Jump to content

Ransom.A warning on website - please confirm


malwarefrights
 Share

Recommended Posts

Hi,

Whenever I visit this website. ~ Url removed as is serving up exploits~

I get two warnings from Malware Bytes saying that Ransom.A trojan is detected and two .tmp files are on my PC and are quarantined.

Please can someone check this urgently since just about every malware site checking service say that this site is clean.

Thanks,

Mark

Link to post
Share on other sites

Hi Mark,

These are not False positives!

The website you have reported is serving up a driveby download of trojan code via a Java exploit.

Malwarebytes realtime protection in this instance is blocking the trojan install :)

If you upload the files that we are blocking in the temp folder to a file checking service such as VirusTotal

https://www.virustotal.com/

You will see slowy the AV's confirming the files to be trojan code in the coming days.

Here is a VT file report on a file that the java exploit tried to infect my computer with when visiting that website a moment ago.

https://www.virustot...sis/1333280463/

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.