SE redirection

Viruses and worms
1

Blacklisting status
Google reports hannahshelpfulhints.com as suspicious website
Blacklisted
SE visitors redirects
Visitors from search engines are redirected
to: htxp://mampoks.ru/track.php → http://labs.sucuri.net/?details=mampoks.ru
1184 sites infected with redirects to this URL
How it was being performed: http://ninjamonitoring.com/malware/index.php?threat=2013-11-14.02
See: https://www.virustotal.com/nl/url/2d601cc58149cca75c1917aca2284147d8c22e41fa9e8eb93b42732824a58cb9/analysis/
Google Safe Browsing → http://www.google.com/safebrowsing/diagnostic?site=http%3A%2F%2Fhannahshelpfulhints.com%2F&hl=en
Server Redirect / Status - Code: 301, http://mampoks.ru/track.php

Redirect to external server!
Javascript Check
Suspicious

chform" action=“htxp://mampoks.ru/parking.php” method=“get” name=“searchform”><input type=“hidden” name=“ses” value="y3jlpte0mty0mtk1mtcmdgnpzd1tyw1wb2tzlnj1ntq2y2q4ymm5z…

404 Error Check
Suspicious

Suspicious 404 Page:
.ru/parking.php" method=“get” name=“searchform”><input type=“hidden” name=“ses” value="y3jlpte0mty0mtk1mtcmdgnpzd1tyw1wb2tzlnj1ntq2y2q4ymm5z…

polonus

2

In general we should read Redleg’s reply here to know about what happened here: https://productforums.google.com/forum/#!topic/webmasters/JrtExw2MO1c
According to Redleg we should be on the look-out for something like

 RewriteRule ^(.*)$  htxp:// mampoks . ru /track.php / [R=301,L]

as was earlier also given here in this report: http://ninjamonitoring.com/malware/index.php?threat=2013-11-14.02

Redleg x3 is one of the experts on website hacks and website owners and webmasters can scan their sites on his scan site online:
http://aw-snap.info/file-viewer/

polonus