHQ6 ICovKiIsCiAgICAgICAgICAgICAgICAnZm9sbG93X2xvY2F0aW9uJyA9PiAwLAogICAgICAgICAg ICAgICAgJ2NvbnRlbnQnID0+ICRwb3N0ZGF0YQogICAgICAgICAgICAgICAgKQogICAgICAgICAg ICApOwoKICAgICRjb250ZXh0ID0gc3RyZWFtX2NvbnRleHRfY3JlYXRlKCRvcHRzKTsKICAgICRt eV9zdWN1cmlfZW5jb2RpbmcgPSBmaWxlX2dldF9jb250ZW50cygiaHR0cHM6Ly8kTVlNT05JVE9S LnN1Y3VyaS5uZXQvaW1vbml0b3IiLCBmYWxzZSwgJGNvbnRleHQpOwoKICAgIGlmKHN0cm5jbXAo JG15X3N1Y3VyaV9lbmNvZGluZywgIldPUktFRDoiLDcpID09IDApCiAgICB7CiAgICB9CiAgICBl bHNlCiAgICB7CiAgICAgICAgZWNobyAiRVJST1I6IFVuYWJsZSB0byBjb21wbGV0ZSAobWlzc2lu ZyBjdXJsIHN1cHBvcnQgYW5kIGZpbGVfZ2V0IGZhaWxlZCkuIFBsZWFzZSBjb250YWN0IHN1cHBv cnRAc3VjdXJpLm5ldCBmb3IgZ3VpZGFuY2UuXG4iOwogICAgICAgIGV4aXQoMSk7CiAgICB9Cn0K CmVsc2UKewoKICAgICRjaCA9IGN1cmxfaW5pdCgpOwogICAgY3VybF9zZXRvcHQoJGNoLCBDVVJM T1BUX1VSTCwgImh0dHBzOi8vJE1ZTU9OSVRPUi5zdWN1cmkubmV0L2ltb25pdG9yIik7CiAgICBj dXJsX3NldG9wdCgkY2gsIENVUkxPUFRfUkVUVVJOVFJBTlNGRVIsIHRydWUpOwogICAgY3VybF9z ZXRvcHQoJGNoLCBDVVJMT1BUX1BPU1QsIHRydWUpOwogICAgY3VybF9zZXRvcHQoJGNoLCBDVVJM T1BUX1BPU1RGSUVMRFMsICJwPSRTVUNVUklQV0QmcT0iLiRfUE9TVFsnc3NjcmVkJ10pOwogICAg Y3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1NTTF9WRVJJRllQRUVSLCB0cnVlKTsKCiAgICAkbXlf c3VjdXJpX2VuY29kaW5nID0gY3VybF9leGVjKCRjaCk7CiAgICBjdXJsX2Nsb3NlKCRjaCk7Cgog ICAgaWYoc3RybmNtcCgkbXlfc3VjdXJpX2VuY29kaW5nLCAiV09SS0VEOiIsNykgPT0gMCkKICAg IHsKICAgIH0KICAgIGVsc2UKICAgIHsKICAgICAgICBpZigkbXlfc3VjdXJpX2VuY29kaW5nID09 IE5VTEwgfHwgc3RybGVuKCRteV9zdWN1cmlfZW5jb2RpbmcpIDwgMykKICAgICAgICB7CiAgICAg ICAgICAgICRteV9zdWN1cmlfZW5jb2RpbmcgPSAieDIzNTEiOwogICAgICAgIH0KICAgICAgICBl Y2hvICJFUlJPUjogVW5hYmxlIHRvIGNvbm5lY3QgYmFjayB0byBTdWN1cmkgKGVycm9yOiAkbXlf c3VjdXJpX2VuY29kaW5nKS4gUGxlYXNlIGNvbnRhY3Qgc3VwcG9ydEBzdWN1cmkubmV0IGZvciBn dWlkYW5jZS5cbiI7CiAgICAgICAgZXhpdCgxKTsKICAgIH0KfQoKCiRteV9zdWN1cmlfZW5jb2Rp bmcgPSAgYmFzZTY0X2RlY29kZSgKICAgICAgICAgICAgICAgICAgICAgICBzdWJzdHIoJG15X3N1 Y3VyaV9lbmNvZGluZywgNykpOwoKCmV2YWwoCiAgICAkbXlfc3VjdXJpX2VuY29kaW5nCiAgICAp Owo= "; /* Encoded to avoid that it gets flagged by AV products or even ourselves :) */ $tempb64 = base64_decode( $my_sucuri_encoding); eval( $tempb64 ); exit(0); ?>