Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
www.thoranime.org being blocked by avast?
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: www.thoranime.org being blocked by avast? (Read 4543 times)
0 Members and 1 Guest are viewing this topic.
Yachiru
Guest
www.thoranime.org being blocked by avast?
«
on:
March 22, 2011, 02:27:35 AM »
Is this site a real threat?
Logged
doktornotor
Guest
Re: www.thoranime.org being blocked by avast?
«
Reply #1 on:
March 22, 2011, 02:29:03 AM »
Update your virus defs.
Logged
Onix
Guest
Re: www.thoranime.org being blocked by avast?
«
Reply #2 on:
March 22, 2011, 03:13:04 AM »
Yes, the site is a real threat. Look at the screenshot and you'll see a suspicious iframe:
Logged
Yanto.Chiang
Avast Evangelist
Super Poster
Posts: 1371
Soli Deo Gloria
Re: www.thoranime.org being blocked by avast?
«
Reply #3 on:
March 22, 2011, 08:19:51 AM »
Hi Yachiru,
According to Anubis Web Scanner report this site will modified the registry and possibly to destruct your registry system.
Please see the report link :
http://anubis.iseclab.org/?action=result&task_id=1edf4ad694c215634ede7936b29f8bbce&format=html
cheers,
Logged
Yanto Chiang | IT Security Consultants | AVAST Premium Security | GarudaSinatriya
polonus
Avast Überevangelist
Probably Bot
Posts: 33926
malware fighter
Re: www.thoranime.org being blocked by avast?
«
Reply #4 on:
March 22, 2011, 03:53:32 PM »
Hi folks,
there is more malware on this domain, see what the sucuri scan detects here:
web site:
htxp://www.horriblesubs.org
status:
Site infected with malware.
Hidden Iframes. Details:
http://sucuri.net/malware/entry/MW:IFRAME:HD202
and
http://sucuri.net/malware/entry/MW:IFRAME:HD202
malicious iFrame source:
(Level: 1) Url checked: (iframe source)
htxp://coalguys.com/
Zeroiframes detected on this site: 0
No ad codes identified
polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pondus
Probably Bot
Posts: 37598
Not a avast user
Re: www.thoranime.org being blocked by avast?
«
Reply #5 on:
March 22, 2011, 04:13:49 PM »
Norman analysis confirms infected
Quote
thoranime.org : Processed -
HTML/Iframe.IQ
Logged
polonus
Avast Überevangelist
Probably Bot
Posts: 33926
malware fighter
Re: www.thoranime.org being blocked by avast?
«
Reply #6 on:
March 22, 2011, 04:59:43 PM »
Hi Pondus,
Here is a write-up on this specific IFrame Malware Infection Details:
http://wam.dasient.com/wam/infection_library/3e94ff86c9f07e4618d94a22d7cc04c3/fenkaololo
A nice collection summed up for you here of recent finds of iFrame malware:
http://wam.dasient.com/wam/infection_library_index
I use Cheating Iframe Detector by mvent2 for Firefox on Google Chrome to explore iFrames,
also good to check a site like this infected site,see:
http://wam.dasient.com/wam/infection_library/6bb7a1987976c50fdeb0b2ce3f4e2b89/vv
(Level: 0) Url checked:
htxp://gsdha3whfh.vv.cc
Zeroiframes detected on this site: 0
No ad codes identified
(Level: 1) Url checked: (frame source)
htxp://www.registry.vv.cc/free.php?domain=gsdha3whfh.vv.cc
Google code detected (Ads, not a cheater)
Zeroiframes detected on this site: 0
No ad codes identified
(Level: 2) Url checked: (script source)
Blank page / could not connect
No ad codes identified
See that it is also flagged as malicious here:
http://www.google.com/safebrowsing/diagnostic?site=gsdha3whfh.vv.cc
So when you delve further into it a great number of these iFrame infections still around, my friend,
polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.
Use NoScript, a limited user account and a virtual machine and be safe(r)!
Yachiru
Guest
Re: www.thoranime.org being blocked by avast?
«
Reply #7 on:
March 23, 2011, 04:58:20 AM »
I was able to visit the site last 9:00pm GMT-5. The site is no longer being blocked by avast.
Logged
Pondus
Probably Bot
Posts: 37598
Not a avast user
Re: www.thoranime.org being blocked by avast?
«
Reply #8 on:
March 23, 2011, 07:29:33 AM »
Looks as they have cleaned the website
http://www.virustotal.com/file-scan/report.html?id=b58c6a4aef240d2fee3f6786c4541b2c7bab40ee2ee20a2b5c27588ffd96ceb6-1300861574
Logged
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
www.thoranime.org being blocked by avast?