Author Topic: my friend's website shows it contains virus  (Read 4704 times)

0 Members and 1 Guest are viewing this topic.

Offline zshanthi

  • Newbie
  • *
  • Posts: 3
my friend's website shows it contains virus
« on: February 07, 2012, 04:34:31 PM »
hxxp://www.perl-resume.com

Please see the attached image

Does anyone of you get a virus waring when you visit the above site ?

It is a false alarm or is it a genuine virus ?

Shanthi

« Last Edit: February 07, 2012, 04:54:53 PM by igor »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36793
Re: my friend's website shows it contains virus
« Reply #1 on: February 07, 2012, 04:39:08 PM »
« Last Edit: February 07, 2012, 04:51:45 PM by Pondus »

Offline logos

  • Avast √úberevangelist
  • Serious Graphoman
  • *****
  • Posts: 9442
Re: my friend's website shows it contains virus
« Reply #2 on: February 07, 2012, 04:39:14 PM »
kill that link (make it hxxp , and tell your friend to post himself ;D
w7 - ais7

Offline zshanthi

  • Newbie
  • *
  • Posts: 3
Re: my friend's website shows it contains virus
« Reply #3 on: February 07, 2012, 04:55:57 PM »
kill that link (make it hxxp , and tell your friend to post himself ;D

Killing ??

I informed my friend and he deleted virus but how to make sure it does not happen again

please test again

http://www.perl-resume.com

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36793
Re: my friend's website shows it contains virus
« Reply #4 on: February 07, 2012, 04:57:45 PM »
Norman lab confirms infected
Quote
Already detected as JS/Blacole.AE



EDIT seems sucuri result is Cached so may take some time to change........Sucuri now also say clean   ;)

Metascan now say clean
http://metascan-online.com/results.cgi?uid=x1i6k5ye93f9n7klana5qaqn239h7o2g

« Last Edit: February 07, 2012, 05:03:03 PM by Pondus »

Offline zshanthi

  • Newbie
  • *
  • Posts: 3
Re: my friend's website shows it contains virus
« Reply #5 on: February 07, 2012, 05:13:41 PM »
Norman lab confirms infected
Quote
Already detected as JS/Blacole.AE



EDIT seems sucuri result is Cached so may take some time to change........Sucuri now also say clean   ;)

Metascan now say clean
http://metascan-online.com/results.cgi?uid=x1i6k5ye93f9n7klana5qaqn239h7o2g



so the most common way for this virus to happen is to steal ftp passwords OR hack the server directly and gain access  ?

Shanthi

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 84113
  • No support PMs thanks
Re: my friend's website shows it contains virus
« Reply #6 on: February 07, 2012, 06:50:10 PM »
Generally the most common way is the site being hacked due to old versions of content management software being vulnerable and exploited (like, PHP, WordPress, etc.). o the site webmaster/host has to keep the software up to date.

Also see, Tips for Cleaning & Securing Your Website, http://www.stopbadware.org/home/security.

Also see, Help: I Got Hacked. Now What Do I Do? http://technet.microsoft.com/de-de/library/cc512587%28en-us%29.aspx.


Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.9.2437 (build 20.9.5758.0) UI-1.0.579/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Alibi

  • Newbie
  • *
  • Posts: 3
Re: my friend's website shows it contains virus
« Reply #7 on: February 15, 2012, 11:18:16 AM »
kill that link (make it hxxp , and tell your friend to post himself ;D

Killing ??

I informed my friend and he deleted virus but how to make sure it does not happen again

please test again

http://www.perl-resume.com



Hi Zhanti!
Just saw the tread. I have several websites in the same hosting account, and 2 days ago they all got infected somehow with the exact malware your friend had with his website (mwjs160). I spent all day long yesterday trying to resolve the problem not to avail.
I've seen that your friend deleted the virus within a day. Can you ask him how he did that please? I am getting really desperate now.

Thanks.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36793
Re: my friend's website shows it contains virus
« Reply #8 on: February 15, 2012, 04:53:14 PM »
Quote
I've seen that your friend deleted the virus within a day. Can you ask him how he did that please? I am getting really desperate now.
Have you tried this  http://sucuri.net/signup

Information for Website Owners
http://stopbadware.org/home/webmasters

Tips for Cleaning & Securing Your Website
http://stopbadware.org/home/security

Offline Alibi

  • Newbie
  • *
  • Posts: 3
Re: my friend's website shows it contains virus
« Reply #9 on: February 15, 2012, 07:01:35 PM »
That's very useful information thanks.
I am still very curious about how the guy removed that malware from his site. Will be good to see if he didn't have to pay that much to delete it.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36793
Re: my friend's website shows it contains virus
« Reply #10 on: February 15, 2012, 07:24:55 PM »
Quote
Will be good to see if he didn't have to pay that much to delete it.
90$ for a year....including monitoring every 6 hours....is that expencive ?

Offline Alibi

  • Newbie
  • *
  • Posts: 3
Re: my friend's website shows it contains virus
« Reply #11 on: February 16, 2012, 11:15:25 PM »
All sorted now. I contacted my hosting provider and hey resolved the problem for me. Thanks for your help.  ;)