A person that works at the same enterprise than me, was visiting a site and our AV (Trend Micro) detected a java script virus in it…
I sent to Virus Total and realized that many other AVs were also detecting a javascript malware (Something about redirection)… Including Avast (as JS:Illredir-AQ [Trj])…
However, visiting the site doesnt redirected to anywhere…
So me and some of my T.I. ( I am also from TI) friends that work here, checked the page code but didnt found anything suspicious… No redirection, nor even the js was encoded…
So, if someone here like to investigate possible false positives, and have a free time to do that, may check if its a real detection or some false positive?
I am not sure if its a false positive because a lot of avs detected it… However I cant say that is a real malware because I didnt found any “obvius” trace of malware activity in its code. Anyway,
Oops, Actually I think our AV removed this js part, because it not appearing to me… It says that has cleaned the malware code when we load the page… Maybe that why I cant find the code…
