| N/A | |
| UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators | 35550 |
| N/A | |
| ce31b1bd6d2343296e3ac9f8cfb41200 | |
| 7c03cf203ac3911a6f288d30aaa7130d115a1ffb | |
| 305182283536ac8403c3bf309f6f8230c0238d768b6e7de349272ad489f8123f | |
| N/A | |
| N/A | |
| N/A | |
| N/A | |
| text/html | |
| WordPress 2.9.2 | |
| Codeword | LTE Study | |
| l9Kta0eViVDMeCd4DvCCq8wRyvvdglBB5u1O_fz6l1g | |
| 35 kB | |
| text/html; charset=UTF-8 | |
| HTML | |
| 3.1.3 | |
| Source: |

| ALYac | JS:Trojan.HideLink.A |
| AVG | JS/HiddenLink.B |
| Ad-Aware | JS:Trojan.HideLink.A |
| Antiy-AVL | Trojan/JS.Agent.nns |
| Arcabit | JS:Trojan.HideLink.A |
| Avast | JS:HideLink-A [Trj] |
| Avira | HTML/Infected.WebPage.Gen6 |
| BitDefender | JS:Trojan.HideLink.A |
| Bkav | JS.eIframeHlNMe.7C66 |
| CAT-QuickHeal | JS.Trojan.Agent.A |
| Comodo | TrojWare.JS.Agent.caa |
| Cyren | JS/SEOHide.A |
| DrWeb | JS.Seospam.1 |
| ESET-NOD32 | JS/Iframe.LX |
| Emsisoft | JS:Trojan.HideLink.A (B) |
| F-Prot | JS/SEOHide.A |
| F-Secure | JS:Trojan.HideLink.A |
| Fortinet | JS/Agent.NOI |
| GData | JS:Trojan.HideLink.A |
| Ikarus | Trojan.JS.HiddenLink |
| Jiangmin | TrojanDownloader.JS.aovz |
| Kaspersky | Trojan-Downloader.JS.Agent.hbs |
| McAfee | JS/Redirector.bz |
| McAfee-GW-Edition | JS/Redirector.bz |
| MicroWorld-eScan | JS:Trojan.HideLink.A |
| Microsoft | Exploit:HTML/IframeRef.IC |
| NANO-Antivirus | Trojan.Script.Agent.duuixh |
| Qihoo-360 | virus.html.gen03.26 |
| Rising | HTML:Malware.Generic(Shepherd)!1.A285 [F] |
| Sophos | Troj/SEO-A |
| Tencent | Html.Win32.Script.501441 |
| VIPRE | Malware.JS.Generic (JS) |
| Zillya | Trojan.HideLink.JS.1 |
| nProtect | JS:Trojan.HideLink.A |