Wrong positive JS:Downloader-JS ?

Viruses and worms
1

I am browsing hZZp://wXw.boursorama.com and it detects this trj.

Is it right or wrong ?

2

The web shield has been very accurate in its detections, I have just visited that page using firefox 3.5.7 and no alerts from avast. So it may have been removed.

So is this the full path of the alert ?
If not post it but make a not of the comment below.

  • Please ‘modify’ your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites, thanks.
3

Hi,

Thanks for your quick reply.

Name of the file: hZZp://img.boursorama.com/js/framework/bourso-1252589761.js
Version VPS: 100121-1, 21/01/2010

I called the company’s call center, they told me other clients did call them, about 30, having the same alert since 7pm30 Paris time.

Their IT team is already analyzing the problem since an hour, but does not exclude a wrong positive (prefered option in fact).
They take this really seriously as this is a Bank. The French leading online bank in fact …

Alex.

4
The web shield has been very accurate in its detections, I have just visited that page using firefox 3.5.7 and no alerts from avast. So it may have been removed.
Using IE8 the alarm goes off

21.01.2010 21:11:11
hxxp://img.boursorama.com/js/framework/bourso-1264102064.js [L] JS:Downloader-JS [Trj] (0)

5

Looks like this website is not the only one which has the problem. Google Docs too (see link bellow).

hXXp://www.google.com/support/forum/p/Google+Docs/thread?tid=06f8a735e5e5aebc&hl=en

Same issue ?

So, is their a problem on Boursorama web site or is it Avast ?

6

UnmaskParasites
http://www.UnmaskParasites.com/security-report/?page=www.boursorama.com

hpHost
http://hosts-file.net/default.asp?s=http%3A%2F%2Fwww.boursorama.com

7

Will be fixed in new vps update in about 30 minutes. I’ll inform you after it will be out.

Updated: You may update your avast → fix is already available in VPS version 100121-02. I’m sorry for any inconvenience.

8

Alwil Team kindly improve your Virus database so that the client will not complained…^^

and avoid false alarm thank you…