HTML/ScrInject.B.Gen

HTML/ScrInject.B.Gen virus flagged at - www. famfamfam.com -

Submitted to ESET. There are a number of other posts similar to this, is it an FP ?

 

I'm not getting any detection on that website. I'd suggest emailing the htm file in question to ESET's viruslab as per the instructions here.

 

And how does one submit a quarantined file to ESET ?
I have been able to duplicate this detection at least 15 times. Try obfuscated link hXXttp://www.downforeveryoneorjustme.com/famfamfam.com (note) this infects or flags, every time. Submission to ESET later.
Please read your PM's.

 

Hey siljaline
Try to right click on the quarantined file, it will give you a context menu and an opportunity to send the file. (from quarantine)

 

Hi
Okay hope I have done it right. Restored the file to a virtual environment. Zipped it, and password protected it named" infected”. as per instruction here. and e-mailed it.

 

Submitted from quarantine using Wilders post URL as a reference.
@ESET • Please advise Virus Lab folks it is inbound.
Also submitted by virtue of the detection as noted in the attached screenshot. And via ThreatSense.Net. I will take no further action.

 

The detection is correct. The web page loads a script from a rr.nu domain and is detected by 4 other AVs.

 

OK, It's funky that Mozilla doesn't flag the URL but IE9 does.
I'll stuff the URL in my Hosts file until the domain is cleaned up. Thanks for taking the time on your weekend to respond, Marcos, it is greatly appreciated