Author Topic: Detects VBS:Malware-gen on my site http://www.thefunnyplanet.com/ since 4pm!  (Read 8794 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Hi,

I'm just wondering why this happen to my site at http://www.telepisodes.net too ? When I check the site on other site checker like SiteAdvisor and Norton Safe, it checked my site and it is safe... Where's the issue came from? From HiStats' script or the ADS script on our site? Can anyone from AVAST explain it to us so that at least we can make some necessary move, decision or adjustments on this incident.

Thanks in advance for any response.

See Reply #4. ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Hi telepisodes,

This is the suspicious bit there:
www.telepisodes.net/about/ suspicious
[suspicious:2] (ipaddr:46.19.139.180) (jsvar) -www.telepisodes.net/about/
     status: (referer=-www.telepisodes.net/)saved 43624 bytes ddbf9d47cfadf8d6e3441d058f1969b3c3156ec4
     info: [javascript variable] URL=-www.telepisodes.net/about/
     info: [script] -cdn.telepisodes.net/wp-includes/js/l10n.js?ver=20101110
     info: [script] -cdn.telepisodes.net/wp-includes/js/jquery/jquery.js?ver=1.6.1
     info: [script] -cdn.telepisodes.net/wp-content/themes/arthemiaxx/telscrpt.js
     info: [script] -cdn.telepisodes.net/wp-content/themes/arthemiaxx/daves.js
     info: [img] -cdn.telepisodes.net/telenet.png
     info: [script] -ad.adorika.com/st?type=ad&size=728x90&section=1994858
     info: [input] -cdn.telepisodes.net/wp-content/themes/arthemia/images/magnify.gif
     info: [iframe] a-d.xtendmedia.com/st?type=iframe&size=336x280&section=1764052
     info: [iframe] -ad.xtendmedia.com/st?type=iframe&size=300x600&section=1764052&flash=1
     info: [img] -sstatic1.histats.com/0.gif?1417482&101   That's it!
     info: [script] -edge.quantserve.com/quant.js
     info: [img] -pixel.quantserve.com/pixel/p-deb3UCO4t-TqU.gif
     info: [script] -apis.google.com/js/plusone.js
     info: [decodingLevel=0] found JavaScript
     suspicious: maxruntime exceeded 10 seconds (incomplete) 0 bytes

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!