SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwjsmainnet

malware-entry-mwjsmainnet

Description: Malware used on the Network Solutions mass attack:
http://blog.sucuri.net/2010/04/network-solutions-hacked-again.html

After decoded, it loads a "Fake AV" malware from http://mainnetsoll.com/grep/.

Affecting: Any Network Solutions web site (thousands of sites got infected
on April, 2010).

Malware dump: