Author Topic: is this site infected or fraud/fake site??  (Read 3043 times)

0 Members and 1 Guest are viewing this topic.

therockstar

  • Guest
is this site infected or fraud/fake site??
« on: September 29, 2011, 04:19:21 PM »
i have found that a virus has been detected named html script inf while visiting this website
hxtp://howtoformatacomputer.com/ it does seems fake or hacked.... is this warning true or false positive??? is it still in my system??how severe can this virus be??

how to remove this infection??it infected c:\program files\mozilla\firefox.exe :(
« Last Edit: September 29, 2011, 04:24:16 PM by Milos »

Offline Sirmer

  • Avast team
  • Sr. Member
  • *
  • Posts: 324
Re: is this site infected or fraud/fake site??
« Reply #1 on: September 29, 2011, 04:27:03 PM »
Hello,
this is not a false positive. If Avast stop it that your PC should be OK. You should to run full test just for sure.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: is this site infected or fraud/fake site??
« Reply #2 on: September 29, 2011, 04:36:24 PM »
This javascript malware was found there: http://sucuri.net/malware/malware-entry-mwiframehd2298

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Sartigan

  • Guest
Re: is this site infected or fraud/fake site??
« Reply #3 on: September 29, 2011, 04:36:24 PM »
Hi!
Well, I scanned it with some online virus scanners..

URLVoid says CLEAN: http://www.urlvoid.com/scan/howtoformatacomputer.com
Web of Trust: http://www.mywot.com/en/scorecard/howtoformatacomputer.com
Sucuri says it's INFECTED: http://sucuri.net/malware/malware-entry-mwiframehd2298

I couldn't scan it with VirusTotal as it simply didn't respond... ???

According to Sucuri.net: there is a dangerous script on the site.

It's better to avoid it ;)

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89056
  • No support PMs thanks
Re: is this site infected or fraud/fake site??
« Reply #4 on: September 29, 2011, 04:44:26 PM »
@ therockstar
Please don't post multiple posts on the same issue, it just duplicates effort for those trying to help. I have answered your first post http://forum.avast.com/index.php?topic=41771.msg693730#msg693730. The site appears to have been hacked.

Please 'modify' your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

therockstar

  • Guest
Re: is this site infected or fraud/fake site??
« Reply #5 on: September 29, 2011, 08:12:27 PM »
@ therockstar
Please don't post multiple posts on the same issue, it just duplicates effort for those trying to help. I have answered your first post http://forum.avast.com/index.php?topic=41771.msg693730#msg693730. The site appears to have been hacked.

Please 'modify' your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.
thnx for replying ,will do that in future