This is a suspicious page
Result for 2015-05-14 22:55:25 UTC
Website: http://anten.biz
Checked URL: htx://anten.biz/obuv/polusapogi-remonte-dorndorf_3184.html
Suspicious code detected:
Object: htxp://anten.biz/modules/mod_sp_quickcontact/assets/js/script.js
SHA1: 8178a8a9034c1cf55912ea7e8812b95f265a91f4
Name: Suspicious-WI.
Object: htxp://anten.biz/modules/mod_djmenu/assets/js/djmenu.js
SHA1: 6ee19182528a229a390a482df80e49b1d93916c7
Name: Suspicious-WI.
Trojans detected:
Object: htxp://anten.biz/obuv/polusapogi-remonte-dorndorf_3184.html
SHA1: 44f15be15200357d0ad18108210d5e91879f773d
Name: TrojWare.JS.Agent.caa
See: http://malwarecheck.org/index.php
Security report (Warnings found): http://toolbar.netcraft.com/site_report?url=http://anten.biz
Encryption (HTTPS) (1)
Communication is NOT encrypted
Site with old SEO Spam? https://www.virustotal.com/nl/url/e79f74bacf7d93e33287b2c949dd1f7c5700ae8cf69fd1d586f86bd50b5469b3/analysis/
Known javascript malware. Details: http://sucuri.net/malware/entry/MW:SPAM:SEO?g12
t=‘’;}}x[l-a]=z;}document.write(‘<’+x[0]+’ ‘+x[4]+’>.‘+x[2]+’{‘+x[1]+’}</‘+x[0]+’>');}dnnViewState();
Web application version:
Joomla Version 2.5.9 for: htxp://anten.biz/media/media/js/mediamanager.js
Joomla Version 2.5.17 for: htxp://anten.biz/language/en-GB/en-GB.ini
Joomla version outdated: Upgrade required.
Outdated Joomla Found: Joomla under 2.5.26 or 3.3.5
error Blacklisted: Yes
The following modules were detected from the HTML source of the Joomla front page.
-mod_phoca_vm_category
-mod_autsonslideshow
-mod_jt_superfish_menu
-mod_djmenu
-mod_sj_vm_scrollbar
-mod_universal_ajaxlivesearch
-mod_image_show_gk4
-mod_sp_quickcontact
-mod_junewsultra
Nine malicious files detected: http://quttera.com/detailed_report/anten.biz
[[function dnnViewState]]
Potentially suspicious code: /modules/mod_virtuemart_magiczoomplus/core/magicscroll.js
Severity: Potentially Suspicious
Reason: Detected potentially suspicious content.
Details: Detected potentially suspicious initialization of function pointer to JavaScript method fromCharCode __tmpvar30816879 = fromCharCode;
No components nor plug-ins were found passively in HTML source
polonus