Best Blackhat Forum

Sales Page: https://themeforest.net/item/flatsome-mu...me/5484319
Download: http://www85.zippyshare.com/v/8HJ8X3tq/file.html

VT: https://virustotal.com/en/file/1d12c7d61.../analysis/

It seems to be modified a little bit. I see all4share options in the theme. May be this is where you have downloaded the theme from

Yeah looks like it is messed with, i am not not touching this

(05-08-2017 05:16 PM)seosurfer Wrote: [ -> ]It seems to be modified a little bit. I see all4share options in the theme. May be this is where you have downloaded the theme from

Hi, where do you see this? I want to know because I thought it was clean

(05-08-2017 05:16 PM)seosurfer Wrote: [ -> ]It seems to be modified a little bit. I see all4share options in the theme. May be this is where you have downloaded the theme from

what do you mean? can you tell where you see this?

anyone who understand can check this up please? i feel so dirty using this but have no choice..

First one:header.php :
<?php $wfk='PGRpdiBzdHlsZT0icG9zaXRpb246YWJzb2x1dGU7dG9wOjA7bGVmdDotOTk5OXB4OyI+DQo8YSBocmVmPSJodHRwOi8vYWxsNGpvb21sYS5jb20iIHRpdGxlPSJBbGwgZm9yIEpvb21sYSAtIEZyZWUgZG93bmxvYWQgcHJlbWl1bSBqb29tbGEgdGVtcGxhdGVzICYgZXh0ZW5zaW9ucyIgdGFyZ2V0PSJfYmxhbmsiPkFsbCBmb3IgSm9vbWxhPC9hPg0KPGEgaHJlZj0iaHR0cDovL2dmeGZ1bGwubmV0IiB0aXRsZT0iRnJlZSBEb3dubG9hZCBXZWJzaXRlIFRlbXBsYXRlcywgV29yZFByZXNzIFRoZW1lcywgUEhQIFNjcmlwdHMsIFBsdWdpbnMsIEdGWCIgdGFyZ2V0PSJfYmxhbmsiPkFsbCBmb3IgV2VibWFzdGVyczwvYT4NCjwvZGl2Pg=='; echo base64_decode($wfk); ?>

Code:

<?php $wfk='PGRpdiBzdHlsZT0icG9zaXRpb246YWJzb2x1dGU7dG9wOjA7bGVmdDotOTk5OXB4OyI+DQo8YS​​BocmVmPSJodHRwOi8vYWxsNGpvb21sYS5jb20iIHRpdGxlPSJBbGwgZm9yIEpvb21sYSAtIEZyZWUgZ​G​93bmxvYWQgcHJlbWl1bSBqb29tbGEgdGVtcGxhdGVzICYgZXh0ZW5zaW9ucyIgdGFyZ2V0PSJfYmxh​bm​siPkFsbCBmb3IgSm9vbWxhPC9hPg0KPGEgaHJlZj0iaHR0cDovL2dmeGZ1bGwubmV0IiB0aXRsZT0​iRn​JlZSBEb3dubG9hZCBXZWJzaXRlIFRlbXBsYXRlcywgV29yZFByZXNzIFRoZW1lcywgUEhQIFNjcm​lwdH​MsIFBsdWdpbnMsIEdGWCIgdGFyZ2V0PSJfYmxhbmsiPkFsbCBmb3IgV2VibWFzdGVyczwvYT4NC​jwvZG​l2Pg=='; echo base64_decode($wfk); ?>

Decode from Above

Code:

<div style="position:absolute;top:0;left:-9999px;">

<a href="http://all4joomla.com" title="All for Joomla - Free download premium joomla templates and extensions" target="_blank">All for Joomla</a>

<a href="http://gfxfull.net" title="Free Download Website Templates, WordPress Themes, PHP Scripts, Plugins, GFX" target="_blank">All for Webmasters</a>

</div>

Clean and current 3.3.7 - found here: http://bestblackhatforum.com/Thread-GET-...erce-Theme

deleted.....

Prince_Boss

seosurfer

PaulieP

Prince_Boss

maximka

maximka

roxlol

dreaMaker

dacguy

ambrosini83