Can any one tell how to decode this file???

iluvbob · Apr 5, 2009

I'll be very thankful if any one can tell me how to decode this file......
Thx in advanced......

Code:

<? eval(gzinflate(base64_decode('FZfHDsTGEUR/RTfL4IE5wYIFZnKZljlcBOacM7/e67kOMIee6qpXf//3r7//KM6k/7N6m7Hsk734c9vXf9Zph9E/02QrCOyfvMimvPjzX2JcoPzmKoIvgt7cs5HAoTHOjiyCnt9Y58H8QwKgb+j2JelAc6wjCcM4CALFVuLxiJS03ehQTx9zDhblSdDvuuvf2esHoQfPgVS/5qx+QWzGWZlpc0e4IRmOnxyfM/Mc9rcgKmbMTH+y4DbNrTQau62LFXhoKiV9a6ZK4Rt7+LPqpWCmObVrtWwyUIlx5CGtyKFS2XMzJ8rGJatYSXEo4I1ZVmGWIj1LR3j0d3sWP7YCjH5jwS9/lLKxgXxTHDJY2fWl7VkpLnup0Kor0HvSGku8C/J2RgevbBhYTFvLEjYSH7oH8ojzQhsGV2NcmZTKLqj/nuuHyg6a6C/PgGQNASoWXE1RuljSSHAb9VEBfMn+JRn3WdxeBBWmnOOtZWJXIqPju7PKkfn2oF7ne1xcTknmruQAsbTNZWon47vMhocOzvB8Pqtq7SKD1XTce9lbbVSWataKVo7kY78drHzNs7gInIOSVYV5QqeckKa1vlszEO5waIipMeHILeGvHmDFxYtgrOda9QWe6V4Zu7NfxdP9g1a/WRQ3uI11pieGtYylwPNUgDE/NtNoyetDZ9V9WMsxkASStGWfPMmkuBSCrdprDPSzDU5/OzcxUdciMd/zuHBtUk5UmxJqP96TMGpxM4m10KajqUEmjkIs7qX4KYrpEg30XF6NrItBcoBoYCPpJA8JZVNO1sijf/QVxQLI3Rs4VmJ70T6Yu5Y9h40ff91p9O6+SK2VdSP2FwfhxJR0txl3xCsaClNPGpNZMG2WLPrGId+krJB85JMrE35Z6YddpBgOxFcBfipss9+luWyobqyYRhCpAfKWOLBko5ktfxaTTpj1KN0lDX1xlkTRuPI61owILewp6lMa8EKLVGzfGVCmFpasRwJnEAU0wi0H5K0dotTzTDmEJX0gZ/yV8Dv+ppB2ry6Z2sxdUqJqpwUpzeD8VVF0pTx5ynKRSbAdaJxSzgWRYnywymcQwqYHpZ5W5ItKoCHuFatMI2TfuUCTVsfVRWq85AV9bxqumEWXVf2P/DVF2L8zKeB2PbACxhc2EAFCkPWhIrxPVUJET01fTiq/t/hJv5elNP6+X0MfcbSOrh4Ltky9bdInp1ogm79GkKQoJ7f7m3SPdBaSjqAZXde3NjGJ0aFuY2GuTGGOUwSFwokGMXF9vFkIYqu+JkHQPJ/bxVD1tDMzWN8ChGnNmMqsRm1QimzqgCJzQCkg2wawpKuEoLj6b1ebVHTUDS2Kd38dbMQtc7FHdkvjrC8zLB/8Abqx9vsuGoqrrUZqVQ0JWoJY2QodwNUZq9B9DnCI8VfYZnnMTlnC1K++ab4dKSShz9Htm4gsLrHoNt07tnRcOd0+SGbCFgWbahObqR3eViqECglYu03gQpZEPQQV4sWOrP6jpmWOajQa7AZDIjc2kuGAQ6eFfwkOPicTuRFZpQrvvS1skjj6zPvd9nrNI5FRAavlHBG6h0dn9wYlLxTD4ZW6qIsU3TSt8CCSrEkUq9+PE4QqkItVSWgvjx1KbJSOOWduDl2t8fPwrFn0znl2m6LUIzf5QZvtuKL4UMAhP1b7FOxqHmzvIFh6ixQb567uWlzvz1smjYJidAQU33v4Qg/6TZiBrHxYswxjc5DJ5JL4qmAowN6mjlTMVcTPx7XfO70a93nwLuX8Z/HF0Q8xnRd8/zxGRQXxUf+tk28sxkq4kDywaAyX3mykdDRqn7gtyxR15CWtlHmhyQ0B02zyfvZNujTs+sFrFT2ig3KKWcCiGqdL2M9Nos2bUIHCa2balij7TgtU7It+mYoe+IyEN51yitnRk3aCy2l7C0GhSukjMMT7jGqrxHLz2V5KTydrZtZ18RPc1VBZMogvgnGRdffw4ZNBfCz9RJEWArJcVE8oW2bUsC3DHu95nOcfXFp84Y0VnlNTquf7JN0GeLM0B0bXJQbCev+lGfZUvn1RQPzFh17bdYAWVpbqGDslLKobK2o0ptkUdhWH58EYhII73gCMP6Jfns5K6N5itfznMBeUVbyRrKLVEgFV7l9XcakyxH2v6ir4UdoxHyTVKu8bpWB90Y8wTEb5mOTitodtY1rDYB8uWRLgC8g9XRJxLjlWob44+4lqh+EO71OjrHCbaz3R8Bv0Bs++CVN8cAy7YhZe1QtawMzfCJGS8kadqaXr2bJEry8WYe30QRYJFXcIn/W34fX8DU96J5JGmgMGbAzqPnlPzmDlzH+b4SO4NAS8uQAM/dWrGOBjCLvcF1KJu/NJcA5afC92YTVt019W+dkf3DSF5uNjadUy2lwX8c3sGNsU0HDIpFCeaIQtJrEfl1Shp+ZM/CbymUkxPzYCFGktFaM5c2eBotArB0iwkBTVWsh0/ME7Rt0H0tfhyMIHh4ia7TIdhwvUhvvNAVDnD8xdrDAGNC0liO+43RDEQn49gNs6D/2pQQLAJYEc0588hGV+MRzQ6H4cU35+8e1Yezk+EbJnTZOFmhCMJzT67+u1agD/snB+XZ0RWhydkCiRdGjFJTpvndL4dPNFpQ5D0tmjQEA++YwFJcfDqxnk5Q7P3BWyJlV0vAfKXInElSiVn4nvYq7VAN+mO2t+hXiVD9HtEHreHjlYAiJuVaVFF3TF8zI5eO1q3UdiW9b5Tq5Qjaboe7Jm8t4wscVjMGAE0I8HE+q7qUWmOlHYA0sSAAidiLgT6Jkx3a+o+BGaJA+DXArCSqekDxOBhGv+nGkT9KTqOsEYvRlY8mcoHNobfdp0VPdT1+Yr0F+X881NRgNWicPBmF6YONtrETIXql2gtaeccgQC4myg9ng64krBe5qBgRBY/wyfYDY53SK88ctwe/IyBE72fZeILj8OEScH6i41xZVS/vIEXXlIm9jdTGh2sV6n2y42pp3mwH3NTJaQWy8HuqfdRIhlWdzQveAbhp/pGl/B/aNoyvGaSOTEsRMPONMvrP3hrAGn84V9Xdhjf9FeRomC1fgAIu2gFHhLLopSY5gIOTvwKNvPylR4RlyAmoM5eca49dABHSXi0Rw/mk4K12sckvs9YKx7etRakMR9AR60Y7lS9zXt68ha07bKq1NN+0hY4WrglwzUSB8n2/TYHyrKlpxTGGgyX96QuZ5RTW8znAyNObcSjNnUnZYfmSNWOT5gvCe0TAjmWpO5TqKt8tbdN6lmhvVS2zYLInQRDlngQxaPI1obdB4NuALeCdBy0IOBmA06Zu907Y0CSFHfPgoWa1UBO11Qq/XMlbYr7deWoPeODZn9VFsd08yqZOGLIEamXuSoaRhg6+fhdkhJLrdmQMsMMfh+1FaCzC8bmQQA55mIAh5nYG5IHAbmm2QAuHRxjVG/hQ79dOBIbWMr2Ga1K/YPJbbXZtM9pog7q4GJzgN/29sPsk8USm1uo+Sl/Yj8U0LNb2Sx0UuhTVrUylAd+VRqwPzeGPvlFk0Ppxh26dArJWAd0j4tCIkZVtbH4pTMqEY8SrYqGV8mb/t1H7ZEwyTnZDch69LuKboOwmcWEydHpNKO8XCC+STAZaq0eVk1+ENrvQ/PneO/h8kTfAeYCYlX510BPqgUPqkoo2WZlyOH2PszLx9TKm+UAUumIrEOZmTu1VwAnX4JirXWSC5NyCqvC95GqeFgVnIQfRF/OJX8VZrH1fV99I10/SxCwLcXCc20MaiA7VQri3PGKZx3cTC2pxINleVX9qbM9QqnLk/gpyUelrZG2hKvWtdnRFA2804qjeIVcefsimusBXyJ++sFk0bzeavnPhDoDyINik5uzb2aHhSo3Ow44/pSzbGMtPOd4KUUrvCmf7ZnUj7eP+lXMhtgd+hFtrBwqUjqe+YIXMJJv/k6cXC95dt1iqH3NH+ACd2kp7k1+zh7jguYolTA5z6dn2AIvMeHotE3EP0K6qSRUfoyXCpu/Daj+8oViFXl5Sxe/sloAGacnSRZ/fruEXumSOgd0a8IZx083bxMNtYBoEfEfT/c0OBjQ/+

