« previous next »
Pages: [1]   Go Down

Author Topic: Has malware here now been closed?  (Read 1422 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Has malware here now been closed?
« on: November 10, 2013, 11:13:56 PM »
See: https://www.virustotal.com/nl/url/32baa713fd45d8ec64b61b20d62031fe11fce163996402abcc89188814411855/analysis/1384120442/
See: http://urlquery.net/report.php?id=7601773
Sucuri gives site as clean, MX VirusWatch archives gives: Up(nil):   unknown_html   RIPE   TR   dns at atalaybilisim dot com   85.95.236.129    to 85.95.236.129   kgdbase dot com   htxp://kgdbase.com/
Site has this script analyzed here by Ghostery: http://www.ghostery.com/gcache/?n=R29vZ2xlIEFuYWx5dGljcw%3D%3D&s=aHR0cHM6Ly9zc2wuZ29vZ2xlLWFuYWx5dGljcy5jb20vZ2EuanM%3D
undefined variable s is all that was found there., PHP login error.
See: http://jsunpack.jeek.org/?report=95f1e3e7d69bd83ebf8cf53bcced5fa8647b635e *
Benign: http://app.webinspector.com/public/reports/18329899
But given as suspicious here: http://zulu.zscaler.com/submission/show/2bd78ebfe99bca30575528451875e36f-1384121280
as we thought, see *

polonus

Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: Has malware here now been closed?
« Reply #1 on: November 11, 2013, 10:43:32 PM »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »