Author Topic: Virus in Yahoo mail? False positive?  (Read 59451 times)

0 Members and 1 Guest are viewing this topic.

chimp78

  • Guest
I got it when on Youtube
« Reply #15 on: December 27, 2009, 02:55:23 PM »
Me too.

I am getting it when on Youtube.com

It showed as below;

http://m.wxw.yahoo.com/\{gzip}

JS:ScriptIP-inf [Trj]

It kept appearing many times, no matter I abort the connection. What should I do? Report it as false positive? I have 4.8 Avast. Thank you.

sethhhopkins

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #16 on: December 27, 2009, 02:56:44 PM »
I agree that it is the last update.  Began happening on two computers in my home immediately after update.

spg SCOTT

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #17 on: December 27, 2009, 02:57:14 PM »
I think this is the result of a recent addition of ad.yieldmanager to the network shield block list, as it is considered malicious, and yahoo somehow scripts it into it's pages, which would cause the alert...
http://www.mywot.com/en/scorecard/ad.yieldmanager.com


This is however, my guess on the subject...

adief6

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #18 on: December 27, 2009, 02:58:43 PM »
I'm getting the same message that Goldscooby is on yahoo....JS:ScriptIP-inf [Trj] ......what's up with this?  I have Avast 4.8 and everything was fine last night...it started this morning.....Thanks!

YoKenny

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #19 on: December 27, 2009, 02:58:57 PM »
I don't see an alert but then I block ad.yieldmanager.com with my HOSTS file:
http://hosts-file.net/?s=ad.yieldmanager.com&x=24&y=10

cadremis

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #20 on: December 27, 2009, 03:00:53 PM »
Same problem with me, 2 times this morning that I wanted to read my mail avast blocks a worm and some adds in the yahoo page don't show at all....

spg SCOTT

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #21 on: December 27, 2009, 03:01:31 PM »
I don't see an alert but then I block ad.yieldmanager.com with my HOSTS file:
http://hosts-file.net/?s=ad.yieldmanager.com&x=24&y=10

That would be why you didn't see it in the other thread... ::)

michgal2k

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #22 on: December 27, 2009, 03:02:27 PM »
I am getting the same errors when I open my homepage, which is yahoo.  I am running malwarebytes right now but it is not finding anything (good thing).  Have any decisions been made? Is this just a false positive caused by a recent database update?  What precautions are being taken? Helpful hints are appreciated.

Offline jsejtko

  • Avast team
  • Full Member
  • *
  • Posts: 171
    • ALWIL Software
Re: Virus in Yahoo mail? False positive?
« Reply #23 on: December 27, 2009, 03:04:11 PM »
Hello guys,

this false positive will be corrected in new vps update in about 30 minutes. We are blocking ads from yieldmanager.com (by mistake because they were in our stats as distributor of Fake Antivirus websites).

Thank you for information you have provided.
Regards

bobo1

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #24 on: December 27, 2009, 03:05:07 PM »
Turned off network shield yet another false positive was ok yesterday before recent vps update. How annoying! running web shield only and ok! cannot be a virus!

chimp78

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #25 on: December 27, 2009, 03:05:21 PM »
I have Firefox. I use Ghostery, Karma Blocker, WOT, etc from add ons. It kept popping many times. I aborted it, but it continued popping. Now, what do I need to do, then? Thank you.

spg SCOTT

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #26 on: December 27, 2009, 03:07:23 PM »
Hello guys,

this false positive will be corrected in new vps update in about 30 minutes. We are blocking ads from yieldmanager.com (by mistake because they were in our stats as distributor of Fake Antivirus websites).

Thank you for information you have provided.
Regards

Thank you for the update :)

john36

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #27 on: December 27, 2009, 03:11:31 PM »
Hey guys,

I also got the alert at Yahoo mail.

I am getting an alert from my Weather Pulse program also.

It says that a trojan was found.  Malware Name: JS:ScriptIP-inf {trj}.

Should I report both as false positives?

Thanks

stainless

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #28 on: December 27, 2009, 03:14:52 PM »
Hey Im a newb just wanted to report I am getting the same problem after the update, but also as Yahoo! is my home page, anytime I simply click to yahoo.com, it comes up and states a Trojan horse was found !

file name- http://m.www.yahoo.com/\{gzip}
Malware name-  JS:ScriptIP-inf [Trj]
Malware type- Trojan Horse
VPS version-  091227-0, 12/27/2009

Kinda freaked me out at first, but I'm hoping this is related to the issue on this thread.

I downloaded the Malwarebytes' Anti-Malware program and found 0 objects out of 97851.  

I use firefox but it does the same on IE.



spg SCOTT

  • Guest
Re: Virus in Yahoo mail? False positive?
« Reply #29 on: December 27, 2009, 03:15:39 PM »
Yes, it is related, will be fixed as said above.