Problem with "hxxp://www.wulthai.com/..."

Discussion in 'ESET NOD32 Antivirus' started by coconoom, Nov 12, 2009.

Thread Status:
Not open for further replies.
  1. coconoom

    coconoom Registered Member

    Joined:
    Nov 12, 2009
    Posts:
    1
    I problem with our system freightbooking in office Antivirus NOD32 Terminate connection alway ...please help me Urgent....

    hxxp://www.wulthai.com/...

    Snip:
    url obfuscated and partially removed to prevent users from getting infected after clicking it.
    Marcos.
     

    Attached Files:

    Last edited by a moderator: Nov 12, 2009
  2. danieln

    danieln Eset Staff

    Joined:
    Jan 7, 2009
    Posts:
    112
    Re: Problem with "http://www.wulthai.com/..."

    Hidden iframe on the website, notify the owner in order to remove the infection and to secure the webserver.
     
    Last edited by a moderator: Nov 12, 2009
  3. ASpace

    ASpace Guest

    ~~~~~~~~~
     
    Last edited by a moderator: Nov 12, 2009
  4. wrathchild

    wrathchild Registered Member

    Joined:
    Feb 7, 2008
    Posts:
    170
    Location:
    Neoplantesis
    It's happen when you click on link for "WULTHAI Freightbooking Online".
     
  5. WayneP

    WayneP Support Specialist

    Joined:
    Apr 9, 2009
    Posts:
    339
    Hello coconoom,

    There is an iframe that is being detected just as danieln said. I was able to download the HTML file and remove the iframe from the script and then the file was no longer detected by the ESET software. I have seen this before when some websites are written with something hidden like this and you will need to contact the web developer to have just one line removed.
     
Thread Status:
Not open for further replies.