To read on the malcode campaign, see google results: https://www.google.nl/search?q=W32%2FCaphaw+DriveBy+Campaign+Statistic.js&oq=W32%2FCaphaw+DriveBy+Campaign+Statistic.js&aqs=chrome..69i57j69i58&sourceid=chrome&espv=210&es_sm=93&ie=UTF-8#es_sm=93&espv=210&q=W32%2FCapshaw+Drive+By+Campaign+ So this an JAFT detection (just another freaking trojan) → http://cn.securityfrontline.org/tag/trojan/page/2 and http://www.dataprotectioncenter.com/antivirus/eset-nod32/caphaw-attacking-major-european-banks-using-webinject-plugin/
polonus