Hey Kiran ! I have the same issue... and I found some data about it. This virus was supposed to infect machines and stole FTP credentials from your ftp client. But instead of that (at least at my case) it is listening for the traffic flow, and gets your credentials when you make a connection. Once the user and password were stoled, I found regular connections from foreing IPs. So for now, I did this: - remove manualy the iframes in your computer. - Upload the files - Change the password and don't use it until you clean this virus. I couldn't find the name of this virus yet, if you do, please, tell me ! Some tips: - I have nod32, and it found nothing in my PC. - Panda security (web scann) can't find nothing either. - When people with AVG and Avast try to go to an infected page, their AV gives them a message about the threat. I hope it helps you a bit. Regards. Edgar