Author Topic: Malicious SE visitors redirects not detected at VirusTotal scan!  (Read 1222 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34054
  • malware fighter
Malicious SE visitors redirects not detected at VirusTotal scan!
« on: November 28, 2014, 12:06:30 AM »
Missed: https://www.virustotal.com/en/url/3401e0890b70836f13725643bfb2e06b04658354e4e8602d622e38292c67552e/analysis/1417129217/
Quttera gets it: index
Severity:   Suspicious
Reason:   Detected suspicious redirection to external web resources at HTTP level. [What's this?]
Details:   Detected HTTP redirection to htxp://mediciron.ru/.
File size[byte]:   0
File type:   Unknown
Page/File MD5:   00000000000000000000000000000000
Scan duration[sec]:   0.001000

as detection here: http://killmalware.com/khoya.in/
Running on: LiteSpeed
Powered by: PHP/5.3.29
PHP error: Fatal error</b>: require() [<a href='function.require'>function.re
Site error detected. Details: http://sucuri.net/malware/php-error-fatal-error?v7
<b>Warning</b>:  require(/home/khoya/public_html/wp-includes/load.php) [<a href='function.require'>function.require</a>]: failed to open stream: No such file or directory in <b>/home/khoya/public_html/wp-settings.php</b> on line <b>21</b><br />
source = Sucuri Sitecheck Free.
mail server abuse for IP: http://www.projecthoneypot.org/ip_69.73.188.186

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!