Picking up malware on VJ

[unsmiley 111]

My AVAST antivirus is picking up a threat (and alarm goes off) on the Current Events CEHST forum:

I think the infection's name is: HTML: script-inf

[Cody and Daisy 373]

I get things like that all the time when I am on my laptop and open certain pages.

Have to turn off my anti vast for a short time to access threads.

Super annoying. Not sure what's going on.

[Captain Ewok 1,891]

Checked on our end. No issues here. May be a signature on someone's account. If you can narrow down a page I'll dig further!

[Cody and Daisy 373]

Checked on our end. No issues here. May be a signature on someone's account. If you can narrow down a page I'll dig further!

It seems to be random for me.

Just happened again when I googled for a thread that I wanted to pull some information from.

And when I click the Google link to open the page in a new tab, that's when my software is like noooooooo....

Hence why I mostly use my phone for all this.

But if I ever see anything specific I'll try and pin point it.

[Captain Ewok 1,891]

yeah it is very Weird. AVS seems to be the only Antivirus that is giving issues. Perhaps an issue with their software or algorithms.

[unsmiley 111]

Checked on our end. No issues here. May be a signature on someone's account. If you can narrow down a page I'll dig further!

OK, next time this happens I will try to get you the page involved, if I can remember.

[Dakine10 5,452]

No doubt it's the legendary Win32:Evo-gen [susp] virus.

In other words AVAST's false-positive crazy heuristics.

[Kathryn41 3,205]

yeah, there are pages of discussion on AVAST's false-positives for that particular 'virus' if you google search it.

[N&S 32]

For what it's worth, I just had Avast ping-ping-ping at me at this page

http://www.visajourney.com/forums/topic/241744-dual-americangerman-citizenship-beibehaltungsgenehmigung/

I tried to paste a screenshot of the "further information" window, but that doesn't work, so details I can type:

URL: http://naraiarm.org/-ZsXJQLHZSW-m/_IQoGU-KVMW/_L_gtPhHQrmIlMYVijuK.js?mx=09b&-FqdY_...(This is where it ends and I can't seem to get to the entire one)

Infection: URL:Mal

Maybe this helps...

Edited March 24, 2015 by N&S

[luckytxn 2,264]

Was asked to post this. Beware.

http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Trojan%3AHTML%2FIFrame_Exploit.C