Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Why avast! does not detect Trojan.PHP.Agent.GA on this site?
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: Why avast! does not detect Trojan.PHP.Agent.GA on this site? (Read 3830 times)
0 Members and 1 Guest are viewing this topic.
polonus
Avast Überevangelist
Probably Bot
Posts: 33895
malware fighter
Why avast! does not detect Trojan.PHP.Agent.GA on this site?
«
on:
November 24, 2013, 03:36:35 PM »
See:
https://www.virustotal.com/nl/url/6fc058fb3e31f421141d35e5640a27b1711dc607393b2262985e354c5891069f/analysis/1385302442/
and file analysis:
https://www.virustotal.com/nl/file/232c735497c29a4583a577c8b6f5bbc2d9e3e06d3e42f9799aa1f7a7e9de7afc/analysis/1385241935/
Not detected or alerted here:
http://urlquery.net/report.php?id=7933400
Blacklisted:
http://trafficlight.bitdefender.com/info?url=http://gesundheitscentrum-frechen.de
Other malware on IP:
http://support.clean-mx.de/clean-mx/viruses?id=15458828
Joomla error flagged: >jos-Error</b>: Kategorie nicht gefunden<br /> <br /> JSite -> dispatch() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/index.php:42<br /> JComponentHelper :: renderComponent() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/includes/application.php:197<br /> JComponentHelper :: executeComponent() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/libraries/joomla/application/component/helper.php:351<br /> require_once() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/libraries/joomla/application/component/helper.php:383<br /> JController -> execute() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/components/com_content/content.php:16<br /> ContentController -> display() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/libraries/joomla/application/component/controller.php:761<br /> JController -> display() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/components/com_content/controller.php:74<br /> ContentViewCategory -> display() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/libraries/joomla/application/component/controller.php:722<br /> JError :: raiseError() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/components/com_content/views/category/view.html.php:59<br /> JError :: raise() @ /is/htdocs/wp10928300_M9X6JJXGYK/wXw/ghz/libraries/joomla/error/error.php:251
This is a MySQL Query Syntax Error after admin login (info credits: Lukasz Jaroszewski) - server error -> setting(unset after installation):
probably because of Trojan.PHP.Agent.GA - It sends details on the URL requested, remote IP address, browser user-agent, etc to "
http://mbrowserstats.com/statH/stat.php
". Is flagged by several av solutions, but can it be legit or is it a PHPShell-backdoor?
see: htxp://hackw0rm.blogspot.nl/2013/06/C99Shell-backdoor.html
polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Why avast! does not detect Trojan.PHP.Agent.GA on this site?