Last week, I visited a non-dodgy website (curryhouse.net - don’t go there!) and my avast alarm bells started ringing. Somehow, it had detected the website had a virus BEFORE it downloaded it. This is the second time this has happened - again, the other was a non-dodgy site. Avast informs there is a virus and simply displays the message “Abort Connection?”, to which you obviously answer Yes.
But it’s brilliant the way it prevents the virus from downloading. I ran AV afterwards, along with MBAB and SuperAntiSpyware and all came up clean.
Avast! Webshield does a very good job defending from Internet threats,
scanning the HTTP-stream en route to your computer usually with no delay at all.
Your only option is abort connection, and nothing get downloaded from the malicious site.
I don’t know how to check but WoT indicates that it may be that The website has a Java banner that loads 4 different java classes, if you do not have Java installed, or disallow via browser settings… maybe that is causing Avast to flag a warning? http://www.mywot.com/en/forum/3341-hot-stuff-needed
No FP on the curryhouse.net there are no less than 4 scritp tags inserted into a PARAM tag (to malicious sites all with the same ngg.js script) all on a single line, see image, I have broken the single line to make it easier to see.
It isn’t physically on the site, but the site has been hacked notice those ^script^ tags in the image they are running a javascript file (ngg.js) hosted on another site. So it is effectively the same.
Running firefox with NoScript is great, provided you don’t allow scripts for that site, but avast alerts anyway as it doesn’t wait for the script to execute (avast doesn’t know you have NoScript and it doesn’t/shouldn’t consider that).
What do you mean? Are you saying there is a virus on this site or there isn’t? I am running Firefox with NoScript if that makes any difference.
