Malware Sites

Viruses and worms
1

Maybe Malware sites; no reacts from avast!:

hxxp://goxohic.co.cc
hxxp://www1.ingodswetrust20.co.cc

2

First one just requests a password. Don’t know it thus can’t go further. Second one just returns a 404. However, someone submitted them to Firefox dangerous sites database. Don’t know who to trust but code presents nothing of possible danger. So whatever. tl;dr: ulol.

3

http://www.virustotal.com/url-scan/report.html?id=80a1cf524c20ee146c4857bef6a5ef11-1285500144

http://www.virustotal.com/url-scan/report.html?id=fedc6136e26271e09e4ab1baf71b198a-1285500224

They are both malware sites.

4

Both show just 2/6 (Firefox and Google Safebrowsing are same)

5

I know that downloaded file analysis reports nothing, but in a forum some people checked the sites, and their antivirus alerted.

6

Hi

The first site had malicious content also in the past, so is suspicious: http://www.google.com/safebrowsing/diagnostic?site=goxohic.co.cc
The second is a malware site according to: http://www.threatlog.com/search/www1.ingodswetrust20.co.cc

polonus

7

So, if they are really malicious sites, what should I do to add them to the newxt virus update?

8

Send an email with the information to virus@avast.com

Include all info necessary, including the VT results.

9

Hello,
these sites will be catched in next VPS.
Best regards
Jan Sirmer

10

Thank you very much!
Good to know that avast!-guys are so fast; and writing to the forums is not useless :slight_smile:

11

The second page has a 404 error, but here is the result for the first one:
http://kepfeltoltes.hu/view/100926/eredmeny_www.kepfeltoltes.hu_.png (I uploaded the picture to a Hungarian upload site)

12

I sent an e-mail to AVAST on 26th of September (before an avast! team member reacted here), and I only got a reply today. So it means that if I send a sample/link to AVAST via chest or mail, it won’t be analyzed / added in few days? This process needs few weeks?
If we complain in the forum, malicious URL/sample will be added few hours later. But I think the most of your users sent malicious codes via e-mail… And it is slow.
I hope that the reply e-mail what is only slow. If the analyzis too, I am disappointing because of it.