hxxp://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx (infection alert MALWARE BLOCKED)
As the site is working perfectly but now i am getting MALWARE BLOCKED)
Screenshot of Alert
hxxp://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx (infection alert MALWARE BLOCKED)
As the site is working perfectly but now i am getting MALWARE BLOCKED)
Screenshot of Alert
Please don’t post live links to malware! Edit your link to hxxp:// or similar
avast is alerting on a long, one line script that is in hex form.
When returned to text I am not sure what it does but it doesn’t look right to me…
avast (and Gdata) is the only one to detect on VirusTotal, so I don’t know on whether the detection is right or not.
http://www.virustotal.com/file-scan/report.html?id=4219bdb47e67b83824ccecdaed46effb983e9eec18d74dcf7c434e69a143209d-1306670056
OT: Thanks igor for deactivating the link
If u read my previous post (http://forum.avast.com/index.php?topic=72187.msg602215#msg602215) i encounter almost similar type of problem,as it is a false alert and the problem is solved but now again the same problem.
I don’t know exactly what the script does, but putting the site through anubis, gives an interesting result
http://sitecheck.sucuri.net/scanner/
Result for hxxp://edudel.nic.in/mis/MisAdmin/frmMisLogin.aspx
Security report (no threats found):
Blacklisted: No
Malware: No
Malicious javascript: No
Drive-By Downloads: No
Anomaly detection: No
IE-only attacks: No
Malicious iframes: No
Suspicious redirections:No
Spam: No
You can report a FP here: http://www.avast.com/contact-form.php?loadStyles
The problem is solved now the site is opening without any Malware Aert
Good to hear, thanks for reporting back.
This makes me wonder how accurate anubis actually is then, if it reports like it did…