Anyone else getting this

Viruses and worms
1

Hi all
I go to fishing forums and when I googled a topic one forum came up, then Avast window popped up saying it was a malicious URL. Other times I get a redirect to hxtp://cracklebeatbox.org, and Avast says its a trojan horse.

Is this a false alert? Are/do forums get attacked at the same relative time?

Thanks for any help.

2

and what was the first URL…before the redirect

also post all links no clickable…http as hxtp and www as wxw

URL sucuri rapport http://sitecheck.sucuri.net/results/cracklebeatbox.org
http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=cracklebeatbox.org

3

I get a “Application Error : The instruction at “0x6149fbfb” referenced memory at “0x00000000”. The memory could not be “read””
, because Apache+PHP+OCI8 (Oracle) error,when going to cracklebeatbox dot org with WebBug via a GET request -
Also with a file viewer there is

 type≈ "text/javascript" src≈ "efsfsd dot js">

on line 33 (applet) - this is characteristic for Styx Sploit Pack malware!
See IDS alert sigs: http://permalink.gmane.org/gmane.comp.security.ids.snort.emerging-sigs/18194 (given by -n0ct)
and http://www.malwaresigs.com/2012/12/19/styx-exploit-kit/ author = malwaresigs

polonus

4

Please ‘modify’ your post change the URL from http to hXXp (as I have done with your quoted text), to break the link and avoid accidental exposure to suspect sites, thanks.

It has been escalated from trojan detected at that site to Malicious URL (MAL:URL) and firefox blocks it as well.

5

Hi grubman & Pondus,

DavidR is right here, URL 100 out of 100% malicious, according to: http://zulu.zscaler.com/seen/ff78973d9cb3b9c236a8643fd2cd21f6-1356644941
re-analyzed here: http://zulu.zscaler.com/submission/show/ff78973d9cb3b9c236a8643fd2cd21f6-1356649781
file hMHraMES dot jar via hidden iFrame is malicious…
And this could have been the originating source that grubman did not mention in his initial posting, namely: pokercollectif dot com →
http://www.princepoker.com/forum/showthread.php?34191-Virus&s=d77bc01a73261f34730c3f2d2e533069&p=424760&viewfull=1#post424760 (posted by mdesjard post #5)
Also consider this: http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=cracklebeatbox.org

polonus