Author Topic: This website infected with SPAM malware?  (Read 2245 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
This website infected with SPAM malware?
« on: November 15, 2015, 10:43:48 PM »
I was chatting with my friends and one of them shared an image link from (apparently) russian consept art gallery "concept-world.ru". I checked it on Sucuri out of curiosity and it reports malware infection. However, it shows it being "Blackhat SEO Spam", so could it mean that it's not actually something that would put visitors' computers at risk?

https://sitecheck.sucuri.net/results/www.concept-world.ru

Here's the original provided link:
Code: [Select]
-http://www.concept-world.ru/img/​arts/img_Lord-of-the-Rings-Angmar​skiy-korol-koldun_b_1.jpg
« Last Edit: November 15, 2015, 11:00:17 PM by Pernaman »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: This website infected with SPAM malware?
« Reply #1 on: November 16, 2015, 12:22:30 AM »
Ofcourse it puts visitors systems at risk.
That server and website are infected with malware.

REDACTED

  • Guest
Re: This website infected with SPAM malware?
« Reply #2 on: November 16, 2015, 12:34:11 AM »
Of cource, I just figured to askel since I don't have that much knowledge about the se this.  Though the only thing I did was visit the IMG link mentipned above and natirally had Noscript embed on the webpage. I guess I'll just wait for more deep analysoi from malware analysists.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
Re: This website infected with SPAM malware?
« Reply #3 on: November 16, 2015, 12:50:25 AM »
With a good adblocker you should not have a problem on a website with SEO-spam redirects as access there all will get blocked.
You do use an adblocker, don't you, because when you use Avast you should use an adblocker next to it against mal-ads. It is almost a must nowadays. Footer PHP on the site is producing these scam advertisements. Known javascript malware. Details: http://sucuri.net/malware/entry/MW:SPAM:SEO?web.html.spam-seo.sape.001
It is Blackhat SEO type1703: https://forum.manjaro.org/index.php?topic=18892.0

polonus
« Last Edit: November 16, 2015, 12:58:04 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: This website infected with SPAM malware?
« Reply #4 on: November 16, 2015, 06:39:16 AM »
Yeah, I usein Adblock Plus, which seems to be most commonly viable. Is there any other adblock you would recommend?
« Last Edit: November 16, 2015, 07:10:08 AM by Pernaman »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: This website infected with SPAM malware?
« Reply #5 on: November 16, 2015, 10:50:56 AM »
You can use the hosts file to block things as well.