Home Testimonials Company Support 1–888–873–0817
PRICING SUPPORT LOGIN
Home Notes Malware Signatures About

Malware entry: MW:IFRAME:GCOUNTER

Description:

Javascript encoded to hide an iframe from http://gcounter.cn (and some intermediary domains, like vepifam.co.cc, etc).
This is used to load malware from external web sites while not being visible to the user.


Affecting:

Any web site



Clean up:

This malware is generally hidden on .js or .php files without heavy encoding. Searching/replacing any gcounter.cn entry should fix it.


Malware dump (sample of malware):


 



For all our web-based malware signatures, go here: http://labs.sucuri.net/?malwaredb