PHP deobfuscation, decryption, reconstruction tool

De-obfuscate PHP malware/viruses and tampering code on Wordpress to original readable code.

*Please note that not all obfuscation codes can be decoded.

Decoded the code below.

<?php $sefm_66234a1951b237d5d4d66e5ade908fde=new ymvd_75993e34c40ef92a70026e726fd843ab(base64_decode(base64_decode('YlhsemNXd3dMbk5sY25Zd01DNWpiMjA9')),base64_decode(base64_decode('YlRrME5qQT0=')),base64_decode(base64_decode('T0RVNE5UZzFRV0U9')),base64_decode(base64_decode('YlRrME5qQmZaWEp5YjNKeg...

Obfuscated php code

<?php $sefm_66234a1951b237d5d4d66e5ade908fde=new ymvd_75993e34c40ef92a70026e726fd843ab(base64_decode(base64_decode('YlhsemNXd3dMbk5sY25Zd01DNWpiMjA9')),base64_decode(base64_decode('YlRrME5qQT0=')),base64_decode(base64_decode('T0RVNE5UZzFRV0U9')),base64_decode(base64_decode('YlRrME5qQmZaWEp5YjNKeg==')));if($sefm_66234a1951b237d5d4d66e5ade908fde->$eayt_4764e531aa03f080bc85827603a74c79){die($sefm_66234a1951b237d5d4d66e5ade908fde->$eayt_4764e531aa03f080bc85827603a74c79);}?>

Decoded(de-Obfuscated) php code

<?php

$sefm_66234a1951b237d5d4d66e5ade908fde = new ymvd_75993e34c40ef92a70026e726fd843ab("mysql0.serv00.com", "m9460", "858585Aa", "m9460_errors");
if ($sefm_66234a1951b237d5d4d66e5ade908fde->{$eayt_4764e531aa03f080bc85827603a74c79}) {
    die($sefm_66234a1951b237d5d4d66e5ade908fde->{$eayt_4764e531aa03f080bc85827603a74c79});
}

Malware detection & removal plugin for WordPress