Avast threat warning when using site

Discussion in 'AE & Site-Related Specific' started by greylin, Aug 11, 2013.

  1. greylin

    greylin Well-Known Member

    Joined:
    Jul 4, 2013
    Messages:
    2,148
    Likes Received:
    963
    When I opened the page on post on the forums I get threat has been detected on Avast. I have reported this in feedback several times.

    And here's the warning: http://...//;A1=VN900;sz=72|{gzip}
    Infection: HTML script-inf

    when clicked on detail box, I get this:

    URL: http://ad.doubleclick.net/adi/logoonline...
    Infection: HTML:Script-inf

    Am I the only one who gets this?
     
    #1
  2. Harpy

    Harpy Well-Known Member

    Joined:
    Jul 2, 2013
    Messages:
    3,530
    Likes Received:
    13
    Thanks Greylin, I've forwarded this on for it to be looked into. :)
     
    #2
  3. AfterEllen.comAdmin

    AfterEllen.comAdmin Active Member

    Joined:
    Jul 1, 2013
    Messages:
    30
    Likes Received:
    0
    Hi Greylin,
    I'm afraid we need a little more info -- the offending URL in the Infection Details (the one beginning with ad.doubleclick.net) is truncated after a single line, making it impossible for us to track it down. If the issue recurs would it be possible for you to capture and send on the full URL?

    Meanwhile, by way of reassurance, the fact that it IS coming from Doubleclick (our ad provider and a Google subsidiary) suggests that Avast may be returning a false positive result. This impression is bolstered by the fact that Avast has in the past been prone to false positives of exactly this sort:

    http://www.bleepingcomputer.com/forums/t/390569/avast-htmlscript-inf-false-positive/

    Nevertheless we will investigate fully as soon as we have the full URL to go on.
     
    #3
  4. greylin

    greylin Well-Known Member

    Joined:
    Jul 4, 2013
    Messages:
    2,148
    Likes Received:
    963
    I am happy to report that Avast was not squealing at me today. I am a net chicken and it goes to show devoted I am to visiting AE, despite all the alarm bells.

    Argh, and how lazy of me, I was just cutting and pasting from whatever that had popped up. I found the webshield.txt file and found this chunk of complaints from it (mind, if you kind folks find anything other than AE's URLs on here, I was, er, hem, merely doing research):

    7/31/2013 7:43:29 AM http://ad.doubleclick.net/adi/logoonline.vt/atf_i_s/afterellen/wp_content/themes/afterellen/sm4_header.php;sec0=afterellen;sec1=wp_content;sec2=themes;sec3=afterellen;sec4=sm4_header;pos=atf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;A1=VN9|>{gzip} [L] HTML:Script-inf (0)
    7/31/2013 3:17:07 PM http://ad.doubleclick.net/adi/logoonline.vt/atf_i_s/afterellen/wp_content/themes/afterellen/sm4_header.php;sec0=afterellen;sec1=wp_content;sec2=themes;sec3=afterellen;sec4=sm4_header;pos=atf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;A1=VN9|>{gzip} [L] HTML:Script-inf (0)
    8/1/2013 9:00:03 AM http://ad.doubleclick.net/adi/logoonline.vt/atf_i_s/afterellen/_hp;sec0=afterellen;sec1=_hp;pos=atf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;A1=VN900;A1=VN999;A3=NS046;A3=EX905;A3=EX019;A3=EX020;A3=EX013;A3=NS010;A3=NS013;sz=728x90;tile=1|>{gzip} [L] HTML:Script-inf (0)
    8/1/2013 2:22:10 PM http://ad.doubleclick.net/adi/logoonline.vt/atf_i_s/afterellen/wp_content/themes/afterellen/sm4_header.php;sec0=afterellen;sec1=wp_content;sec2=themes;sec3=afterellen;sec4=sm4_header;pos=atf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;CRM=M4|>{gzip} [L] HTML:Script-inf (0)
    8/1/2013 11:33:13 PM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/anna_torv_and_jennifer_jason_leigh_to_play_lovers_o;sec0=afterellen;sec1=anna_torv_and_jennifer_jason_leigh_to_play_lovers_on_open;sec2=07;sec3=2013;pos=btf;tag=adi;mtype=standard;mtfIFPath=/as|>{gzip} [L] HTML:Script-inf (0)
    8/1/2013 11:36:13 PM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/anna_torv_and_jennifer_jason_leigh_to_play_lovers_o;sec0=afterellen;sec1=anna_torv_and_jennifer_jason_leigh_to_play_lovers_on_open;sec2=07;sec3=2013;pos=btf;tag=adi;mtype=standard;mtfIFPath=/as|>{gzip} [L] HTML:Script-inf (0)
    8/1/2013 11:36:43 PM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/anna_torv_and_jennifer_jason_leigh_to_play_lovers_o;sec0=afterellen;sec1=anna_torv_and_jennifer_jason_leigh_to_play_lovers_on_open;sec2=07;sec3=2013;pos=btf;tag=adi;mtype=standard;mtfIFPath=/as|>{gzip} [L] HTML:Script-inf (0)
    8/1/2013 11:37:13 PM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/anna_torv_and_jennifer_jason_leigh_to_play_lovers_o;sec0=afterellen;sec1=anna_torv_and_jennifer_jason_leigh_to_play_lovers_on_open;sec2=07;sec3=2013;pos=btf;tag=adi;mtype=standard;mtfIFPath=/as|>{gzip} [L] HTML:Script-inf (0)
    8/1/2013 11:37:43 PM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/anna_torv_and_jennifer_jason_leigh_to_play_lovers_o;sec0=afterellen;sec1=anna_torv_and_jennifer_jason_leigh_to_play_lovers_on_open;sec2=07;sec3=2013;pos=btf;tag=adi;mtype=standard;mtfIFPath=/as|>{gzip} [L] HTML:Script-inf (0)
    8/1/2013 11:40:43 PM http://ad.doubleclick.net/adi/logoonline.vt/atf_i_s/afterellen/anna_torv_and_jennifer_jason_leigh_to_play_lovers_o;sec0=afterellen;sec1=anna_torv_and_jennifer_jason_leigh_to_play_lovers_on_open;sec2=07;sec3=2013;pos=atf;tag=adi;mtype=standard;mtfIFPath=/as|>{gzip} [L] HTML:Script-inf (0)
    8/3/2013 7:04:54 AM http://ad.doubleclick.net/adi/logoonline.vt/atf_i_s/afterellen/_hp;sec0=afterellen;sec1=_hp;pos=atf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;A1=VN900;A1=VN999;A3=NS046;A3=EX905;A3=EX019;A3=EX020;A3=EX013;A3=NS010;A3=NS013;sz=728x90;tile=1|>{gzip} [L] HTML:Script-inf (0)
    8/3/2013 7:04:54 AM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/_hp;sec0=afterellen;sec1=_hp;pos=btf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;A1=VN900;A1=VN999;A3=NS046;A3=EX905;A3=EX019;A3=EX020;A3=EX013;A3=NS010;A3=NS013;sz=300x250;tile=|>{gzip} [L] HTML:Script-inf (0)
    8/3/2013 8:11:08 AM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/_hp;sec0=afterellen;sec1=_hp;pos=btf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;A1=VN900;A1=VN999;A3=NS046;A3=EX905;A3=EX019;A3=EX020;A3=EX013;A3=NS010;A3=NS013;sz=300x250;tile=|>{gzip} [L] HTML:Script-inf (0)
    8/4/2013 9:27:21 AM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/_hp;sec0=afterellen;sec1=_hp;pos=btf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;CRM=M45-54;CRM=F45-54;CRM=45-54;A3=EX050;A3=EX092;A3=AX086;A3=AX092;A3=NS092;A3=AX019;A3=AX020;A3|>{gzip} [L] HTML:Script-inf (0)
    8/4/2013 9:27:51 AM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/_hp;sec0=afterellen;sec1=_hp;pos=btf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;CRM=M45-54;CRM=F45-54;CRM=45-54;A3=EX050;A3=EX092;A3=AX086;A3=AX092;A3=NS092;A3=AX019;A3=EX020;A3|>{gzip} [L] HTML:Script-inf (0)
    8/4/2013 9:28:21 AM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/_hp;sec0=afterellen;sec1=_hp;pos=btf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;CRM=M45-54;CRM=F45-54;CRM=45-54;A3=EX050;A3=EX092;A3=AX086;A3=AX092;A3=NS092;A3=AX019;A3=EX020;A3|>{gzip} [L] HTML:Script-inf (0)
    8/4/2013 9:29:21 AM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/_hp;sec0=afterellen;sec1=_hp;pos=btf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;CRM=M45-54;CRM=F45-54;CRM=45-54;A3=EX050;A3=EX092;A3=AX086;A3=AX092;A3=NS092;A3=AX019;A3=EX020;A3|>{gzip} [L] HTML:Script-inf (0)
    8/4/2013 9:29:51 AM http://ad.doubleclick.net/adi/logoonline.vt/btf_i_s/afterellen/_hp;sec0=afterellen;sec1=_hp;pos=btf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;CRM=MLG;CRM=M45-54;CRM=F45-54;CRM=45-54;A3=EX050;A3=EX092;A3=AX086;A3=AX092;A3=NS092;A3=AX019;A3=EX020;A3|>{gzip} [L] HTML:Script-inf (0)
    8/5/2013 12:14:04 AM http://ad.doubleclick.net/adi/logoonline.vt/atf_i_s/afterellen/wp_content/themes/afterellen/sm4_header.php;sec0=afterellen;sec1=wp_content;sec2=themes;sec3=afterellen;sec4=sm4_header;pos=atf;tag=adi;mtype=standard;mtfIFPath=/asm/doubleclick/;A1=VN900;sz=72|>{gzip} [L] HTML:Script-inf (0)
     
    #4
  5. KaLEl00

    KaLEl00 New Member

    Joined:
    Feb 6, 2015
    Messages:
    1
    Likes Received:
    0
    Hiya,

    Every time someone replies to something, I get a notice of it, now that is all fine, except that I get the notice three times... Is that a glitch on AE side, my side? Is it fixable?
     
    #5

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice