my commercial website is reporting a virus/redirect. I have had my host scan the entire site and found nothing wrong, but it seems to alert every time I open the main page with a note that it is infected and gives a website address. I would appreciate if anybody could have a quick look and offer some advice.
Regards
Footprint
I note it doesn’t come up in chrome and there are not supposed to be any redirects On the site.
Sucuri: Unable to properly scan your site. Site returning error (40x): HTTP/1.0 403 Forbidden
There is a school of thought that says there is an infection in the template and I have asked the writers of the site to investigate that tonight, however it worries me because this is the prime way customers have of getting in touch with us and the WordPress site is quite new to me. One of my staff did a scan with word fence, and it said that several files appeared to be containing malicious software, but this is the first time ever seen from my perspective
sucuri. http://sitecheck.sucuri.net/results/www.footprintit.com/
quttera. http://quttera.com/detailed_report/www.footprintit.com
urlquery. http://urlquery.net/report.php?id=3497193
zulu zscaler. http://zulu.zscaler.com/submission/show/7ff790441811b853f6373ea8d0495fcf-1372836420
attach screenshot of avast warning popup here…
Hope it helps
Sorry, too small to read.
Trying again
From Sucuri:
Scan for: hxxp://signinstopping.biz
Hostname: signinstopping.biz
IP address: 31.44.184.158
System Details:
Running on: Microsoft-IIS/6.0
Powered by: ASP.NET
Unable to properly scan your site. Site returning error (40x): HTTP/1.1 404 Not Found
Unable to properly scan your site. Site empty (no content): Content-Length: 0
Here is a clearer shot, the site is re-directing (or trying to)
unmaskparasites.
http://www.unmaskparasites.com/security-report/?page=signinstopping.biz
http://www.google.com/safebrowsing/diagnostic?site=signinstopping.biz
http://urlquery.net/report.php?id=3505304
IDS.
Suricata /w Emerging Threats ET RBN Known Russian Business Network IP
Site had these risks identified: Scan for Hostile Strings **Risk Identified - Generic Web Bot test **Risk Identified
aka server still supports SSLv2 - a vulnerability issue. http method vulnerabilties
look how to disable: http://www.hosting.com/support/pci-security-scan/disable-sslv2-in-apache-(httpd)
polonus