Avast WEBforum

Other => Viruses and worms => Topic started by: Cephei on September 19, 2009, 06:28:50 PM

Title: Trojan
Post by: Cephei on September 19, 2009, 06:28:50 PM

Hi,

It seems a trojan has been found on the website of the Monaco foundation against AIDS :
hxxp://www.fightaidsmonaco.com/fr.htm

It always warns me about HTML:Illiframe-B [Trj]
 :(

It seems to be related to a russian website, if I'm not wrong.

Title: Re: Trojan
Post by: spg SCOTT on September 19, 2009, 06:37:59 PM

Hi Cephei,

Thanks :)

This kind of detection is very common these days, with many 'legitimate sites' becoming hacked to distribute malware:

Every 3.6 seconds a website is infected (http://forum.avast.com/index.php?topic=47096.0)


This site is not so good, there is a iframe linking to anthor page on the same site (hxxp://www.fightaidsmonaco.com/homefr.htm), which contains another iframe linking to hxxp://biozov.ru - a suspect malware site.


It also tries to avoid scanning by redirecting to another - non-standard - port, but this obviously doesn't work :P

-Scott-