I did check the footer.php file and it reads:
<?php $_F=__FILE__;$_X=’Pz4gIDxkNHYgNGQ9ImNsMnM1Ij4NCjwvZDR2PiANCjwvZDR2PjwhLS0vcDFnNSAtLT4NCjxkNHYgc3R5bDU9ImNsNTFyOmIydGg7Ij48L2Q0dj4NCjwhLS1mMjJ0NXIgYjFyIC0tPg0KPGQ0diA0ZD0iZjIydDVyIj4NCjxkNHYgY2wxc3M9IjFsNGdubDVmdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7RDVzNGduIEJ5IDwxIGhyNWY9Imh0dHA6Ly93d3cuZDJscGg0bnByMm0ydDQybnMuYzIuM2svczUyLXM1cnY0YzVzLjFzcCI+UzUxcmNoIEVuZzRuNSBPcHQ0bTRzMXQ0Mm48LzE+IGJ5IDwxIGhyNWY9Imh0dHA6Ly93d3cuc3QxcnRhY2wxNG0uYzJtL2Mxci0xY2M0ZDVudC1jbDE0bXMtcnQxLnBocCI+QzFyIEFjYzRkNW50IEMybXA1bnMxdDQybjwvMT4gMW5kIDwxIGhyNWY9Imh0dHA6Ly93d3cuNG1wNXI0MWwtZjNybjR0M3I1LmMyLjNrIj5PZmY0YzUgRjNybjR0M3I1PC8xPnwgPDEgaHI1Zj0iaHR0cDovL3d3dy53cjVja3IxbWJsNG4uYzJtIj5BcnQ0Y2w1czwvMT48L2Q0dj4NCjxkNHYgY2wxc3M9IjFsNGducjRnaHQiPjwxIGhyNWY9Ijw/cGhwIGJsMmc0bmYyKCdyc3NhXzNybCcpOyA/PiIgY2wxc3M9InJzcyI+RW50cjQ1cyBSU1M8LzE+IHwgIDwxIGhyNWY9Ijw/cGhwIGJsMmc0bmYyKCdjMm1tNW50c19yc3NhXzNybCcpOyA/PiIgY2wxc3M9InJzcyI+QzJtbTVudHMgUlNTPC8xPiB8IDxzcDFuIGNsMXNzPSJsMmc0bjIzdCI+PD9waHAgd3BfbDJnNG4yM3QoKTsgPz48L3NwMW4+PDEgaHI1Zj0iaHR0cDovL3d3dy50aDVtNXNwMWNrLmMybSI+VHA8LzE+IA0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L2Q0dj4NCjwvZDR2Pg0KPC9kNHY+DQo8L2Q0dj4NCiA8IS0tZjIydDVyIGIxciA1bmQgLS0+DQoNCjw/cGhwIGQyXzFjdDQybignd3BfZjIydDVyJyk7ID8+DQo8L2IyZHk+DQo8L2h0bWw+’;eval(base64_decode(‘JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw==’));?>