SiteCheck Signatures

  1. Home
  2. Docs
  3. SiteCheck Signatures
  4. malware-entry-mwspams8


Description Malware used on a large scale SEO SPAM work
controlled by these domains:

Fake AV: When it detects that a user is using Windows, it will
redirect them to:
And other domains to try to push the fake anti-virus.

Affecting: Joomla sites. Malicious code is added to the index.php

Malware dump:

eval (base64_decode("aWYgKHN0cmlzdHIoJF9TRVJWRVJbSFRUUF9SRUZFUkVSXSwiZ29