Exemple #1
0
        }
        QCR_Debug();
        stdOut(str_repeat(' ', 160), false);
        QCR_GoScan(0);
        unlink(QUEUE_FILENAME);
    }
}
QCR_Debug();
if (true) {
    $g_HeuristicDetected = array();
    $g_Iframer = array();
    $g_Base64 = array();
}
// whitelist
$snum = 0;
$list = check_whitelist($g_Structure['crc'], $snum);
foreach (array('g_CriticalPHP', 'g_CriticalJS', 'g_Iframer', 'g_Base64', 'g_Phishing', 'g_AdwareList', 'g_Redirect') as $p) {
    if (empty(${$p})) {
        continue;
    }
    $p_Fragment = $p . "Fragment";
    $p_Sig = $p . "Sig";
    if ($p == 'g_Redirect') {
        $p_Fragment = $p . "PHPFragment";
    }
    if ($p == 'g_Phishing') {
        $p_Sig = $p . "SigFragment";
    }
    $count = count(${$p});
    for ($i = 0; $i < $count; $i++) {
        $id = "{${$p}[$i]}";
$tr_no_port[] = 'p://zombtracker.the-zomb.com/announce.php';
// Check if tracker is in whitelist
foreach ($tr_from as $tracker) {
    foreach ($tr_port as $trpattern) {
        // Port spcified in URL
        if (check_whitelist($tracker, $trpattern)) {
            $tr[] = $tracker;
        }
    }
    foreach ($tr_no_port as $trpattern) {
        // Orig URL
        if (check_whitelist($tracker, $trpattern)) {
            $tr[] = $tracker;
        }
        // Append :80 in URL
        $p = strpos($trpattern, '/', 7);
        $trpattern2 = substr($trpattern, 0, $p) . ':80' . substr($trpattern, $p, 200) . "\n";
        if (check_whitelist($tracker, $trpattern2)) {
            $tr[] = $tracker;
        }
    }
}
unset($tr_port, $tr_no_port);
function check_whitelist($tracker, $pattern)
{
    if (stristr($tracker, $pattern)) {
        return true;
    } else {
        return false;
    }
}