Author Topic: malicious URL blocked; hxxp://rk400.com/?sov=rook-fwdservice.com  (Read 9936 times)

0 Members and 1 Guest are viewing this topic.

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: malicious URL blocked; hxxp://rk400.com/?sov=rook-fwdservice.com
« Reply #15 on: March 22, 2012, 11:46:33 PM »
My question would be, if Avast blocked this Trojan, why is the OP still getting strange stuff on his computer?
What strange stuff?

The website hosting the redirect was blocked by avast's blacklisting database, thus preventing exposure to anything on the website.


Edit: I also see a topic with the same title: http://forum.avast.com/index.php?topic=95930

^^ Maybe that is the OP getting the required help on another account? ???
« Last Edit: March 22, 2012, 11:50:42 PM by !Donovan »
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

RobinHoodSnr

  • Guest
Re: malicious URL blocked; hxxp://rk400.com/?sov=rook-fwdservice.com
« Reply #16 on: March 23, 2012, 05:31:28 AM »
The URL is a PHISHING site: htxp://zulu.zscaler.com/submission/show/fed70e31522d3a890cfcb0f6f7487236-1332021245
and the virus there is JS:ScriptIP-inf Trj ] I get a  ^^eval do_redirect() ^*** called setTimeout with do_redirect(), 0 *^
Avast detect this as URL:Mal. This could be a tag to script detection,

polonus

...thx Polonus.... :)