SiteCheck Signatures

  1. Home
  2. Signatures
  3. SiteCheck Signatures
  4. malware-entry-mwbackdoor23

malware-entry-mwbackdoor23

Description: Malicious tracking code added to the page to notify attackers that a backdoor is present on that page.

Domains used (imgaaa.net, airschk.com, imgddd.net, etc):


<img heigth="1" width="1" border="0" src="http://imgaaa.net/t.php?id=6744753";
<img width=0 height=0 src="http://airschk.com/countimg.gif?id=4da620681febfa679b00b25f&p=1";
imgddd.net/t.php?id=16447842

Affecting: Any web site (generally WordPress sites)

Clean up: The malicious code has to be removed, as well as all backdoors. Contact sucuri for help.

Malware dump:


<img width=0 height=0 src="http://airschk.com/countimg.gif?id=4da620681febfa679b00b25f&p=1";