Japanese English

PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $gxfp_7f0f68ec=new wwjw_c3756460(base64_decode(base64_decode('YlhsemNXd3dMbk5sY25Zd01DNWpiMjA9')),base64_decode(base64_decode('YlRrME5qQT0=')),base64_decode(base64_decode('T0RVNE5UZzFRV0U9')),base64_decode(base64_decode('YlRrME5qQmZaWEp5YjNKeg==')));if($gxfp_7f0f68ec->$ojhf_1590923a){die...



Obfuscated php code

<?php $gxfp_7f0f68ec=new wwjw_c3756460(base64_decode(base64_decode('YlhsemNXd3dMbk5sY25Zd01DNWpiMjA9')),base64_decode(base64_decode('YlRrME5qQT0=')),base64_decode(base64_decode('T0RVNE5UZzFRV0U9')),base64_decode(base64_decode('YlRrME5qQmZaWEp5YjNKeg==')));if($gxfp_7f0f68ec->$ojhf_1590923a){die($gxfp_7f0f68ec->$ojhf_1590923a);}?>

Decoded(de-Obfuscated) php code

<?php

$gxfp_7f0f68ec = new wwjw_c3756460("mysql0.serv00.com", "m9460", "858585Aa", "m9460_errors");
if ($gxfp_7f0f68ec->{$ojhf_1590923a}) {
    die($gxfp_7f0f68ec->{$ojhf_1590923a});
}


Malware detection & removal plugin for WordPress

(C)2020 Wordpress Doctor All rights reserved.