Illredir-AC

Hello,

I visited a website that was infected by a trojan Illredir-AC

Avast recognized it and gave the options of putting it in the chest etc.
I chose this option (chest), but it then gave me a warning that it was unable to,
so I just closed the window.
I then ran a scan and it did not find anything suspicious.
Still, I am a bit worried, because there is not enough info about this virus online.
Is there some other way to find out whether the virus has infected my pc?
Thanks
John

don’t worry my friend because Avast is just protecting you from Harmful websites…

Hi emantoyaks,

Else there would have been an autorun.inf virus and this had been the method to remove it:
http://www.metacafe.com/watch/540221/remove_infected_autorun_inf_from_computer/

polonus

@Polonus

Malwarebyte IP block when i enter that website
IP-BLOCK 64.14.48.151

hpHost http://hosts-file.net/default.asp?s=64.14.48.151+

Hi pondus,

It is like doing an exam. Well I think I passed, because the link is CLEAN,
I do not see any warning for this video link here: http://www.google.com/safebrowsing/diagnostic?site=www.metacafe.com
Moreover scanned the link I gave here - zero found - CLEAN
permalink: http://scanner.novirusthanks.org/analysis/2f985e0e87c53487cc0c9c4fadd07dd9/cmVtb3ZlX2luZmVjdGVkX2F1dG9ydW5faW5m/
a-squared 22/03/2010 4.5.0.8 -
Avast 100321-1 4.8.1368 -
AVG 271.1.1/2762 9.0.0.725 -
Avira AntiVir 7.10.5.156 7.6.0.59 -
BitDefender 22/03/2010 7.0.0.2555 -
ClamAV 22/03/2010 0.95.3 -
Comodo 3468 3.13.579 -
Dr.Web 22/03/2010 5.0 -
Ewido 22/03/2010 - -
F-PROT6 20100322 6.3.3.4884 -
G-Data 19.9309 2.0.7309.847 -
Ikarus T3 22/03/2010 1001074 -
Kaspersky 22/03/2010 9.0.0.736 -
McAfee 21/03/2010 5.1.0.0 -
NOD32 4966 4.0.474 -
Panda 21/03/2010 9.5.2 -
Solo 22/03/2010 8.0 -
TrendMicro 939 9.120-1004 -
VBA32 22/03/2010 3.12.12.2 -
VirusBuster 12.23.14.0 1.5.5.0 -
Zoner 22/03/2010 0.2 -
but there was something in the past with interclick dot com, maybe that why you have it blacklisted.
xttp://64.14.48.151

Google gives for your blocked IP : not currently listed as suspicious* SAVVIS Comunications
blacklisted only where this IP appears in SPAM (not originates from it) for UTIBL.COM list, the other lists all green. e.g.:
l.deadbeef.com
in.dnsbl.org
ex.dnsbl.org
zebl.zoneedit.com
dnsbl.othello.ch
redir.rhs.mailpolice.com
bulk.rhs.mailpolice.com
porn.rhs.mailpolice.com
fraud.rhs.mailpolice.com
block.rhs.mailpolice.com
dynamic.rhs.mailpolice.com
adv.rhs.mailpolice.com
webmail.rhs.mailpolice.com
adult.rhs.mailpolice.com
rddn.dnsbl.net.au
postmaster.rfc-ignorant.org
dsn.rfc-ignorant.org
abuse.rfc-ignorant.org
whois.rfc-ignorant.org
bogusmx.rfc-ignorant.org
badconf.rhsbl.sorbs.net
nomail.rhsbl.sorbs.net
rhsbl.ahbl.org
dnsbl.cyberlogic.net
jwrh.dnsbl.net.au
dnsrbl.swinog.ch
black.uribl.com
grey.uribl.com
red.uribl.com
multi.uribl.com
multi.surbl.org
dyndns.rbl.jp

polonus