Avast WEBforum

Other => Viruses and worms => Topic started by: markofkane2 on July 31, 2011, 09:16:46 AM

Title: Trojan Horse Blocked
Post by: markofkane2 on July 31, 2011, 09:16:46 AM

I visit a certain forum, a Linda Ronstadt fan forum, and since yesterday, I get an Avast popup saying the site is infected with JS:IFrame-CG [trj]

I contacted the Webmaster by email, and he said he does not detect anything.

And I ran full scans after I got the Trojan Horse messages, nothing was found by Avast.

Is this a false positive?

If you need it I can give the URL to the site.

Title: Re: Trojan Horse Blocked
Post by: Pondus on July 31, 2011, 09:49:39 AM

Quote

If you need it I can give the URL to the site.

yes please....but post it unclickable. www as wxw or http as hxxp

Title: Re: Trojan Horse Blocked
Post by: Pondus on July 31, 2011, 10:22:42 AM

was it this one  hxxp://wxw.ronstadt-linda.com/  ?


if so Sucuri say infected   http://sucuri.net/   see attached screenshot (click to enlarge)

Malware info

Malware entry: MW:IFRAME:HD203  http://sucuri.net/malware/malware-entry-mwiframehd203
Also related to this malware: http://sucuri.net/malware-injection-sidename-js.html (that generates the Blackhole exploit alert on some AVs).

Title: Re: Trojan Horse Blocked
Post by: markofkane2 on July 31, 2011, 11:30:04 AM

Yes, that is it. Thanks!

Will send link to webmaster.