I went to abcdefgh.com and suddenly Avast (free) reported with the red alert that it was blocking a malicious script on the site. Right after that I got a Windows (running Win XP Pro) error telling me Avast had to shut down. I was able to relaunch Avast again and it appears to be running normally. I just did a quick scan with Malwarebytes and it reported nothing. Web shield says last page infected was abcdefgh.com/calendar.js.
Jotti - abcdefgh.com/calendar.js
http://virusscan.jotti.org/en/scanresult/93ecfd8a6d4708c92a867aa8fbe7db545eb1d2eb
JS:Redirector-MV and Trojan-Downloader.JS.Agent. Did they now download something that has infected my computer? Avast is not reporting anything.
I think avast stopped it before
But run a quick scan with avast also…and remember to always update Malwarebytes before you scan
I wonder … this is the correct definition?
calendar.js
http://wepawet.iseclab.org/view.php?hash=1c313807bc5feb91ca01c9ca295bbf0e&type=js
jquery.min.js
https://www.virustotal.com/file/d16d07a0353405fcec95f7efc50a2621bc7425f9a5e8895078396fb0dc460c4f/analysis/1326450958/
Thanks for the reminder - Malwarebytes was updated before the scan and Avast quick scan completed with no threat found. But, still surprised that Avast shut down from this.
But, still surprised that Avast shut down from this.
you can report it here http://www.avast.com/en-eu/contact-form.php?loadStyles
you may add a link to this topic
Thanks for suggesting it, I just sent my report with the link.
Norman lab
abcdefgh.com.htm : Processed - JS/Dloader.BGHB calendar.js : Processed - JS/Agent.ACH