Avast WEBforum

Other => Viruses and worms => Topic started by: Kata12 on June 20, 2012, 06:12:48 AM

Title: Keep getting this message: Infection:HTML:Script-inf
Post by: Kata12 on June 20, 2012, 06:12:48 AM
 :(   Trying to sign into Cruise Critic Boards:  xww.cruisecritic.com/boards and I keep getting SCRIPT-inf blocking from Avast. HELP
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: mchain on June 20, 2012, 06:41:39 AM
Hi Kata12

Looks as if the detection by Avast! is correct. 

zulu here:  http://zulu.zscaler.com/submission/show/1ac5a30bfb40f695509836ff3cee9db6-1340166795 (http://zulu.zscaler.com/submission/show/1ac5a30bfb40f695509836ff3cee9db6-1340166795)

but both securi and urlvoid say clean.

securi here:  http://sitecheck.sucuri.net/results/www.cruisecritic.com/boards (http://sitecheck.sucuri.net/results/www.cruisecritic.com/boards)
urlvoid here:  http://www.urlvoid.com/scan/cruisecritic.com/ (http://www.urlvoid.com/scan/cruisecritic.com/)

securi says 'outdated software', which is likely part of the problem.

Are you the webmaster of the site?

EDIT:  See also two other topics same as yours here:  http://forum.avast.com/index.php?topic=99873.0;topicseen (http://forum.avast.com/index.php?topic=99873.0;topicseen) & http://forum.avast.com/index.php?topic=99871.0 (http://forum.avast.com/index.php?topic=99871.0)
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: Milos on June 20, 2012, 08:35:01 AM
Hello,
there is blocked script tag, which leads to "phpinclude-bin.com".

Milos
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: DavidR on June 20, 2012, 01:57:05 PM
Thanks for the confirmation Milos.
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: Kata12 on June 20, 2012, 02:11:55 PM
I've been posting on the Cruise Critic "boards" for over 12 years. What do I need to do to be able to get back to my friends on the Floataway Lounge area??
I need simple to understand directions.  Thanks./color]
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: Asyn on June 20, 2012, 02:14:39 PM
I've been posting on the Cruise Critic "boards" for over 12 years. What do I need to do to be able to get back to my friends on the Floataway Lounge area??
I need simple to understand directions.  Thanks./color]


You can't do anything. Their webmaster has to clean the site, then it can be unblocked.
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: Kata12 on June 20, 2012, 02:22:29 PM

Thank you for the reply stating I can't do any thing.  I have sent Cruise Critic a message and as the other person have NOT heard back from them.
I have friends that have e-mailed me and said they can still get on. This is so confusing for a person who isn't "high-tech" in computer lingo!! I miss
my friends and our chats.
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: Asyn on June 20, 2012, 02:27:17 PM
I have friends that have e-mailed me and said they can still get on.

Well, they may use an AV which doesn't detect this yet and are therefore not protected.
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: mkm1951 on June 20, 2012, 07:24:54 PM
Avast keeps blocking "hxtp://boards.cruisecritic.com/"  .  Here is the fix. 
1. Right click on the Avast Orange icon at the bottom of the sceen.
2. Then click; Open avast! user interface.
3. Left side click Real-time shields.
4.Right side click on Web Shield
5. right side click expert settiings
6. left side click on exclusions
7. right side; URLs to exclude. In the box enter including asterisk  hxtp://boards.cruisecritic.com/*
8. Then click lower bottom right OK.
9. Now you are done.
 :)
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: Gopher John on June 20, 2012, 07:31:37 PM
Avast keeps blocking "hxxp://boards.cruisecritic.com/"  .  Here is the fix. 
1. Right click on the Avast Orange icon at the bottom of the sceen.
2. Then click; Open avast! user interface.
3. Left side click Real-time shields.
4.Right side click on Web Shield
5. right side click expert settiings
6. left side click on exclusions
7. right side; URLs to exclude. In the box enter including asterisk  hxxp://boards.cruisecritic.com/*
8. Then click lower bottom right OK.
9. Now you are done.
 :)

All this will do is allow you to visit the infected site.  Better to wait until the site is cleaned, and then it will be removed from Avast blocking.
Title: Re: Keep getting this message: Infection:HTML:Script-inf
Post by: DavidR on June 20, 2012, 07:40:50 PM
That is no fix, it is shooting the messenger and could be leaving users open to infection. The block is/was legit given what has been said by one of the avast virus labs team.

Hello,
there is blocked script tag, which leads to "phpinclude-bin.com".

Milos

I have also seen in another topic on this site that the script tag has now been removed (presumably by the webmaster).

I can confirm that as I have been able to visit the page and no avast alert or previous suspect script tag.