I run a forum on my site which utilises vbulletin for its backend. I have had a couple of users recently report that avast is stating we have a js redirect trojan when they are trying to browse. As far as I am aware, no other anti virus is reporting it (I have tried 3 or 4) and we have also scanned the entire server for anything suspicious and found nothing.
We have also looked through the source code and there is nothing being injected as far as I can tell.
User’s have been saying that it only comes up blocked every so often, whilst one has said it happens on every page.
That is definitely the file that ust be causing the problems then based on the link you show above. How would we get around this? Should we reference it from the Yahoo api direct or something?
We are aware of the wordpress update that is required. I was actually checking it locally before all this came up this morning to make sure everything is working before upgrading tonight! I have got some great virus scanning bookmarks for future reference though.
Will also report the false positive to see what they say. I actually contacted support this morning regarding this query, so maybe they will get back to me in due course.
