If you get another warning about Html_Iframe.gq or anything else, can you take a screen shot and email it to me? Tech support was unable to find it.
Thanks!
Categories
AV hunters
If you get another warning about Html_Iframe.gq or anything else, can you take a screen shot and email it to me? Tech support was unable to find it. Thanks!
5 replies on “AV hunters”
I’ll try to get it for you tomorrow when i’m at work. Work uses trend micro for av, but my home comps with norton and spy sweeper dont flag anything, which is why I said it might be a false alert, but did just start recently. See what I can get off the work comp tomorrow 🙂
It says its the file scottrpg[1].htm, sorry cant get a screen shot or anything.
I’ve hunted, and that file doesn’t seem to exist. In fact, even scottrpg.htm doesn’t seem to exist. I wonder what’s going on.
Ok, well just to make this more interesting, the work comp now flat out blocks me from connecting to http://www.scottrpg.com as a ‘malicous website’
yeah I know I spelled that wrong 🙂
Now my norton is also flagging it as a 3 hit wonder: two different detects as ‘downloader’
and one detected as ‘js.downloader.trojan’
They all show as files on my comp, coming from the site, two of them are showing as ‘counter[1].htm, one downloader hit and the js.downloader hit.
The other one shows as index[1].htm
I’ve cleared out a lot of possible hiding places– I hope that does the trick.
I wonder if the “js.downloader” is due to the fact I use javascript to hide the email address on “click here to email me”.