I have found this bastard.
they are under /wp-includes/fonts/dashicons.cbu
when i delete the file i’ll recive an error and the website don’t show anityng because say the dashicons.cbu was needed so i delete the content and all done right infact inside i found a base64_decode
now all is ok…
i’ll made another try wen all ok put this as resolved