Sucuri Security
Skip to content
  • Login
  • SiteCheck
  • Blog
  • Sign up
  • Tour
  • About
  • Home

Malware Entries


Malware entry: MW:JS:442




Description:This encoded javascript loads malware (the fake AV) from:
*.vderukmvfds.com

Affecting: Web sites hosted at Aruba (more than 200 sites affected).

Malware dump:

Malware Entries

Subscribe to RSS

Backdoor: PHP:PREG_REPLACE:EVAL

Backdoor: PHP:C99:045

Backdoor: PHP:R57:01

Backdoor: PHP:EVAL:GZINFLATE:B64

Backdoor: PHP:GENERIC:07

Backdoor: PHP:WEBSHELL:03

Backdoor: PHP:Filesman:02

Malware entry: MW:JS:6525

Malware entry: MW:JS:160

Malware entry: MW:IFRAME:HD567

Malware entry: MW:JS:62313

Malware entry: MW:JS:69693

Malware entry: MW:ANOMALY:SP8

PHP Error: Eval code errors

Malware entry: MW:IFRAME:HD564

Malware entry: MW:JS:IFRAME213

Malware entry: MW:JS:2370

Malware entry: MW:JS:62312

Malware entry: MW:JS:3029

Malware entry: MW:BACK:451





Sign Up or visit our blog

What people are saying...
Twitter

@sucuri_security rocks! Thanks for all your help yesterday!!! :)

Tweeted by @swytch
RSS Twitter Facebook Delicious

Research Blog

  • Malware entries / categories
  • Malware entries RSS feed
  • New .htaccess attacks
  • New Malware – eval(function(p,a,c,k,e,d)
  • SQL injections: nbnjkl.com/urchin.js and jjghui.com/urchin.js
  • New Malware – sweepstakesandcontestsnow.com
  • Malware updates: Aug 2011 – .htaccess to .ru and osa.pl, iframes to .cc and .il

Tools

  • Free malware and security scanner
  • Check that short url before clicking it
  • Text browser - (Lynx, Elinks and w3m)
  • OSSEC - Test your logs online
  • Global malware view
  • Sucuri em Portugues (Brasil)
  • Sucuri en EspaƱol (ES)
  • Home
  • About
  • Affiliate Program
  • SiteCheck
  • Blog
Terms of Service | Privacy Policy

Copyright © 2011
Sucuri Security is a service of Sucuri LLC
All rights reserved.