JS : Redirector-H7 [Trj] Link Check Needed

[brinkybull]

Hi
would someone try to log into this link sent to me, my Avast went into alarm warning of a Redirector Trojan.

I have informed the person who has sent the link to numerous people including the website owner.

The website owner claims nothing is wrong as does their Webmaster. None of which have Avast protection

hxxp://wxw.r-o-p-e.com.au/

Thanks in Advance
Shane

sorry thought putting the x in the wxw would stop the link from loading Cheer

[micky77]

That link is infected.Please alter the link to hxxp, instead of http.

"hxxp://wxw.r-o-p-e.com.au/"
a virus or unwanted program 'HEUR/HTML.Malware' [heuristic] was found.

[.: L' arc :.]

-= There seems to be a long & weird script..

(function(){var gp7='%';var vQbUT=('var!20a!3d!22!53!63!72ipt!45ngine!22!2cb!3d!22Version()+!22!2cj...

[polonus]

Hi brinkybull,

Suspicious inline script found:

Code: [Select]

*=a EDITED gp7='%';v*r vQbUT=('v*r!20a!3d!22!53!63!72ipt!45ngine!22!2cb!3d!22Version()+!22!2cj...The site was not flagged as suspicious before.
Page could not be available for scanning and was not blacklisted by Google, Firefox, GoogleChrome and Norton,

polonus

[DavidR]

<snip>
I have informed the person who has sent the link to numerous people including the website owner.

The website owner claims nothing is wrong as does their Webmaster. None of which have Avast protection

hxxp://wxw.r-o-p-e.com.au/

You might ask them what this obfuscated javascript is doing directly after the closing head tag. This is all on a single line and doesn't have the same formatting style of the other script tags on the site. See image, I have broken the single line of code down to make it easier to see.

[brinkybull]

thanks everyone, have passed on this information

[DavidR]

You're welcome, hopefully this will give them something to work with.

[brinkybull]

Howdy
the webmaster has sorted the problem and I have successfully loaded the web site without any alerts.

Huge thanks to all and Avast

[DavidR]

You're welcome. Thanks for the feedback.

The website owner claims nothing is wrong as does their Webmaster.

A large helping of humble pie in order then and a switch to avast then

[brinkybull]

yes , quite a few have been converted that is for certain