hxxp://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx (infection alert MALWARE BLOC

hxxp://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx (infection alert MALWARE BLOCKED)

As the site is working perfectly but now i am getting MALWARE BLOCKED)

Screenshot of Alert

http://i.imgur.com/SBriL.jpg

Please don’t post live links to malware! Edit your link to hxxp:// or similar

avast is alerting on a long, one line script that is in hex form.

When returned to text I am not sure what it does but it doesn’t look right to me…

avast (and Gdata) is the only one to detect on VirusTotal, so I don’t know on whether the detection is right or not.
http://www.virustotal.com/file-scan/report.html?id=4219bdb47e67b83824ccecdaed46effb983e9eec18d74dcf7c434e69a143209d-1306670056

OT: Thanks igor for deactivating the link :wink:

If u read my previous post (http://forum.avast.com/index.php?topic=72187.msg602215#msg602215) i encounter almost similar type of problem,as it is a false alert and the problem is solved but now again the same problem.

I don’t know exactly what the script does, but putting the site through anubis, gives an interesting result

http://sitecheck.sucuri.net/scanner/

Result for hxxp://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx

Security report (no threats found):
Blacklisted: No
Malware: No
Malicious javascript: No
Drive-By Downloads: No
Anomaly detection: No
IE-only attacks: No
Malicious iframes: No
Suspicious redirections:No
Spam: No

You can report a FP here: http://www.avast.com/contact-form.php?loadStyles

The problem is solved now the site is opening without any Malware Aert

Good to hear, thanks for reporting back.

This makes me wonder how accurate anubis actually is then, if it reports like it did…