Avast WEBforum

Business Products => Archive (Legacy) => Avast Business => Avast Server Protection => Topic started by: Deiko240 on August 16, 2013, 04:14:02 PM

Title: i cant visit one page
Post by: Deiko240 on August 16, 2013, 04:14:02 PM

hello since the update avast no open the page from my school (http://www.aliatuniversidades.com.mx/bibliotecasdigitales/), the alert say its a troyan, so the page works good yesterday its free from virus, (sorry for my bad english) and sorry for post here

Title: Re: i cant visit one page
Post by: jefferson sant on August 16, 2013, 05:49:55 PM

(http://my.jetscreenshot.com/18363/20130816-h9kt-61kb.jpg)

https://www.virustotal.com/en/url/fe9b4bc59c63de9e84dc4a59d67eba21080dbb8ff70ec57e44dbe2d57cf11b42/analysis/1376667528/

http://urlquery.net/report.php?id=4588780

http://www.google.com/safebrowsing/diagnostic?site=aliatuniversidades.com.mx

http://quttera.com/detailed_report/www.aliatuniversidades.com.mx

http://zulu.zscaler.com/submission/show/a0236236c62b0c5f0dd70da157c84315-1376667660

http://www.siteadvisor.com/sites/aliatuniversidades.com.mx

http://sitecheck.sucuri.net/results/www.aliatuniversidades.com.mx


probably
you can use http://www.avast.com/contact-form.php for reporting potential FPs.

Title: Re: i cant visit one page
Post by: polonus on August 17, 2013, 11:16:24 PM

Joomla malware on site - spam attack malcode-  via dnn{position:absolute;top:-9999px} in code  (javascript Write)
see: http://forum.joomla.org/viewtopic.php?f=621&p=2865747

joomla needs updating

also this code hickup (eval p.a.c.k.e.d. code) wXw.aliatuniversidades.com.mx/modules/search/search.js benign
[nothing detected] (script) wXw.aliatuniversidades.com.mx/modules/search/search.js
     status: (referer=wXw.aliatuniversidades.com.mx/)saved 3575 bytes 492bb2a896270d28d6330cbae2ec9b45bcdbdafc
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Class
     error: line:6: TypeError: Class is not a constructor
     suspicious:

polonus

Title: Re: i cant visit one page
Post by: polonus on August 17, 2013, 11:40:59 PM

I get no alerts now with NoScript and RequestPolicy extensions active in the browser going to http://www.aliatuniversidades.com.mx/

polonus