False positive?

Viruses and worms
1

hXXp://www.peta-uk.com/{gzip}

Avast Home reports this as HTML:Iframe-inf Virus/Worm

This seems like it should be a reputable site

2

Not a false positive, the site appears to have been hacked with the insertion of a hidden iframe tag just after the opening body tag. See image, I have broken up the code to make it easier to see, as it was on a single line.

The iframe tries to connect to a Chinese site a google search on superbetfair.cn returns many hits of thei iframe insertion.

3

Thanks for the info :slight_smile:

I’ll try & mail the site owners & let them know

4

You’re welcome.

This is becoming more common and there may well be other pages.