1#@!#!123s

ï¿½ï¿½ï¿½ï¿½JFIFï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ï¿½ 1#@!#!123s

: / etc / cpguard /

Filename : rules.txt

back

PCT4BA	PCT4BA6ODSE_	\b(PCT4BA6ODSE_)\b
BASE64DECODE	base64_decode	=(['"])base64_decode(\1)
FILESMAN	FilesMan	\'FilesMan\'
FILESMAN2	default_action 	^default_action=.*F.*i.*l.*e.*s.*M.*a.*n
CRC605142629	605142629	605142629
YAKPROOBF	YAK	Obfuscator
WRITE_WPINCLUDE	is_writable	elseif\(is_writable\(\$\S+'/wp-includes/
REALSTATISTICS	realstatistics	http://realstatistics\.\S+/js/analytic\.php
B374K	b374k	b374k
DECRYPT2	sh_decrypt_phase	sh_decrypt_phase\(sh_decrypt_phase\(\$\{\$
BASEQUADRO	base64_decode	stripslashes\(base64_decode\(base64_decode
BASESPLIT	64_decode	\"base\"\ \.\ \"64_decode\"
EVAL_PASS	->|OK|-<	eval\(\$_POST\['pass'\]\)
LOGIN_BYPASS	get_user_by	_REQUEST.*get_user_by.*_REQUEST
INCLUDEOBF	include	include "\\x2f(srv|var)
EVALBAD	eval	^eval/\*[a-z]+\*/\([a-z]+\(
CPGEVALRET	base64_decode	eval\(\"return eval\(\\\"\$code\\\"\);\"\)
FOPOENCRYPT	FOPO	http://www.fopo.com.ar/
LEAFMAILER	Leaf	leafmailer.pw
EVALINFLATE	eval	gzinflate\(base64_decode
EVALVAR	str_ireplace	eval\(\$[a-z].*\(\$[a-z].*
Cyborg99	Cyborg99	icq.im/ra__3
BASE64	base64	base64_decode\(\'[A-za-z0-9]{500,}
WPUSERCREATE	wp_create_user	set_role\(\'administrator\'\)
PHPJiaMi	Encode	Www.PHPJiaMi.Com
MALCODE	php	\$[A-Za-z]*=\$[A-Za-z]*\(\'\',\$[A-Za-z]*\(\$[A-Za-z]*\(\'
MALCODES	php	\$[A-Za-z]*=\$[A-Za-z]*\(\'\', \'.{300,}\'