Is this a false positive - no avast detects as JS:Clickjack-A[Trj]

Viruses and worms
1

Trojan detection for website here: http://app.webinspector.com/public/reports/21879076

No alerts here: http://urlquery.net/report.php?id=1400067863662
and here: http://zulu.zscaler.com/submission/show/690efa6a5ac72b80bc5ae3c19be327ec-1400067797

2 detections here: https://www.virustotal.com/nl/url/1162fd92ffd55d486c93ded74545ee0f320b295dc461754965b9f9535a6b85a2/analysis/1400068421/
Blacklisted http://www.siteadvisor.com/sites/amazon-parts.nl

Javascript check: Suspicious
guage=“javascript”> function dnnviewstate() { var a=0,m,v,t,z,x=new array(‘9091968376’,‘8887918192818786347374918784939277359287883421333333338896’,‘778787’,'9499907

Sucuri scan gives site as infested through SEO Spam: http://sitecheck.sucuri.net/results/amazon-parts.nl , 6 instances of

*Known javascript malware. Details: http://sucuri.net/malware/entry/MW:SPAM:SEO
t=‘’;}}x[l-a]=z;}document.write(‘<’+x[0]+’ ‘+x[4]+’>.‘+x[2]+’{‘+x[1]+’}</‘+x[0]+’>');}dnnViewState();

a Joomla Clickjack infection…Joomla Version 1.5.18 - 1.5.26 for: htxp://amazon-parts.nl/media/system/js/caption.js
Joomla Version 1.5.18 to 1.5.26 for: htxp://amazon-parts.nl/language/en-GB/en-GB.ini
Joomla version outdated: Upgrade required.
Read: http://vel.joomla.org/articles/844-spotting-spam-code-in-malicious-extensions.html (source and info credits to Joomla LiveVEL)
Read on this from Antonio Perez here: http://blog.sucuri.net/2012/12/website-malware-sharp-increase-in-spam-attacks-wordpress-joomla.html
On removal read: http://blog.gwebtools.com/how-to-remove-jsclickjack-a-trj-from-my-website/ (blog article author = webmaster Gwebtools blog)
Various live and long OVERDUE malware found on IP for misused and defaced server: http://support.clean-mx.de/clean-mx/portals.php?email=helpdesk@flexwebhosting.nl&response=

Damian

2

http://i.imgur.com/DCH8E8K.png

Hello.
Already detected by avast
is also detected as variant JS: Clickjack-B [Trj]

look at the attached code

3

Ola jefferson santiag,

You mis-interpreted my message, because of the comma being omitted. It should read: “Is this a false positive, no it is not, because avast detect this as as JS:Clickjack-A[Trj]”. I admit my topic wording was a bit overtly cryptic and ambivalent, good you alerted me to it,

Con Dios,

polonus

4

You’re welcome
I believe it is an error in reading

the most important is that avast is protecting users.

5

jefferson santiag,

There we fully agree.
Sleep well and stay safe and secure,

Damian