That is so strange about it that it only loads an image file. The file
http://66.40.16.194/counter.js shows up on a lot of pages. When it's loading most virus scanners report that the JS/Seeker.gen.h virus has been found. On all the pages where I find the counter.js file is also a Paycounter installed as far as I can remember. To me it looks like it has to do something with eachother. Check for example this page:
http://devinn.miraclecreations.com/dl.htm
ip-address of paycounter.com = 66.77.141.20