How can I remove a virus from my own tumblr blog?

[melissarosie]

Avast has blocked my tumblr blog and the end of my URL has a {gzip} and when I click more information it says: HTML:Includer-AY [Trj]

I contacted tumblr support but haven't had anything back from them. I really have no idea how to get rid of this virus, if there is one

I saw a similar thread before but I couldn't see how it was resolved. I really don't want to change my tumblr username as it's more of a trademark as it links it to all of my other social media sites and blogs.

I'd really appreciate any advice, thanks! x

[Pondus]

Giving us the url would be a start...

[ChloeRS]

I am having the EXACT same problem.
Now my page (using Chrome) is saying 'No Data received'
it is blocked on Firefox as well.

the url in question for me at least is http://oath-omega.tumblr.com/
I know there is a jumble of crap on the page, but it is mostly images...maybe a handful of links.

any help would be great.

[melissarosie]

Oh sure! It's hxtp://thenewwildwest.tumblr.com/

[Pondus]

here is a start....

thenewwildwest.tumblr.com is Suspicious  http://maldb.com/thenewwildwest.tumblr.com/

oath-omega.tumblr.com is clean  http://maldb.com/oath-omega.tumblr.com/

[ChloeRS]

changed to
oathomega.tumblr.com
and checked on maldb and it is suspicious.

Thank you for checking.
seems we are being hacked....?

If I get anymore info I will let you know.

[melissarosie]

Thanks so much! I'll let you know if tumblr support replies with anything or if I find a way to fix it. I think we are being hacked, a couple of other tumblr users told me they also had the same problem!

I did edit the HTML code to add the layout and theme, maybe it's in that and we could change it? I'm not very good at this kind of thing  xxx

[ChloeRS]

just an update.

Also changed html theme from my third party one to a free tumblr approved one.
Scanned computer with Malware Bytes and only detected two PUPs located in IE temporary files. (don't even use Internet Explorer browser) Removed them.

Contacted Tumblr with my problem (malicious code and iframes according to maldb.com)

so i can now get to my domain without a warning, but maldb.com still says it is malicious.

I guess I will just wait for a reply from Tumblr.

[dont1028]

I narrowed it down to this line of code in mine...

<script type="text/javascript" src="http://static.tumblr.com/o0thhnj/QDcmcmi8j/infinitescrolling.txt"></script>

Yours also shares the same infinitescrolling.txt

[logantknight]

I have the same issue with hxtp://rosieturnerx.tumblr.com/
I can get editing access through the tumblr dashboard without any issues and it all shows fine there, I even replaced the html from a backup file in case anything had been added to the code, but it still won't load.

[StartheFox]

I just recently started having this problem, I cleared the cache and updated java, it didn't work though. I'm trying to get to someone's blog and it absolutely will not try to load it anymore. I looked it up on the maldb site and it said it was suspicious.
I also tried doing a bit of research on this issue and it seems fairly new. I did, however, find the exact thing on http://www.avast.com/en-us/virus-update-history. If I am reading it right, it was only noticed on 2-21-2014. It seems like a more recent problem that few people are having.
Not sure if any of that helps but I just would like to see that blog and many others again...

[Milos]

Hello,
thanks for reporting the false positive. HTML:Includer-AY [Trj] will be fixed.

Milos

[ichigokisu]

Same here... avast blocked me from going to my url... maldb shows it as suspicious... changed theme and now I'm able to access without avast warning (maldb still shows the suspicious hidden iframes) but I get an empty response from chrome when going 2nd page. people using other antivirus have no problem watching my blog though. I got no reply from tumblr about this yet.

[nikokaoja77]

same problem here ... includer-AY |Trj| appear when i try to go on my own tumblr page... HELP please

[Pondus]

same problem here ... includer-AY |Trj| appear when i try to go on my own tumblr page... HELP please

Did you read Milos post above   ?