Script to find the possible malware files

 <?php

error_reporting(E_ALL);

ini_set('display_errors', 1);

/**

 * Malware pattern scanner (grep alternative)

 * DELETE this file after use

 */

$scanDir = __DIR__;

$patterns = [

    'eval(',

    'base64_decode',

    'gzinflate',

    'str_rot13',

    'shell_exec',

    'passthru',

    'system(',

    'exec(',

];

echo "<pre>";

echo "🔍 Scanning: $scanDir\n\n";

$rii = new RecursiveIteratorIterator(

    new RecursiveDirectoryIterator($scanDir, FilesystemIterator::SKIP_DOTS)

);

foreach ($rii as $file) {

    if ($file->isFile() && preg_match('/\.php$/i', $file->getFilename())) {

        $content = @file_get_contents($file->getPathname());

        if ($content === false) continue;

        foreach ($patterns as $pattern) {

            if (stripos($content, $pattern) !== false) {

                echo "⚠️ Possible malware: " . $file->getPathname() . " → [$pattern]\n";

                break;

            }

        }

    }

}

echo "\n✔ Scan completed\n";

echo "</pre>";