Confermo, qui il file decodificato, come vedi non c'è nessuna shell:
<?php $ {
"GLOBALS"
}
["rxflmyfhcv"] = "license_key";
$ {
"GLOBALS"
}
["opfolxmdakg"] = "jplaylist";
$ {
"GLOBALS"
}
["mbytemx"] = "module_id";
$ {
"GLOBALS"
}
["gedhcwqgr"] = "url";
$ {
"GLOBALS"
}
["euraktdsmw"] = "u";
defined("_JEXEC") or die;
abstract class c_VerifyLicense {
public static function of_CheckLicense($module_id, $jloop_sound, $jplaylist, $notFound, $license_key, $module, $encode) {
defined("jfile") or define("jfile", "defined");
$ {
$ {
"GLOBALS"
}
["euraktdsmw"]
} = & JURI::getInstance(JURI::base());
$ {
$ {
"GLOBALS"
}
["gedhcwqgr"]
} = str_replace("www.", "", strtolower($u->getHost()));
$ {
"GLOBALS"
}
["mewngse"] = "encode";
$mxgaxvnoolx = "module";
if ($ {
$ {
"GLOBALS"
}
["mewngse"]
}) {
$krydyxvns = "jloop_sound";
$ {
"GLOBALS"
}
["wrblfeovb"] = "notFound";
$ {
"GLOBALS"
}
["sbcudliwxi"] = "module_id";
echo "<script>jbgattrib" . $ {
$ {
"GLOBALS"
}
["sbcudliwxi"]
} . "=new JBGSound(\"jbgstore" . $ {
$ {
"GLOBALS"
}
["mbytemx"]
} . "", ".${$krydyxvns}.", \"" . $ {
$ {
"GLOBALS"
}
["opfolxmdakg"]
} . "\","".${${"GLOBALS"}["wrblfeovb"]}."\");";
echo "jbgaudio" . $ {
$ {
"GLOBALS"
}
["mbytemx"]
} . "=document.createElement('audio');</script>";
}
if ($ {
$ {
"GLOBALS"
}
["rxflmyfhcv"]
} <> md5($ {
$ {
"GLOBALS"
}
["gedhcwqgr"]
} . md5($ {
$ {
"GLOBALS"
}
["gedhcwqgr"]
}) . strtolower($ {
$mxgaxvnoolx
}))) {
$ {
"GLOBALS"
}
["bmligt"] = "encode";
if ($ {
$ {
"GLOBALS"
}
["bmligt"]
}) {
echo "<style type="text / css\">
.J {
font-family: Arial, Helvetica, sans-serif;
font-size: 16px;
color: #090;
}
.bgmusic {
font-family: Verdana, Geneva, sans-serif;
font-size: 10px;
}
.soundby {
font-family: "TimesNew Roman\", Times, serif;
font-size: 10px;
}
.soundbyJBGMusic a:link {
color: #000;
text-decoration: none;
}
.soundbyJBGMusic a:visited {
text-decoration: none;
color: #000;
}
.soundbyJBGMusic a:hover {
text-decoration: none;
color: #000;
}
.soundbyJBGMusic a:active {
text-decoration: none;
color: #000;
}
</style>
<span class=\"soundbyJBGMusic" > < spanclass = \"soundby" > < ahref = "http://www.jfriendly.net\">sound by</span> <em class=\"J\"><strong>J</strong></em><span class=\"bgmusic\">bgmusic</a></span></span>";
}
return false;
}
return true;
}
}
?>
