Virus in Yahoo mail? False positive?

[chimp78]

Me too.

I am getting it when on Youtube.com

It showed as below;

http://m.wxw.yahoo.com/\{gzip}

JS:ScriptIP-inf [Trj]

It kept appearing many times, no matter I abort the connection. What should I do? Report it as false positive? I have 4.8 Avast. Thank you.

[sethhhopkins]

I agree that it is the last update.  Began happening on two computers in my home immediately after update.

[spg SCOTT]

I think this is the result of a recent addition of ad.yieldmanager to the network shield block list, as it is considered malicious, and yahoo somehow scripts it into it's pages, which would cause the alert...
http://www.mywot.com/en/scorecard/ad.yieldmanager.com


This is however, my guess on the subject...

[adief6]

I'm getting the same message that Goldscooby is on yahoo....JS:ScriptIP-inf [Trj] ......what's up with this?  I have Avast 4.8 and everything was fine last night...it started this morning.....Thanks!

[YoKenny]

I don't see an alert but then I block ad.yieldmanager.com with my HOSTS file:
http://hosts-file.net/?s=ad.yieldmanager.com&x=24&y=10

[cadremis]

Same problem with me, 2 times this morning that I wanted to read my mail avast blocks a worm and some adds in the yahoo page don't show at all....

[spg SCOTT]

I don't see an alert but then I block ad.yieldmanager.com with my HOSTS file:
http://hosts-file.net/?s=ad.yieldmanager.com&x=24&y=10

That would be why you didn't see it in the other thread...

[michgal2k]

I am getting the same errors when I open my homepage, which is yahoo.  I am running malwarebytes right now but it is not finding anything (good thing).  Have any decisions been made? Is this just a false positive caused by a recent database update?  What precautions are being taken? Helpful hints are appreciated.

[jsejtko]

Hello guys,

this false positive will be corrected in new vps update in about 30 minutes. We are blocking ads from yieldmanager.com (by mistake because they were in our stats as distributor of Fake Antivirus websites).

Thank you for information you have provided.
Regards

[bobo1]

Turned off network shield yet another false positive was ok yesterday before recent vps update. How annoying! running web shield only and ok! cannot be a virus!

[chimp78]

I have Firefox. I use Ghostery, Karma Blocker, WOT, etc from add ons. It kept popping many times. I aborted it, but it continued popping. Now, what do I need to do, then? Thank you.

[spg SCOTT]

Hello guys,

this false positive will be corrected in new vps update in about 30 minutes. We are blocking ads from yieldmanager.com (by mistake because they were in our stats as distributor of Fake Antivirus websites).

Thank you for information you have provided.
Regards

Thank you for the update

[john36]

Hey guys,

I also got the alert at Yahoo mail.

I am getting an alert from my Weather Pulse program also.

It says that a trojan was found.  Malware Name: JS:ScriptIP-inf {trj}.

Should I report both as false positives?

Thanks

[stainless]

Hey Im a newb just wanted to report I am getting the same problem after the update, but also as Yahoo! is my home page, anytime I simply click to yahoo.com, it comes up and states a Trojan horse was found !

file name- http://m.www.yahoo.com/\{gzip}
Malware name-  JS:ScriptIP-inf [Trj]
Malware type- Trojan Horse
VPS version-  091227-0, 12/27/2009

Kinda freaked me out at first, but I'm hoping this is related to the issue on this thread.

I downloaded the Malwarebytes' Anti-Malware program and found 0 objects out of 97851.  

I use firefox but it does the same on IE.

[spg SCOTT]

Yes, it is related, will be fixed as said above.