Avast WEBforum

Other => Viruses and worms => Topic started by: polonus on October 22, 2012, 10:53:11 PM

Title: Site re-directing to dsparking dot com. Is it being detected?
Post by: polonus on October 22, 2012, 10:53:11 PM

See: http://zulu.zscaler.com/submission/show/908d696a874eb8b048f066b59b2a51af-1350937680 &
http://www.unmaskparasites.com/web-page-options/?url=http%3A//laquintapatadelgato.com/%2520index%2520page&susp=1&sb=1
found JS with undefined variables....(referer=cdn.dsultra dot com/js/registrar.js) this cause by a Joomla hack on this website,
similar problem described here by renegadeskone: http://forum.joomla.org/viewtopic.php?f=621&t=707099
See: http://www.mywot.com/en/scorecard/dsparking.com?utm_source=addon&utm_content=popup-donuts
Malware found on site according to sucuri: http://sitecheck.sucuri.net/results/laquintapatadelgato.com/
Content after the < /html> tag should be considered suspicious.
sc​ript type≈ "text/javascript"> JS_load_form('resultado_post_calen',​ 'val_ref1≈ 1349071200&val_ref2≈ bogota',​ 'htxp://wXw.laquintapatadelgato.com/calendario.php',​ 2)

polonus