Fakeav redirect

Viruses and worms
1

See: http://killmalware.com/lobia.org/# → Detected HTTP redirection to htxp://networksservicebased.ru/massmedia?8.
ISSUE DETECTED DEFINITION INFECTED URL
Website Malware mw-redir-fakeav533 htxp://lobia.org/404javascript.js
Website Malware mw-redir-fakeav533 htxp://lobia.org/index.php/gleichberechtigung
Website Malware mw-redir-fakeav533 htxp://lobia.org/index.php/arbeit-und-entlohnung
Website Malware mw-redir-fakeav533 htxp://lobia.org/index.php/nahrung
Website Malware mw-redir-fakeav533 htxp://lobia.org/
Website Malware MW:HTA:7 http://lobia.org/
Known javascript malware. Details: http://labs.sucuri.net/db/malware/mw-redir-fakeav533
Location: htxp://networksservicebased.ru/massmedia?8
Site blacklisted by Google Safebrowing

polonus

2

Any link clicked above will give warning block in FF. See below:

3

Thanks mchain for checking.

That means protection for a lot of browser users.
I have broken all these links properly just in case,

pol

4

That campaign aparently goes on. An update here: http://killmalware.com/lobia.org/#
SE visitors redirects
Visitors from search engines are redirected
to: htxp://networksservicebased.ru/massmedia?8
13 sites infected with redirects to this URL
See: https://www.virustotal.com/nl/url/6ee57a7a1f2544a8665e2ad77b11bcba5c59277546477104fc5b2077807ee1e7/analysis/
Detected: http://sitecheck.sucuri.net/results/lobia.org
Web application version:
Joomla Version 2.5.8 found at: htxp://lobia.org/administrator/manifests/files/joomla.xml
Joomla version outdated: Upgrade required.
Outdated Joomla Found: Joomla under 2.5.26 or 3.3.5
Index
Severity: Suspicious
Reason: Detected suspicious redirection to external web resources at HTTP level. [What’s this?]
Details: Detected HTTP redirection to htxp://networksservicebased.ru/massmedia?8.

polonus