Author Topic: hxxp://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx (infection alert MALWARE BLOC  (Read 9774 times)

0 Members and 1 Guest are viewing this topic.

paroh

  • Guest
hxxp://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx (infection alert MALWARE BLOCKED)

As the site is working perfectly but now i am getting MALWARE BLOCKED)

Screenshot of Alert
[imge]http://i.imgur.com/SBriL.jpg[/img]
« Last Edit: May 29, 2011, 02:14:53 PM by igor »

Offline Bluesman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 926
  • Amiga Power!
http://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx (infection alert MALWARE BLOCKED)

As the site is working perfectly but now i am getting MALWARE BLOCKED)

Screenshot of Alert
[imge]http://i.imgur.com/SBriL.jpg[/img]

Please don't post live links to malware! Edit your link to hxxp:// or similar
"The blues are the roots, everything else is the fruits" -Willie Dixon

spg SCOTT

  • Guest
avast is alerting on a long, one line script that is in hex form.

When returned to text I am not sure what it does but it doesn't look right to me...

avast (and Gdata) is the only one to detect on VirusTotal, so I don't know on whether the detection is right or not.
http://www.virustotal.com/file-scan/report.html?id=4219bdb47e67b83824ccecdaed46effb983e9eec18d74dcf7c434e69a143209d-1306670056

OT: Thanks igor for deactivating the link ;)
« Last Edit: May 29, 2011, 02:17:43 PM by spg SCOTT »

paroh

  • Guest
If u read my previous post (http://forum.avast.com/index.php?topic=72187.msg602215#msg602215) i encounter almost similar type of problem,as it is a false alert and the problem is solved but now again the same problem.

spg SCOTT

  • Guest
I don't know exactly what the script does, but putting the site through anubis, gives an interesting result

paroh

  • Guest
http://sitecheck.sucuri.net/scanner/

Result for hxxp://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx

Security report (no threats found):
       Blacklisted:      No
   Malware:    No
   Malicious javascript:     No
   Drive-By Downloads:      No
       Anomaly detection:      No
       IE-only attacks:        No
   Malicious iframes:    No
   Suspicious redirections:No
   Spam:   No

Offline Asyn

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 76032
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

paroh

  • Guest
The problem is solved now the site is opening without any Malware Aert

spg SCOTT

  • Guest
Good to hear, thanks for reporting back.

This makes me wonder how accurate anubis actually is then, if it reports like it did...