Hi,
I have just installed your scanner in one of my test sites, (www.majalla.eu), and it did scann, but it did not find the “MW:SPAM:SEO” code. I still have them on the site, and I have checked almost all the files but canot find the location of these codes…
Below is the Securi scanners results …
===
url: http://sitecheck.sucuri.net/results/majalla.eu
web site: majalla.eu
status: Site infected with malware
web trust: Not Blacklisted
*Cached results from the last 24 hrs.
Malware found in the URL: http://www.majalla.eu/
Known javascript malware.
Details: http://sucuri.net/malware/entry/MW:SPAM:SEO
t=”;}}x[l-a]=z;}document.write(‘<‘+x[0]+’ ‘+x[4]+’>.’+x[2]+'{‘+x[1]+’}</’+x[0]+’>’);}dnnViewState();
Malware found in the URL: http://www.majalla.eu/404testpage4525d2fdc
Known javascript malware.
Details: http://sucuri.net/malware/entry/MW:SPAM:SEO
t=”;}}x[l-a]=z;}document.write(‘<‘+x[0]+’ ‘+x[4]+’>.’+x[2]+'{‘+x[1]+’}</’+x[0]+’>’);}dnnViewState();
Malware found in the URL: http://www.majalla.eu/404javascript.js
Known javascript malware.
Details: http://sucuri.net/malware/entry/MW:SPAM:SEO
t=”;}}x[l-a]=z;}document.write(‘<‘+x[0]+’ ‘+x[4]+’>.’+x[2]+'{‘+x[1]+’}</’+x[0]+’>’);}dnnViewState();
Malware found in the URL: http://www.majalla.eu/about-us
Known javascript malware.
Details: http://sucuri.net/malware/entry/MW:SPAM:SEO
t=”;}}x[l-a]=z;}document.write(‘<‘+x[0]+’ ‘+x[4]+’>.’+x[2]+'{‘+x[1]+’}</’+x[0]+’>’);}dnnViewState();
Malware found in the URL: http://www.majalla.eu/writers
Known javascript malware.
Details: http://sucuri.net/malware/entry/MW:SPAM:SEO
t=”;}}x[l-a]=z;}document.write(‘<‘+x[0]+’ ‘+x[4]+’>.’+x[2]+'{‘+x[1]+’}</’+x[0]+’>’);}dnnViewState();
Malware found in the URL: http://www.majalla.eu/submissions
Known javascript malware.
Details: http://sucuri.net/malware/entry/MW:SPAM:SEO
t=”;}}x[l-a]=z;}document.write(‘<‘+x[0]+’ ‘+x[4]+’>.’+x[2]+'{‘+x[1]+’}</’+x[0]+’>’);}dnnViewState();
Malware found in the URL: http://www.majalla.eu/category/turkey-news
Known javascript malware.
Details: http://sucuri.net/malware/entry/MW:SPAM:SEO
t=”;}}x[l-a]=z;}document.write(‘<‘+x[0]+’ ‘+x[4]+’>.’+x[2]+'{‘+x[1]+’}</’+x[0]+’>’);}dnnViewState();
===
Based on the Securi Results when I check the ViewSource for the home page for example, and on the ViewSource I search for the abouve code snipets, I can easily find that on the Source, but canot find it on any files…
===
[Code moderated. Please do not post hack code blocks in the forums. Please use the pastebin]
===
Can you kindly get the abouve located and cleaned ASAP …
Thanking you,
Best regards,
Fawaz
