Author Topic: JS:Illredir-CI [Trj] - False Positive?  (Read 10216 times)

0 Members and 1 Guest are viewing this topic.

SafeSurf

  • Guest
Re: JS:Illredir-CI [Trj] - False Positive?
« Reply #15 on: July 07, 2010, 08:52:15 AM »
Do NOT boot or restart your machine if there is any chance of a virus.

Do you have your Avast settings at default or did you change them?  If you have a virus, put them in the Virus Chest if it asks you.  It will quarantine it there, but you can still restore it should you need it.

Yes, run a FULL MBAM scan to play it safe.  If anything positive comes up, copy and paste the scan log here.

spg SCOTT

  • Guest
Re: JS:Illredir-CI [Trj] - False Positive?
« Reply #16 on: July 07, 2010, 12:50:25 PM »
Hi VerySplendid,

This alert is very similar to that of the one above. An inline script has been inserted into the end of the javascript file that you see in the alert.

It points to the malicious domain seen in the image, which the network shield blocks. :)

This is definitely not a false positive and the site has most likely been hacked in the last couple of days judging from your description.


...
Also, when I typed 'JS:Illredir-CI[Trj]' into google & attempted access to this forum, I got the google warning thing saying that this site was (sorry I'm working from my patchy memory..) unsigned or maybe untrusted site, something like that? I added a one-time exception so I could read the thread.
...

This would be because the link you were given by google was a https link, so it would be secured. The reason that you are warned, is that the certificate is self-signed.
Using https is not needed to view the site, you can just take the s off the https and it will work just as fine...just that some people prefer having the secured connection.

-Scott-

VerySplendid

  • Guest
Re: JS:Illredir-CI [Trj] - False Positive?
« Reply #17 on: July 07, 2010, 03:36:05 PM »
Thanks SafeSurf & spg for your expertise. Avast! didn’t detect anything & nor did Malwarebytes or BitScan QuickDefender. Hurrah!  :D

spg SCOTT

  • Guest
Re: JS:Illredir-CI [Trj] - False Positive?
« Reply #18 on: July 07, 2010, 03:39:13 PM »
You're welcome :)

SafeSurf

  • Guest
Re: JS:Illredir-CI [Trj] - False Positive?
« Reply #19 on: July 08, 2010, 09:19:26 AM »
You're very welcome VerySplendid.  :)