Author Topic: www.thoranime.org being blocked by avast?  (Read 4543 times)

0 Members and 1 Guest are viewing this topic.

Yachiru

  • Guest
www.thoranime.org being blocked by avast?
« on: March 22, 2011, 02:27:35 AM »
Is this site a real threat?

doktornotor

  • Guest
Re: www.thoranime.org being blocked by avast?
« Reply #1 on: March 22, 2011, 02:29:03 AM »
Update your virus defs.  :-X

Onix

  • Guest
Re: www.thoranime.org being blocked by avast?
« Reply #2 on: March 22, 2011, 03:13:04 AM »
Yes, the site is a real threat. Look at the screenshot and you'll see a suspicious iframe:

Offline Yanto.Chiang

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1371
  • Soli Deo Gloria
    • PT Garuda Sinatriya Globalindo
Re: www.thoranime.org being blocked by avast?
« Reply #3 on: March 22, 2011, 08:19:51 AM »
Hi Yachiru,

According to Anubis Web Scanner report this site will modified the registry and possibly to destruct your registry system.

Please see the report link : http://anubis.iseclab.org/?action=result&task_id=1edf4ad694c215634ede7936b29f8bbce&format=html

cheers,
Yanto Chiang | IT Security Consultants | AVAST Premium Security | GarudaSinatriya

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: www.thoranime.org being blocked by avast?
« Reply #4 on: March 22, 2011, 03:53:32 PM »
Hi folks,

there is more malware on this domain, see what the sucuri scan detects here:
web site:   
htxp://www.horriblesubs.org
status:
Site infected with malware.
Hidden Iframes. Details: http://sucuri.net/malware/entry/MW:IFRAME:HD202
and
http://sucuri.net/malware/entry/MW:IFRAME:HD202
malicious iFrame source:

(Level: 1) Url checked: (iframe source)
htxp://coalguys.com/
Zeroiframes detected on this site: 0
No ad codes identified


polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37598
  • Not a avast user
Re: www.thoranime.org being blocked by avast?
« Reply #5 on: March 22, 2011, 04:13:49 PM »
Norman analysis confirms infected

Quote
thoranime.org : Processed - HTML/Iframe.IQ

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: www.thoranime.org being blocked by avast?
« Reply #6 on: March 22, 2011, 04:59:43 PM »
Hi Pondus,

Here is a write-up on this specific IFrame Malware Infection Details: http://wam.dasient.com/wam/infection_library/3e94ff86c9f07e4618d94a22d7cc04c3/fenkaololo
A nice collection summed up for you here of recent finds of iFrame malware:
http://wam.dasient.com/wam/infection_library_index
I use Cheating Iframe Detector by mvent2 for Firefox on Google Chrome to explore iFrames,
also good to check a site like this infected site,see:
http://wam.dasient.com/wam/infection_library/6bb7a1987976c50fdeb0b2ce3f4e2b89/vv
(Level: 0) Url checked:
htxp://gsdha3whfh.vv.cc
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (frame source)
htxp://www.registry.vv.cc/free.php?domain=gsdha3whfh.vv.cc
Google code detected (Ads, not a cheater)
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 2) Url checked: (script source)

Blank page / could not connect
No ad codes identified

See that it is also flagged as malicious here: http://www.google.com/safebrowsing/diagnostic?site=gsdha3whfh.vv.cc

So when you delve further into it a great number of these iFrame infections still around, my friend,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Yachiru

  • Guest
Re: www.thoranime.org being blocked by avast?
« Reply #7 on: March 23, 2011, 04:58:20 AM »
I was able to visit the site last 9:00pm GMT-5. The site is no longer being blocked by avast.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37598
  • Not a avast user