Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php $isp = "tRl4ZtPG9rOZ4T8cxDBoYf2Qk9hDxzYFYQntY4MhkMtwGFMrpEiMu5JJ9m/pQf77PXRq9WN5Gt..
Decoded Output download
<html>
<title>Locked.</title>
<head>
<style type="text/css">
a {
color:#8080ff;
}
#kiri {
float:left;
}
#kiri-gambar {
padding-left:30px;
padding-top:30px;
}
#isi {
padding-left:50px;
}
#isi-content {
background-color:white;
width:65%;
font-size:20px;
text-align:left;
margin-left:30%;
padding-left:3px;
padding-top:3px;
padding-right:3px;
padding-bottom:3px;
}
#isi-judul {
font-size:40px;
color:white;
padding-right:250px;
text-align:center;
}
#isi-window {
text-align:left;
}
#isi-gambar {
margin-left:30%;
}
#isi-kolom {
float:left;
padding-left:30px;
font-size:20px;
color:white;
}
input[type=text], select {
width: 400px;
margin: 8px 0;
padding: 14px 20px;
border: 1px solid #ccc;
border-radius: 4px;
box-sizing: border-box;
}
button {
width: 200px;
background-color: #4CAF50;
color: white;
padding: 16px 20px;
margin: 8px 0;
border: none;
border-radius: 4px;
cursor: pointer;
}
#sisa-waktu {
font-family:"Palatino Linotype", "Book Antiqua", Palatino, serif;
font-size:30px;
padding-left:30px;
padding-top:30px;
animation: blink-animation 1s steps(5, start) infinite;
-webkit-animation: blink-animation 1s steps(5, start) infinite;
}
#hacked {
padding-top:115px;
font-family:"Palatino Linotype", "Book Antiqua", Palatino, serif;
color:white;
width:25%;
}
@keyframes blink-animation {
to {
visibility: hidden;
}
}
@-webkit-keyframes blink-animation {
to {
visibility: hidden;
}
}
#timer {
font-family:"Palatino Linotype", "Book Antiqua", Palatino, serif;
font-size:25px;
padding-left:30px;
padding-top:none;
color:white;
}
#waktu {
border:3px;
color:white;
}
#about {
font-family:"Palatino Linotype", "Book Antiqua", Palatino, serif;
font-size:20px;
padding-left:30px;
padding-top:100px;
}
#countdown {
font-family: sans-serif;
color: #fff;
display: inline-block;
text-align: center;
font-size: 30px;
background: #ff6600;
font-weight: 100;
width:100%;
}
</style>
</head>
<head>
</head>
<body style="background:#990000;border: 25px solid #e20733;border-radius:4px;box-sizing: border-box;">
<div id="kiri">
<div id="kiri-gambar"><img src="http://www.homelandsecureit.com/wp-content/uploads/2011/01/security-padlock.gif" height="200px" width="200px"></div>
<script type = "text/javascript">
var cday;
var timeInSecs;
var ticker;
function getSeconds() {
var now = new Date();
var nowtime= now.getTime(); // time now in milliseconds
var countdowntime = new Date(now.getFullYear(),now.getMonth(),now.getDate(),20,0,0); // 16 hrs = 4 pm
// countdowntime - change time hh,mm,ss to whatever time required, e.g. 7,50,0 (0750)
var dy = 5 ; // Friday (day 5) - change for other days 0-6
var atime = countdowntime.getTime();
var diff = parseInt((atime - nowtime)/1000); // positive if date is in future
if (diff >0) {
cday = dy - now.getDay();
}
else {
cday = dy - now.getDay() -1;
}
if (cday < 0) { cday += 7; } // aleady passed countdown time, so go for next week
if (diff <= 0) { diff += (86400 * 7) }
startTimer (diff);
}
function startTimer(secs) {
timeInSecs = parseInt(secs);
ticker = setInterval("tick()",1000);
tick(); // to start counter display right away
}
function tick() {
var secs = timeInSecs;
if (secs>0) {
timeInSecs--;
}
else {
clearInterval(ticker); // stop counting at zero
getSeconds(); // and start all over again!