sliver · Apr 5, 2009

Are you sure the code you posted is complete?

iluvbob · Apr 6, 2009

sliver said:
Are you sure the code you posted is complete?

Yes,Sliver code is complete, please tell how to decode it.... I know there are many tools to decode but I don't know any...

Thx

olivier · Apr 6, 2009

iluvbob, it can't be complete, it should have ))); ?> at the end
Something like that.
If it's incomplete or broken, then i don't think that it can be decoded.
But of course you can add these missing tags to end of it and try.

I can't post links yet, so if you search Goo*gle for

Code:

<? eval(gzinflate(base64_decode('

You should get help. But as i said, if data is broken or incomplete, then im not sure if you can decode it properly.

WickednDivine · Apr 6, 2009

This code isn't complete. it's base64 encoded (and then gzipped). I think all base64 strings end with "==".

sliver · Apr 7, 2009

The string is incomplete, as someone told you...If you still need help you can upload somewhere this (footer.php i think) file.

Barbacamanitu · Apr 9, 2009

just base64 decode the string, then gzip inflate it. Thats how it looks to me.

dacash · Apr 11, 2009

Yeah your missing some stuff.

iluvbob · Apr 12, 2009

Yes, I forgot to put complete code...You can see complete code below

<?php $_F=__FILE__;$_X='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';
eval(base64_decode('JF9YPWJhc2U2NF9kZWNvZGUoJF9YKTskX1g9c3RydHIoJF9YLCcxMjM0NTZhb3VpZScsJ2FvdWllMTIzNDU2Jyk7JF9SPWVyZWdfcmVwbGFjZSgnX19GSUxFX18nLCInIi4kX0YuIiciLCRfWCk7ZXZhbCgkX1IpOyRfUj0wOyRfWD0wOw=='));?>

Fudnut · Apr 12, 2009

Code:

<div class="clear"></div>
	
	</div>
	<!-- /Main -->
	
</div>
<!-- /Page -->
<!-- Footer -->
<div id="footer">
<a href="hxxp://wpjunction(.)com">Wordpress Theme</a> designed by <a href="hxxp://www(.)firecasinos(.)com/">Online Casinos</a> for <a href="www(.)whiskey-shop.de">Whiskey</a>, <a href="hxxp://wpjunction(.)com/">Custom Wordpress Themes</a> and <a href="hxxp://wpjunction(.)com/">Website Designs</a>.</div>

<!-- Footer -->

<?php wp_footer(); ?>

</body>

</html>

brackets added by me - haven't enough posts to post links

iluvbob · Apr 12, 2009

dude thank you very much!!!

zappak · Apr 13, 2009

Next time, Just replace echo with eval and you will get decoded text

Can any one tell how to decode this file???

iluvbob

Registered Member

sliver

Newbie

iluvbob

Registered Member

olivier

Senior Member

WickednDivine

Elite Member

sliver

Newbie

Barbacamanitu

Regular Member

dacash

Registered Member

iluvbob

Registered Member

Fudnut

Registered Member

iluvbob

Registered Member

zappak

Junior Member

Main Menu

Marketplace

Making Money

BlackHat World