Avast WEBforum

Other => Viruses and worms => Topic started by: Metamorphoo on September 17, 2010, 06:24:29 PM

Title: Infection HTML:Script-inf
Post by: Metamorphoo on September 17, 2010, 06:24:29 PM
I'm devloping this site hXXp://www.pharmacysalescaribbean.com/drupal/ and avast has suddenly stopped me from getting to it.

I get the MALWARE BLOCKED, from webshield with the HTML:Script-inf infection.

Can anyone help?

Thanks!
Title: Re: Infection HTML:Script-inf
Post by: DavidR on September 17, 2010, 06:35:44 PM
There is a Script tag at the end of that page (image1) pointing at onlineisdudescars.com/js.php, which is considered a malicious site (image2) by avast. So it looks like the site has been hacked inserting this script.

There are many such instances of hacked sites pointing at this domain, http://www.google.com/search?q=onlineisdudescars.com (http://www.google.com/search?q=onlineisdudescars.com), so it looks like a good stop by avast.

Also see http://www.virustotal.com/file-scan/report.html?id=4044e31ee5fab27e9498ee9ff4cd216ebc18e848d51925e9015969da6575635b-1284740849 (http://www.virustotal.com/file-scan/report.html?id=4044e31ee5fab27e9498ee9ff4cd216ebc18e848d51925e9015969da6575635b-1284740849).