Page 1 of 1

js:iframe-ex trojan on qth homepage?

Posted: Fri Dec 07, 2012 1:16 pm
by kc8adu
anyone else get this warning?
avast 7 gave this warning.

Posted: Sat Dec 08, 2012 2:37 am
by KA9FOX
I've heard of this happening if the anti-virus does not like one of the banner ads that it sees. My guess is it is a certain ad displayed via the Google AdSense system, which are sometimes displayed on the site.

I've not ever seen this myself, and with the millions of page views we serve each month, I get less than one complaint a month about this type of thing. So, I do not think it is prevalent, and I'm not convinced it is a problem.

I've love to hear what banner ads were shown on the site, at the time of the warning.

- Scott KA9FOX

Posted: Wed Dec 12, 2012 12:57 pm
by kc8adu
the page gets blocked on other machines at work too.
also blocked by vipre antivirus.
i too figured an infected adserver was most likely as that seems to be a major vector for malware nowadays.
but it is still blocking qrz.com homepage.a week later.
so its a problem or false posiitve still.

Re: js:iframe-ex trojan on qth homepage?

Posted: Mon Jun 17, 2013 3:18 pm
by kc8adu
still get this even after many updates to avast and vipre.
URL: http://www.qth.com/|{gzip}
Process: C:\Program Files (x86)\Mozilla Firefox\f...
Infection: JS:Iframe-EX [Trj]