Author Topic: blocked...then why allowed to drop the file?  (Read 1695 times)

0 Members and 1 Guest are viewing this topic.

true indian

  • Guest
blocked...then why allowed to drop the file?
« on: June 16, 2012, 01:56:06 PM »
In reference to here http://forum.avast.com/index.php?topic=99727.0

i was wondering because the piece of malicious html file was downloaded even after web shield blocking the link...why should web shield allow this to happen? more ever file system shield didnt pick up the dropped file...why is this lack happening? this is dissapointing... :-\ why does the file get downloaded even when web shield had it blocked...i accessed the sites via all my PC's and the file containin html script inf got dropped in temp even after web shield blocking it...any ideas?
« Last Edit: June 16, 2012, 06:56:19 PM by true indian »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: blocked...then why allowed to drop the trace?
« Reply #1 on: June 16, 2012, 02:20:51 PM »
The obfuscated code translated to a known PHISH: http://zulu.zscaler.com/submission/show/de68cdee3abaa6544832279e48fbfcfc-1339848759
I get a 400 Bad Request there.... For the main site, bad web rep: http://www.mywot.com/en/scorecard/cdn.dsultra.com?utm_source=addon&utm_content=popup-donuts (all sort of issues)

polonus
« Last Edit: June 16, 2012, 02:42:58 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!