PCT4BA PCT4BA6ODSE_ \b(PCT4BA6ODSE_)\b BASE64DECODE base64_decode =(['"])base64_decode(\1) FILESMAN FilesMan \'FilesMan\' FILESMAN2 default_action ^default_action=.*F.*i.*l.*e.*s.*M.*a.*n CRC605142629 605142629 605142629 YAKPROOBF YAK Obfuscator WRITE_WPINCLUDE is_writable elseif\(is_writable\(\$\S+'/wp-includes/ REALSTATISTICS realstatistics http://realstatistics\.\S+/js/analytic\.php B374K b374k b374k DECRYPT2 sh_decrypt_phase sh_decrypt_phase\(sh_decrypt_phase\(\$\{\$ BASEQUADRO base64_decode stripslashes\(base64_decode\(base64_decode BASESPLIT 64_decode \"base\"\ \.\ \"64_decode\" EVAL_PASS ->|OK|-< eval\(\$_POST\['pass'\]\) LOGIN_BYPASS get_user_by _REQUEST.*get_user_by.*_REQUEST INCLUDEOBF include include "\\x2f(srv|var) EVALBAD eval ^eval/\*[a-z]+\*/\([a-z]+\( CPGEVALRET base64_decode eval\(\"return eval\(\\\"\$code\\\"\);\"\) FOPOENCRYPT FOPO http://www.fopo.com.ar/ LEAFMAILER Leaf leafmailer.pw EVALINFLATE eval gzinflate\(base64_decode EVALVAR str_ireplace eval\(\$[a-z].*\(\$[a-z].* Cyborg99 Cyborg99 icq.im/ra__3 BASE64 base64 base64_decode\(\'[A-za-z0-9]{500,} WPUSERCREATE wp_create_user set_role\(\'administrator\'\) PHPJiaMi Encode Www.PHPJiaMi.Com MALCODE php \$[A-Za-z]*=\$[A-Za-z]*\(\'\',\$[A-Za-z]*\(\$[A-Za-z]*\(\' MALCODES php \$[A-Za-z]*=\$[A-Za-z]*\(\'\', \'.{300,}\'