deleted

Viruses and worms
1

deleted

2

This page seems to be
http://www.UnmaskParasites.com/security-report/?page=phanganresorts.com

Diagnostic page for fobana2009dc.com
http://www.google.com/safebrowsing/diagnostic?site=fobana2009dc.com

Malicious software includes 39 exploit(s), 18 scripting exploit(s), 2 trojan(s). Successful infection resulted in an average of 1 new process(es) on the target machine.

Malicious software is hosted on 12 domain(s), including mesalina.pl/, kazaadownloadpro.com/, mariupol.com.ua/.

This site was hosted on 1 network(s) including AS32475 (SINGLEHOP).

3

deleted

4

Welcome to StopBadware
http://www.stopbadware.org/home/index
http://www.stopbadware.org/home/security

5

deleted

6

The page does not seem to be hacked but it is this link (fobana2009dc.com) that seems to be the problem and have and endles amount of bad domains

But wait for Polonus advice, he is the expert on this

7

The site most certainly has been hacked, I get two alerts one on the favicon.ico file also a common tactic in hacking sites as this is loaded by the browser for the little icon in the address bar. There may not be a favicon.ico file and that would be what kicks off the custom 404 error page, so I would also check out any custom 404 error page if you have one as I believe this is also affected.

It isn’t just that there is a link to fobana2009dc.com but an inserted script tag, see images.

The fobana2009dc.com site is blocked by firefox safe browsing as an attack site, so avast is correct in blocking the script tag in the first instance.

8

deleted

9

You’re welcome, happy hunting.

10

deleted

11

Hi folks,

NoVirusThanks gives it an all clean: http://scanner.novirusthanks.org/analysis/d4027c5084b37e4f4c011859a38a16b7/aW5kZXg=/

Google Safe Browsing gives it clean: Over the past 90 days, www.phanganresorts.com did not appear to function as an intermediary for the infection of any sites.

So must have been cleansed, avast shield does not flag it now,

polonus