Author Topic: Occassional Virus Alert on my Website  (Read 2165 times)

0 Members and 1 Guest are viewing this topic.

snerd

  • Guest
Occassional Virus Alert on my Website
« on: February 11, 2012, 06:02:33 AM »
I run the Pro version, 6.0.1367 and database 120210-1. I have a political discussion forum at xwx.conservativetalkforums.com and from time to time I get an alert that their is some kind of js script or something. I cannot find a record of it anywhere in the stats. I have a user that has another AV reporting "1 or 2 "blackhole" and other malicious viruses had been "blocked" message from time to time also. I killed my Adsense ads thinking that they were the only thing that might be suspect. Any ideas? Thanks!
« Last Edit: February 11, 2012, 06:41:23 AM by snerd »

Offline Coolmario88

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1556
  • Bronies make the web go round
Re: Occassional Virus Alert on my Website
« Reply #1 on: February 11, 2012, 06:15:03 AM »
I went to the site.. Avast says Infection: HTML:RedirME-inf [Trj]  Object: hxxp://gamessilver.in/in.cgi?walter
OS: Windows 11 64-bit
Webbrowser: Mozilla Firefox
PC Specs: Intel i5-12400f, Nvidia RTX 3050, 16gb ram, 1.5TB SSD(s).

Gargamel360

  • Guest

osants911

  • Guest
Re: Occassional Virus Alert on my Website
« Reply #3 on: February 11, 2012, 06:39:34 AM »
Hi snerd,

To avoid potential users getting infected, please deactivate the live link by changing to wxw, instead of www.

Also here is a VT URL report: https://www.virustotal.com/url/242cce6bc452320153cf3e8ec9cde5f586a4892c00213d38c2f4b835b74ddf64/analysis/1328938520/

None of the Blacklists are detecting this as of yet....

EDIT: typo
« Last Edit: February 11, 2012, 06:43:17 AM by nnoa110 »

snerd

  • Guest
Re: Occassional Virus Alert on my Website
« Reply #4 on: February 11, 2012, 06:51:56 AM »
Thanks, I've taken the site down and am uploading and overwriting all files. Hopefully this will fix me up.

snerd

  • Guest
Re: Occassional Virus Alert on my Website
« Reply #5 on: February 11, 2012, 07:00:21 AM »
I scanned it with both of those sites again and it looks clean. Thanks.