I seem to be the only person that cannot access the site http://thebigslice.org. This is a liberal news publication that I have contributed to, but I cannot see it. When I attempt to access it, AVAST blocks it, claiming that it has malware. Last night it also said it had a Trojan Horse. I checked with the my editor and they said no one else has had a problem accessing the site.
I attempted to report it as a false positive, but to no avail. Please help.
Thanks,
CH - rural01
urlvoid. http://www.urlvoid.com/scan/thebigslice.org/
URL MD5 IP Threat 2013-10-06 12:23:12 http://thebigslice.org/wp-content/languages/themes/1039_0 000.exe [b]6EA360D17C17AFFEA1BCC1106D312639[/b] 192.145.236.19 US [b]Gen:Variant.Kazy.261130[/b]
Sophos URL description
URL subjected to threat Mal/HTMLGen-A.
This is additional as Pondus already spelled out the verdict and mentioned the malcode flagged.
Thanks Pondus for a good job done.
I arrived at the same conclusions but via an urlquery report and then stumbled at the scumware results.
There were issues with the site, see history of the urlquery dot net scans for the site: http://urlquery.net/report.php?id=6806759
for instance this one: http://urlquery.net/report.php?id=6400555 see the IDS alerts there for the executable.
Sucuri gives it clean now: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fthebigslice.org
Quttera’s also: http://www.quttera.com/#online url malware scanner
Zscaler Zulu’s: http://zulu.zscaler.com/submission/show/97000a3a8ee4c8fbed9ae1329dea4ad7-1381870280
Here it is given as clean DrWeb’s URL checker:
Checking:htxp://stats.wordpress.com/e-201342.js
File size:2766 bytes
File MD5:186e0ec88574dc42245e79619aa7d07a
htxp://stats.wordpress.com/e-201342.js - Ok
Checking:htxp://thebigslice.org/wp-content/themes/linepress/inc/js/jquery.tools.min.js?ver=3.6.1
File size:3068 bytes
File MD5:cd236c77dea30871be59b9616a00e547
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/jquery.tools.min.js?ver=3.6.1 - Ok
Checking:htxp://www.youtube.com/embed/kUKzDANF6QU?wmode=opaque&showinfo=0&autohide=1
File size:8015 bytes
File MD5:a4683fae0dc1c1f9ce6ce13e911b76a0
htxp://www.youtube.com/embed/kUKzDANF6QU?wmode=opaque&showinfo=0&autohide=1 - archive JS-HTML
htxp://www.youtube.com/embed/kUKzDANF6QU?wmode=opaque&showinfo=0&autohide=1/JSTAG_1[18f][3a2] - Ok
htxp://www.youtube.com/embed/kUKzDANF6QU?wmode=opaque&showinfo=0&autohide=1/JSTAG_2[66b][1811] - Ok
htxp://www.youtube.com/embed/kUKzDANF6QU?wmode=opaque&showinfo=0&autohide=1/JSTAG_3[1e92][a5] - Ok
htxp://www.youtube.com/embed/kUKzDANF6QU?wmode=opaque&showinfo=0&autohide=1 - Ok
Checking:htxp://thebigslice.org/wp-content/themes/linepress/inc/js/flowplayer/flowplayer-3.2.6.min.js?ver=3.6.1
File size:16.42 KB
File MD5:e7c2e2b75ea3d25ba5843b0247e2915e
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/flowplayer/flowplayer-3.2.6.min.js?ver=3.6.1 - Ok
Checking:htxp://www.youtube.com/embed/JSiTlwg64lU?wmode=opaque&showinfo=0&autohide=1
File size:8061 bytes
File MD5:98fd484b3cfc3c3ba172c1acb2d8d8ba
