Author Topic: HTML:Allaple-A [Wrm] when logged in to gmail and opening IE7  (Read 2056 times)

0 Members and 1 Guest are viewing this topic.

douglasking425

  • Guest
HTML:Allaple-A [Wrm] when logged in to gmail and opening IE7
« on: March 23, 2009, 04:29:48 AM »
I get an avast Warning = "A virus was Found! with the option to abort connection ... Malware is HTML:Allaple-A [Wrm] and file name is http://www.skarbos.com/favicon.gif

I get the error when opening IE7 (OS is Windows Vista Home Ultimate) This only occurs if I am logged into my Gmail account.  The website is a local furniture store so I am guesing its because google is precachcing something for ads or something. If I go to the website ( to the home page not the suspect file as I decided it is unprudent to browse directly to the suspect file).  Since it happens every time I open the browser while logged into gmail its unnerving to keep getting these alerts.

Any idea on how to fet rid of this?


Thanks

Doug

Offline jsejtko

  • Avast team
  • Full Member
  • *
  • Posts: 171
    • ALWIL Software
Re: HTML:Allaple-A [Wrm] when logged in to gmail and opening IE7
« Reply #1 on: March 23, 2009, 09:31:16 AM »
Hello,

favicon.gif doesn't exist on the server, so server sends 404 message to your browser. This message contains injected <OBJECT tag just after opening <HTML> tag. Object tag contains only CLSID. This injection is know to be done by Allaple worm. Please contact webmaster of the service and tell them to clean their system.

Following url contains mutiengine detection of 404 message generated by the server: http://www.virustotal.com/cs/analisis/13a86bf31ee7cef98bcd072c0e095c36

Best Regards