Author Topic: A threat was found that I think is a false alarm  (Read 2189 times)

0 Members and 1 Guest are viewing this topic.

adone56

  • Guest
A threat was found that I think is a false alarm
« on: October 24, 2012, 11:13:18 PM »
I tried to log into my account at www.diigo.com which is a free storage service that I use frequently but today surprisingly Avast is reporting a trojan.
Please see the log:

Detalles de la infección

URL:   http://www.diigo.com/?framerequest
Proceso:   file://C:\Program Files (x86)\Internet E...
Infección:   html:RedirME-inf [Trj]

I would like to know if this is is false positive and I can open the page or the infection is real.

Thanks

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: A threat was found that I think is a false alarm
« Reply #1 on: October 24, 2012, 11:21:29 PM »
You can report a possible FP here: http://www.avast.com/contact-form.php?loadStyles
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: A threat was found that I think is a false alarm
« Reply #2 on: October 24, 2012, 11:29:45 PM »
You have to establish that hxtp://www.diigo.com/?framerequest does not redirect to a spam page. malvertiser...
and it does to: htxp://fw.dnslink.com/?domainname=diigo.com&seedterm=San%20Diego&publicid=279F8BD6-C89B-40E3-988D-CD403BDEF41D
I get an invalid server name for a GET request...


polonus
« Last Edit: October 24, 2012, 11:57:48 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!