HTML: Script-inf error for www.fishmaxfun.com

Viruses and worms
1

Hello,
I have tried to find a solution for a Script- inf error that keeps popping up when I try to access a website that I made and hosted by Net Firms.

The website is hxxp://www.fishmaxfun.com and every time I try to bring it up, an Avast pop up warning box appears and the website is blocked. The warning says;

MALWARE BLOCKED
Object: hxxp://www.fishmaxfun.com/
Infection: HTML:Script-inf
Action: Connection aborted
Process: C:/Program files\Mozilla firefox\firefox.exe
The threat was detected and blocked while downloading an item from the web[/font][/font][/font].

Web shield report file says “hxxp://www.fishmaxfun.com/ [L] HTML:Script-inf (0)”
I am using the avast free version. I called my web host and they said they could not see a problem with the website and that the problem was on my end. I have done several Avast boot time scans and it doesn’t seem to fix the problem which started a few days ago.
Can any one chime in on a solution?
I would very much appreciate. Hope I have included enough info.
Thanks,
Rotorocket

2

I don’t think the problem is on your end - the page is detected by three more antiviruses on VirusTotal.

3

Hi rotorocket, welcome to the forum :slight_smile:

Could you please modify your links to make it unclickable (i.e. chage http to hXXp) to prevent others potentially becoming infected.

If you look here:
http://www.UnmaskParasites.com/security-report/?page=www.fishmaxfun.com

There is a suspicious link to what appears to be a malicious site:
http://www.google.com/safebrowsing/diagnostic?site=nuttypiano.com

The script is right at the end of the page, outside of the html tags which is wrong, it is this that avast! is alerting on, and needs to be removed.

-Scott-

4

Where did you check that? ???
http://www.virustotal.com/url-scan/report.html?id=d7c1a02c25a1df953d71ec1bb961979e-1283203786

5

I’ve been having some trouble with VT at the moment, as part of this thread…

But, the VT results for that script in the image causing the alert:
http://www.virustotal.com/file-scan/report.html?id=975f083596978d28280a078dfe0a16a16a53ba254325208ff37744ad9b14f3a7-1283209674

Had to do it myself…

EDIT: Thanks igor for deactivating the links :slight_smile:

6

How did you submit a file based in the web?

Only one more. Two are avast and GData (avast detection).

7

Hey Scott,
How do go about removing the script at the end of the page, outside the html tags?
I will be sure to make links unclickable from now on.

“The script is right at the end of the page, outside of the html tags which is wrong, it is this that avast! is alerting on, and needs to be removed.”

8

You will have to edit your pages, and remove it via the source code.

If you have a backup copy of the site, you could re-upload that and overwrite the infected page.

I would also inform your host of what they missed (and get them to help if you need it)

EDIT: As a side note, I would also change your profile to hide your email address as it is currently visible and can be harvested by spammers…

9

Thanks Scott, I will take your advice.