Author Topic: avast! does not block redirecting spam site!  (Read 1819 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33895
  • malware fighter
avast! does not block redirecting spam site!
« on: December 24, 2013, 01:06:23 PM »
See: http://maldb.com/citygreenads.com/
Nothing alerted here: http://urlquery.net/report.php?id=8528441
Injection Check: Suspicious Text before HTML

<div style="font:0px trebuchet ms; color:#333;"><a href="htxp://wxw.buypr8backlinks.com" title="buy pr8 backlink">buy pr8 backlink</a><a href="htxp://www.ucakbiletiyeri.com" title="ucuz ucak bileti">ucak bileti</a><a href="htxp://www.anketdoldurarakparakazanma.gen.tr" title="para kazanma">para kazanma</a><a href="htxp://wxw.hemoroidtedavisinasilge etc.
Spam check: Suspicion of Spam

//wxw.hdsexmovies.org" title="porno izle">porno izle</a> <a href="htxp://forexsistemi.com/" title="forex" rel="follow">...

code hick-up: citygreenads dot com/plugins/system/rokbox/rokbox.js benign
[nothing detected] (script) citygreenads dot com/plugins/system/rokbox/rokbox.js
     status: (referer=citygreenads dot com/)saved 22076 bytes 9837fadde68f6435eda50481709e09401681aeca
     info: [decodingLevel=0] found JavaScript
     error: undefined variable Element
     error: undefined function Element.extend
     info: DecodedGenericCLSID detected 02BF25D5-8C17-4B23-BC80-D3488ABDDC6B D27CDB6E-AE6D-11cf-96B8-444553540000 22D6f312-B0F6-11D0-94AB-0080C74C7E95   - embedded object
     info: [embed] citygreenads dot com/plugins/system/rokbox/
     info: [decodingLevel=1] found JavaScript
     suspicious:

Joomla needs updating: Web application version:
Joomla Version 1.5.15 for: htxp://citygreenads.com/media/system/js/caption.js
Joomla Version 1.5.15 for: htxp://citygreenads.com/language/en-GB/en-GB.ini
Joomla version outdated: Upgrade required.

pol
« Last Edit: December 24, 2013, 01:31:06 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!