Author Topic: Again the avast! Webshield to protects us...  (Read 1618 times)

0 Members and 1 Guest are viewing this topic.

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33932
  • malware fighter
Again the avast! Webshield to protects us...
« on: March 31, 2013, 01:53:05 PM »
This site has active javascript malware on -> http://sitecheck.sucuri.net/results/redondobeachmoleremoval.com/dermatology-procedures/feed
See: http://urlquery.net/queued.php?id=19235026
If we take part of the code and give this in to google, avast webshield alerts on JS:Iframe-ZT[Trj] and blocks this Trojan for us.

See attached image,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37614
  • Not a avast user
Re: Again the avast! Webshield to protects us...
« Reply #1 on: March 31, 2013, 06:53:50 PM »
Quote
avast webshield alerts on JS:Iframe-ZT[Trj]
no.....  JS:Decode-JX [Trj]  ..... well that is if you scan it    ;)

https://www.virustotal.com/nb/file/a9f0ed85385d3e1586d46c94c9e87669619ae0b88961a861a424fe4fc437794d/analysis/1364748648/

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33932
  • malware fighter
Re: Again the avast! Webshield to protects us...
« Reply #2 on: March 31, 2013, 06:58:13 PM »
Thank you Pondus for checking. But the malware is as Blackhole as Blackhole can be...

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!