didn't i just read somewhere today how to locate this stuff? the offending code is all base64 encoded so you can just grep for >255 character strings, which will not be common