SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwjs442

malware-entry-mwjs442

Description:This encoded javascript loads malware (the fake AV) from:
*.vderukmvfds.com

Affecting: Web sites hosted at Aruba (more than 200 sites affected).

Malware dump:


var $a="Z63 cZ3dZ225n Z2567Z2574h;iZ252b+)Z257bZ2574mpZ253dZ2564sZ252eslZ2569ce(Z2569..