Author Topic: HTML:Iframe-inf on Download  (Read 3384 times)

0 Members and 1 Guest are viewing this topic.

BigBEarGnomeKing

  • Guest
HTML:Iframe-inf on Download
« on: September 28, 2009, 12:52:59 AM »
Hello Yall,

I'm trying to download mods to my favorite game, Morrowind, through a site called: "hxxp://www.elricm.com/". When I try to download any Morrowind mods at all, avast stops the connection and alerts me to the "HTML:Iframe-inf" virus/worm alert, and I promptly abort the connection.

My question is, is this an actual threat?; or a false positive?

This is beyond my skills, so any help would be great. The owner of the website has been sent a message, but I'm not sure what they are doing about it.

Here are some sample links, the first being a link to the page, the second being a link to the specific file where the virus/worm alarm is:

hxxp://www.elricm.com/nuke/html/modules.php?op=modload&name=Downloads&file=index&req=viewdownloaddetails&lid=330
hxxp://www.elricm.com/nuke/html/modules.php?op=modload&name=Downloads&file=index&req=getit&lid=330


hxxp://www.elricm.com/nuke/html/modules.php?op=modload&name=Downloads&file=index&req=viewdownloaddetails&lid=1127
hxxp://www.elricm.com/nuke/html/modules.php?op=modload&name=Downloads&file=index&req=getit&lid=1127


hxxp://www.elricm.com/nuke/html/modules.php?op=modload&name=Downloads&file=index&req=viewdownloaddetails&lid=354
hxxp://www.elricm.com/nuke/html/modules.php?op=modload&name=Downloads&file=index&req=getit&lid=354
« Last Edit: September 28, 2009, 02:13:10 PM by BigBEarGnomeKing »

yawetage

  • Guest
Re: HTML:Iframe-inf on Download
« Reply #1 on: September 28, 2009, 04:05:04 AM »
Hi, Gnome King welcome to the forum. Please modify the "http" part of your links to "hxxp" to prevent people from accidentally clicking and getting infected.

00MARCUS00

  • Guest
Re: HTML:Iframe-inf on Download
« Reply #2 on: September 28, 2009, 05:54:35 AM »
Hi, Gnome King welcome to the forum. Please modify the "http" part of your links to "hxxp" to prevent people from accidentally clicking and getting infected.

just having a link can get an infection?!?! :o

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: HTML:Iframe-inf on Download
« Reply #3 on: September 28, 2009, 06:03:41 AM »
just having a link can get an infection?!?! :o

if you click you might get infected. isn't that enough?

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: HTML:Iframe-inf on Download
« Reply #4 on: September 28, 2009, 06:33:08 AM »
hello BigBEarGnomeKing,

yes, all the zip file links has the iframe : hxxp://tradbox.net/doxt/pWtI

see this : http://www.google.com/safebrowsing/diagnostic?site=http://tradbox.net&hl=en

i don't know or can't tell what the iframe, the site has been infected, does. but the website is surely infected. contact the webmaster and ask him to check the website for infections.
« Last Edit: September 28, 2009, 06:44:28 AM by nmb »