Welcome, Guest
Username Password: Remember me

Mobile Joomla is calling external suspected images (malware)
(1 viewing) (1) Guest
  • Page:
  • 1
  • 2

TOPIC: Mobile Joomla is calling external suspected images (malware)

Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18710

  • negative
  • OFFLINE
  • Fresh Boarder
  • Posts: 6
  • Karma: 0
Hello, when i check the my joomla mobile website via "google mobile friendly check" system, it says, we have 2 external sources found and blocked by robots.txt 

These are ;
rc.rlcdn.com/361726.gif?n=1&33random=9.3025034201
clients.bluecava.com/data/pixel.png?p=145c07db-9bd4-440d-9130-b5b794ec4ce7&rand=9.3025034201

When i check them; 
www.virustotal.com/en/url/eef3f62d57ad211a64668c0fa421d4326fd6009705816d8094431ab4784b28c4/analysis/

This files calling only when mobile enabled. 

I have installed latest version of mobile joomla from here. And i m using free version. 

What is these files?? 

Re: Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18712

  • dryabov
  • OFFLINE
  • Administrator
  • Denis Ryabov, Lead Developer
  • Posts: 4866
  • Karma: 105
MobileJoomla doesn't add external resources except of support ads code. What is URL of your website? Check that your website is not hacked.

Re: Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18716

  • negative
  • OFFLINE
  • Fresh Boarder
  • Posts: 6
  • Karma: 0
My website URL is ;  goo.gl/tWx08b

Website is not hacked of course because desktop view dont call anything like this. Only mobile joomla calling. Check at the www.google.com/webmasters/tools/mobile-friendly/ and see the calling these malwares while mobile joomla enabled.  

Re: Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18717

  • dryabov
  • OFFLINE
  • Administrator
  • Denis Ryabov, Lead Developer
  • Posts: 4866
  • Karma: 105
negative wrote:
Website is not hacked of course because desktop view dont call anything like this. Only mobile joomla calling. Check at the www.google.com/webmasters/tools/mobile-friendly/ and see the calling these malwares while mobile joomla enabled.  


It's quite popular to affect mobile version only by code injected by hackers (as it is harder to detect that site was hacked), usually such a code checks for "iPhone" or "Android" string in User-Agent header.

MobileJoomla Community includes standard Google AdSense code only, but it is unlikely that Google allows malware to be loaded in ads.

PS. I've noticed that your site loads a script from tcr.tynt.com, and seems that it might contain viruses: www.scumware.org/report/tcr.tynt.com.html

Re: Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18718

  • negative
  • OFFLINE
  • Fresh Boarder
  • Posts: 6
  • Karma: 0
dryabov wrote:
negative wrote:
Website is not hacked of course because desktop view dont call anything like this. Only mobile joomla calling. Check at the www.google.com/webmasters/tools/mobile-friendly/ and see the calling these malwares while mobile joomla enabled.  


It's quite popular to affect mobile version only by code injected by hackers (as it is harder to detect that site was hacked), usually such a code checks for "iPhone" or "Android" string in User-Agent header.

MobileJoomla Community includes standard Google AdSense code only, but it is unlikely that Google allows malware to be loaded in ads.

PS. I've noticed that your site loads a script from tcr.tynt.com, and seems that it might contain viruses: www.scumware.org/report/tcr.tynt.com.html

Where is from calling this URL ? on mobile side? 

And how can i scan the mobile joomla or website ?

Re: Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18739

  • dryabov
  • OFFLINE
  • Administrator
  • Denis Ryabov, Lead Developer
  • Posts: 4866
  • Karma: 105
negative wrote:

Where is from calling this URL ? on mobile side?

Both desktop and mobile, at the bottom of html source:

<script type="text/javascript">
if(document.location.protocol=='http:'){ var Tynt=Tynt||[];Tynt.push('d7DtPG3Kir4i8bacwqm_6r');Tynt.i={"cc":"0","su":1,"st":0,"b":0,"ap":"Read More:","t":0,"el":" <a style=\"color: #003399;\" href=\"\" target=\"_blank\"></a>","as":""};
(function(){var s=document.createElement('script');s.async="async";s.type="text/javascript";s.src='http://tcr.tynt.com/ti.js';var h=document.getElementsByTagName('script')[0];h.parentNode.insertBefore(s,h);})();}
</script>
Last Edit: 8 years, 11 months ago by dryabov.

Re: Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18769

  • negative
  • OFFLINE
  • Fresh Boarder
  • Posts: 6
  • Karma: 0
dryabov wrote:
negative wrote:

Where is from calling this URL ? on mobile side?

Both desktop and mobile, at the bottom of html source:

<script type="text/javascript">
if(document.location.protocol=='http:'){ var Tynt=Tynt||[];Tynt.push('d7DtPG3Kir4i8bacwqm_6r');Tynt.i={"cc":"0","su":1,"st":0,"b":0,"ap":"Read More:","t":0,"el":" <a style=\"color: #003399;\" href=\"\" target=\"_blank\"></a>","as":""};
(function(){var s=document.createElement('script');s.async="async";s.type="text/javascript";s.src='http://tcr.tynt.com/ti.js';var h=document.getElementsByTagName('script')[0];h.parentNode.insertBefore(s,h);})();}
</script>


I cant see that code when i check my source code on google chrome. I click show source the desktop view but i cant see like this. 

Re: Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18771

  • dryabov
  • OFFLINE
  • Administrator
  • Denis Ryabov, Lead Developer
  • Posts: 4866
  • Karma: 105
Maybe it is not displayed for authorized users. Did you try to check it in browser's incognito mode?

Re: Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18773

  • negative
  • OFFLINE
  • Fresh Boarder
  • Posts: 6
  • Karma: 0
dryabov wrote:
Maybe it is not displayed for authorized users. Did you try to check it in browser's incognito mode?
I tried it but i cant see any code like this, can you please take the screenshot of source ?

Thank you

Re: Mobile Joomla is calling external suspected images (malware) 8 years, 11 months ago #18774

  • dryabov
  • OFFLINE
  • Administrator
  • Denis Ryabov, Lead Developer
  • Posts: 4866
  • Karma: 105
Attached
Attachments:
  • Page:
  • 1
  • 2
Time to create page: 0.17 seconds

By continuing to use this site you consent to the use of cookies on your device as described in our cookie policy unless you have disabled them. This site will not function correctly without cookies.

I accept cookies from this site.