Vidhog Trojan

Viruses and worms
1

http://www.vidhog.com/on3r6mej3buw
I know the rule about posting “dodgy” links,but the problem is not with the
first site.Avast is triggered after clicking continue to the video and landing on
streaming/download site.I’ve checked Vidhog.com with VirusTotal and Securi.net
and site is clean.Is this FP?From time to time Avast is blocking something on Vidhog.
In monthly reports I only see that Avast blocked trojan on Vidhog.

2

attach screenshot of avast warning

3

I am not able to post screenshoot but here is translation from Croatian:

BLOCKED TROJAN HORSE
Avast Web Shield has blocked bad website or file
Object: hxxp://www.vidhog.com/on3r6mej3buw|{gzip}
Infected: JS:ScriptIP-inf[Trj]
Process:C:\Program Files\Pale Moon\palemoon.exe

4

seems avast detect a Javascript inside a compressed file on that website

5

My Web Shield activated at the best time ever. Lol, Yeah, the code looks to be Java based. So if you have Java, scan your computer, because it might’ve been exploited.

6

I don’t have Java.

7

Adware because htxp://www.vidhog.com/on3r6mej3buw has OpenX ad server installed: htxp://www.vidhog.com/openx/www/delivery/
when compromised could lead to malware, read: http://news.softpedia.com/news/Compromised-OpenX-Ad-Servers-Lead-Users-to-Malware-261713.shtml
link article author = Eduard Kovacs

polonus

8

Polonus,thanks for clarification.This is not the first time Avast blocked
adware on Vidhog.So far I was able to block malware url with ABP and
continue to use site but I guess that is not possible anymore.
Anyway,thank you all.