js:iframe-ex trojan on qth homepage?

This is the place to discuss the QTH.com Classifieds (http://swap.qth.com). Please be constructive.
Post Reply
kc8adu
Posts: 14
Joined: Sun Dec 24, 2006 1:47 pm

js:iframe-ex trojan on qth homepage?

Post by kc8adu » Fri Dec 07, 2012 1:16 pm

anyone else get this warning?
avast 7 gave this warning.

KA9FOX
Site Admin
Posts: 383
Joined: Sun Mar 02, 2003 5:29 am
Location: La Crosse, WI
Contact:

Post by KA9FOX » Sat Dec 08, 2012 2:37 am

I've heard of this happening if the anti-virus does not like one of the banner ads that it sees. My guess is it is a certain ad displayed via the Google AdSense system, which are sometimes displayed on the site.

I've not ever seen this myself, and with the millions of page views we serve each month, I get less than one complaint a month about this type of thing. So, I do not think it is prevalent, and I'm not convinced it is a problem.

I've love to hear what banner ads were shown on the site, at the time of the warning.

- Scott KA9FOX

kc8adu
Posts: 14
Joined: Sun Dec 24, 2006 1:47 pm

Post by kc8adu » Wed Dec 12, 2012 12:57 pm

the page gets blocked on other machines at work too.
also blocked by vipre antivirus.
i too figured an infected adserver was most likely as that seems to be a major vector for malware nowadays.
but it is still blocking qrz.com homepage.a week later.
so its a problem or false posiitve still.

kc8adu
Posts: 14
Joined: Sun Dec 24, 2006 1:47 pm

Re: js:iframe-ex trojan on qth homepage?

Post by kc8adu » Mon Jun 17, 2013 3:18 pm

still get this even after many updates to avast and vipre.
URL: http://www.qth.com/|{gzip}
Process: C:\Program Files (x86)\Mozilla Firefox\f...
Infection: JS:Iframe-EX [Trj]

Post Reply