Author Topic: Trojan Horse Blocked  (Read 2822 times)

0 Members and 1 Guest are viewing this topic.

markofkane2

  • Guest
Trojan Horse Blocked
« on: July 31, 2011, 09:16:46 AM »
I visit a certain forum, a Linda Ronstadt fan forum, and since yesterday, I get an Avast popup saying the site is infected with JS:IFrame-CG [trj]

I contacted the Webmaster by email, and he said he does not detect anything.

And I ran full scans after I got the Trojan Horse messages, nothing was found by Avast.

Is this a false positive?

If you need it I can give the URL to the site.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Trojan Horse Blocked
« Reply #1 on: July 31, 2011, 09:49:39 AM »
Quote
If you need it I can give the URL to the site.
yes please....but post it unclickable. www as wxw or http as hxxp

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Trojan Horse Blocked
« Reply #2 on: July 31, 2011, 10:22:42 AM »
was it this one  hxxp://wxw.ronstadt-linda.com/  ?


if so Sucuri say infected   http://sucuri.net/   see attached screenshot (click to enlarge)

Malware info

Malware entry: MW:IFRAME:HD203  http://sucuri.net/malware/malware-entry-mwiframehd203
Also related to this malware: http://sucuri.net/malware-injection-sidename-js.html (that generates the Blackhole exploit alert on some AVs).





« Last Edit: July 31, 2011, 01:43:10 PM by Pondus »

markofkane2

  • Guest
Re: Trojan Horse Blocked
« Reply #3 on: July 31, 2011, 11:30:04 AM »
Yes, that is it. Thanks!

Will send link to webmaster.