Author Topic: Website appears to have a redirect identified as a virus  (Read 4694 times)

0 Members and 1 Guest are viewing this topic.

Footprint

  • Guest
Website appears to have a redirect identified as a virus
« on: July 03, 2013, 06:29:19 AM »
my commercial website is reporting a virus/redirect. I have had my host scan the entire site and found nothing wrong, but it seems to alert every time I open the main page with a note that it is infected and gives a website address. I would appreciate if anybody could have a quick look and offer some advice.

www.footprintit.com

Regards

Footprint

Footprint

  • Guest
Re: Website appears to have a redirect identified as a virus
« Reply #1 on: July 03, 2013, 06:31:13 AM »
I note it doesn't  come up in chrome and there are not supposed to be any redirects On the site.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Website appears to have a redirect identified as a virus
« Reply #2 on: July 03, 2013, 08:28:17 AM »
Sucuri: Unable to properly scan your site. Site returning error (40x): HTTP/1.0 403 Forbidden
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Footprint

  • Guest
Re: Website appears to have a redirect identified as a virus
« Reply #3 on: July 03, 2013, 09:13:06 AM »
There is a school of thought that says there is an infection in the template and I have asked the writers of the site to investigate that tonight, however it worries me because this is the prime way customers have of getting in touch with us and the WordPress site is quite new to me. One of my staff did a scan with word fence, and it said that several files appeared to be containing malicious software, but this is the first time ever seen from my perspective

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
« Last Edit: July 03, 2013, 09:28:31 AM by Pondus »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Website appears to have a redirect identified as a virus
« Reply #5 on: July 03, 2013, 09:29:38 AM »
attach screenshot of avast warning popup here....


Footprint

  • Guest
Re: Website appears to have a redirect identified as a virus
« Reply #6 on: July 03, 2013, 09:40:14 AM »
Hope it helps

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Website appears to have a redirect identified as a virus
« Reply #7 on: July 03, 2013, 09:41:12 AM »
Hope it helps

Sorry, too small to read.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Footprint

  • Guest
Re: Website appears to have a redirect identified as a virus
« Reply #8 on: July 03, 2013, 09:48:19 AM »
Trying again

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Website appears to have a redirect identified as a virus
« Reply #9 on: July 03, 2013, 09:53:47 AM »
From Sucuri:

Scan for: hxxp://signinstopping.biz
Hostname: signinstopping.biz
IP address: 31.44.184.158

System Details:
Running on: Microsoft-IIS/6.0
Powered by: ASP.NET
Unable to properly scan your site. Site returning error (40x): HTTP/1.1 404 Not Found
Unable to properly scan your site. Site empty (no content): Content-Length: 0
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Website appears to have a redirect identified as a virus
« Reply #10 on: July 03, 2013, 03:15:19 PM »
Here is a clearer shot, the site is re-directing (or trying to)


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
Re: Website appears to have a redirect identified as a virus
« Reply #12 on: July 03, 2013, 04:23:10 PM »
Site had these risks identified: Scan for Hostile Strings   **Risk Identified - Generic Web Bot test  **Risk Identified
aka server still supports SSLv2 - a vulnerability issue. http method vulnerabilties
look how to disable: http://www.hosting.com/support/pci-security-scan/disable-sslv2-in-apache-(httpd)

polonus
« Last Edit: July 03, 2013, 04:26:25 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!