This is generic signature for malware based on the window_location() function.
Affecting
Any website
Cleanup
You can sign up with us and let our team remove the malware for you.
Dump
...example...
if (top.location.href == window.location.href) {
window.location = "http://bad-domain/search/?q=keyword%2F";
} else
window.location = "http://bad-domain.com/search/?q=keyword%2F&if=1";