Author Topic: Site so virulent that avast Web Shield immediately block scans as berserk!  (Read 1729 times)

0 Members and 1 Guest are viewing this topic.

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34053
  • malware fighter
Happened at maldb.com scan: avast! Webshield flags JS:Decode-AKH[Trj]
Google Safebrowsing blocks the site as
Quote
This site is currently listed as suspicious - visiting this web site may harm your computer.
Here the malware and trojans are being detailed: http://app.webinspector.com/public/reports/show_website?site=http%3A%2F%2F12directions.com
See: http://zulu.zscaler.com/submission/show/7cd4668ba38d19991701e9fe1effa04c-1389484037 100/100 malicious
Other scans results are blocked by the webshield, because they give away too much of the malcode in question.
More on that IP: http://lists.clean-mx.com/pipermail/viruswatch/20130802/076446.html
See: http://urlquery.net/report.php?id=8784835 IDS for INDICATOR-OBFUSCATION Javascript obfuscation - IDS alert: seen in IFRAMEr Tool attack
IDS alert for http_inspect: JAVASCRIPT WHITESPACES EXCEEDS MAX ALLOWED  37 IDS alerts
#5 JavaScript::Script (size: 27742, repeated: 1) - Alert detect on script (Severity: 2)  given yellow status

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
« Last Edit: January 12, 2014, 01:04:21 AM by Steven Winderlich »
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10