Author Topic: Again the fabulous avast Web Shield in action..  (Read 1721 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33931
  • malware fighter
Again the fabulous avast Web Shield in action..
« on: August 19, 2012, 11:47:12 PM »
This time against a malicious MIRC-bot from htxp://181.64.175.179/botscan.txt?%3F\
Exploit Title: STUN PRIVATE SCANNER [MIRC BOT]
Dangerous script  is found by antivirus engine on the page and
avast Web Shield detects Trojan Horse - Perl-Shellnot-P[Trj]
Probably they found that initial exploit code on the internet,
where it is on an exploit information disclosure site,
and then later abused it from Peru...

Anyway we are being protected by avast Web Shield against this, so keep your avast shields up,

polonus


Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37614
  • Not a avast user

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33931
  • malware fighter
Re: Again the fabulous avast Web Shield in action..
« Reply #2 on: August 20, 2012, 12:06:00 AM »
Hi Pondus,

Thanks for the additional scan results. But we should be aware that the code for such threats is readily been distributed on the Internet and that the payload can hit us from any place. Even for such threats as such a Blackhat Web Shell favorite. See further:  https://www.securitymetrics.com/vulist.adp (do not worry this link is just a pentesting check list, nothing more),


polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!