Home Testimonials Company Support 1–888–873–0817
PRICING SUPPORT LOGIN
Home Notes Malware Signatures About

Malware entry: MW:IFRAME:HD765

Description: Javascript encoded to hide an iframe from http://mnbadew.com/toplist/in.cgi?9 (and some other domains).
This is used to load malware from external web sites while not being visible to the user.

Affecting: Any web site

Clean up: This malware is generally hidden on .js or .php files without heavy encoding. Searching/replacing any gcounter.cn entry should fix it.

Malware dump (sample of malware):

For all our web-based malware signatures, go here: http://labs.sucuri.net/?malwaredb