virus script?

[UreDe4D]

i was not sure where to post this, but i would like to know if anyone else encountered this problem and what i can do.
since today morning my antivir reports a found virus every time i open the hive, its only this site, the code is

HTML/crypted.GEN

anyone know if this is something to worry about or how to fix it?

 

[TDR]

By "antivir", you mean Avira AntiVir or that's how you say "antivirus" in a shorter form?
Because I have AntiVir too and doesn't report anything wrong with this site.

 

[UreDe4D]

no i mean Avira AntiVir and obviously there are more paople who encountered this problem:

http://www.hiveworkshop.com/forums/f97/virus-106409/

 

[TDR]

strange I never encountered this problem

 

[LiOneSS]

I think it's just your antivirus software overreacting, my kaspersky does it quite often :/

 

[skrab]

my firewall reports that he blocked something any time i visit my Cpanel or my profile and other links sometimes

it may be some ad or something :/

 

[Mr.Goblin]

I have the same problem that he has... each pages i get a Html/crypted virus message..

and I know i already made to COMPLETE scan .. and it doesnt find any thing.. so its the SITE

 

[Devine]

I don't have this problem. But i think i know what it is.
I think it's a cookie that is downloaded from the site to view the adds.
It's no harm i think. I'm sure*

 

[sk8er754]

Idk about that but after i downloaded this one map on wc3 in a game room the host is like, the next 10 games you'll be dropped out from a virus or some code within the map i downloaded and was like w/e and the next 10 games or so i was and was like wow lol.

 

[Ralle]

This is bad news.. I will see what I can do.

 

[Preskooldude]

I'ma take note that in the screenshot with the anti-virus going berserk, the ad is never loaded.

Plus, the linked thread has something along the lines of "An advertisement is doing it".

Also, that blocked gif you had up there, skrab? That's one of Py's dragon eggs that was blocked. Dunno why that one would combust.

Short news: Check for any malicious ads, Ralle.

 

[Kwaliti]

Hmm, I run avast! and I received no alerts whatsoever. However, my heuristic level is ultra low, so you might want to try and lower it.

 

[X.e.r.e.X]

Just download the thing that Velm linked me in here and follow the instructions.
Worked for me at least.

 

[IceTeaPeach]

I've got the same problem (the virus warning) when I open hiveworkshop without adblock plus so the virus script must be somewhere in the ads

 

[Devine]

Symatec Antivirus Corporate Edition.
thats mine. i don't see any virusses...

 

[Pyritie]

I'm using Avast too, and I got nothing.

 

[skrab]

i'm using avast pro and zonealarm pro
and zonealarm reported that link on Pyritie signature xP

 

[Pyritie]

Which one?

 

[skrab]

EDIT: http://www.hiveworkshop.com/forums/900741-post6.html

the dragon eggs

 

[Pyritie]

Oh .

 

[Ralle]

Can you check this file with your antivirus?
http://srv.yatlist.com/hive/banner-loan.html

 

[Xarwin]

I'm using norton internet security (+ anti virus), latest version and never saw any virus here.
Perhaps your virus scanner recorgnizes the script as 'bad cookie' or something simular.

 

[brad.dude03]

Running Symantec Antivirus 10 Corporate, never had a problem. Got the latest definitions as of 11/10/2008.

 

[Mr.Goblin]

hum well Ralle i can't open your link .. and i have to tell you the virus crypts problem.. is new...

i'm a member of the Hive since a couples of months and its only in the last 2 weeks or 3, that this virus alert have shown... and i repeat.. it only does it when i'm on the hive..so i could simply, low my virus dectection but!... still!... i don't get it!, why it's something new! that cause the virus warning..

 

[madcat2]

I'm, using the same anti-virus as Mr.Goblin but I'm, not having problems.

What are your configurations?

Also is your problem always pointing to - C:\windows\temp]_avast4\unp76642623\.tmp ?

 

[NinjasDontFight]

Sure it aint your computer that is just infected? It might be trying to do those fake-popups

 

[brad.dude03]

Not if multiple people are experiencing the same thing.

 

[UreDe4D]

Can you check this file with your antivirus?
http://srv.yatlist.com/hive/banner-loan.html

sorry for answering that late, i get the virus message when i click on the link

i don't get it anymore on the hive, so i guess it was because of that ad

 

[MrApples]

It's because your 'virus detector' is retarded. Find one instance where you may get a virus from JavaScript.

 

[t3h b055]

This is what Avira Antivirus has to say on the matter (taken off their website): HTML/Crypted.Gen - Malware.
Description:
To avoid detection by antivirus software, authors of HTML malware use browser features like Java and VisualBasic Script. These scripts are small and very often quite simple encryption routines hiding the malicious parts of the script. Encrypted malware is detected as HTML/Crypted.Gen.

Hope this helps answer some questions. If not that's what it is. Click here for the link to Avira's website. Also here is a helpful forum I found on the matter. !HERE!

*Done editing, Hope that last forum helps you, it looks like the problem might be Firefox, have you tried a new browser?