Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
unknown_html_RFI_shell malware on site, but what?
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: unknown_html_RFI_shell malware on site, but what? (Read 1489 times)
0 Members and 1 Guest are viewing this topic.
polonus
Avast Überevangelist
Probably Bot
Posts: 34065
malware fighter
unknown_html_RFI_shell malware on site, but what?
«
on:
February 26, 2014, 05:21:38 PM »
See:
https://www.virustotal.com/nl/url/c4365aab60b8adb20fc775da83f84dad830c197c4f925f7228a4b94fb424be8b/analysis/1393430326/
and:
https://www.virustotal.com/nl/ip-address/72.44.81.119/information/
Nothing here:
http://urlquery.net/report.php?id=9677166
Here detected by avast as infested with JS:Iframe-DRH[Trj] ->htxp://urlquery.net/report.php?id=2022603
wXw.terapiadebiomagnetismo.com,,,Ghosted, ->
http://jsunpack.jeek.org/?report=ae5f59e0a34ad129f7a63ce21da3fef2d9cb7f73
Given as benign:
http://zulu.zscaler.com/submission/show/af25224692b45c2d216a2d19ddb042f7-1393430984
and here:
http://app.webinspector.com/public/reports/20337822
I get an error for the host server:
https://ipdb.at/org/VPS_Datacenter,_LLC
-> Error 522 Ray ID: 102df0632e1f0743 (killed queries issue)
pol
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
unknown_html_RFI_shell malware on site, but what?