Author Topic: Possible False Alarm?  (Read 2759 times)

0 Members and 1 Guest are viewing this topic.

SupplanterAU

  • Guest
Possible False Alarm?
« on: April 13, 2009, 05:54:10 AM »
Our Car Club forum triggers the avast! Warning on every page.  It is running phpBB Version 2 (I think).



hXXp://www.ftoaustralia.com/modules.php?name=Forums

Members have reported that avast! is the only scanner that picks up this virus/malware.
« Last Edit: April 13, 2009, 10:37:30 PM by kubecj »

YoKenny

  • Guest
Re: Possible False Alarm?
« Reply #1 on: April 13, 2009, 10:51:16 AM »
Welcome to avast! forum.

Looks like the site has been hacked which is a common problem these days.

You need to contact the site's Webmaster and inform them of the infection.

kubecj

  • Guest
Re: Possible False Alarm?
« Reply #2 on: April 13, 2009, 02:51:54 PM »
There is bigger chunk of obfuscated JS at the end of the page.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89679
  • No support PMs thanks
Re: Possible False Alarm?
« Reply #3 on: April 13, 2009, 03:57:27 PM »
There is even an alert on the link you gave to the forums, same VBS:Malware-gen.

Again a big chunk of obfuscated script, I guess pretending to be a Google Ranking Script (do you use that), but it is after the closing html script. The strange thing with that forum link there appears to be multiple HTML pages in one.

See image, this comes after the first closing html tag. I have modified the script to see it easier in the image as it is all on one line and goes on for some way still on the last line.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.9.6130 (build 24.9.9452.762) UI 1.0.818/ Firefox, uBlock Origin Lite, uMatrix/ MailWasher Pro/ Avast! Mobile Security