new virus

Viruses and worms
1

hey all … a new virus … it send automesseges in windows live messenger contains the following link :

hxxp://site.facebooky.net/viewimage.php

or

hxxp://site.facebooky.net/viewimage.php?=email

like : hxxp://site.facebooky.net/viewimage.php?=name@domain.com

i

2

I’m not being able to scan both links you’ve posted with Dr. Web plugin. Maybe the service is down.
But, anyway, it will be good to not post a live link to malware or false positives.

3

I have already downloaded files from these URLs. All files are the same and will be detected in next VPS update.

4

Since the domain name is a look alike facebook it is most likely that it will be suspect/infected and or php pages can be hacked if the php software isn’t up to date.

Please modify your post and change the http to hXXp to break active links and avoid accidental exposure, e.g. hXXp://site.facebooky.net/viewimage.php.

Edit: Done by misak, thanks.

5

Thanks misak for the detection.
Thanks Shaheen for helping improving detection.

6

Hi Tech,

Thanks to both - this is the right attitude “first the alert, then the detection”.

pol

7

hey all … i’ve got the new VPS update and the site is blocked now :wink:

thanks for fast respond … best wishes :wink:

8

Welcome to avast forums :wink:

9

Quite common on the avast forums ;D

Welcome to the forums.