================================================================================================= _JEwm5UD1miu8oJAEyl40zpS._ADDkYDcs7X98lN8MO8363Iavi206Ww3lO=\\\"\\\" ...is an instanciation of... '$_qax.$_hostname="%-%-%-%-hostname-%-%-%-%"' ...in CHObfusjsx_hostname.class.php The configuration parameters are concatinated with $sepa=mb_chr(hexdec("200B")); in CHObfusjsx.class.php ------------------------------------------------------------------------------------------------- What comes after that is [CHObfusShift]: (function(_Avns40uYA1k1D9Qz934Z8vl2KKyGLS628hL67k7hz,_HmQ5HAb1533hA9L,_OcWl91sUz2V9YarCodeAt,_ET77bW,_T967kjr,_G112QJRTE2E0jb6FLHK3785Csdaokaj,_UKDR9DgJoxtjLQlSxe64,_J3M7bX5S60dY6ZjQnugrpj7QT73G){_G112QJRTE2E0jb6FLHK3785Csdaokaj=this ------------------------------------------------------------------------------------------------- [CHObfusShift] (function($_document,$_String,$_charCodeAt,$_length,$_code,$_window,$_fromCharCode,$_Function){ $_window=this; ================================================================================================= ================================================================================================= Pay attention to this part: _JEwm5UD1miu8oJAEyl40zpS._PQ84Sb55mFvpD2Hq1v3Mnd1ykEeE6wx=\\\"\\\"_JEwm5UD1miu8oJAEyl40zpS._ADDkYDcs7X98lN8MO8363Iavi206Ww3lO=\\\"\\\"_JEwm5UD1miu8oJAEyl40zpS._MULlFd03W3CmcHuStOEh7oGv=\\\"1\\\"_JEwm5UD1miu8oJAEyl40zpS._NyG5a2pT1V2wHd760p=\\\"1\\\"(function(_Avns40uYA1k1D9Qz934Z8vl2KKyGLS628hL67k7hz,_HmQ5HAb1533hA9L,_OcWl91sUz2V9YarCodeAt,_ET77bW,_T967kjr,_G112QJRTE2E0jb6FLHK3785Csdaokaj,_UKDR9DgJoxtjLQlSxe64,_J3M7bX5S60dY6ZjQnugrpj7QT73G){_G112QJRTE2E0jb6FLHK3785Csdaokaj=this ================================================================================================= [Full Code]