www.guitarworld.com main page triggers a virus alert. It has something to do with an
i-http://blogs.guitarworld.com/usergearHTML:Iframe-infVirus/Worm
090912-0, 09/12/2009
Anyone else had this problem>
This was on the next page that was displayed in Chrome:
Safe Browsing
Diagnostic page for x3y.ru
What is the current listing status for x3y.ru?
Site is listed as suspicious - visiting this web site may harm your computer.
What happened when Google visited this site?
Of the 2 pages we tested on the site over the past 90 days, 0 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-09-13, and the last time suspicious content was found on this site was on 2009-09-13.
Malicious software includes 5 trojan(s), 2 exploit(s).
This site was hosted on 10 network(s) including AS16276 (OVH), AS16265 (LEASEWEB), AS20857 (TRANSIP).
Has this site acted as an intermediary resulting in further distribution of malware?
Over the past 90 days, x3y.ru appeared to function as an intermediary for the infection of 2 site(s) including visionlogics.com/, ffmindia.com/.
Has this site hosted malware?
Yes, this site has hosted malicious software over the past 90 days. It infected 6427 domain(s), including webfinder.com/, endo.en.funpic.org/, prd.go.th/.
How did this happen?
In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.
Not cool and on a main guitar site!
Hi niche1,
Could you please modify your link to make it unclickable (i.e. chage http to hXXp) to prevent others potentially becoming infected.
This kind of detection is very common these days, with many ‘legitimate sites’ becoming hacked to distribute malware:
Every 3.6 seconds a website is infected
The blog page which avast alerts on has been hacked, there is a hidden Iframe, linking to a malicious domain:
http://www.mywot.com/en/scorecard/x3y.ru#page-2
http://hosts-file.net/?s=x3y.ru
It also tries to redirect to a non-standard port to avoid scanning, but that obviously doesn’t work ;D
Not cool and on a main guitar site!Yes, but I would guess that the site owners don't even know that it was hacked...
-Scott-
Jutakys Detektor found one Iframe but no zeroiframes on the site.
No zeroiframes detected! Check took 26.47 seconds(Level: 0) Url checked:
hxxp://guitarworld.com
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//misc/jquery.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//misc/drupal.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//sites/all/modules/thickbox/thickbox.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 2) Url checked: (iframe source)
hxxp://guitarworld.com//sites/all/modules/thickbox/+urlnoquery[0]+
Blank page / could not connect
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//sites/guitarworld.com/themes/guitar_world/advajax.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//sites/guitarworld.com/themes/guitar_world/debrowser.js
Blank page / could not connect
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//sites/guitarworld.com/themes/guitar_world/main.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//sites/guitarworld.com/themes/guitar_world/slideshow.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//modules/tinymce/tinymce/jscripts/tiny_mce/plugins/media/jscripts/embed.js
Blank page / could not connect
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//video/js/swfobject.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//video/js/global.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://edge.quantserve.com/quant.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//sites/guitarworld.com/modules/ist/global_ist.js
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://ad.doubleclick.net/adj/fut.us.guitarworld;dcopt=ist;sz=3x3;ord=+ord+?
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://ad.doubleclick.net/adj/fut.us.guitarworld/homepage;dcopt=ist;tile=+ad_tile+;sz=22x22;kw=nokeywords;kw=homepage;ord=+ord+?
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://ad.doubleclick.net/adj/fut.us.guitarworld/homepage;dcopt=ist;tile=+ad_tile+;sz=728x90;kw=homepage;ord=+ord+?
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://ad.doubleclick.net/adj/fut.us.guitarworld/homepage;dcopt=ist;tile=+ad_tile+;sz=300x250;kw=homepage;ord=+ord+?
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://ad.doubleclick.net/adj/fut.us.guitarworld/;dcopt=ist;tile=+ad_tile+;sz=183x126;kw=;ord=+ord+?
Zeroiframes detected on this site: 0
No ad codes identified(Level: 2) Url checked: (script source)
\hxxp://m1.2mdn.net/879366/flashwrite_1_2.js
Blank page / could not connect
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://ad.doubleclick.net/adj/fut.us.guitarworld/homepage;dcopt=ist;tile=+ad_tile+;sz=160x600;kw=top;kw=homepage;ord=+ord+?
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://ad.doubleclick.net/adj/fut.us.guitarworld/homepage;dcopt=ist;tile=+ad_tile+;sz=160x600;kw=bottom;kw=homepage;ord=+ord+?
Zeroiframes detected on this site: 0
No ad codes identified(Level: 1) Url checked: (script source)
hxxp://guitarworld.com//sites/all/modules/google_analytics/googleanalytics.js
Zeroiframes detected on this site: 0
No ad codes identified