'Shock' Sites unblocked?

Viruses and worms
1

Hello, About a couple of months ago the shock website “mylazysundaysdotcom” was blocked by avast because it said it was a Trojan and then today I tested it on my remote machine and it wasn’t blocked… what happened? or is my copy of Avast not working?

Thanks a lot
Chris A

2

A visit to the site returns an alert with firefox 13.0.1, image1. So I don’t know why you didn’t get an alert.

There is a compressed file (probably a compressed script file) loaded when you enter the site, the {gzip} bit at the end of the alert indicating a compressed file being loaded and that is what avast is alerting on, see imag2 extract of file.

VirusTotal is clear that this file is suspect, but given the detections JOKE, HOAX, etc. etc. just how serious, but there are a large number that would alert on it, https://www.virustotal.com/file/e14acf44a515280cf03038e6a441bb792d988990f1537d5de27c2839822f59a5/analysis/1340151876/.

3

Hi Chris,

To test your avast av go here: http://www.eicar.org/85-0-Download.html

polonus

4

Thanks for the test file my Avast! is working fine.