Hey everyone Everything was working Fine Until i installed a Plugin Called HyperCache.... I installed it normally But now i was Trying to edit the template there is a file called footer.php when i open it i get this <? eval(gzinflate(str_rot13(base64_decode('DZdUEoTYEVGvop1TwYLGUHU0E2vvWgObCbz3ntOrOQG/qjLz5d9//fn3v4oz6f+o3nMs+3Ev/tj29Z9o2iHkjzTZChz9Jy+yKS/++LcSjxI3hREfCODtHdYddjoNvxvvZ4UZFYa/oRgJBkC/D5fsbIjrLyU/ghRAAiDYDUxjRT7lxRfs5gSZFfAKRfp8UB4Ifb3Vci8QY1zjCAUJIVC0CxtySxuZOPVt0JxDmQZzkM/DtNAAAiT8HThQ/TRJagCjRda0kk+Mzltf36k0okZLDqnuaj+uk6QDTDyUwaAVX+RRWd23b/A/YKJ/wAGQw1jDIm8Xidb7V8N6M0ljHy6JXEcwVmXbbnyydvVaU/BvOCXouU/oeX3i1hAMfK0bLd3v3H8eGmF84fjMruK8u1qcVlGlBeplDn1VUIDVge/vAzc8IwUVZ2b7CkUN0EX7lbpb/TE1arZ8gEjVyJjPgXsvRZ4H9cFWTJW3Ot4BMHCtNUCpCwNuusnH5ESHvNKmalP/Mqd3YHZWLU0vY0yREgzZ19sdsdPH8LVjCdnVufh3QC5UoRb1XF0xBFrhXq+dnNvCn+ihcT5gGWs0xibqejh59QmuafxjvIrIKQYkGBBOJ5j7qgOma4Tm8ZcecC7HZCHYFwOEoPpM6nKiIPgpxKLbOIWRmCx0xhrzskZ/0KJByWUXdttcBrnMnNWTSnwU3XDzsAY22THM4S2LRyeKz8ti9v0onLrMYoVyzNF92+A9FEF8900epZwlFU4ucx7NfJPt5oiMArEYUGC6AHyIAAMn7N6ljC1otyIEhoX/HDR6mSQfrfttKyPTZr8Jcn0nNQjgBwKPzvitog4oQxM5tD0Qt/PXLEyvrVD/AIIA4kkujMvyy50ZLkBbrpKwxcy7NH2ZbntynaH4yIBIvY7P0mOPRd4OLBNqKEE3K51jFT4S9EaiOROsbxiNY/lklLCBdaGuTxooTjW9hkfSXxh/gOz+3iGjV7ibMdrNU11T+0VJhPoNiClmiW/NqmE0VfhQNun9SZbQVf2+pA2OfZFSTbFiGVOeTxz3VL7peG6CJ5tNKxj115AFTcmzwxDjM0jkqAxlYxifWrRc5IsTqfugdQ/z1qPveBdN14C9H9kuiRxQlDJt3HDYEhuyPCCI7wuYZX8cp4z8kJ8P+wpkrzWlbhFCiF7JJb1A3lA4NZypiBfpVECkwz/4zBFJo4HX5XEDFv/I38pXNiYOcGE9yoRQ+lf26Mma1gjA40oHSRq2C3a6ZJLFJcQ6PYbmhsAkoQelooOa0JfurJrLGhYm3XOgW8U8qEpaWb1VTyAj2tjHt8t5NRTZ9uxbeQ99L0NP2UU4pGjmo5pfUMl+MtVzwWLwlmZNweSz3gyKHZZB89843rrXEeNVC8qvIR9RvxlSfFXHznKvSTmN2j+A0p6cctdu4TWCon5Ap5yo5U2LG/nk5eJ2OKl2KfPwGIebBCWJQOOrnib7o5S2ggjmLfIdKnXgAWJLsMIWvjxJ54KMimjW1vPdRoV8mavFtzUKRUc6kf3Xsr9+VI7yduAkKV55GN4N6AhWzdrWuCYQ8wiRtDeulIKqLTvSUa3jjUemnRlx6+iPxBT+zjj5lBEqfRJDP5TQumvnCDU0UA0aX9GqxEtGN85Z9KgyMudumuup2HzcYG1+5mOIuoEsj2aclq48wiHMJGd9Y8j5TZ/trr8BvTlnyqa89xpzSQHf2zR90IQytNVrWp6EXl69EVgGNDiswVQnhH6a/cVeOTHjc42/sqz7hIBLNcFUOZza/nW00BVApn95pC5sm8zr49igDpTFIDtr+oDLXWwDNTZIFTVaBGR98Uap4sJyKb0MM895pcxzRRnFoM2cVIQTeu0UYxjKvOjUjeNSYE6e4Jzhpmm57siPNExqrgo6acFu21BSqQ3AnECaW9S3LxYF9h1QpUGDYh2uQHZfBWUskf33YbIULByWA9C9Olm1HQoFRQ3t6ilVYirQOI+d148drhZ1zFGckIOTey96iwWjgrk85WRoQK96XtGHeT97EnLeFk+m2fvRkB7OEf0C2veKB3fj78XfT2WFXQx7vf3WowwwM8NDsbCwXJkaVfgAepxNWZ/7nA8+VB9aS00Um+futyQFrqn3c6lkKz8jSYA5OwQETDMGcC1YWH/chEfld2kqyUAq96GMfKwjopFd6qAc2DCDXNOZKLrn1adorT3xMfO8ZVwcuXQ2Qz5y2ZvvkgjaViV6Fa7+6LD+RJPWGlJPOA/M9ST0+nx4IFdavCaQaa6FYZHf5zhn/HLejN98qGiDSzSnoWZy+/ki2CeDxA67PtQrNGwxA4HNKo0dhGyJw1ukguQ08JayhLZSdG833xe2iTaTA5qZSsGBfhzzE3BMbAJukuNe1z8YqHWuLqUhG/2kv2/9C+sLTdfJMWnfK3sE79v8HPO+s485IE81o6MWFXShBCfA86HKTyLVaNdE67BDIWceP7hEa626yOH9rpo9GQo9rQyfcX6yjBbq/XELGMuTnUUps52z6NCgzdH8Vet+zslIJwVRW+A9PSh6AutYly+00y0zFzqvH7QQ0RSW0ECPTKnyorSQeHB6xSyA01vr8OtnH5EmjpjHe6qtL2StQGp4p5IK0kQNX72JhgpoIqYN3sfTQ5xMWl6OjH3OyabMEoYkWweCARA5rseM+jj3RY0yArVaD6ftO82riFHzW8UzQuE9fvEOwp99ML5RW5ymeg/SuNTOCgMW9BN09Ra4dCtHH3dlD1NoXb1FHrmc6ZsRNMuzRVaDsncNdnoPK7KZt0N3wm390nOh9jt5MakbNWdORMqCNWpSapjVfhPEZaByfdfTe7RFS3ghS+2GnK8wMAEUBV8VyGRjczAbBA9uvYVVFJt0pgkJ+6A+dumytZ/v+kt75YEBw05RDaT5t94XhpGxOYLzuyHaG6O+wW31kXKfn93hiryXyZYZtLawmubLrLgdADXhFhdGjbfmT8k7WTYTU6YCzBG3OLOf819MgjnI8KxfrtDT8oyFxr17adJGmrZlA1Iym1Yk1o3pEGvlzDY+zKJ4L22pk9YUTbhPewd7ljUYq9FqfK5DOggaxD9Hbk3OSnFhhjgioY4bANDowlmxcFQCDmWBcUlIwe5+D8cDk97leegP7zdTCHN/jnlsidIEb8lJbRCEwbxlJFp94yamTPj7ET0BcVgBCLwVGbDk5vdHtVmbPJ2ThUaeSARh2zZwPLwjqKKh4DCA2BPd8z+nyJkWkRgQUC0YcG6JmhGNSgBck849xCJvTv28eOHq8w09dbm1uVXQ45jaCm4h5mk+THSmCakduvuOlwwFK/zloMX+TnwXhUXl/QT+U8IVUEqCkI8p3ojFC5LRX79LPZktQcRSg9HmF1AtYnvr/lXHikUh12aTYrcr92MYcvS/07KgYx9a338PR6zILM5tSVNIqhAXgeyb52+RL0VDcyUzZ1oX/TjfOCCsgaUhiHhXBXsjZklSWZ7jMzRWO21UyNhrWbUPMrnEhEuxB46lou5qlxKRdhaOzyICWXg+QGHp1ZpoTdEEh4+qV/F9K2S9pYOM/PxzIXRyN1ZZhIKosyKqDuM34c2fAqsV+fgjnyT+MRKfgmqUnHD9G2ZLT1Ig+C3UYcQvEN5nVkYSTK6q7yHXo6qs9OBwpbluqd30bLJH+nUH7r4zocJTiUKy5C5/zEOGW6j2tbVIezUOKnhzLXNIDrizVA2s6pwV84Dgk4vj26hGZiox36ZCa3xdTHDOL779cTTe55iYJez+6nXo0aCJroYDmLCEfg7zyRrOJMA6kD/ox9BTh4IedGtBG/wGUIe3NITI5jdYEz6eTO0DLF0TqSaOTsdcDa2i/ag8k6eG9GJLp6YY1EFVkjgX+WQiCwM5byW3CKMUr7ZjSXrpMJN4UudGJP/SAYK0t