Best Blackhat Forum

This CodeCanyon slider plug-in is a fantastic plug-in by which
users can add fancy slideshows to their web posts and articles. This plug-in
has features like backend functionality, navigational styles, sliders and unique
transition effects. This plug-in does not even need any special coding
knowledge to be configured on your websites.

Someone else posted an infected version and this one here is clean.

Download: Link
Edit: Cleaned up version Link

file removed, please reup it
thanks

@blackcat51 - The link still works, I just downloaded it. Let me know if you have any problems, then I'll re-up thru my own mediafire account.

Btw, make sure to delete the "base64" and "96down" links in the plugin.

Once removed, it works fine.

@shareone - Thx for the share, rep added :)

Thanks, downloaded in firefox browser, the prob was Chrome.
where the "base64 and 96down" links are located?
Thanks a lot

(02-08-2014 12:24 PM)Dpet102 Wrote: [ -> ]Btw, make sure to delete the "base64" and "96down" links in the plugin.

Oh, didn't catch these. I found the 96down link in the revslider.php and release_log.txt but didn't find base64.
I have deleted what I found and reuploaded it.

Look at the bottom of the functions.php, and top of the style.css for 96down links. Unfortunately, you really have to dig into cleaning the files because, for example, 96down will also post their link in the smack dab middle of the style.css file, but instead of being a regular www. link, they'll add a space between each letter.

Wplocker is notorious for this, even worse actually. They'll add their links everywhere, and I mean everywhere. Such as in the screenshot, and most of the theme images.

Base64 codes are usually found in javascript files and also style.css. In the style.css file, it'll usually look like "background_image:url base64" ... Or something like that, followed by a bunch of squiggly characters. Delete the whole line.

This applies not only for plugins but themes as well.

(02-09-2014 02:33 AM)Dpet102 Wrote: [ -> ]Look at the bottom of the functions.php, and top of the style.css for 96down links.

Cleaned. Link

so is this fixed? or the links in functions php or in reversis php?

(02-09-2014 03:37 AM)aoe316 Wrote: [ -> ]so is this fixed? or the links in functions php or in reversis php?

Yup.

Just installed !! perfect !!!
Thanks for sharing.