#!/bin/bash
echo "Recent PHP files:"
echo "Suspicious functions:"
grep -R -nE "base64_decode|eval|gzinflate|shell_exec|system|assert" /var/www 2>/dev/null
ls
find domains -maxdepth 2 -type d -print
ls
tar -czf domains-backup-$(date +%Y%m%d-%H%M).tar.gz domains