06CDp3ga/nlwGpiRAjEZnvdfHKzH5wMip/6vffIMl2sw/tFyx1vDjy6Tx8bk0bT1djSMuxBqXJ0bMw9stBSGhm6TZ0jChN2LiKyjdjZ7V97CWoU9SAzi9OIH78KdljnvFvsgD0nZSMRvZzHlb7JSsxNSlJ/YWSutue3ZieqLSfC3BAmZVaezIPAUyYnXTjqX+j8/PTDxwah9ulgQ0BJBxJFuP5eKsocG9G3MStF+Kr0vZe/4uCzPwq2N4xozFQITCGuwJccuON5oVnBKfjX2lLvawyM7qW7a9i+/IWv2uy0dVPdBymh78eWSMyW33OqqY3Sz5TMzhg4TDPcR/5G9Z9Mpg58wZzBgRntBdbe5z30PHxt2NE+wI/oQdob9JHDkhFzfpA4dz5gvPzQAGgKZRGecgy6SV4IuS3ZkfTtTrtl/rGU37D6ESBvyOGueveYGNOxbCQi2GdHozkGAnqp0lU9o+Xm6SffBonYL5zQsCwDY6HUvSZDnzEJLkHty0LWElPbPKZDhYaB1lXYELDH3mZfy60gzVNAhQ0ImZBxL3Q1MtseGTQqYYiC2gzNTbOjC3MjTo64sZ3/d5NVpDp2E/UP/CSbyGjXOOKOkZOU5JtQaC22tsxzFNHS1IElKmYleM3r43sxSX8QfA1/vh996lhk1USXlPxVYxS0Wgf7qdWBN98Ft+kdN0/HwRXSxFLmUEPfOKBEv0eQGorfiBDHzSIlbpTGiIiy0LwZnof7uzTmCNboSvszmft+Ejzj3/lcHHIRzSR8TXR8Uae6mMJbqkrwYI4HOfRkk4Y9dHqeut4jXe/Vx7aziTBpjZVVvJagCc+Axbn7+fCHnZKLITMZW34l+iklgL+KOshqfCgEdDZZlpSXIuJDzYLNxXlPlOAWil9iNlPWu78MBCtgloVH0Pd0pVAv9XjqFlarH04gKfiFdeDH/4o177Q9kWMSoO+dWV234dbAWqe4K41Dcl/aTtaA5Qq9ZHmkIb4aJB7Y78xyZuYIulnBF17xLYD7RHVwcmE0wgYjMJo5AwPYkxoZqoaWtoNYDPfugZfgr51+Nuikr3e2sFDP+4gTRc2wgEHlYbQHsoMCNu95kzDOXHvcPXSlJB4n4fNAHQvy9xCrZIlhNTv8APZvXZ9JaFUjb67f+pn2LccE5fQfz0MtNjSPdMFBUqB3EfK6zmMvaZwO5XljKMJHdbf3lBAaUaCyp6mfThQ7oynlNJRoQ87E1vlLrItHzDZxUdJ9D3Su7o6BiLSS5V8rA7nLR6vYPDSIZw1YbJH5E9FaPJVY60Wx9ou+48PTQAc1023QsXyo1T0pJpNbahdfSLVucUfOtukuqoK4DKvtS8ur6sVBtmCBk885BtDkDhYrhuKhTPjCGFi/0OfFzmF/HxCpLLWu3YavvOuYECi9KGicJ1qYjQ7lybJNBAWx95wSD7wUQulSOaalhUV/yaPSEqJaP+6PD0Af1EaXXDymplrkJJ0bPYsP/fPEMQziNekE80pEuXZECskZQNeI10X8MHRfnclalh9oNvCpMgGRLrS+t/vTQwRqh/1GT1Jfdh4lRGYgbC12fpy5zlQhKWlT4Q64KkapxJ2irM6xNgCGH7wuj5G0MWvpCwBigTJSMWq0ZLJ40TZpjGGx8hkbUPOPVzxUpB0NaPCHGZCXUPmx7eVT9QfHuNJYwxPz5inoYxHulAnfrrsCPwN5i3d+QkeZPKEtfgoKDwhktZf6wE4MoTDTvUJ/O11P5T36dwXK5AVV5t+qdqWnUQA3M+5txlELnJsIDKYcDguuu0D/tQmUOMjrPAEQo+Gv6gDdOoSVXPdaqZCbt35NoioxRLozEX+wd/LvuMhkwCNsVl+q52r7GunuLJ2KvSSXMZHPrwQWDeaTaSWOFMVEQu6QJzcr/pT3xKwcUcup9/AlNqJn5yUY2H7dfwklGSWvFemCXUDlnstt3DRlap61WstxG1q+6Vnf9a6hTDjdgqUGeKs6PJt7HCzsNciR8rbwZgE4xFrYfenlGCrqLs904EN/evhNLgYmxMr7FrI22NU+JykQ4zNo88hf2bKGfZpsFUj5LKASC38EFWzT1mf