Please ban the thread starter.
Well i used it and i don't know if it has something to do with the webshell but i got my hosting f**ed, the good thing is that it was a free hosting, and domain name it's from other provider...i just hope it was a false detection, although it was detected as WEBSHELL.
This is OK. It is reported for every version of this plugin. It just means that a portion of plugin is encoded.