A potentially malicious website (and file) that is not recognized by avast...

Could someone please tell me what is up with this website? when I go to it, it looks EXACTLY like the screen chrome displays when a website seems insecure or risky. It then quickly runs a very realistic looking scan that blends in completely with chrome, and then suggests downloading a “InstallSystemDefender”. Normally, I would think this would be enough to tell me this site is malicious, but just because I was curious, I downloaded the InstallSystemDefender_557.exe so I could scan it with avast and see what comes up. It comes up as clean. I have also done a search on Virustotal.com and several other malware/virus databases, submitting both the URL, and the file for inspection, but it comes out clean every time! As far as I’m concerned, this malicious file and URL are completely unknown to any antivirus program to date. I don’t want to open the file, but I’m curious what it is. Could someone please tell me of a good virus database or what this file actually is or does? Thanks.

Oh yeah, and I almost forgot to put the link here!! here it is—> hxxp://scan4.lgecelng.cz.cc/index.php?Q0HhTdT2bYRGmXppMx9FwiyHEyf4jzehoSvy+AdRpFLVCy8phMcpx1GWqyDgu1qwsKKkZSwfG5M1b5jkqMXCHURHZdHJx+1bKTsCKERK

We cant check the URL if you dont post it :wink:

EDIT your post and brake the link so it is not clickable ( hxxp / http or wxw / www )

And yes that is absolutely a Fake scansite that download a Rogue

ok sorry…here it is: hxxp://scan4.lgecelng.cz.cc/index.php?Q0HhTdT2bYRGmXppMx9FwiyHEyf4jzehoSvy+AdRpFLVCy8phMcpx1GWqyDgu1qwsKKkZSwfG5M1b5jkqMXCHURHZdHJx+1bKTsCKERK

Oh yeah, and I guess I should mention that there are several sites that pop up on google image search that do this exact same thing, but with slight variations in the name of the file that is downloaded. I can submit others if anyone would like them. I don’t know how to submit this kind of stuff to avast directly, which is why I posted this thread…hope this helps.

It wont help posting it unclickable in a new post… ???
you have to go back in the first post EDIT it and break the link

Ok sorry, this is my first time posting on this forum. I fixed it :slight_smile:

check your mail box…

Malwarebytes detect it as - Trojan.FakeAlert

sample sendt avast! :wink:

Got it. Thanks!