}
var days = Math.floor(secs/86400);
secs %= 86400;
var hours= Math.floor(secs/3600);
secs %= 3600;
var mins = Math.floor(secs/60);
secs %= 60;
var result = days +":";
result += ((hours < 10 ) ? "0":"" ) + hours + ":" + ( (mins < 10) ? "0" : "" ) + mins
+ ":" + ( (secs < 10) ? "0":"" ) + secs + "";
document.getElementById("countdown").innerHTML = result;
}
</script>
<div id="waktu">
<div id="sisa-waktu">
All files will be delete on :
</div>
<div id="timer">
<body onload = "getSeconds()">
<div id="CountDownLogo">
<span id="title"</span>
<br><br>
<span id="countdown"> </span>
</div>
</div>
</div>
<div id="about">
<a href="https://en.wikipedia.org/wiki/Bitcoin" target="_blank">About BitCoin</a><br><br>
<a href="https://www.bitcoin.com/buy-bitcoin" target="_blank">How to buy BitCoin ?</a><br><br>
<a href="mailto:[email protected]"><b>Contact Us</b></a>
</div>
</div>
<div id="isi">
<br>
<br>
<div id="isi-judul">Ooops, your website have been encrypted!</div>
<br>
<br>
<div id="isi-content">
<div id="content-judul">
<u><b>What happened to my website ?</u></b></style><br>
</div>
Your important website files are encrypted.
Many of your .php, .css, .js, and other files are no longer accessibel
because they have been encrypted. Maybe you are busy looking for a way to
recover your files, but do not waste your time! Nobody can decrypt your files
without our special decryption service.
<br>
<br>
<div id="content-judul">
<u><b>Can i recover my website ?</u></b></style><br>
</div>
Sure, we guarantee that you can recover all your files safely and easily. But you have not enough time.
You can decrypt all your website file safely, how ? You must pay with Bitcoin.
<br>
<br>
<div id="content-judul">
<u><b>How do i pay ?</u></b></style><br>
</div>
Payment is accepted with Bitcoin only, we are not using Paypal, CC, etc. For more information
please click [About BitCoin].
For more information, clicl [How to buy BitCoin]
And send the correct amount to the address specified in below
After your payment, send payment receipt to email address [Contact Us], and we will send unlock key to you.
<br>
<br>
<div id="content-judul">
<u><b>Contact ?</u></b></style><br>
</div>
If you need our assistance, send a message by clicking [Contact Us]
</div>
<br>
<div id="isi-window">
<div id="isi-gambar"><img src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTKAnP6a0_qv1qIt-rHjDltkInvW1BSdoObHKRfpgPFF00DcCZp" align="left"></div>
<div id="isi-kolom">
Payment 0.2 BTC=</font><font color="yellow">1GG6hxuaYRQGcWPJCMU6y1UpNEFtfCdAVj</font><br>
<form action="" method="post" style=" text-align: center;">
<label>Key : </label>
<input type="text" name="key" class="inpute" placeholder="your unlock key">
<button onclick="myFunction()">UNLOCK SITE</button>
<script>
function myFunction() {
var txt;
if (confirm("Your payment information was not correct!. If you want our help, please contact us on mail below!") == true) {
txt = "You pressed OK!";
} else {
txt = "You pressed Cancel!";
}
document.getElementById("demo").innerHTML = txt;
}
</script>
</form>
</div>
</div>
<br>
<br>
<center>
<div id="hacked"><marquee>Hacked by Tukang_ISP - Error Violence Member</marquee>
<br>
<iframe width="560" height="315" src="https://www.youtube.com/embed/C_i441fUnfg?autoplay=1" frameborder="0" allowfullscreen style="display:none;"></iframe>echo '
<html>
<title>Locked.</title>
<head>
<style type="text/css">
a {
color:#8080ff;
}
#kiri {
float:left;
}
#kiri-gambar {
padding-left:30px;
padding-top:30px;
}
#isi {
padding-left:50px;
}
#isi-content {
background-color:white;
width:65%;
font-size:20px;
text-align:left;
margin-left:30%;
padding-left:3px;
padding-top:3px;
padding-right:3px;
padding-bottom:3px;
}
#isi-judul {
font-size:40px;
color:white;
padding-right:250px;
text-align:center;
}
#isi-window {
text-align:left;
}
#isi-gambar {
margin-left:30%;
}
