Avast WEBforum

Other => Viruses and worms => Topic started by: EagleGhost on November 27, 2011, 11:31:18 AM

Title: HTML:Iframe-inf blocked
Post by: EagleGhost on November 27, 2011, 11:31:18 AM
When I was using tfile.ru file sharing website Avast prompted about HTML:Iframe-inf virus. The exact link is httb://tfile.ru/forum/viewtopic.php?t=327184. Is this false positive or is tfile.ru somehow hacked and spreading viruses?
Title: Re: Possible false positive
Post by: Asyn on November 27, 2011, 11:49:20 AM
Seems to be gone.
Title: Re: Possible false positive
Post by: EagleGhost on November 27, 2011, 01:26:57 PM
So the site is not infected?
Title: Re: Possible false positive
Post by: Asyn on November 27, 2011, 01:31:17 PM
Quote from: EagleGhost on November 27, 2011, 01:26:57 PM
So the site is not infected?

I didn't check the site, I tried to check your link.
Is avast! still alerting..??
Title: Re: Possible false positive
Post by: EagleGhost on November 27, 2011, 04:30:19 PM
Quote from: Asyn on November 27, 2011, 01:31:17 PM
Quote from: EagleGhost on November 27, 2011, 01:26:57 PM
So the site is not infected?

I didn't check the site, I tried to check your link.
Is avast! still alerting..??

I haven't tried, but I ran Avast full scan and it found nothing serious.
Title: Re: Possible false positive
Post by: REDACTED on November 27, 2011, 04:52:47 PM
Hidden Iframes - playedhas.in

http://www.virustotal.com/url-scan/report.html?id=2e3fe76c9ac7369158f5e59b91585187-1322390137

http://www.virustotal.com/file-scan/report.html?id=2c5185152f44b5160edd7f9a35bbbc0474588e94a288896575e736fc4884c72e-1322399676

http://jsunpack.jeek.org/dec/go?report=3a5773062ba02d0842b20d54eeeb7fde2bd40812

hidden link to the java ... get the exploit - Java:Agent-ACP [Expl]

http://www.virustotal.com/file-scan/report.html?id=345d0500e255ce183f3ccb70ff2084fa75b828d8150f567ce6949450c658ae36-1322407627

Send to Avast.
Title: Re: Possible false positive
Post by: EagleGhost on November 27, 2011, 05:01:02 PM
I see. I ran also Malwarebytes and Hitman Pro scans and they found nothing. Here's the OTL and  aswMBR logs as attachments. Hope you can check them.
Title: Re: HTML:Iframe-inf blocked
Post by: essexboy on November 27, 2011, 06:01:11 PM
Nothing apparent in the logs  ;D  Be careful with hitmanpro though