Example of new threat site....malicious javascript encoder

[polonus]

Hi malware fighters,

Here we give one of the new threat sites, you can find mentioned here: http://safeweb.norton.com/safety

http://safeweb.norton.com/report/show?name=caratteristi*it
This page seems to be <suspicious>
1 suspicious inline script found, script outside HTML:

Code: [Select]

v*r *sd*s="*sd8(@+";function z(s){v*r *sd*s="*sd8(@";r="";for(i=0;i< s.length;i++){var *sd*s="*sd8(... *=aThe finds: http://scanner.novirusthanks.org/analysis/5fec0c3e0d7505296c8c8b1cc30aba9a/aW5kZXg=/
Avast apparently does not find these:
Drive-By Downloads  

Threats found: 18
samples:
Threat Name:    HTTP Malicious Javascript Encoder 5
Location:    htxp://www.caratteristi.it/index.asp?pagina=1

   
Threat Name:    HTTP Malicious Javascript Encoder 5
Location:    htxp://www.caratteristi.it/index.asp?pagina=34

   
Threat Name:    HTTP Malicious Javascript Encoder 5
Location:    htxp://www.caratteristi.it/index.asp?pagina=41

   
Threat Name:    HTTP Malicious Javascript Encoder 5
Location:    htxp://www.caratteristi.it/index.asp?pagina=45

   
Threat Name:    HTTP Malicious Javascript Encoder 5
Location:    htxp://www.caratteristi.it/index.asp?pagina=40

   
Threat Name:    HTTP Malicious Javascript Encoder 5
Location:    htxp://www.caratteristi.it/index.asp?pagina=36

   
Threat Name:    HTTP Malicious Javascript Encoder 5
Location:    hxtp://www.caratteristi.it/index.asp?pagina=37

   
Threat Name:    HTTP Malicious Javascript Encoder 5
Location:    hxtp://www.caratteristi.it/index.asp?pagina=39

   
Threat Name:    HTTP Malicious Javascript Encoder 5
Location:    htxp://www.caratteristi.it/index.asp?pagina=42

   
Threat Name:    Direct link to HTTP Malicious Javascript Encoder 5
Location:    htxp://www.caratteristi.it/index.asp?pagina=42

polonus
   

[bob3160]

Shouldn't this have been posted in:
http://forum.avast.com/index.php?topic=52252.0