Author Topic: Reporting Infected Website/ Possible FP  (Read 3052 times)

0 Members and 1 Guest are viewing this topic.

BRANDONN2008

  • Guest
Reporting Infected Website/ Possible FP
« on: December 21, 2009, 05:09:38 AM »
I was looking up Final Fantasy XIII on wikipedia, and clicked on the link to Square-Enix's North American website, and after allowing the main site with NoScript, I got two virus alerts from Avast! They are probably FPs but I'm not sure. They were both script-inf Virus/Worm. Also, the connection didn't abort even when I hit it. Maybe someone who can see the code of the site can tell if it's bad or a FP.

hxxp://na.square-enix.com/ff13/
« Last Edit: December 21, 2009, 05:20:36 AM by BrandonN2008 »

YoKenny

  • Guest
Re: Reporting Infected Website/ Possible FP
« Reply #1 on: December 21, 2009, 06:14:28 AM »
Its infected:

12/21/2009 12:11:07 AM hxxp://na.square-enix.com/ [L] HTML:Script-inf (0)

Please see:
http://www.scmagazineus.com/every-36-seconds-a-website-is-infected/article/140414

The site owner has to fix the infection.

BRANDONN2008

  • Guest
Re: Reporting Infected Website/ Possible FP
« Reply #2 on: December 21, 2009, 06:16:53 AM »
Is the script malicious? Should I be worried or is it benign?

YoKenny

  • Guest
Re: Reporting Infected Website/ Possible FP
« Reply #3 on: December 21, 2009, 06:18:40 AM »
The script is malicious but avast! blocked it so don't worry.

BRANDONN2008

  • Guest
Re: Reporting Infected Website/ Possible FP
« Reply #4 on: December 21, 2009, 06:33:27 AM »
That's not good. The first time I went, it only blocked two, the second time it blocked three, and on my friend's pc it blocked three. Does that mean one got by the first time? What is the script supposed to do?

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: Reporting Infected Website/ Possible FP
« Reply #5 on: December 21, 2009, 08:52:17 AM »
Hello BrandonN2008

you can check this too: http://forum.avast.com/index.php?topic=48778.0

the problem is with the site. contact the web admin and ask him to clean up the site. it may because of an outdated site software or a weak password or something similar to that. for more help, ask him to check : http://stopbadware.org/

the site may get blacklisted if it continues to infect users who visit the same.

hope it helps.

thanks
nmb