Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php goto qoqRw; jkFzn: yIfWI: goto fMSBw; MZ1ZS: goto OJmu7; goto nErx6; cf09M: goto fqQXC; goto GqrMt; R9m6j: p5wrE: goto Gy4nK; UCiiv: RbK00: goto Rymud; w0s4H: lorOd: goto mUYuh; VulmQ: orVDW: goto vSn2u; yXQOv: NxlCW: goto rL2xQ; QOaDl: w5Vtw: goto LkqP5; juShY: goto mKVIA; goto lkzDE; GwM1...



Obfuscated php code

<?php
 goto qoqRw; jkFzn: yIfWI: goto fMSBw; MZ1ZS: goto OJmu7; goto nErx6; cf09M: goto fqQXC; goto GqrMt; R9m6j: p5wrE: goto Gy4nK; UCiiv: RbK00: goto Rymud; w0s4H: lorOd: goto mUYuh; VulmQ: orVDW: goto vSn2u; yXQOv: NxlCW: goto rL2xQ; QOaDl: w5Vtw: goto LkqP5; juShY: goto mKVIA; goto lkzDE; GwM1c: goto MOJms; goto jsYZh; cCJm0: goto XMdyU; goto kPamI; cZd4E: goto aY6TG; goto gIoYm; jseub: BuvsQ: goto VorPt; WxG2w: goto H0UCi; goto jojH6; lXInd: goto mPer3; goto Glu0g; xCX1A: goto KyHMF; goto PDehO; ONNZz: aAd1T: goto KoviY; juHPD: goto JVKcV; goto Bf3j1; G207R: goto l1w9Q; goto kZCr0; Hq9UD: WTKeC: goto hVKcx; MpOFj: xZbcY: goto khHRv; qJm00: goto TMSIx; goto sLQul; IZIOQ: r_PbE: goto mSB3f; cXvCx: Ie2TN: goto G820f; xA2Yh: goto sF30P; goto nRZgS; Uzy97: goto UUTXS; goto vDVRk; OH8ko: pW39f: goto U2RUL; PEnhA: Rgz9u: goto hvQKG; Bk_r1: echo $nama; goto ikuUi; R_Lfg: goto cScY9; goto lzlAh; Tmcq2: goto v5G2g; goto lei3S; Q1U5U: BJjpw: goto YgTHI; u7ukM: e4Yrk: goto gBhO4; W4PGm: goto pePim; goto a5YLI; RM3iH: riW__: goto NRZPq; FCk0c: eB1SS: goto vwy6o; bYZLp: goto P_QZ3; goto NERJ5; j_LhD: goto pCTfa; goto Sp318; eebL7: goto vppSC; goto pFXC7; OQL27: goto VzLv1; goto N94gp; iqHlQ: goto POVCk; goto MWmk1; anzGG: TMSIx: goto BcY0d; qRkyK: iE_ZW: goto qbJH2; S3e2X: NQhOx: goto z_ueN; r434O: goto r2l4T; goto KLf6N; WVBq1: K8v3m: goto nTk0P; yQOel: goto df8s2; goto vZZiy; oxPRG: goto BuWTY; goto LvZ6K; Gf90j: goto a21rp; goto WeHeV; hNSDL: zFk5H: goto m1Tlg; FLx3k: fN7AV: goto RXICr; GTQ4g: goto t0Xng; goto HnEzJ; mrNTw: CTS21: goto thPoM; Xju_B: vKXOo: goto DnhBg; auf1i: VU9jm: goto smG3B; Yg3HI: goto FvkuB; goto iQeGH; F2FV3: icdeo: goto Xorej; aiHes: IFZt7: goto JHU4v; rKyJT: goto cyBWW; goto Abe6B; ZegBV: N1XKk: goto zSI1H; P4_8p: m4wnr: goto yFT0D; fj28f: xUv1q: goto yF42a; bjgLS: goto VgSUe; goto MpOFj; bYcqY: ELU9T: goto XImQw; imqav: goto BjN38; goto cC148; NEgHc: goto bKL4z; goto DUuRh; S6mrw: goto WJSkF; goto daNsF; n2WO3: goto Wq1AP; goto dAx3O; qoqRw: goto ibn_E; goto Q86Aq; zSI1H: uQVz8: goto lATiJ; W4g1t: tPFGW: goto ooYlc; clhv9: goto SP_Ai; goto SFO3R; dtEZa: goto i5Z6a; goto gpdtQ; hjssT: s80P7: goto nuLYn; m7eEX: mLPoz: goto NKTBh; eVgv_: DAGzo: goto SVDk_; cZlRD: bHa79: goto rR5ZK; QjEaM: D1Zw7: goto MmE2y; RHeBn: goto yjDR0; goto u6V_r; umvec: EDbWV: goto quzFF; RcDLb: goto zmZLe; goto nhMoP; Y25IF: goto VejWx; goto Z0fwW; r3mYu: ?>

Decoded(de-Obfuscated) php code

<?php

goto ibn_E;
goto Q86Aq;
// [PHPDeobfuscator] Implied goto
goto zSI1H;


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.