Trouble detection on a link [SOLVED]

Avast Free Antivirus / Premium Security
1

Hi,

I got some alert about this link : http:// e-cpm.fr/promote1.php , there is a “malware” which concerned cpmtrafficker.com

But for some other people, their Avast does not react (silent mode desactivated !), and we have the same version (software & VPS) and configuration of Avast, no adblock or noscript.

Is it normal ? This link http:// e-cpm.fr/promote1.php has really a malware or not ?

Can someone click on this link http:// e-cpm.fr/promote1.php and say if he has an alert please ?

Thank you.

edit screenshot :

http://forum.avast.com/index.php?action=dlattach;topic=91388.0;attach=73970;image

2

VirusTotal URL scan
http://www.virustotal.com/url-scan/report.html?id=dc7bd8201b4ba82010c36e1222ba147d-1325609749

VirusTotal HTML scan
http://www.virustotal.com/file-scan/report.html?id=034c751a4801e881f830bda80ff9da72091a8daead6a083e85494bc84b73f158-1325613428

Sucuri / Unmaskparasites say clean

urlQuery - suspicious
http://urlquery.net/report.php?id=14389

What malware is avast reporting ?

can you attach a screen shot of the avast warning ?

3

By “test”, I mean click on the link, virustotal say nothing, but their Avast ( 6.0.1289.0 ) isn’t the last version ( 6.0.1367 ), maybe it’s why there’s no reaction.

So, can someone click on this link http:// e-cpm.fr/promote1.php before I ban this link from my website ?

Thank you.
edit
screenshot

http://nsa22.casimages.com/img/2012/01/03/mini_120103072521623267.jpg

4

jsunpack show this link and say suspicious…same as in the avast warning

-http://cpmtrafficker.com/publishers/adserving/insertions/display.php?t
oken=MjYwfDMwMHgyNTB8MzAwfDI1MHwx

VirusTotal URL scan
http://www.virustotal.com/url-scan/report.html?id=baf918e544a3a38312ca71523079ba42-1325610584

VirusTotal HTML scan
http://www.virustotal.com/file-scan/report.html?id=d688817ad30047bdbe5b3de6cc61015e70149a6947ebad087bc008f957ba2c4a-1325614189

urlquery - suspicious
http://urlquery.net/report.php?id=14394

5

Please next time post the relevant avast detection as a very little jpg attachment, not an irrelevant full screen which includes adds when opening its outside link >:(.

6

Expanding on the report about cpmtrafficker, there are two ad iframes in the e-cpm site. (e-cpm.png)

These iframe ads contain further links/iframes, one of which avast blocks via the network shield. (cpmtrafficker.png, network-shield.png)

This is most likely the reason for the alert.

7

oops sorry, I took the first one I found :-[

Yay ! so there is really an alert :slight_smile: My Avast works fine ;D I can ban this site.

Thank you very much.