#isi-kolom {
float:left;
padding-left:30px;
font-size:20px;
color:white;
}
input[type=text], select {
width: 400px;
margin: 8px 0;
padding: 14px 20px;
border: 1px solid #ccc;
border-radius: 4px;
box-sizing: border-box;
}
button {
width: 200px;
background-color: #4CAF50;
color: white;
padding: 16px 20px;
margin: 8px 0;
border: none;
border-radius: 4px;
cursor: pointer;
}
#sisa-waktu {
font-family:"Palatino Linotype", "Book Antiqua", Palatino, serif;
font-size:30px;
padding-left:30px;
padding-top:30px;
animation: blink-animation 1s steps(5, start) infinite;
-webkit-animation: blink-animation 1s steps(5, start) infinite;
}
#hacked {
padding-top:115px;
font-family:"Palatino Linotype", "Book Antiqua", Palatino, serif;
color:white;
width:25%;
}
@keyframes blink-animation {
to {
visibility: hidden;
}
}
@-webkit-keyframes blink-animation {
to {
visibility: hidden;
}
}
#timer {
font-family:"Palatino Linotype", "Book Antiqua", Palatino, serif;
font-size:25px;
padding-left:30px;
padding-top:none;
color:white;
}
#waktu {
border:3px;
color:white;
}
#about {
font-family:"Palatino Linotype", "Book Antiqua", Palatino, serif;
font-size:20px;
padding-left:30px;
padding-top:100px;
}
#countdown {
font-family: sans-serif;
color: #fff;
display: inline-block;
text-align: center;
font-size: 30px;
background: #ff6600;
font-weight: 100;
width:100%;
}
</style>
</head>
<head>
</head>
<body style="background:#990000;border: 25px solid #e20733;border-radius:4px;box-sizing: border-box;">
<div id="kiri">
<div id="kiri-gambar"><img src="http://www.homelandsecureit.com/wp-content/uploads/2011/01/security-padlock.gif" height="200px" width="200px"></div>
<script type = "text/javascript">
var cday;
var timeInSecs;
var ticker;
function getSeconds() {
var now = new Date();
var nowtime= now.getTime(); // time now in milliseconds
var countdowntime = new Date(now.getFullYear(),now.getMonth(),now.getDate(),20,0,0); // 16 hrs = 4 pm
// countdowntime - change time hh,mm,ss to whatever time required, e.g. 7,50,0 (0750)
var dy = 5 ; // Friday (day 5) - change for other days 0-6
var atime = countdowntime.getTime();
var diff = parseInt((atime - nowtime)/1000); // positive if date is in future
if (diff >0) {
cday = dy - now.getDay();
}
else {
cday = dy - now.getDay() -1;
}
if (cday < 0) { cday += 7; } // aleady passed countdown time, so go for next week
if (diff <= 0) { diff += (86400 * 7) }
startTimer (diff);
}
function startTimer(secs) {
timeInSecs = parseInt(secs);
ticker = setInterval("tick()",1000);
tick(); // to start counter display right away
}
function tick() {
var secs = timeInSecs;
if (secs>0) {
timeInSecs--;
}
else {
clearInterval(ticker); // stop counting at zero
getSeconds(); // and start all over again!
}
var days = Math.floor(secs/86400);
secs %= 86400;
var hours= Math.floor(secs/3600);
secs %= 3600;
var mins = Math.floor(secs/60);
secs %= 60;
var result = days +":";
result += ((hours < 10 ) ? "0":"" ) + hours + ":" + ( (mins < 10) ? "0" : "" ) + mins
+ ":" + ( (secs < 10) ? "0":"" ) + secs + "";
document.getElementById("countdown").innerHTML = result;
}
</script>
<div id="waktu">
<div id="sisa-waktu">
All files will be delete on :
</div>
<div id="timer">
<body onload = "getSeconds()">
<div id="CountDownLogo">
<span id="title"</span>
<br><br>
<span id="countdown"> </span>
</div>
</div>
</div>
<div id="about">
<a href="https://en.wikipedia.org/wiki/Bitcoin" target="_blank">About BitCoin</a><br><br>
<a href="https://www.bitcoin.com/buy-bitcoin" target="_blank">How to buy BitCoin ?</a><br><br>
<a href="mailto:[email protected]"><b>Contact Us</b></a>
</div>
</div>
<div id="isi">
<br>
<br>
<div id="isi-judul">Ooops, your website have been encrypted!</div>
<br>
<br>
<div id="isi-content">
<div id="content-judul">
<u><b>What happened to my website ?</u></b></style><br>
</div>
Your important website files are encrypted.
