Avast does not detect virus.html.gen03.26 aka PHISH.Stealer?

polonus · 2015-08-22T10:07:32.000Z

See: https://www.virustotal.com/nl/url/81cfdd60e54b81e97b1e503edf62da30a43cc659e34f05f9911272fb843b76d4/analysis/1440237467/
and
https://www.virustotal.com/nl/file/6dde79e6b5e24455afdf1e01f1373d797e8ec2293bb25b54e9050b40cd71164c/analysis/1439286790/
Detected: http://zulu.zscaler.com/submission/show/6c43c45474e5a06cfef16b616eab5bab-1440237609
Outdated WordPress Found Security Updates WordPress Under 4.2
WP plug-ins issues:
WordPress Plugins
The following plugins were detected by reading the HTML source of the WordPress sites front page.

woocommerce 2.0.8 latest release (2.4.5) Update required
http://www.woothemes.com/woocommerce/
subscribe-to-download
contact-form-plugin 3.17 latest release (3.93) Update required
http://bestwebsoft.com/products/
woodojo 1.5.0
q-and-a 0.2.8
easy-wordpress-donations
contact-form-7 3.3.3 latest release (4.2.2) Update required
http://contactform7.com/
e-newsletter
Quttera’s List of blacklisted external links: 90

Moreover main website bloched by Adguard.

polonus (volunteer website security analyst and website error-hunter)

polonus · 2015-08-22T10:15:40.000Z

Found here in Results from scanning URL: -http://therespectalliance.org/wp-content/plugins/easy-wordpress-donations/includes/js/scripts.js?ver=3.5.2

Document Ready Example 1

$(document).ready(function() {
    //do jQuery stuff when DOM is ready
});

Document Ready Example 2

$(function(){ 
	//jQuery code here 
});

We detected example 2 there. Info credits go to Sam Deering.

Plug-in causing JS error: https://wordpress.org/support/topic/plugin-causes-js-error-which-breaks-admin-pages →
/admin-scripts.js?ver=3.5.2

polonus

Announcements