Trojan.JS.Redirector.ar

[daguin]

Trojan.JS.Redirector.ar

In the IE Temp directory it shows as "show_ads[1].js"

Anyone else seeing this? I'm on my friend's computer (IE 8), but the only thing open is LPF.

Peace,
dave

 

[mfo]

Nope. What AV? Sometimes av programs say ads are viruses.

 

[wernertjuh]

Today i got the same.

I have kaspersky lab 2010

 

[charliebruce]

Drop IE if possible, you can get a nice portable copy of FireFox or Chrome to go on USB sticks which work well. Antivirus is probably just being over-sensitive though, AFAIK show_ads.js is part of the banners shown at the top of the page.

 

[daguin]

Nope. What AV? Sometimes av programs say ads are viruses.

It's Verizon's Security Suite. I use FF at home and have now downloaded it here.

No occurences yet with FF

Peace,
dave

 

[rangedunits]

This is most likely a false report from antivirus.

 

[jander6442]

I got the same, ran spydoctor to cleaned it up... more than a coincidence.

low security risk. troubling none the less

 

[charliebruce]

Already got the reply from Kaspersky Labs.
QUOTE
Hello,


Sorry, it was a false detection. It will be fixed in the next update.
Thank you for your help.

Please quote all when answering.
-----------------
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.

I'd guess google changed something in their ad javascript, the way IE handles JS means it gets detected any time you visit a site running google ads. I wouldn't worry about this.

 

[Tech_Junkie]

I dont have it, then again I'm using Ad Block.

 

[daguin]

Just tested it with IE8 at home (W/ Avast!) No detetction.

Peace,
dave

 

[Grix]

This is a false positive, it's coming from Google Adsense (which is part of LPF's ads). You can stop it from being reported by updating the virus definitions in your antivirus.

Source: Trojan.JS.Redirector.ar virus Hits Google Adsense Real??

 

[Elektrotechniker]

This is most likely a false report from antivirus.

What ranged said. I can guarantee he knows a lot about it