Many of your .php, .css, .js, and other files are no longer accessibel
because they have been encrypted. Maybe you are busy looking for a way to
recover your files, but do not waste your time! Nobody can decrypt your files
without our special decryption service.
<br>
<br>
<div id="content-judul">
<u><b>Can i recover my website ?</u></b></style><br>
</div>
Sure, we guarantee that you can recover all your files safely and easily. But you have not enough time.
You can decrypt all your website file safely, how ? You must pay with Bitcoin.
<br>
<br>
<div id="content-judul">
<u><b>How do i pay ?</u></b></style><br>
</div>
Payment is accepted with Bitcoin only, we are not using Paypal, CC, etc. For more information
please click [About BitCoin].
For more information, clicl [How to buy BitCoin]
And send the correct amount to the address specified in below
After your payment, send payment receipt to email address [Contact Us], and we will send unlock key to you.
<br>
<br>
<div id="content-judul">
<u><b>Contact ?</u></b></style><br>
</div>
If you need our assistance, send a message by clicking [Contact Us]
</div>
<br>
<div id="isi-window">
<div id="isi-gambar"><img src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTKAnP6a0_qv1qIt-rHjDltkInvW1BSdoObHKRfpgPFF00DcCZp" align="left"></div>
<div id="isi-kolom">
Payment 0.2 BTC=</font><font color="yellow">1GG6hxuaYRQGcWPJCMU6y1UpNEFtfCdAVj</font><br>
<form action="" method="post" style=" text-align: center;">
<label>Key : </label>
<input type="text" name="key" class="inpute" placeholder="your unlock key">
<button onclick="myFunction()">UNLOCK SITE</button>
<script>
function myFunction() {
var txt;
if (confirm("Your payment information was not correct!. If you want our help, please contact us on mail below!") == true) {
txt = "You pressed OK!";
} else {
txt = "You pressed Cancel!";
}
document.getElementById("demo").innerHTML = txt;
}
</script>
</form>
</div>
</div>
<br>
<br>
<center>
<div id="hacked"><marquee>Hacked by Tukang_ISP - Error Violence Member</marquee>
<br>
<iframe width="560" height="315" src="https://www.youtube.com/embed/C_i441fUnfg?autoplay=1" frameborder="0" allowfullscreen style="display:none;"></iframe>';
