This Is No a worm/virus (DhtmlHistory.js)

Hi,
I’m using “DhtmlHistory” JavaScript class to simulate Back button and bookmarking in my Ajax project.
Now your AV know it as “HTML:Iframe-inf… virus/worm” and then Interrupt the connection. ::slight_smile:
You can see it in my site at :
http://Talahost.com

Please check this problem.
thank you very much :slight_smile:

That hidden iframe at the bottom of the page… is not exactly nice.

Yes But this is not a reason to know it as a virus or worm!
This is a way to simulate back button in IE.

Nobody’s talking about any buttons and Ajax - we’re not catching anything like that.

We’re catching the last iframe of the page - link to hxxp://internetcountercheck.com
Do you know why it’s there and what purpose it serves?

Unfortunately No!

All of this problems begins from when I decide to use that js class
Now I can not see what you say because of Avast! and I can not turn off on access protection (pass required → I have not)

Why would you disable the antivirus to access an infected site? ???

Since you the author of the site don’t know where that iframe came from that is pointing to internetcountercheck.com, that you should remove that iframe tag.

When you remove that iframe tag I think you will find it has nothing to do the the js class but the malicious iframe tag.

Just look at these google results for that domain name and see how many relate to it being found in hacked sites and that it is a malicious site.

http://www.google.com/search?q=internetcountercheck.com

See this hit, http://wordpress.org/support/topic/243838 as that site was one hacked as it looks like yours has been hacked too.

You shouldn’t shoot the messenger (disable the web shield), but remove the malicious iframe tag/s from your site to avoid other people (not having avast protection) possibly getting infected.