abcdefgh.com shut down Avast

Viruses and worms
1

I went to abcdefgh.com and suddenly Avast (free) reported with the red alert that it was blocking a malicious script on the site. Right after that I got a Windows (running Win XP Pro) error telling me Avast had to shut down. I was able to relaunch Avast again and it appears to be running normally. I just did a quick scan with Malwarebytes and it reported nothing. Web shield says last page infected was abcdefgh.com/calendar.js.

2

Jotti - abcdefgh.com/calendar.js
http://virusscan.jotti.org/en/scanresult/93ecfd8a6d4708c92a867aa8fbe7db545eb1d2eb

VirusTotal
https://new.virustotal.com/file/fcefe8e659778dfe969bca7e96a2b4a9aedc7a35b023c56e76e092f602659d2d/analysis/1326450101/

3

JS:Redirector-MV and Trojan-Downloader.JS.Agent. Did they now download something that has infected my computer? Avast is not reporting anything.

4

I think avast stopped it before

But run a quick scan with avast also…and remember to always update Malwarebytes before you scan

5

I wonder … this is the correct definition?

calendar.js

http://wepawet.iseclab.org/view.php?hash=1c313807bc5feb91ca01c9ca295bbf0e&type=js

jquery.min.js
https://www.virustotal.com/file/d16d07a0353405fcec95f7efc50a2621bc7425f9a5e8895078396fb0dc460c4f/analysis/1326450958/

6

Thanks for the reminder - Malwarebytes was updated before the scan and Avast quick scan completed with no threat found. But, still surprised that Avast shut down from this.

7
But, still surprised that Avast shut down from this.

you can report it here http://www.avast.com/en-eu/contact-form.php?loadStyles

you may add a link to this topic

8

Thanks for suggesting it, I just sent my report with the link.

9

Norman lab

abcdefgh.com.htm : Processed - JS/Dloader.BGHB calendar.js : Processed - JS/Agent.ACH