Author Topic: Site blacklisted, suspicious of script virus?  (Read 1337 times)

0 Members and 2 Guests are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34065
  • malware fighter
Site blacklisted, suspicious of script virus?
« on: February 25, 2014, 10:49:34 PM »
See: https://www.virustotal.com/nl/url/72bb411537083bd8b5ca636f2673957f8395beca38777c81d4e77ed94b13c476/analysis/1393363845/
Injection check: Suspicious Text before HTML     ï»¿ï»¿
Javascript check: Suspicious

<a href="htxp://metrika.yandex.ru/stat/?id=15890698&amp;from=informer" target="_blank" rel="nofollow"><img src="//bs.yandex dot ru/informer/15890698/3_1_ffffffff_efefefff_0_pageviews"...    oncluded scripts

Suspicious 404 page: Suspicious 404 Page:
   .ru/stat/?id=15890698&amp;from=informer" target="_blank" rel="nofollow"><img src="//bs.yandex dot ru/informer/15890698/3_1_
See: http://zulu.zscaler.com/submission/show/e07b0abd19ad472a8af53c98b7706990-1393364545


also see: http://support.clean-mx.de/clean-mx/viruses?id=15764599

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!