Good thing avast alerts this ....EXP/JS.Blacole.BI

Viruses and worms
1

See: http://anubis.iseclab.org/?action=result&task_id=1b0b72a6934a29474ed7d17e1be8fafb8&format=html
found here: http://urlquery.net/report.php?id=139946
Here we see avast neatly detects this as JS:Redirector-RO [Trj]
https://www.virustotal.com/file/cbfb6d6ae95cbb3d336ce25f8af5cb4cb80b00d8ad65633f358d0e0f13334f2e/analysis/
The IDS alert given in as a search query at google gave these many results:
http://www.google.nl/search?hl=nl&output=search&sclient=psy-ab&q=Blackhole+Landing+to+8+chr+folder+plus+index.html&btnK=
Do you understand now what avast is doing everyday to protect users?

polonus

2

I see where even the keyboard is monitored @ anubis report: http://anubis.iseclab.org/?action=result&task_id=1b0b72a6934a29474ed7d17e1be8fafb8&format=html (scroll down to the bottom of page).

Nasty!

Glad Avast! team is doing such an outstanding job. What does Virus Total say? Note no Symantec detection yet.

3

Hi mchain,

Could it be, they had a day off ;D ?
Just kidding, detection exists for just a day, some are a bit slow 8),

polonus