Trojan horse alert

Today, for the first, when I go to hxtp://pjmedia.com/instapundit/, I get the following alert:

http://img17.imageshack.us/img17/1129/alertd.gif

When I click on the “More details” button, nothing happens. How do I find out what this alert is about?

Ummmm,what are you doing posting a link to an infected site?
Dumb people will follow that link, others wil click on it without thinking (makes them dumb as well).
If you HAVE to post the link, replace the ‘.’ with (dot).
Do us all a favor and edit your post.
TY

I’ve got the same warning today as well and out of nowhere. I was on cz page “ulozto” like almost every day. No idea where it came from but it had exactly the same description

Im getting the same but only on my wesites i own.
I contacted my host company as a precausion asn its come back clean.

My firefox has updated last night so think it could be something to do with this.
Also MichaelT. i think you was rude and if you new anything about viruses you would notice its not on the site its on the firefox program files.

C:\ Program Files (x86)Mozilla Firefox\firefox.exe

If you had any trust in Avast it would warn you if there was a virus, his site is clean try it.

i have two PC both running Avast with firefox and its ony doing it on one PC.

Also MichaelT. i think you was rude and if you new anything about viruses you would notice its not on the site its on the firefox program files.
Nope.....firefox is the browser doing the connection to the URL where avast see the malware

where avast see the infection is listed under Object:

and as you see, the link Peano posted is edited by the mods to make it unclickable so that no one click it by accident

Iv copy pasted the link and tried it on my pc with firefox and avast and im not getting any warning.

if you go to firefox site there is 28 people with the same problem in the Support page with the new software.

I have chrome and IE and its not doing it on them, only firefox.

Avast is not picking it up through the other search engines.

Hey, I use opera and it showed up in my opera. I promptly scanned whole pc even if it said I don’t need to take any more action

I didn’t think it was too strange, but when I saw somebody else had the same problem I became kind of suspicious about that.

So, what is it? Is it false positive?

urlQuery - suspicious
http://urlquery.net/report.php?id=28456

Zulu URL Risk Analyzer - suspicious
http://zulu.zscaler.com/submission/show/519192330e8d5792c4229f4685e2c306-1331027253

Sucuri - Warn: WordPress version outdated: Upgrade required.

Why it shows even on other halfs of world? I never visited that page and it just showed up while I browsed cz pages I knew. Sorry for dumb question, I am unexperienced user.

Sorry Pundus never seen them before
dont relly understand them.

iv just done my sites and they come back Benign in green
and the other came back No alerts detected.

http://sitecheck.sucuri.net/results/http://pjmedia.com/instapundit/ -clean

https://www.virustotal.com/file/6186abe8e7b8f77117d871d4e8d47a9912e47e3ff71c7e9ca629a3a65658d25b/analysis/1331029564/ -clean

Do you mean you have the exact same pop-up as Peano…but not visiting the same URL as he posted ?

attach a screen shot of your avast warning…

Maybe it was in banner there, but I didn’t open anything which I didn’t know. I don’t click on banners.

Too late. as I said, I had no idea others could have exactly same warning so I just looked it up and closed. It didn’t show again, just once about two hours ago.

If it’ll help the adress my avast says is infected is hxxp.//www.kqzyfj.com/placeholder-5570308?target=_topmouseover=N

(of course I tweaked the linko so it won’t lead people there by clicking on it.)

If it'll help the adress my avast says is infected is hxxp.//www.kqzyfj.com/placeholder-5570308?target=_topmouseover=N
urlQuery - suspicious http://urlquery.net/report.php?id=28509 click the picture in top right corner

zulu analyser
http://zulu.zscaler.com/submission/show/2c1a6601f456d7cfe1bd44a7fd2d7419-1331033142

Then what’s going on? I don’t get it…

Also I noticed the number in screen shot placed here by Peano is bit different, than mine. Does it matter?

IV FOUND IT ;D ;D
the little critter.
strange its not showing up on chrome and IE only through firefox.

iv made a back up of my sites and scanned them

what do i do now.
what does deleat mean? will it deleat the hole file or does it deleat the virus?
i dont want to deleat files if its going to mess my sites up,
iv tried to repair but it wont let me,

Then the question is: Is it false positive or not?

And second question: Did the last VPS fixed it, or not?

I totally don’t understand what’s going on.

Would be someone so kind to shed light on this situation? Thank you for your time.

what did you find ?

can you upload the file and test it at www.virustotal.com ?

Does anyone know why the “More details” button on the alert doesn’t work?