SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwjs205

malware-entry-mwjs205

Description: Malware used on the Network Solutions mass attack:
http://blog.sucuri.net/2010/05/new-infections-today-at-network.html
http://blog.sucuri.net/2010/05/continuing-attacks-at-network-solutions.html

Affecting: Any Network Solutions web site
Clean up: This malware is being called by perl script inside the cgi-bin directory.
Look inside cgi-bin/php.ini for the file name and delete it.

Malware dump: