CLEAN INSTRUCTIONS

1. Open Windows Explorer, locate the infected file and delete it.

2. Run a full system scan with BullGuard.

SYMPTOMS

1. Increased network traffic.

2. Suspicious processes might be observed in Task Manager.

DESCRIPTION

1. This is a script that usually is embedded in web pages.

2. It creates a hidden frame with a source to a malicious website: http://{removed_ip}/logo/index.php

3. In this way it can download other malicious components.

Author:
The BullGuard Team