Infected files from shops on the gwillem list

This is a short list with infected files from domains on the list of compromised online-shop of @gwillem.

**hacked-stores-in-last-48hrs.txt***
https://gist.github.com/gwillem/e7c77b77d508928ad67860970c366cae

If you have to deal with this it maybe helps you to find infected files.

./html/devsys/adminerc2q.php
./html/devsys/media/dhl/info.php
./html/livesys/media/dhl/info.php
./html/livesys/skin/skin.php
./html/magento/media/dhl/info.php
./html/wp-includes/shortcodes.php
 /html/wp-includes/locale.php
./html/wp-includes/SimplePie/Cache/Base.php
./html/wp-content/themes/customizr/comments.php
./html/wp-content/themes/virtue/woocommerce/single-product/price.php
./html/wp-content/themes/virtue/7567567567.php
./html/wp-content/themes/virtue/page-blog.php
./html/wp-content/themes/virtue/404.php
./html/wp-content/themes/catch-kathmandu/sidebar-header-top.php
./html/includes/.src/Mage/Archive/css.php
./html/includes/.src/Mage/Centinel/dump.php
./html/includes/.src/Mage/PaypalUk/defines.php
./html/includes/.src/Magpleasure/Filesystem/db.php
./html/includes/.src/Varien/Pear/info.php
./html/includes/.src/Zend/Gdata/diff.php
./html/includes/.src/Zend/Http/sql.php
./html/includes/.src/Zend/Measure/db.php
./html/includes/.src/Zend/Paginator/sql.php
./html/lib/Zend/Controller/include.php
./html/lib/Zend/Currency/css.php
./html/lib/Zend/OpenId/Extension/template.php
./html/skin/frontend/{customfolder}/header.php
./html/var/package/tmp/article.php
./html/{customfolder}/media/dhl/info.php
./html/{customfolder}/skin/omo.php
./html/{customfolder}/skin/skins2.php
./html/magento/skin/Signedint.php
./html/magento/skin/install/default/install.php
./html/magento/skin/test.php
./html/magento/var/package/pack.php
./html/piwik/tmp/cache/tracker/PluginTranslations-de-4c5c90167f7f8091f2885497b017f3d6.php
./html/app/code/community/VladimirPopov/WebForms/Block/Adminhtml/Webforms.php
./html/app/code/community/VladimirPopov/WebForms/Block/Adminhtml/Webforms/Edit.php
./html/app/code/community/VladimirPopov/WebForms/Block/Webforms.php
./html/app/code/community/VladimirPopov/WebForms/controllers/Adminhtml/FieldsController.php
./html/app/code/community/VladimirPopov/WebForms/controllers/Adminhtml/WebformsController.php
./html/includes/src/VladimirPopov/WebForms/controllers/Adminhtml/FieldsController.php
./html/includes/src/VladimirPopov/WebForms/controllers/Adminhtml/WebformsController.php
./html/includes/src/VladimirPopov_WebForms_Block_Adminhtml_Webforms.php
./html/includes/src/VladimirPopov_WebForms_Block_Adminhtml_Webforms_Edit.php
./html/includes/src/VladimirPopov_WebForms_Block_Webforms.php
./html/media/dhl/info.php
./html/skin/error.php
./html/skin/ren1.php
./html/typo3/db2.php
./html/typo3/index.php
./html/typo3/sitemap.php
./html/typo3/skin/frontend/enterprise/default/cmspro/css/syntaxhighlighter/old_LibBackend.phpx