Nifty Stats Virus
 

Woke up to my Avast going apeshit this morning, getting this virus:

JS:Illredir-B [Trj]

In folder C:\Documents and Settings\....\Local Settings\Temporary Internet Files\Content.IE5\8TON7569\preload[1].js

Plus a shitload more in the same folder.


Anyone else notice this? Almost positive it's nifty stats because the warnings don't stop until I force close it.

http://www.google.com/search?q=%22preload%5B1%5D.js%22

http://forums.whatthetech.com/spywar...ms_t92001.html

http://www.hijackthis-forum.de/archi...ngefangen.html

I could be wrong as I don't use Nifty Stats, but I think Avast put out a wonky definition update recently. I've gotten a few false positives today.

Yeah, I was thinking it was a false positive since it happened about and hour after avast updated

well that sucks

Ganjaman, with your expert opinion, would you say this is a legitimate security issue or a false positive?

It's one of the sponsors in nifty, trying to narrow it down now, I've got over 100 in there

Ok, It's http://www.sexandcash.com
Antivirus triggers when it tries to download stats from there


Sorry nifty stats guys! Your program is solid!

Mods, delete this thread or change the thread name, nifty is great and shouldn't be seen in a bad light