HTML:Script-inf when Avast shows all clear

Hello,

My husband has been fighting this issue for a few days. He tries to login to hxxp://www.mandmneedfulthings.ca/forum/index.php or hxxp://mntlite.com/forum/index.php and gets the page cannot be displayed due to the HTML:Script-inf warning.

He ran avast and received no threats. He ran Wise registry cleaner and found no registration issues (which is what the owners of the site had advised was the issue when he contacted them).

Other people are able to go to the websites without issues even using avast.

Please assist.

Thank you for your assistance.

Amanda

Other information:

Avast:

Program version: 7.0.1426
Virus definitions version: 120328-1

Wise Registry Cleaner:

Version: 6.2.1

System: Windows 7

Scan for: hxxp://www.mandmneedfulthings.ca/forum/index.php
Hostname: wxw.mandmneedfulthings.ca
IP address: 69.163.168.127

System Details:
Running on: Apache
Unable to properly scan your site. Site returning error (40x): HTTP/1.1 404 Not Found


web site: mntlite.com/forum/index.php
status: Site with warnings
web trust: Not Blacklisted

http://sitecheck.sucuri.net/results/mntlite.com/forum/index.php
http://sucuri.net/malware/malware-entry-mwblacklisted35

VirusTotal - mntlite.com/forum/index.php
https://www.virustotal.com/file/81535cef7545c2b8872b77b61d34b46ac025d065c055abd4b0a6f780874018c1/analysis/1332964765/

Hi lativerona & Asyn,

That is because of the avast blocking is so effective, going to the second mentioned site with malzilla at the bottom there is a script source: htxp://ema17rka.rr.nu/mm.php?d=x1
This site is suspicious, see: htxp://urlquery.net/report.php?id=36023
just like this: htxp://urlquery.net/report.php?id=35404 Looks like a malware script injection campaign.
Trying to go to first mentioned source address with webbug will triggr a Network shield URL:Mal alert and it blocks it at once to 127.0.0.0/mm.php?d=x1

Aren’t we all privileged to have the avast shield installed to be protected against this malcode,

polonus

Sure. :slight_smile:

We appreciate all the information and assistance.

Thank you so much. We have used Avast for years and never had an issue until this error appeared.

Hi latiberona,

You are welcome. Also thanks for bringing the issue up. The analysis of which will keep us sharp.
Avast is really an outstanding product, and we are all out here to make it even better still.
Welcome to the avast support forums,

polonus

I have a question!why avast give an alarm in our website like this:
http://www.perforated-metal-mesh.com/
I am afraid avast have a misinformation.

I get no alarm now: http://zulu.zscaler.com/submission/show/0aef21cacb59814e60099db3f30eb474-1333013393
But given suspicious here: http://urlquery.net/report.php?id=36185
I get an failure: <urlopen error timed out,
BrightCloud gives it a rep index yellow 39 Moderate Risk -There is some probability that the user will be exposed to malicious links or payloads,

polonus