« previous next »
Pages: [1]   Go Down

Author Topic: SE redirects on website...  (Read 1714 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33925
  • malware fighter
SE redirects on website...
« on: April 10, 2015, 05:46:39 PM »
See: http://killmalware.com/vc-enisey.ru/#
Missed here: https://www.virustotal.com/nl/url/41dbf08f3dcb69b3758b373e3a52da3941292f9db3905b5ba1983ea8ce196a5c/analysis/#additional-info
index
Severity:   Suspicious
Reason:   Detected suspicious redirection to external web resources at HTTP level.
Details:   Detected HTTP redirection to htxp://web-redirect.ru/?web.
Suspicious: http://zulu.zscaler.com/submission/show/60f54ac843c3d492a97b6fab7d8dc9b8-1428674809
Chain of redirects found:
to: htxp://web-redirect.ru/?web
541 sites infected with redirects to this URL
to: htxp://cmsjoom.ru/components/com_weblinks/2/separator.php
Web application version:
Joomla Version 2.5.6 found at: htxp://vc-enisey.ru/administrator/manifests/files/joomla.xml
Joomla version outdated: Upgrade required.
Outdated Joomla Found: Joomla under 2.5.26 or 3.3.5
Outdated Web Server Nginx Found: nginx/1.2.1

pol
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33925
  • malware fighter
Re: SE redirects on website...
« Reply #1 on: April 29, 2015, 04:54:17 PM »
Update,

Same SE redirect found here: http://killmalware.com/vc-enisey.ru/#
See: http://urlquery.net/report.php?id=1430318834713 (not detected)

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »