I have the most updated version of the Free Edition. This problem has occurred on 3 of my home computer, and has been verified by my sons laptop at college, and 8 other people that I know that uses Avast.
Now this is a site that I have gone to since 2005 and have never had a problem. Ads a matter of fact, I was on that site reading and making posts around noon today. I tried to access again around 2:30 pm and ran into the problem. It is currently 12:43 am and still I am not able to access the forums correctly.
I get an Avast warning stating a Trojan Horse “JS:IFRAME-AC (trj)” was found and the connection was aborted. The link above takes me to the index page of the forum. HOWEVER I can access the CHAT TOPIC area of that board at
…as well as other TOPIC areas such as the Football section, Basketball section …etc. BUT once in them if I click on a thread, I get the same message about the Trojan Horse and cannot access the threads.
If I want to post a New Topic, I click on the button to do so, and it allows me to do it. After I post my thoughts, it is suppose to go back to the page that I just made. AGAIN, I get the same warning and cannot access anything. I was able to post about the problem on the forum, but I cannot see what I posted…NOR can I see the comments that were made.
I have tried accessing through Firefox, Chrome and Internet Explorer 8. ALL have the same issue. And with the trouble happening on so many computers (not just mine) I know its not due to anything being wrong with them. Avast and Malwarebytes has not found anything.
It is possible that the site is infected with a javascript, but it can also be a false positive (FP). Can you please report back on your findings? Thank you.
I talked to a guy who goes to that forum. He does not use Avast, but he told me that something has caused the text to be extremely huge on that site. He also stated others have pm’d about the same thing.
Anyways, here is the results of Virus Total…Not sure if its what you need or not.
It has a script tag with large chunk of obfuscated script in the very first line of the page, see image, I have broken down the line to make it easier to see.
So it rather looks like the sites PHP content management software or the PHP templates has been hacked.
I didn’t check as it is what the DNS server would send you too you have no control over that
The southeasternohiopreps.com/forum/index.php takes you here 69.161.133.249 so obviously with a very recent move of host some DNS servers won’t be updated with the IP.
I have sent a message to one of the mods over there along with this link to this thread and asked him to forward to it to the admin that controls the board so they can come over here and at least see what you are talking about. I am at a loss when it comes to these types of things.
Just to update…The admin of the forum mentioned above, has spent the weekend cleaning up the site and Avast is no longer blocking the users from gaining access. The ones that used other programs and/or cell phones to enter the site are no longer seeing the large text on the site.
Thank you to all who mentioned things on here to be checked out!
