From: David H. Lipman on
From: "Buffalo" <Eric(a)nada.com.invalid>

| If you go to pricegrabber.com and then click on something like TVs or any of
| the choices on the left side, do you get a warning of malware.
| I get it from the free Avira Anti-Vir but MBAM and SAS do not alert on it.
| Avira identifies it as "HTML/Infected.WebPage.Gen" and when I sent it to
| Virustotal, only Avira and McAffee alerted to it.
| Just curious,
| Buffalo


AntiVir no longer flags the HTML as malicious

http://www.virustotal.com/analisis/70dbfc98603d886ead5c286e11cc693557996d5babe606d8392427d119e6c246-1270522749

a-squared 4.5.0.50 2010.04.06 HTML.Infected!IK
Comodo 4511 2010.04.06 UnclassifiedMalware
Ikarus T3.1.1.80.0 2010.04.06 HTML.Infected
Norman 6.04.10 2010.04.05 HTML/Agent.J


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: Buffalo on


David H. Lipman wrote:
> From: "Buffalo" <Eric(a)nada.com.invalid>
>
>> If you go to pricegrabber.com and then click on something like TVs
>> or any of the choices on the left side, do you get a warning of
>> malware.
>> I get it from the free Avira Anti-Vir but MBAM and SAS do not alert
>> on it. Avira identifies it as "HTML/Infected.WebPage.Gen" and when
>> I sent it to Virustotal, only Avira and McAffee alerted to it.
>> Just curious,
>> Buffalo
>
>
> AntiVir no longer flags the HTML as malicious
>
>
http://www.virustotal.com/analisis/70dbfc98603d886ead5c286e11cc693557996d5babe606d8392427d119e6c246-1270522749
>
> a-squared 4.5.0.50 2010.04.06 HTML.Infected!IK
> Comodo 4511 2010.04.06 UnclassifiedMalware
> Ikarus T3.1.1.80.0 2010.04.06 HTML.Infected
> Norman 6.04.10 2010.04.05 HTML/Agent.J
Thanks,
Buffalo