Satrix.co.za site virus?

Nefertiti

Honorary Master

Joined

Oct 12, 2005

Messages

17,650

Reaction score

287

Location

JHB

• May 25, 2014

• #1

I am going to the satrix.co.za website to get info and my antivirus keeps on popping up with a message "Backdoor PHP/Webshell.A" was cleaned up. I am only getting it on the Satrix website.

Anybody with a good antivirus want to confirm?

 

DJ...

Banned

Joined

Jan 24, 2007

Messages

70,285

Reaction score

3,556

Location

Gauteng

• May 25, 2014

• #2

I'm getting the same thing here - malware detected...

 

Willy Strong

Expert Member

Joined

Aug 4, 2011

Messages

3,625

Reaction score

862

• May 25, 2014

• #3

Same here!

 

Nefertiti

Honorary Master

Joined

Oct 12, 2005

Messages

17,650

Reaction score

287

Location

JHB

• May 25, 2014

• #4

Oi, so its not me then.

 

Nefertiti

Honorary Master

Joined

Oct 12, 2005

Messages

17,650

Reaction score

287

Location

JHB

• May 25, 2014

• #5

And I'll try and let them now tomorrow....

 

BouncyNinja

Executive Member

Joined

Oct 15, 2009

Messages

5,264

Reaction score

2,572

• May 25, 2014

• #6

Infekce zablokována
URL hxxp://satrix.co.za/images/slider/img2.jpg
Infection PHP:Shell-AA [Trj]

 

koeksGHT

Dealer

Joined

Aug 5, 2011

Messages

11,857

Reaction score

232

Location

Gangsters Paradise

• May 25, 2014

• #7

URL: http://satrix.co.za/
Detection ratio: 0 / 52
Analysis date: 2014-05-25 19:23:21 UTC ( 0 minutes ago )

 

cpu.

Executive Member

Joined

Jun 23, 2010

Messages

5,726

Reaction score

903

Location

Here

• May 25, 2014

• #8

Nefertiti said:

Anybody with a good antivirus want to confirm?

Click to expand...

I can confirm that there is no problems on both my Android phone and Ubuntu PC...

 

M

MGRobinson

Senior Member

Joined

Dec 21, 2009

Messages

777

Reaction score

12

Location

Durban

• May 25, 2014

• #9

cpu. said:

I can confirm that there is no problems on both my Android phone and Ubuntu PC...

Click to expand...

Lol. Ubuntu ftw

My Avira doesn't like that website

 

schumi

Honorary Master

Joined

Mar 26, 2010

Messages

25,095

Reaction score

2,032

Location

Durban

• May 26, 2014

• #10

I was about to login to my account and MSE detected a virus

 

yebocan

Honorary Master

Joined

Sep 22, 2005

Messages

15,371

Reaction score

6,363

Location

Now North..behind the BW Curtain...

• May 26, 2014

• #11

just logged into my account,...no issue, this side...

 

B

Bernie

Expert Member

Joined

May 2, 2006

Messages

2,138

Reaction score

99

• May 26, 2014

• #12

yebocan said:

just logged into my account,...no issue, this side...

Click to expand...

Maybe change your AV

I got the error this morning, so its still not fixed, I also informed satrix.

 

R

renagade-wolf

Well-Known Member

Joined

Jun 16, 2012

Messages

366

Reaction score

39

• May 26, 2014

• #13

Bernie said:

Maybe change your AV

I got the error this morning, so its still not fixed, I also informed satrix.

Click to expand...

https://www.virustotal.com/en/file/76f4fedbeebd7332293a24932d4a14f93d3f9a34d97e9b2523b616cbbd20c977/analysis/1401096285/

i would say it probably was a false positive as the file has adobe xml data at the beginning of the file, so maybe heuristics was detecting it as obsfuscated php code.

 

C

crookson

Member

Joined

May 26, 2014

Messages

17

Reaction score

0

• May 26, 2014

• #14

Seriously scary this website got hacked

 

schumi

Honorary Master

Joined

Mar 26, 2010

Messages

25,095

Reaction score

2,032

Location

Durban

• May 26, 2014

• #15

Seems to be resolved on my side now

 

Nefertiti

Honorary Master

Joined

Oct 12, 2005

Messages

17,650

Reaction score

287

Location

JHB

• May 26, 2014

• #16

Tx for those that contact Satrix. Didnt get through to them today, month end is hectic.

schumi said:

Seems to be resolved on my side now

Click to expand...

Looks like it. Just went there and no message either.