Object:http://www.xpax.com.my/sox/Scripts/png.jsl>{gzip}
Infection:JS:Illredir-AS [Trj]
Action:Connection aborted
Webpage:http://www.xpax.com.my/sox/what_is_sox.html
May I know is it this webpage already infected or it is a false positive
Scanning the URL with NoVirusThanks i get clean, but uploading the tmp file give detection
NoVirusThanks - unp106301741.tmp - 4/17
http://scanner.novirusthanks.org/analysis/aa5d251ef66ae3d235ae5bded5634f70/dW5wMTA2MzAxNzQxLnRtcA==/
VirScan - unp106301741.tmp - 0/36
http://virscan.org/report/32b4856e477afe37a46ac263d196bdd0.html
jotti - unp106301741.tmp - 4/19
http://virusscan.jotti.org/en/scanresult/f2715caede99f355132426856451d44d497dd7e6
VirusTotal - unp106301741.tmp - 8/42
http://www.virustotal.com/analisis/a407736e6a7a9a8d8f6d16ee25d0b1ec5a217caaffc980fb9b4228f4b42acd9a-1279462878
Wepawet
http://wepawet.cs.ucsb.edu/view.php?hash=6390fd540dfb0b1ec58d5ff098c036f2&t=1279445967&type=js
Hi folks,
It is a site that used to be infected with gumblar, http://safeweb.norton.com/report/show?url=xpax.com.my&x=16&y=6
Te link has the following connotation:
Web Server at xpax.com.my
which translates to xpax.com.my
polonus
FP or Website cleaned, no alarm from avast after update to 100718-0
Thank you for the information.Finally,I would like to know is it good for using Norton Safe Web Lite?