Avast WEBforum

Other => Viruses and worms => Topic started by: sunilkumarpkerala on July 31, 2012, 10:24:23 AM

Title: my site zappiertech.com is redirected to http://mercurytutors.com/stats.php
Post by: sunilkumarpkerala on July 31, 2012, 10:24:23 AM
my site zappiertech.com is redirected to mercurytutors.com/stats.php, and avasta giving an error message as JS:Redirector-YD
. Please help me to solve this issue. It is a wordpress site. It is really urgent .
Title: Re: my site zappiertech.com is redirected to http://mercurytutors.com/stats.php
Post by: Pondus on July 31, 2012, 10:31:47 AM
edit your post and topic title and make the links no clckable to avoid accident clicking



we cant solve it, only the site owner can

sucuri - blackhole detection
http://sitecheck.sucuri.net/results/zappiertech.com
sucuri malware info
http://labs.sucuri.net/db/malware/malware-entry-mwexploitkitblackhole1.php

urlquery - listed at Snort and sucuritata emerging threats
http://urlquery.net/report.php?id=108738

unmasparasites detect redirect.   http://www.unmaskparasites.com/
to suspicious site.
http://www.unmaskparasites.com/web-page-options/?url=http%3A//mercurytutors.com/stats.php&susp=1



Title: Re: my site zappiertech.com is redirected to http://mercurytutors.com/stats.php
Post by: polonus on July 31, 2012, 10:49:27 PM
Wordpress internal path: /home/amrithd/public_html/zappiertech.com/wp-content/themes/TheProfessional/index.php
WordPress version outdated: Upgrade required - Note that any PHP, JS or .htaccess could be compromised by this type of malware.
The location line in the header above has redirected the request to: htxp://mercurytutors.com/stats.php
Content returned: 1: No input file specified.
This is important information from sucuri:
http://labs.sucuri.net/?details=mercurytutors.com
URLs and sub domain distributing the malware or acting as a redirector,
found as http://labs.sucuri.net/db/malware/malware-entry-mwhta7
attack uses the .htaccess file to redirect users to a site serving malware (or spam).
In some cases, the index.php is also modified to do the redirection as well

polonus
Title: Re: my site zappiertech.com is redirected to http://mercurytutors.com/stats.php
Post by: !Donovan on August 01, 2012, 02:22:31 AM
Hi sunilkumarpkerala,

Similar problem here: https://badwarebusters.org/main/itemview/29830

~!Donovan

Title: Re: my site zappiertech.com is redirected to http://mercurytutors.com/stats.php
Post by: !Donovan on August 01, 2012, 05:38:23 PM
@sunilkumarpkerala

You are running on Apache. You can either edit your .htaccess file(s) or delete them to start off fresh.
http://wiki.apache.org/httpd/Htaccess
http://www.htaccess-guide.com/
http://www.makeuseof.com/tag/how-to-easily-create-and-edit-htaccess-file-for-your-site/