SiteCheck Signatures

  1. Home
  2. Docs
  3. SiteCheck Signatures
  4. malware-entry-mwjs751

malware-entry-mwjs751

Description:This encoded javascript loads a Java malware from:
http://nunpoo.com/counter.js
Affecting: Any web site (common on WordPress and Joomla). Generally the core .js files are modified.

Malware dump:


var xivQH_ = unescape('{var xyUKIl %3d %27i%2566%2528t% ...