HTML/Framer Virus question

Discussions about anything Computer Hardware Related. Overclocking, underclocking and talk about the latest or even the oldest technology. PCA Reviews feedback
Post Reply
User avatar
wvjohn
Posts: 9238
Joined: Wed Nov 22, 2000 7:09 am
Contact:

HTML/Framer Virus question

Post by wvjohn »

I went to a web site run by some friends...h##p://queenofheavencircle.org/ and my AVG webshield said that the page was infected by the HTML.Framer virus (and blocked it).


the details AVG gives me are:

Process name: C:\ProgramFiles\Mozilla Firefox\firefox.exe
Process ID: 2956


I did a little looking around it it seems to be a method for injecting code directing the pc to visit some funky website or something. Possibly the kind of code that can be placed on a website via SQL injection.

If it is real - I want to let them know so they can fix it, obviously. But I don't want to start a wild goose chase for them on a false positive.

any ideas?

I tried using Chrome and got two separate alerts on this.
From what I have been able to find, this was originally designed to exploit an Older IE exploit, but we all know how frequently these things are adjusted
<a href="http://www.heatware.com/eval.php?id=123" target="_blank" >Heatware</a>
User avatar
eGoCeNTRoNiX
Posts: 7362
Joined: Wed Oct 23, 2002 12:51 pm
Location: HELL

Post by eGoCeNTRoNiX »

Avira doesn't seem to have a problem with the site.. May be a falst positive?

eGo
PM before Email People!!
Image
Heat Under eGoCeNTRoNiX :)
Who Farted? BEANIE!!!
!Welcome to the United States of the Offended!
User avatar
FlyingPenguin
Flightless Bird
Posts: 33161
Joined: Wed Nov 22, 2000 11:13 am
Location: Central Florida
Contact:

Post by FlyingPenguin »

Could have been a malicious ad banner, or possibly even a script you picked up on another site that was delayed. Or maybe it's a false positive. Is it consistent? Try clearing your cache and trying it again.

Google safe browsing says it's clean: http://www.google.com/safebrowsing/diag ... circle.org
---
“The Government of Spain will not applaud those who set the world on fire just because they show up with a bucket.” - Prime Minister of Spain, Pedro Sánchez

Image
User avatar
wvjohn
Posts: 9238
Joined: Wed Nov 22, 2000 7:09 am
Contact:

Post by wvjohn »

Online Link Scan - Virus, Trojan, Adware and Malware Scanner

Scanning in progress. Be patient.

--------- LINK SCAN SUMMARY ---------
URL scanned: http://queenofheavencircle.org/
PhisTank say's: Service not available.
AVG say's: Service not available.
SiteTruth say's: This site is safe.
Google Safe Browsing say's: This site is safe.
Threat Name: No Threat FOUND
Threat Definitions: 799869
Engine Version: 0.96.1
Host IP: 65.182.100.166
Link Status: Clean
File Size: 1.63 KB
Time Finished: 5 secs
Overall result: This site is secure.

Cleared cache, still getting AVG block on this site...


http://www.avg.com.au/resources/web-page-scanner/

AVG online web scanner says it's clean.....lol
<a href="http://www.heatware.com/eval.php?id=123" target="_blank" >Heatware</a>
Post Reply