Author Topic: Blogspot hacked - avast virus detection  (Read 2430 times)

0 Members and 1 Guest are viewing this topic.

makodonarudo

  • Guest
Blogspot hacked - avast virus detection
« on: November 28, 2012, 10:37:03 AM »
Hello,
about 2 month ago, a friend's blog has been hacked : http://asimpiestos.blogspot.com/ the site is redirecting to another location and avast message pops up warning about virus.

How can this be solved?

Thanks a lot in advance!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33905
  • malware fighter
Re: Blogspot hacked - avast virus detection
« Reply #1 on: November 28, 2012, 10:45:06 AM »
Site is given clean now.
//** Is your rel canonical tag pointing to another domain? 
 Qutterea has some suspicion towards:
Potentially Suspicious files: 4
..ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
File size[byte]: 57254
Threat type: Potentially Suspicious
Details: JavaScript emulation took too much time.
Reason: Execution timeout reached in operation block-of-code. Timeout 120 seconds.
MD5: BB381E2D19D8EACE86B34D20759491A5
Scan duration[sec]: 121.045000

all-include.js
File size[byte]: 610606
Threat type: Potentially Suspicious
Details: Detected hidden reference to external web resource.
Reason: Detected generation of hidden DOM element [iframe].
MD5: 5619F74AAA420647DBB89D42A9B5D4B2
Scan duration[sec]: 8.741000

www.blogger.com/blogger.g?blogID=7937419263200499803
File size[byte]: 80620
Threat type: Potentially Suspicious
Details: Detected hidden reference to external web resource.
Reason: Detected generation of hidden DOM element [iframe].
MD5: 4D60C1DA321FC4BA0D7F2E54669FE692
Scan duration[sec]: 0.178000

index
File size[byte]: 4294967295
Threat type: Potentially Suspicious
Details: Detected unconditional redirection to external web resource.
Reason: Detected HTTP redirection to http://asimpiestos.blogspot.co.uk/.
MD5: 00000000000000000000000000000000
Scan duration[sec]: 0.001000

polonus
« Last Edit: November 28, 2012, 06:05:28 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

makodonarudo

  • Guest
Re: Blogspot hacked - avast virus detection
« Reply #2 on: November 28, 2012, 11:21:03 AM »
Thanks for the quick reply,
i visited again the blog and still the warning message appears. I asked couple of friends to visit the site from their computers, same thing. Also my Anti-Malware shows a thread blocking message.

Avast info:



More details:



Malware-Bytes:



WHat should we do?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37534
  • Not a avast user
Re: Blogspot hacked - avast virus detection
« Reply #3 on: November 28, 2012, 12:11:47 PM »
this means that the url is on a block list....

if you mean thisbis wrong, you can report false positives here. 
http://www.avast.com/contact-form.php?


the malwarebytes block you must report in malwarebytes forum
http://forums.malwarebytes.org/index.php?s=095a09dcbe144156f268940879577fe5&showforum=42
« Last Edit: November 28, 2012, 12:16:04 PM by Pondus »