gullyclock.com

[Marie-Pierre4]

I get this message every 10 minutes.How to remove this theat ?
Je reçois ce message toutes les 10 minutes. Comment éliminer cette menace ?
Nous avons annulé la connexion à gullyclock.com car cet élément était infecté par Other:Malware-gen
url : hxtps://gullyclock.com/22bc07df48b043c1f3.js

[DavidR]

1.  Please break the link to what is a suspect site and avoid accidental exposure to others.
e.g. hXXps://gullyclock.com/22bc07df48b043c1f3.js
2.  Attach a screenshot of the alert message, it can help determine where this is being activated from.

Use the Attachments and other options below the reply window, see my attached image.

[buddy082805]

we are getting it too ..
please see attached

[DavidR]

Presumably you aren't visiting that site with Firefox ?

If not (and I suspect so), it could be a website that you are visiting, regularly (which has a 3rd party link to that script) ?
If not there is a possibility that you have a malicious add-on installed in Firefox, check firefox Add-ons and check for new/unknown add-ons.

If nothing new, then I advise you to read this topic (Logs to assist in cleaning malware) and follow the instructions and create a new topic in the Viruses & Worms forum (not in that topic) and attach the logs there.

[Pondus]

gullyclock.com/22bc07df48b043c1f3.js

java script scan
https://www.virustotal.com/gui/file/814ca97b6a2562d5b71f4a7daec82bcc72f544bb0234b443ce2266cef2088184/detection

[DavidR]

gullyclock.com/22bc07df48b043c1f3.js

java script scan
https://www.virustotal.com/gui/file/814ca97b6a2562d5b71f4a7daec82bcc72f544bb0234b443ce2266cef2088184/detection

Whilst it is a new detection and others may join the detection party, the real problem is finding why it is occurring and resolve it.

I did try a scan with Sucuri and it considered the site a Medium Security Risk, it did get a "Unable to scan your site. 403 Forbidden" error when trying to scan the site.

[Marie-Pierre4]

1.  Please break the link to what is a suspect site and avoid accidental exposure to others.
e.g. hXXps://gullyclock.com/22bc07df48b043c1f3.js
2.  Attach a screenshot of the alert message, it can help determine where this is being activated from.

Use the Attachments and other options below the reply window, see my attached image.

[DavidR]

@ Marie-Pierre4

Read my reply to buddy082805, Reply #3 above and answer the questions there and if necessary follow the instructions in the Logs to assist in cleaning malware link that I gave.