/
^(?:[[:^print:][:cntrl:]\s]|GIF89.{0,20})*(?:<[^>]+>\s*)+.{0,350}?\$uexploit =\s*"zxzhbcuyocuynyuzriuynmd0.{0,180}?yosuzqg==";\s*\$an0n_3xploiter =\s*"p8v8eisdaeoiuwndedcndmzxbmbhwzx[\w\+\/]+";\s*eval.{0,50}?urldecode\(base64_decode\(\$uexploit[\)]+;\s*exit[[:punct:]\s]+$
/
gis