my friend asked me to find something for him, on google.
while googling, avast popped up with the following details:
url: hxxp://www.google.co.il/url?sa=f&rct=j&url=http://arquitecturasoftware.org/19534-download.htm&q=pod+to+pc+registration+code&lpe=2&usg=AFQjCNE4tVm-_rpjP-nfLN9Gya0a1zADpg|>{gzip}
^ NOTE FOR THE GOOGLE.CO.IL as the base of the link.
malware: JS:ScriptIP-inf [Trj] -- Blocked.
so.. google search is infected or avast is wrong?
important information:
everything was happening under Sandboxie, not in my real sytem machineas i said before, i was trying to help a friend, i guess i wont try to help again.
i NEVER enter to sites google show me on google search, i usually take what i need from the
website description.
the AVAST popup was right when the google search was loaded.
No av not even AVAST says that the url is infected- so wtf is going on? my avast is updated.
after that, i made some scans to see what's going on:
MBAM: Clean.
AVAST: Rootkit Scan + Full Scan + Boot Scan = Clean.
Virustotal: url is clean 0/16.
Sandbox has been cleaned immidiately + no active connections when i dont open a software that
requires internet connection.
No unknown tasks in task manager.
HELP?