Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

I recently worked on a web project that uses Javascript and PHP to load its content from flickr API.

I kept on getting this image show up and disappear immediately during first 2 or 3 seconds of the page load (http://www.yceml.net/0355/10883427-2.jpg) and couldn't find anything in the code that requests this image.

So I did google search on this image and came across this page: https://urlquery.net/report.php?id=1229289

So, obviously, it's a malware of some sort... can anyone please explain what this is and how to fix it?

share|improve this question
4  
There's not enough information to get us started. "SPL Exploit" is used urlQuery to describe attacks that has the same signature, supposedly from an exploit kit called SPL Exploit Kit, usually they're websites hosting the CVE-2012-1723 exploit. We don't know whether the server hosting your web project is infected, or your own system is infected. – Adnan Mar 19 at 10:09
   
This looks like spyware. – Rook Mar 19 at 16:53
To add to @Adnan's answer, here's an in-depth analysis from another guy asking the same question. It includes exploit kit removal procedure. – TildalWave Mar 30 at 23:53

closed as not a real question by Antony Vennard, Gilles, Polynomial, Jeff Ferland♦ Apr 2 at 16:48

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.

Browse other questions tagged or ask your own question.