Re: http://killmalware.com/delmoro.ru/#
index
Severity: Suspicious
Reason: Detected suspicious redirection to external web resources at HTTP level.
Details: Detected HTTP redirection to htxp://web-redirect.ru/?web.
File size[byte]: 0
File type: Unknown
Page/File MD5: 00000000000000000000000000000000
Scan duration[sec]: 0.001000
ISSUE DETECTED DEFINITION INFECTED URL
Website Malware MW:HTA:7 http://delmoro.ru
Suspicious conditional redirect. Details: http://sucuri.net/malware/entry/MW:HTA:7
Redirects users to:htxp://web-redirect.ru/?web
Web application version:
Joomla Version 2.5.1 found at: htxp://delmoro.ru/administrator/manifests/files/joomla.xml
Joomla version outdated: Upgrade required.
Outdated Joomla Found: Joomla under 2.5.26 or 3.3.5
ot_homeeco/scripts/otscript.js XSS vulnerable
htxp://www.liveinternet.ru/click link on site is blocked by uBlock adblocker for me!
-counter.yadro.ru/hit?t50.1;r;s117688524;uhttp%3A//delmoro.ru/;0.4096706941289764 malware
→ https://urlquery.net/report.php?id=1435785846193 blacklisted = 88.212.196.105
Also consider on that IP: https://www.virustotal.com/en-gb/ip-address/88.212.196.105/information/
http://www.tomshardware.co.uk/forum/42087-63-hosts-file-modified
polonus