Avast detected that my blog has virus or some infection it reported
“Infection: HTML Iframe-infLocation” i checked using google diagnostic tool,other major link scanner none of them reporeted infection,even Wot said its safe.can anyone tell why avast detects this.its a false positive.and its spoiling the reputation of my blog
What’s the URL?
Sorry to disappoint you, but there’s a big chance that you do have something malicious on your website.
WOT isn’t going to help you, because it’s ran by people like you and me that vote sites over time. If your site was just infected today, I’m sure WOT users won’t start saying that your site is bad yet.
Now that I have that explanation over with, let’s get down to the details.
We can’t tell whether or not your blog is infected, or offer help until we know what the address is.
put a link in a post, but disable it. For example, if your site was http://www.google.com, post it like this hXXp://www.google.com to keep it disabled.
Then, we’ll take a look at the code on your site and tell you if it’s infected or not.
Like it or not, sites get hacked quite often. Yours may have just been the next target…
I guess I was a little slow on the response, and thanks for posting the link.
Remember to DISABLE the links though, we don’t want it spreading viruses to anyone that is curious or wants to help.
h**p://picxy.blogspot(dot)com
Thanks for disabling the links, and I’m looking through the code to find out where the malicious code is. Hang on for a moment.
THanks a lot. i’m waiting patiently
hxxp://gelgit.tk/iframe.htm on line 1817 of your website’s code is pointing to a bad website, as reported on urlvoid.com
See attached images.
What do i do now? can you please help
Yep, scythe is right, we don’t like the gelgit link.
You’ll have to remove the code.
If you host it yourself, you should be able to figure it out.
If it’s hosted elsewhere, your host should be able to help you.
The next step after you remove the code is probably to reset / strengthen all passwords for your accounts, and make sure that you install any security updates that are under your control.
hello i checked using url void.com and it says it clean ![]()
h**p://www(dot)urlvoid.com/scan/picxy.blogspot(dot)com
It hosted by blogspot i dont know what to do?i checked the code.in the Html section and searched for gelgit but couldnt find
Your site “is” technically clean, however, there is an iframe pointing to another website (hxxp://gelgit.tk) that is not clean.
When you visit your site, your browser loads everything on the page, including the iframe, which is why avast stops the connection (as it is doing it’s job, by protecting you from visiting or loading code from a malicious website).
I don’t use blogspot, but I do use wordpress, which is a similar blogging CMS software. Do you have a place where you can add “widgets”? The code might be in there.
All I can say is that you might not be finding it, but it’s certainly there. View the source when you visit your site, and you’ll see it.
i figured out gelgit.please recheck the url and pelase report back
Ohh yes i figured gelgit and i also removed it.i was hiding with other banners of blog directories.please recheck again and please request to report back
Avast didn’t report anything, so it looks like you got rid of the code.
I still highly recommend changing your password, and strengthening it while you’re at it as well.
Since it’s a hosted blogspot.com site, you shouldn’t need to do any security updates, but you might be able to update your blogspot software from within it’s console.
Again, I don’t use blogspot and never have, so my terminology could be completely off.
In any event, where did you find the iframe code?
was hiding with other banners of blog directoriesNevermind, you answered that while I was posting. Cool, sounds good. You should mark this thread solved by modifying the original post's subject with (Solved) in it. Oh, and putting "it WAS true" too... ;D
i removed the culprit gelgit ,it was hiding along with other blogdirectory links.please recheck my url and please report back
I already did.