Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I recently worked on a web project that uses Javascript and PHP to load its content from flickr API.

I kept on getting this image show up and disappear immediately during first 2 or 3 seconds of the page load ( and couldn't find anything in the code that requests this image.

So I did google search on this image and came across this page:

So, obviously, it's a malware of some sort... can anyone please explain what this is and how to fix it?

share|improve this question

closed as not a real question by Antony Vennard, Gilles, Polynomial, Jeff Ferland Apr 2 '13 at 16:48

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

There's not enough information to get us started. "SPL Exploit" is used urlQuery to describe attacks that has the same signature, supposedly from an exploit kit called SPL Exploit Kit, usually they're websites hosting the CVE-2012-1723 exploit. We don't know whether the server hosting your web project is infected, or your own system is infected. – Adi Mar 19 '13 at 10:09
This looks like spyware. – rook Mar 19 '13 at 16:53
To add to @Adnan's answer, here's an in-depth analysis from another guy asking the same question. It includes exploit kit removal procedure. – TildalWave Mar 30 '13 at 23:53

Browse other questions tagged or ask your own question.