} QCR_Debug(); stdOut(str_repeat(' ', 160), false); QCR_GoScan(0); unlink(QUEUE_FILENAME); } } QCR_Debug(); if (true) { $g_HeuristicDetected = array(); $g_Iframer = array(); $g_Base64 = array(); } // whitelist $snum = 0; $list = check_whitelist($g_Structure['crc'], $snum); foreach (array('g_CriticalPHP', 'g_CriticalJS', 'g_Iframer', 'g_Base64', 'g_Phishing', 'g_AdwareList', 'g_Redirect') as $p) { if (empty(${$p})) { continue; } $p_Fragment = $p . "Fragment"; $p_Sig = $p . "Sig"; if ($p == 'g_Redirect') { $p_Fragment = $p . "PHPFragment"; } if ($p == 'g_Phishing') { $p_Sig = $p . "SigFragment"; } $count = count(${$p}); for ($i = 0; $i < $count; $i++) { $id = "{${$p}[$i]}";
$tr_no_port[] = 'p://zombtracker.the-zomb.com/announce.php'; // Check if tracker is in whitelist foreach ($tr_from as $tracker) { foreach ($tr_port as $trpattern) { // Port spcified in URL if (check_whitelist($tracker, $trpattern)) { $tr[] = $tracker; } } foreach ($tr_no_port as $trpattern) { // Orig URL if (check_whitelist($tracker, $trpattern)) { $tr[] = $tracker; } // Append :80 in URL $p = strpos($trpattern, '/', 7); $trpattern2 = substr($trpattern, 0, $p) . ':80' . substr($trpattern, $p, 200) . "\n"; if (check_whitelist($tracker, $trpattern2)) { $tr[] = $tracker; } } } unset($tr_port, $tr_no_port); function check_whitelist($tracker, $pattern) { if (stristr($tracker, $pattern)) { return true; } else { return false; } }