?>
Did this file decode correctly?
Original Code
<?php
$isp =
"tRl4ZtPG9rOZ4T8cxDBoYf2Qk9hDxzYFYQntY4MhkMtwGFMrpEiMu5JJ9m/pQf77PXRq9WN5Gtp2DcjW7my/apHJmsEPt2Ja1rzIdPjNFc/l7B1YNjLtWvrmlfalVek75MtcAl/6Zepj+YX3kzBnY+P2LQH/u32rlbCcBeO7D9wHYZad3L5oaPvW3Y0KlN7MZSb4OJcZx50W/np2AAvSXYkiFoGG9FKaKmLVJdjxket/OXYsZeaXeFFehYb6NtKwAjAg3YRsXG1cg8Yi2awCFmx21wi8SysuicdPpXw9Hg3v0ViGKN1D/S7Hh0kERbkrZbXyKjUKEayUSldt73FU+j3CYi8Fd7XegYsZ56ywq7UWX6M0yo0xK+GOrWPXR9kmfzjcSCFOe8jA+qLJcqG8lC00mz0aYoE2nLbHEtcJYkPEb0Is7PX3rvmvdksTSp4f8Q86LFbgjx0Ici4T43rjRjhpLRUj5xge+F/AemMfw+AYlywzwI9sxixVcoC7uBmyXKVjN1aSk+ZzNxCpik9xReHG7AsJr+lNIFwqnRlU6F6PxCNLK+GhW7PeCUS4ezw/Ox+6ad8ulragpU2N0bYa1xVhKuUxQt6kVxIFITHzmbIBZqVafzdHoeguxIZUaFVzokP5Zew8EbngynDwDh/kGacDzgvGNmPmZPU5EvhewpC7ApV6O/1t2t9HC03CRgWScKh2nCti060WYBBPyKUftofIiouAH4DyMuXZQOoucbxEvPvXKaBWTTrK14JX52lOIiEHg6GR8mKx0vVZsDF+OKyyznHGzxu5zAJEyGNUIR1tnJUha4npGatc8eUY1ipapaedf3LIlAb6e8ihmbgqcfAPBM3h8DuDxsb9NVAa4eqItkxltK/8S4eLmFL8n9Dke8N/YKuGlSfBmsGxbXs7Mk4ovLBbsSrLV6YbaCtIoZ8LhEUeuklp4xyHgHgNA+qORAsKpUNoydJHVCPXrSAXRWohGJg1E674Zc8KPunryYJTjH45eJTf1U/M0iV1uKnTYGn3p59c/JyUJY1voCzU8tC9f2dnsl3aqLJ9ozzTLNOapOoSRzpodSzZXbE9z5laR7GCMFWmzppmf9zvLxaL3poVMhdeGlcsm0XxXsKK/sIv549+5HDnWMP+oTsY9N1OX8NunmfRp3Hy3ldyDqy1vaaOYQmOdhDl23nSVGS0S24SKJ/rbAymYCayr+JFmGgtbesS22aSiuVW+U+5auE9lVbYS8KqUn7VBSryEp3TK8kRiqEu7QNG0QjWw8lgCp5cwFjBcvvgpLFOpKf0o4e4p/iC2wD9vuapMZUHGIy5Cg3hV8AydzVgg7ylaB7l+WYpgvZOx668VHuu60ojWOfQ7eAfcYo8sQ/COgiR2jH4BWTCxXpTXVXWwltWI99t3SmKQRhFHVuskeClNNaCQH6ORyDTDsjeqgf3O1DkAnr3/tA9MFMjJTA6pzAEzfw8Q3VmddNwa0MzyksAjK+RMO6E4GlUJbawqmJW2LBwxVJyGYL5IgjRjbzdFkkVeP+DPuaVeO3us0NkaClOcsiQ42pVLsgijsFWFGS9rSnOXOtwihWkj8pnoTLuRTtFj1GtFmj/lsxQdlN+A7+LAN3BVgVBfDTkBIiRjlX4ZAr3QuAKtKgixzRfol5uiA20LnCkE0lVBiumredukMNPys2W+JOpoatfkGH7wQgHPvgX3D8ALYBh2qe67XWMg0W2rZCvodoYoaE1Vp0xWsN4AF0haPbgSSj5BRXIWJG3HU16Hzgd4w1Qhklna2CEdklTQooGRn5OQusgFm+5QjxQoc7F0IhnLaPJKLRQLoXrGme7J7s+eSV1/KCS3ShxJA2xxxgpsUlvkMLvMmCE0qwOJtiw6kytUZ4Do+wRK6G8Ow1IZwRG5ELhveDrHp4DmLFoX3vMS1fraGIKbamK/DXDTmcX73VnHe111MAqlLeP2+gazqjGCHEY5ZxlgAT90Rk7bcsuRmO1tSgYywMXDuAhOC4COfjzVCMkfuMCPtvQ1vwJ0gLCGCwo7RDhBrCWpgFcRdXrCHQkVkwSFdhZKNVe5ZJ+vktepHqnyhrnoKc8QgZiQd+/o+Q0steex36rW4TuEEhq04OP6RqN1W3KL7fO0L2ZymQMXGAth0tPisctrC4YonCLXfaoJiU99ZVRTaafM4/6IWivc0A5M1t4tvDnpN5YR+8dW7GKDgKEvvAsB55YB7XDhcZ+HMzo3x6E2m8zsHVgPxV7rQo09TIjaanjlg31PHVxmwjsPzIz406I84H0bQu1RL5ZleixYNWnt/4LxRM8TDmAqYM2mDqfbxwgNs7sWY+WuD3H7VZfzJpt7BCn4SM2pPTMEVTLYfwt0mKwFXANT5iSPjz8JodPqJyzMcWgHUkGVFT3f17ROrHCiSSezbEfCzxkPwsn/WtTtJomqn5HacIDgjOjyUJmo3RYW7UJYK47nNlwxvywA1hZLaz8MbY0edYCu00spQfSWIKlz3Jtp+ZzRyi/miTtHOZ5VL5dLRnqvYjU+g3nAOTl+9LDroQmK5aVCHUxhNHamum1slwV/M9WcUj4LODC4xWmVh4RyE34HoG/Fx5zUXM07fl4vwO9JFHVe1/xTvXVzA41Pp4wZYaDBZbaJJEhnrpxQZRvmYgIqzuCL/fZqocFZImJi5w0nTgKl1WJeqjKRpsVgD2IFDalL9HlXMulmWoQg1DKQwBHWODZ2HlFit+BVFnnaYJWllfNsYF3zqt8WsFai6EvEyXyEkW3buxQKpHaJpVEy+8bfTan3IZF5j/nsKc4F2gQAUmRCNByklkotPhNnZIqaLhNJTxNcjJfdw9WEeJ2qwcvIoOljUJJkh6LSXh6oZ6NjS0LSCSbRG8parCvLLAlEEERhRynEEcLjQi2bfxSRkQdQCcqWu87zPNRLKnb0BhW8VORtCUGlfOltp8JQQ5EVRGFa77IOzCf4wjNkx6ccIgVDG6Uh9FzLhH0nQkOIhi2Vo4jCHzYqoAftY77EDsaPocPu3LtI+Gc0WAi8YHZgLNZENDVoCio9BM4reKBGntxdYIxRqgWKoO5xBaaQMbL6PeNBTqGoH2jsJD6JMZARUys6H2o6+JUk8F1G901NX7k0ZkPNkWnGjL4qyFiuXyHCy9nbMExGmgkhWPeSTi1bIm0OgkoQ2WBh5VrdhxOHnkqslpjX5U1N8jOzvr+o7PpjbYyaGzsub0VioRwqO5xqkBuwoefp7gzPnuU/vQ6OX175j0ZCffT58vB5wveDd58fZnzzYVq+dvgxdOUPY7fvP0l80pCzs9d93Iy/4/vgL7DmDpnkdI8UDfF0/fT5WBExrrbO4QXp/PppEJKGbMJPc3969RMyjwnPQevX4/WXyLx/Jd/v0F+e/Lf+ft0o+Xgmf/o1TnP5unZr19Y7HcMmUP4bxZEAEJkzCskllGUA4953CmvOWDP7Vhm8MkFxujsLYbPGMcX80nv6njxxv/WOOAJPKA7GGEObRY9j3cTjGcAQh+JXLM8laQWBVMdm1qO9uaabDoyYzhLntvTCVp6zx69ezx/C0IvQV9uFHfQ5tRIz5z6Rp14mlHKK8RiffR9xRd+8sdD+rzJvFkFUtts3lXcc92gxqWLlK0Jam1gs3BO3Zqw1jLHJlxJJZsCRFWTrs5mXSLuOAcwxXBLEMkbxVTRdtilT+5GhcAsfPz2jmaDOkpDntX+HOk55Wh+E/mrP9z95nYjlQW7adC40TFKpfPx99YhxAzX5JpMy75KE2vLjobbw3F4atAzGbKV1uZPHhO+EMHnVcrZG2ZQj7XtNNoIYvXp4ukT6MKrIMDO8qtvOUkiCe9yEctg0i+xGlmUvgIv7+SGI7e+rjsaDJ3tslNGOQYUj2+peBmRWvvzQur4a5A987LVUBHhCRuP/tOBA5qyuY6c0kREQ2jJojxUUNH4c6tPbEqrL7GplhmRcz+g7R+SjP8H";
eval(str_rot13(gzinflate(str_rot13(base64_decode(($isp))))));Function Calls
| gzinflate | 1 |
| str_rot13 | 2 |
| base64_decode | 1 |
Stats
| MD5 | 74dc76439eb8befcc148585cce8f6bbc |
| Eval Count | 1 |
| Decode Time | 112 ms |