See: https://www.virustotal.com/nl/url/a8309b3c43277472338647b5f634b6e16004ab4a25c2a0e6631ad29ddf297c79/analysis/1411666979/
&
https://www.virustotal.com/nl/file/fac9cb94ada4d776316cd069d40d54fd14254c666b1d847ac8f6479885b766c2/analysis/1404148298/
Web application details:
Application: Joomla! 1.5 - Open Source Content Management - http://www.joomla.org
Web application version:
Joomla Version 1.5.18 - 1.5.26 for: htcp://paginaswebya.com/media/system/js/caption.js
Joomla Version 1.5.18 to 1.5.26 for: htcp://paginaswebya.com/language/en-GB/en-GB.ini
Joomla version outdated: Upgrade required.
Outdated Joomla Found: Joomla under 2.5.20 or 3.3
/plugins/system/rokbox/rokbox.js
Severity: Potentially Suspicious
Reason: Detected potentially suspicious content.
Details: Detected potentially suspicious initialization of function pointer to JavaScript method write __tmpvar46063292 = write;
Threat dump: http://jsunpack.jeek.org/?report=c680cb1443a91d69dcf4e111d3b210039d0f2031
Threat dump MD5: 74F4E0CA351C130C13A9D16EABC76BA7
File size[byte]: 21474
File type: ASCII
MD5: 601CDF3B9AC5C58D523388F053B10456
Scan duration[sec]: 0.652000
pol