How to decrypt index.php in Joomla?

Question

Joomla

Hello!
Such a problem, the site on Joomla stopped working, gives a 500 error, went to index.php and there are crocodile files (attached file)
If you add another index.php instead of this file, its contents are displayed without problems.
What could it be, a virus?

File attached

Answer 1

Everything is bad friend)) It happened to me, you didn’t have an updated version of joomla, or the hosting was full of holes, or the access rights on the hosting to files and directories were incorrectly set .. This is a virus, you will most likely find such code in many Joomla files. Its meaning is that this code redirects to different sites when the user clicks on it in the search results. Search engines will exclude your site from the search results, and Yandex will send a notification that your site is infected.
This code does not need to be decrypted, it must be removed from all Joomla files. There was a script on the Internet how to remove such code from all files. And it's better to save the template, demolish Joomla, and install the latest version, if possible.