posible virus in this web admins take care!!!!

**pedemonte** · November 27th, 2015, 01:30 PM

hello today entering this zone http://www.anime-sharing.com/forum/#downloads-requests

my antivirus pop up saying something that bloqued 2 scripts. (don't remember what scripts) i just write this message here then the admins can check some scripts etc.... (maybe was false positive but who knows...) i'm using avast antivirus free version. also i use adblock from firefox.

**Advertisement** · November 27th, 2015 01:30 PM

**corocoro** · November 28th, 2015, 07:27 AM

Looks like a false positive. If it happens again, please write down what scripts and on which domain they were hosted.

**pedemonte** · November 28th, 2015, 01:02 PM

this it's the first----->http://s2.imgmaster.net/upload/small...7cf77df2c8.png
infection--->URL:Mal

second--->A script started by C:\Program Files (x86)\Mozilla Firefox\firefox.exe
infection-->HTML:Script-inf

this both things always happend when i enter at least on.....

http://www.anime-sharing.com/forum/torrents-47/
http://www.anime-sharing.com/forum/#downloads-requests

but when i enter in a single post don't happend.

**corocoro** · November 28th, 2015, 04:04 PM

Adly the screenshot you posted is already expired.
These can happen because AS preloads images from external hosts, in which case we need to know the domain it comes from and then ban it so the errors stop.

**pedemonte** · November 28th, 2015, 04:15 PM

Originally Posted by corocoro

Adly the screenshot you posted is already expired.
These can happen because AS preloads images from external hosts, in which case we need to know the domain it comes from and then ban it so the errors stop.

isn't an image upload. it's just the archive that say to me have that posible virus. you need to load any of that 2 webs (where i get the problem) and check by yourself (probably it's an image from a user/preview of any post/ publicity or maybe the main image of the web who knows...), because each time i load that "image" my antivirus block because that virus.

however i don't know exactly what archive or things it is, i just copy paste the archived bloqued by my antivirus (avast) i want to add that never happened before that in this web or another web, it's the first time i get this "false positive or true positive"

**corocoro** · November 28th, 2015, 05:27 PM

Originally Posted by pedemonte

isn't an image upload. it's just the archive that say to me have that posible virus. you need to load any of that 2 webs (where i get the problem) and check by yourself (probably it's an image from a user/preview of any post/ publicity or maybe the main image of the web who knows...), because each time i load that "image" my antivirus block because that virus.

That was the first thing I did, but NoScript didn't show any unknown domains and BitDefender didn't give any warning. The image in question gives a 404 error and the source code shows nothing that could cause damage or be detected as a virus.
I also checked all the posts on the first page whether they contain(ed) the image, but couldn't find any.

The most likely explanation seems to be that a bad image snuck into the advertisement rotation and has since been dealt with by the imagehost.