Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Defacement hack and adware script injection?
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: Defacement hack and adware script injection? (Read 1876 times)
0 Members and 1 Guest are viewing this topic.
polonus
Avast Überevangelist
Probably Bot
Posts: 33916
malware fighter
Defacement hack and adware script injection?
«
on:
December 09, 2014, 07:38:00 PM »
Re:
http://killmalware.com/demonfit.com/
See: <meta content="Hacked by people_hurt name=" description'="">'=""> when you copy you won't get '=""
Detected as Trojan.Script.Heuristic-js.iacgm.
Flagged by Sucuri's:
http://sitecheck.sucuri.net/results/www.demonfit.com/
A misused ir defaced server also listed by MX:
http://support.clean-mx.de/clean-mx/portals.php?ns3=ns3.cdmon.net&sort=id%20desc&response=alive
See the long OVERDUE! malcode running from these IP domains (158 domains on one and the same IP).
Found in the past:
http://www.projecthoneypot.org/ip_134.0.14.63
Script inject from -cfs.u-ad dot info/cfspushadsv2/request (a scan with MBAM is advisabkle)
pol
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pondus
Probably Bot
Posts: 37547
Not a avast user
Re: Defacement hack and adware script injection?
«
Reply #1 on:
December 09, 2014, 07:59:14 PM »
html file
https://www.virustotal.com/nb/file/14367675dd928af965c449ba348dc13252d09fecec32328d1fb31fae76824e10/analysis/1418151373/
js file
https://www.virustotal.com/nb/file/14367675dd928af965c449ba348dc13252d09fecec32328d1fb31fae76824e10/analysis/1418151401/
Logged
polonus
Avast Überevangelist
Probably Bot
Posts: 33916
malware fighter
Re: Defacement hack and adware script injection?
«
Reply #2 on:
December 09, 2014, 10:28:56 PM »
Hi Pondus,
As demonstrated here avast well ahead of the competition here!
Good we have this protection....
polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Defacement hack and adware script injection?