htxp://www.youtube.com/embed/JSiTlwg64lU?wmode=opaque&showinfo=0&autohide=1 - archive JS-HTML
htxp://www.youtube.com/embed/JSiTlwg64lU?wmode=opaque&showinfo=0&autohide=1/JSTAG_1[195][3a2] - Ok
htxp://www.youtube.com/embed/JSiTlwg64lU?wmode=opaque&showinfo=0&autohide=1/JSTAG_2[671][182b] - Ok
htxp://www.youtube.com/embed/JSiTlwg64lU?wmode=opaque&showinfo=0&autohide=1/JSTAG_3[1eb2][b3] - Ok
htxp://www.youtube.com/embed/JSiTlwg64lU?wmode=opaque&showinfo=0&autohide=1 - Ok
Checking:htxp://thebigslice.org/wp-content/themes/linepress/inc/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=3.6.1
File size:15.26 KB
File MD5:8bc36a08c46719377528d962966ce37c
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=3.6.1 - archive JS-HTML
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/fancybox/jquery.fancybox-1.3.4.pack.js?ver=3.6.1 - Ok
Checking:htxp://thebigslice.org/wp-content/themes/linepress/inc/js/slides.min.jquery.js?ver=3.6.1
File size:6784 bytes
File MD5:e80e9e252b5f66e4f71c2c609d8b34fd
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/slides.min.jquery.js?ver=3.6.1 - Ok
Checking:htxp://thebigslice.org/wp-content/themes/linepress/inc/js/contentslider.js?ver=3.6.1
File size:10.69 KB
File MD5:a013f7a93f460e82faf02361396ed3f5
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/contentslider.js?ver=3.6.1 - Ok
Checking:htxp://thebigslice.org/wp-content/themes/linepress/inc/js/superfish-1.4.8.js?ver=3.6.1
File size:3789 bytes
File MD5:67eac003c3567dbb3ca81462cdbde973
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/superfish-1.4.8.js?ver=3.6.1 - Ok
Checking:htxp://www.youtube.com/embed/X_Skl45rvew?wmode=opaque&showinfo=0&autohide=1
File size:7870 bytes
File MD5:e6c4b8dad37d3f8043e30ce420fcef3f
htxp://www.youtube.com/embed/X_Skl45rvew?wmode=opaque&showinfo=0&autohide=1 - archive JS-HTML
htxp://www.youtube.com/embed/X_Skl45rvew?wmode=opaque&showinfo=0&autohide=1/JSTAG_1[16c][3a2] - Ok
htxp://www.youtube.com/embed/X_Skl45rvew?wmode=opaque&showinfo=0&autohide=1/JSTAG_2[648][1779] - Ok
htxp://www.youtube.com/embed/X_Skl45rvew?wmode=opaque&showinfo=0&autohide=1/JSTAG_3[1dd7][cf] - Ok
htxp://www.youtube.com/embed/X_Skl45rvew?wmode=opaque&showinfo=0&autohide=1 - Ok
Checking:htxp://apis.google.com/js/plusone.js?ver=3.6.1
File size:9785 bytes
File MD5:a5020a356f36a3ebb19107ad4b164aa5
htxp://apis.google.com/js/plusone.js?ver=3.6.1 - Ok
Checking:htxp://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js?ver=3.6.1
File size:91.44 KB
File MD5:e1288116312e4728f98923c79b034b67
htxp://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js?ver=3.6.1 - archive JS-HTML
htxp://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js?ver=3.6.1/JSTag_1[13407][39be] - Ok
htxp://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js?ver=3.6.1 - Ok
Checking:htxp://www.youtube.com/embed/smEqnnklfYs?wmode=opaque&showinfo=0&autohide=1
File size:7978 bytes
File MD5:88ad91166f6c9689108338cef95f14cb
htxp://www.youtube.com/embed/smEqnnklfYs?wmode=opaque&showinfo=0&autohide=1 - archive JS-HTML
htxp://www.youtube.com/embed/smEqnnklfYs?wmode=opaque&showinfo=0&autohide=1/JSTAG_1[194][3a2] - Ok
