Trojan detected here?

polonus · September 2, 2015, 7:07am

This is a suspicious page
Result for 2015-09-02 06:04:33 UTC
Website: -http://alphamaleamerica.com
Checked URL: -http://alphamaleamerica.com/?p=611
Trojans detected:
Object: -http://alphamaleamerica.com/?p=611
SHA1: b289c12a317bc8c21e4d8b1519b4c1278fbfba28
Name: TrojWare.JS.Agent.caa
See: https://www.virustotal.com/nl/url/0d5d7069f86c90b00ea247d1e5530bfafd29b6f197f40edbc61d9a8f9a03f01a/analysis/#additional-info
70 malicious files: Severity: Malicious
Reason: Detected encoded JavaScript code commonly used to hide malicious behaviour.
Details: Detected malicious JavaScript code
Known javascript malware. Details: http://sucuri.net/malware/entry/MW:SPAM:SEO?g12
t=‘’;}}x[l-a]=z;}document.write(‘<’+x[0]+’ ‘+x[4]+’>.‘+x[2]+’{‘+x[1]+’}</‘+x[0]+’>');}xViewState();

polonus

polonus · September 2, 2015, 8:12am

A WP security scan reveals: WordPress Version
3.5.1
Version does not appear to be latest 4.3 - update now.

WordPress Plugins
The following plugins were detected by reading the HTML source of the WordPress sites front page.

wp-pagenavi 2.83 latest release (2.88) Update required
http://lesterchan.net/portfolio/programming/php/
wp-lightbox-2 latest release (3.0.5)
http://wpdevart.com/wordpress-lightbox-plugin
instapress 1.5.6 latest release (1.5.3)
http://instapress.it

WordPress Theme
The theme has been found by examining the path /wp-content/themes/ theme name /

Twenty Eleven 1.4http://wordpress.org/extend/themes/twentyeleven

Warning User Enumeration is possible
The first two user ID’s were tested to determine if user enumeration is possible.

User ID 1 : alphamaleamerica
User ID 2 : None

polonus

Announcements