Author Topic: trojan  (Read 2306 times)

0 Members and 1 Guest are viewing this topic.

Hexa

  • Guest
trojan
« on: May 03, 2009, 08:30:37 PM »
Hi, I was warned by Avast about a trojan at this site: www.lerun.no
What do I need to do about it?

Thanks in advance  ;)

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89159
  • No support PMs thanks
Re: trojan
« Reply #1 on: May 03, 2009, 08:53:36 PM »
Where exactly (as I get no alert on that page) ?
Check the avast! Log Viewer (right click the avast 'a' icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe - Or check the source file using notepad C:\Program Files\Alwil Software\Avast4\DATA\log\Warning.log
####
When posting URLs to suspect sites, change the http to hXXp (or www to wXw), so the link isn't active (clickable) avoiding accidental exposure.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline .: L' arc :.

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1780
  • Thinking with Portals
Re: trojan
« Reply #2 on: May 04, 2009, 11:42:42 AM »
-= Trigger =-

Filename:            hXXp://www.lerun.no/sommer.html
Malware name:    HTML:IFrame-CG [trj]
Malware type:     Trojan Horse

-= Most of the threats are on the sidebar..
« Last Edit: May 04, 2009, 11:49:34 AM by chronoboi001 »
Windows 7 (64-bit) Home Premium SP1
avast! 9 RC1

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89159
  • No support PMs thanks
Re: trojan
« Reply #3 on: May 04, 2009, 04:33:20 PM »
Well I don't see any iFrames in the page source and the only thing that I see which it could possibly be is in the Body tag, the onload function. See image1 I have edited it to make it easier to see as the script is essentially on one line.

I don't pretend to have any idea exactly what this does, but it is the only thing that it could be.

So I have submitted it for further analysis, image2
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security