Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: sangamam on December 01, 2010, 07:26:46 PM
-
Avast detected that my blog has virus or some infection it reported
"Infection: HTML Iframe-infLocation" i checked using google diagnostic tool,other major link scanner none of them reporeted infection,even Wot said its safe.can anyone tell why avast detects this.its a false positive.and its spoiling the reputation of my blog
-
What's the URL?
-
Sorry to disappoint you, but there's a big chance that you do have something malicious on your website.
WOT isn't going to help you, because it's ran by people like you and me that vote sites over time. If your site was just infected today, I'm sure WOT users won't start saying that your site is bad yet.
Now that I have that explanation over with, let's get down to the details.
We can't tell whether or not your blog is infected, or offer help until we know what the address is.
put a link in a post, but disable it. For example, if your site was http://www.google.com, post it like this hXXp://www.google.com to keep it disabled.
Then, we'll take a look at the code on your site and tell you if it's infected or not.
Like it or not, sites get hacked quite often. Yours may have just been the next target...
-
I guess I was a little slow on the response, and thanks for posting the link.
Remember to DISABLE the links though, we don't want it spreading viruses to anyone that is curious or wants to help.
-
h**p://picxy.blogspot(dot)com
-
Thanks for disabling the links, and I'm looking through the code to find out where the malicious code is. Hang on for a moment.
-
THanks a lot. i'm waiting patiently
-
hxxp://gelgit.tk/iframe.htm on line 1817 of your website's code is pointing to a bad website, as reported on urlvoid.com
See attached images.
http://www.urlvoid.com/scan/gelgit.tk
-
What do i do now? can you please help
-
Yep, scythe is right, we don't like the gelgit link.
-
You'll have to remove the code.
If you host it yourself, you should be able to figure it out.
If it's hosted elsewhere, your host should be able to help you.
The next step after you remove the code is probably to reset / strengthen all passwords for your accounts, and make sure that you install any security updates that are under your control.
-
hello i checked using url void.com and it says it clean :'(
h**p://www(dot)urlvoid.com/scan/picxy.blogspot(dot)com
-
It hosted by blogspot i dont know what to do?i checked the code.in the Html section and searched for gelgit but couldnt find
-
Your site "is" technically clean, however, there is an iframe pointing to another website (hxxp://gelgit.tk) that is not clean.
When you visit your site, your browser loads everything on the page, including the iframe, which is why avast stops the connection (as it is doing it's job, by protecting you from visiting or loading code from a malicious website).
-
It hosted by blogspot i dont know what to do?i checked the code.in the Html section and searched for gelgit but couldnt find
I don't use blogspot, but I do use wordpress, which is a similar blogging CMS software. Do you have a place where you can add "widgets"? The code might be in there.
All I can say is that you might not be finding it, but it's certainly there. View the source when you visit your site, and you'll see it.
-
i figured out gelgit.please recheck the url and pelase report back
-
Ohh yes i figured gelgit and i also removed it.i was hiding with other banners of blog directories.please recheck again and please request to report back
-
Avast didn't report anything, so it looks like you got rid of the code.
I still highly recommend changing your password, and strengthening it while you're at it as well.
Since it's a hosted blogspot.com site, you shouldn't need to do any security updates, but you might be able to update your blogspot software from within it's console.
Again, I don't use blogspot and never have, so my terminology could be completely off.
In any event, where did you find the iframe code?
was hiding with other banners of blog directories
Nevermind, you answered that while I was posting. Cool, sounds good. You should mark this thread solved by modifying the original post's subject with (Solved) in it. Oh, and putting "it WAS true" too... ;D
-
i removed the culprit gelgit ,it was hiding along with other blogdirectory links.please recheck my url and please report back
-
i removed the culprit gelgit ,it was hiding along with other blogdirectory links.please recheck my url and please report back
I already did.
Avast didn't report anything, so it looks like you got rid of the code.
-
hehe thanks !! problem solved with help of specialists out here.thank you all
Yeah IT WAS TRUE IT HAD "GELGIT" heheh but now its solved and its all safe
-
Special thanks to scythe944
-
You're welcome, remember to keep your passwords complex and to change them as often as possible.
come back anytime.
-
Thank u again and hope you like the photography blog.
picxy.blogspot.com (http://picxy.blogspot.com)
-
Yeah, it's not too bad. I like the Armageddon picture. The site is a bit busy though. ;)
-
Too bad mean u dont like ;D. ya gaining popularity slow and steady.but nevertheless blogging is my hobby. can i post in the forums or reply to other posts like you do
-
no, "not too bad" is a saying that means it's decent/good. It would be better if it were a bit "cleaner" I guess.
Although, don't take my words too literally, my site isn't all that much better!
As for this:
can i post in the forums or reply to other posts like you do
Absolutely. It's an open forum, you can ask as many questions as you need to (within reason of course), or help others with their problems if you can.