« previous next »
Pages: [1]   Go Down

Author Topic: Malware Sites  (Read 5889 times)

0 Members and 1 Guest are viewing this topic.

12-es_csaj

  • Guest
Malware Sites
« on: September 26, 2010, 03:18:34 PM »
Maybe Malware sites; no reacts from avast!:

hxxp://goxohic.co.cc
hxxp://www1.ingodswetrust20.co.cc
Logged

13thSlayer

  • Guest
Re: Malware Sites
« Reply #1 on: September 26, 2010, 03:23:09 PM »
First one just requests a password. Don't know it thus can't go further. Second one just returns a 404. However, someone submitted them to Firefox dangerous sites database. Don't know who to trust but code presents nothing of possible danger. So whatever. tl;dr: ulol.
Logged

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: Malware Sites
« Reply #2 on: September 26, 2010, 03:24:59 PM »
Logged
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

13thSlayer

  • Guest
Re: Malware Sites
« Reply #3 on: September 26, 2010, 03:26:55 PM »
Logged

12-es_csaj

  • Guest
Re: Malware Sites
« Reply #4 on: September 26, 2010, 03:28:37 PM »
I know that downloaded file analysis reports nothing, but in a forum some people checked the sites, and their antivirus alerted.
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34049
  • malware fighter
Re: Malware Sites
« Reply #5 on: September 26, 2010, 04:37:16 PM »
Hi

The first site had malicious content also in the past, so is suspicious: http://www.google.com/safebrowsing/diagnostic?site=goxohic.co.cc
The second is a malware site according to: http://www.threatlog.com/search/www1.ingodswetrust20.co.cc

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

12-es_csaj

  • Guest
Re: Malware Sites
« Reply #6 on: September 26, 2010, 05:27:43 PM »
So, if they are really malicious sites, what should I do to add them to the newxt virus update?
Logged

iRonzel

  • Guest
Re: Malware Sites
« Reply #7 on: September 26, 2010, 06:14:54 PM »
Quote from: 12-es_csaj on September 26, 2010, 05:27:43 PM
So, if they are really malicious sites, what should I do to add them to the newxt virus update?

Send an email with the information to virus@avast.com

Include all info necessary, including the VT results. 
Logged

Offline Sirmer

  • Avast team
  • Sr. Member
  • *
  • Posts: 324
Re: Malware Sites
« Reply #8 on: September 26, 2010, 06:26:17 PM »
Hello,
these sites will be catched in next VPS.
Best regards
Jan Sirmer
Logged

12-es_csaj

  • Guest
Re: Malware Sites
« Reply #9 on: September 26, 2010, 07:14:52 PM »
Quote from: Sirmer on September 26, 2010, 06:26:17 PM
Hello,
these sites will be catched in next VPS.
Best regards
Jan Sirmer

Thank you very much!
Good to know that avast!-guys are so fast; and writing to the forums is not useless  :)
Logged

12-es_csaj

  • Guest
Re: Malware Sites
« Reply #10 on: September 26, 2010, 09:14:02 PM »
The second page has a 404 error, but here is the result for the first one:
http://kepfeltoltes.hu/view/100926/eredmeny_www.kepfeltoltes.hu_.png (I uploaded the picture to a Hungarian upload site)
Logged

12-es_csaj

  • Guest
Re: Malware Sites
« Reply #11 on: October 06, 2010, 06:17:09 PM »
I sent an e-mail to AVAST on 26th of September (before an avast! team member reacted here), and I only got a reply today. So it means that if I send a sample/link to AVAST via chest or mail, it won't be analyzed / added  in few days? This process needs few weeks?
If we complain in the forum, malicious URL/sample will be added few hours later. But I think the most of your users sent malicious codes via e-mail..... And it is slow.
I hope that the reply e-mail what is only slow. If the analyzis too, I am disappointing because of it.
Logged
Pages: [1]   Go Up
« previous next »