Avast Web Shield is blocking s-c-a-y-l.-c-o-m

Avast Free Antivirus / Premium Security
1

Avast Web Shield is blocking scayl.com

I’m of the belief it should be a false positive.

Please, anyone knows why the website is blocked?

http://farm8.staticflickr.com/7151/6612517137_1480cdc22d_b.jpg

2

please make the site link u gave not clickable…

add hxxp instead of http

mcafee also doesnt like the site:
http://www.virustotal.com/file-scan/report.html?id=6ae94e511fcc8b5231e1c08b34ea7610f1294d8c90c6756ff85bc4ddf09a9a4d-1325430153

see this:
http://anubis.iseclab.org/?action=result&task_id=1f489365addaf0884919466c9510f99b3&format=txt

3

Hi,

Unfortunately, it does appear as though the site is infected.

The first line contains a script that doesn’t belong and is what is causing the alert.

Scott

4

I see. So, it is not s false positive then.

5

And all the more reason to disable the live link in your title of this thread.

Thanks.

6

The title is not a problem, since clicking it only returns you to this thread, not the site :wink:

The link that was in the post, has now been deactivated.

7

Bots repeating or caching this post will still keep that “link”, not active but as text, so if the site is “problematic”, we shouldn’t be spreading it (neither as link nor as text).

So it is still recommended to edit the title. Generally speaking, the title of the posts / topics shouldn’t contain “URLs” or similar, no matter if they have some security issue or not. It is like free publicity, and this shouldn’t be tolerated here.

I have also edited the title of this particular post (as all the participants of this topic should).

8

I’ve reported it to the Mod’s so hopefully one of them will fix the title of this thread. :slight_smile:

9

I hadn’t thought of that, and I agree. Thanks :slight_smile:

10

What about the rest of the titles of each post in this topic, still including the same “texted link”?

11

The rest of the respective poster would have to change that (or a moderator).

Only when the OP changes the original title does it change all of his/her posts, but replies prior to an OP changing a title would remain as they were. So it looks like the OP didn’t change the original title but one of the mods.

12

True Indian’s reply still contains the original title with the name of the original website.

13

http://anubis.iseclab.org/?action=result&task_id=1f489365addaf0884919466c9510f99b3&format=txt

Site is malicious it has been subjected to change many of the IE settings and drop some malicious payloads see the anubis reprot above…

14

http://wepawet.iseclab.org/view.php?hash=e56a97bfb655641ceff98028c8485e7f&t=1325484665&type=js

Deobfuscation results

Evals

*** removed to prevent future detections ***

Error 403

http://www.virustotal.com/url-scan/report.html?id=d06baf13d7c91b9bfa3f5ee16e59de1c-1325481417

15

Can you rremove the code from the post?

As a matter of principle, it is better to post images, to prevent the possibility of avast alerting on its own pages