Basicly found some files on the server encoded a few times having trouble decoding them any hep would be great there are 3 files from the looks of it. I have had to past it in pastbin as it was to big to add to the post http://pastebin.com/Pw3aUdpR any help would be much appreciated
A dumb little script for removing the eval(base64()): for i in $(find . -name '*.php') do sed -i -r 's#eval\(base64_decode\([^\)]+\)\);##g' "${i}" done