Author Topic: What dangerous script is found here?  (Read 1438 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34024
  • malware fighter
What dangerous script is found here?
« on: January 17, 2012, 05:11:14 PM »
See: http://siteinspector.comodo.com/public/reports/show_log?id=100554
See: -http://jsunpack.jeek.org/?report=6f93a165428fc922f775ec3f17ee7b74c4c3846c
Go to jsunpack with ample script protection active and in a VM
Given suspicious here: http://wepawet.iseclab.org/view.php?hash=a75588ac98c8b54429b62ad7ae64cf73&t=1326816303&type=js
Redirects here: https://www.virustotal.com/url/802c247f8749f6a208f1a247dcb9ca3b28f8dfec881fb91e49a1f5e8645f7aa6/analysis/  not available or not accessible,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37697
  • F-Secure user