I have long heard that there is a PHP virus, I have never seen the code, I have finally seen it today.
I don't share the code for security considerations.
Probably looked at the bottom code, very short, all written with PHP file operation function, detailed situation, wait until I take a closer look at the code.