Possible false positives on following websites:

Viruses and worms
1

A friend of mine went to h××p://www.yourdiscovery.com/realtime/londonink and got a message from Avast Free Antivirus 5.0.462 with the newest signatures (100310-1):
Blocked Trojan Horse.
Infection: JS:Packed-AA [Trj]
Object: h××p://www.yourdiscovery.com/realtime/londonink/|>{gzip}

I tried it on my computer, too, and got the same message.
We both use Windows XP Home Edition SP3 + all updates. And both with Firefox 3.6, newest Flash Player.

Another possible false positive is on effectu.com where Avast shows up a
Malware Blocked.
Infection: HTML:IFrame-inf
Object: h××p://effectu.com/

2

And why would you think it’s a false positive?

3

This page seems to be
http://www.UnmaskParasites.com/security-report/?page=www.yourdiscovery.com/realtime/londonink
Suspicious Inline Scripts
Diagnostic page for cpro.baidu.com http://www.google.com/safebrowsing/diagnostic?site=cpro.baidu.com

This page seems to be
http://www.UnmaskParasites.com/security-report/?page=effectu.com
References to 1 suspicious domain found.
1 hidden external link found.

4

Hi X,

Hi Pondus, you have beaten me in a fraction, but I had to break and add the inline malcoded script in question, and that takes somewhat more as the links…
So my friends, as very, very often, igor is right here.
Re: 1 suspicious inline script found for “yourdiscovery etc”.
Is there any reason for this obfuscated inline script to be outside …?

^^function c152364361251b48fd0cbeaea13^^(b48fd0cbeaea1d){ ^^^^function b48fd0cbeaea26(){return 16;} return..malcode broken by me, polonus....

code going here: wXw.docin.com/p-4910601.html
having

 inser_cookie_ip();
//是否填^^充评论内容^^
setMsgContent^^^^(4910601);
window.onunload=function()^^{ document.getEleme...

that site is now being reported clean in China, but had a full red in the recent past:
https://webmon.knownsec.com/report?id=5368

Re: effectu dot com there is found:
References to 1 suspicious domain found.
1 hidden external link found; myndomain.info suspicious :arrow_upper_right: - displaying 1 of 1

5

Wow, you react real fast! While I was typing, two new replies have been posted.

@igor:
I hope that counts ;):
I checked effectu.com three months ago with Norton Antivirus, Eset NOD32, Kaspersky Antivirus, Avira Antivir Premium and Avast Free Antivirus Beta 3 and only Avast reported malware and still does.

And on the discovery channel link Norton Antivirus 2010 with Norton IPS 2.0 Add-On in Firefox 3.6, Eset NOD32 4.0.474.0 and Avira Antivir Personal Free report nothing, only Avast does.

I hope that helps.