js:iframe-ex trojan on qth homepage?

[kc8adu]

anyone else get this warning?
avast 7 gave this warning.

[KA9FOX]

I've heard of this happening if the anti-virus does not like one of the banner ads that it sees. My guess is it is a certain ad displayed via the Google AdSense system, which are sometimes displayed on the site.

I've not ever seen this myself, and with the millions of page views we serve each month, I get less than one complaint a month about this type of thing. So, I do not think it is prevalent, and I'm not convinced it is a problem.

I've love to hear what banner ads were shown on the site, at the time of the warning.

- Scott KA9FOX

[kc8adu]

the page gets blocked on other machines at work too.
also blocked by vipre antivirus.
i too figured an infected adserver was most likely as that seems to be a major vector for malware nowadays.
but it is still blocking qrz.com homepage.a week later.
so its a problem or false posiitve still.

[kc8adu]

still get this even after many updates to avast and vipre.
URL: http://www.qth.com/|{gzip}
Process: C:\Program Files (x86)\Mozilla Firefox\f...
Infection: JS:Iframe-EX [Trj]