htxp://www.youtube.com/embed/smEqnnklfYs?wmode=opaque&showinfo=0&autohide=1/JSTAG_2[670][17b8] - Ok
htxp://www.youtube.com/embed/smEqnnklfYs?wmode=opaque&showinfo=0&autohide=1/JSTAG_3[1e3e][d4] - Ok
htxp://www.youtube.com/embed/smEqnnklfYs?wmode=opaque&showinfo=0&autohide=1 - Ok
Checking:htxp://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201342
File size:9153 bytes
File MD5:b7c20c7fdac6765a83d5163a40d77723
htxp://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201342 - Ok
Checking:htxp://pagead2.googlesyndication.com/pagead/show_ads.js
File size:19.20 KB
File MD5:bdaade54f2faa282887e75ca7c5c2258
htxp://pagead2.googlesyndication.com/pagead/show_ads.js - archive JS-HTML
httxp://pagead2.googlesyndication.com/pagead/show_ads.js/JSTag_1[4ad1][1f8] - Ok
htxp://pagead2.googlesyndication.com/pagead/show_ads.js - Ok
Checking:htxp://thebigslice.org/wp-content/themes/linepress/inc/js/fancybox/jquery.mousewheel-3.0.4.pack.js?ver=3.6.1
File size:1279 bytes
File MD5:3b0a821567b463e70bcc1e90ed2bc9b6
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/fancybox/jquery.mousewheel-3.0.4.pack.js?ver=3.6.1 - archive JS-HTML
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/fancybox/jquery.mousewheel-3.0.4.pack.js?ver=3.6.1/JSFile_1[0][4ff] - Ok
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/fancybox/jquery.mousewheel-3.0.4.pack.js?ver=3.6.1 - Ok
Checking:htxp://thebigslice.org/wp-content/themes/linepress/inc/js/jCarouselLite.js?ver=3.6.1
File size:5520 bytes
File MD5:8e147fd220967d7edd33844a86f057c6
htxp://thebigslice.org/wp-content/themes/linepress/inc/js/jCarouselLite.js?ver=3.6.1 - Ok
Checking:http://thebigslice.org
Engine version:7.0.5.6250
Total virus-finding records:4570922
File size:82.10 KB
File MD5:f288b314695de6cf26f2ae4fe858f6d9
htxp://thebigslice.org - archive JS-HTML
htxp://thebigslice.org/JSTAG_1[f50][4cd] - Ok
htxp://thebigslice.org/JSTAG_2[14ae][1b8] - Ok
htxp://thebigslice.org/JSTAG_3[18c3][117] - Ok
htxp://thebigslice.org/JSTAG_4[1a04][f2] - Ok
htxp://thebigslice.org/JSTAG_5[1fe4][9f] - Ok
htxp://thebigslice.org/JSTAG_6[9e5c][3a0] - Ok
htxp://thebigslice.org/JSTAG_7[11154][9f] - Ok
htxp://thebigslice.org/JSTAG_8[11403][9f] - Ok
htxp://thebigslice.org/JSTAG_9[1429d][1e4] - Ok
htxp://thebigslice.org/JSTAG_10[144c2][f9] - Ok
htxp://thebigslice.org/JSTAG_11[1466f][d2] - Ok
htxp://thebigslice.org/JSTag_12[1fe9][9a] - Ok
htxp://thebigslice.org/JSTag_13[11159][9a] - Ok
htxp://thebigslice.org/JSTag_14[11408][9a] - Ok
htxp://thebigslice.org - Ok
One code hick-up flagged:
thebigslice dot org/wp-content/themes/linepress/inc/js/jCarouselLite.js?ver=3.6.1 benign
[nothing detected] (script) thebigslice dot org/wp-content/themes/linepress/inc/js/jCarouselLite.js?ver=3.6.1
status: (referer=thebigslice.org/)saved 5520 bytes c5747073cab6e6e57bcc0afeca12de4e26e572ab
info: [decodingLevel=0] found JavaScript
suspicious:
Website seems clean(sed), but avast probably alerts for Gen:Variant.Kazy.261130 in themes/1039_0000.exe:
see: http://www.scumware.org/report/192.145.236.19
polonus