« previous next »
Pages: [1]   Go Down

Author Topic: 'Shock' Sites unblocked?  (Read 5264 times)

0 Members and 1 Guest are viewing this topic.

Chris Appleyard

  • Guest
'Shock' Sites unblocked?
« on: June 20, 2012, 02:00:03 AM »
Hello, About a couple of months ago the shock website "mylazysundaysdotcom" was blocked by avast because it said it was a Trojan and then today I tested it on my remote machine and it wasn't blocked.. what happened? or is my copy of Avast not working?

Thanks a lot
Chris A
« Last Edit: June 20, 2012, 02:06:40 AM by Chris Appleyard »
Logged

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89052
  • No support PMs thanks
Re: 'Shock' Sites unblocked?
« Reply #1 on: June 20, 2012, 02:35:42 AM »
A visit to the site returns an alert with firefox 13.0.1, image1. So I don't know why you didn't get an alert.

There is a compressed file (probably a compressed script file) loaded when you enter the site, the {gzip} bit at the end of the alert indicating a compressed file being loaded and that is what avast is alerting on, see imag2 extract of file.

VirusTotal is clear that this file is suspect, but given the detections JOKE, HOAX, etc. etc. just how serious, but there are a large number that would alert on it, https://www.virustotal.com/file/e14acf44a515280cf03038e6a441bb792d988990f1537d5de27c2839822f59a5/analysis/1340151876/.
Logged
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: 'Shock' Sites unblocked?
« Reply #2 on: June 20, 2012, 09:58:40 AM »
Hi Chris,

To test your avast av go here: http://www.eicar.org/85-0-Download.html

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Chris Appleyard

  • Guest
Re: 'Shock' Sites unblocked?
« Reply #3 on: June 20, 2012, 01:29:09 PM »
Thanks for the test file my Avast! is working fine.
Logged
Pages: [1]   Go Up
« previous next »