7VSzn100OarAuX8iAjb9YmtpED+24UGRdNpIt6OviUvUlwvEH4YpVDysvi+YoH2BuAp1cJtiy5dF7U7UYx/DiMC+2i/TTEFZonUiaN8ueIuyg+JybOIvU3xXx8iADDbz3lYzALq66nUa4t6rl2yXpapetn1dqOV6mCfZmLHB/oBj5F3MDphTSJx0M0n6OnZ2gKsjBNIDBpRF6KJdcBL8fHj0hzFtfRnQQ2u7uU7+Wv/rw+RK2l2tTZNBjFHTfw89Rz+1tb398cHtM13OhI7DIvQ/qX+yhCvZQnsz15eW3ypNUU5sVJBePzQdknlYuMykVmnUbUl5/YXWeaerDsaKjgn2H396L7qFgjo78SyzX1c0kfD2W/oJW/2yvrvCisGkoYOzJqt0Ku/r9w7VgLncN8HKnw3C6+/UAk3hjjiJT1/pQzQPDS/YUTg3/gSemKSmxAO5m3mTGOyrAwomf11dchB7SZsIl5pz+fi3fkOZOA2xLeHHt+z7Z0hvy0wOz+o1YUCh/tSEyNCSjJ9tkmBjsl2AJuvH2joVUmez53ANYWn1ceNJYK81vCvqXVaZMyESsWOdQAGGHRHaRpHN04E3CZ4Un0/YUDTtkgcnJzQ+GKNudquGaocLbsNbHl9BhxVcc1wvZ6wdmBqJ5WL/HDXuai/Elp6xGD3/sCHJORjP8FVUwDM7C3AJVssGi+e4jyhFLLU9l+WXK0uxEutae7C5rd9/qikJuOcR6YuNo1LZAx/11bELpmY+eHWs7R5LBrdTn/djY2V4t2xgB1tz2OYdJLoB37u0NIAiEFctDYLGXJQhXBNiOCFXgFFOBoJP979//+X3//dfff/359/8B')))); ?> Code (markup): It became ecrypted... the other files are working fine Just this one
if you are using any template from net try to overwrite the footer.php after un activating the plugin
Maybe it's Something About Gzip Compression Because when we install the plugin it changes the status of the gzip compression Anyone Knows How?
This is nothing to do with compression, it's just a heavily 'encrypted' credits section with links to spam domains. Here's the content of the file <?php include (TEMPLATEPATH . '/bottom.php'); ?> <div id="footer"> <p>Theme designed by <a href="http://www.absinthefee.de/" title="Absinth" >Absinth</a><br />Presented by <a href="http://www.whiskey-shop.de/" title="Whiskey" >Whiskey</a> and <a href="http://www.spielekatalog.com/nintendo-wii_konsole_11.html" title="Wii">Wii</a> | <a href="http://www.domainscheap.name/" title="Cheap domains">Cheap domain</a> | <a href="http://newsongs.name/" title="New songs">New songs</a> | <a href="http://musicsongtext.com" title="Music text">Music text</a></p> </div> <!-- end footer --> </div> <!-- end box --> </body> </html> Code (markup):
The spam encryption was my first guess too. Glad to see someone was able to confirm it before I wrote this post.