Dean,
There is some encrypted javascript at the bottom of the source for their
home page that uses an "iframe". It _appears_ (I'm not an expert so what do
I know!) that it's intent was to display a counter - possibly to show how
many times the site has been visited.
I did not get any alerts but we block a lot of "bad stuff" (that's a
technical term) here at work.
It's quite possible some virus scanners may detect this as a legitimate
problem but it could just as easily be a "false positive".
The two pieces of enrypted javascript both try accessing a PHP file on a
different web address:
81.29.241.70/new/counter.php
The address 81.29.241.70 does not respond for me; it could have been taken
down, simply be offline at the moment, or it could be "blacklisted"
(blocked). I've not taken the time to try to find out who 81.29.241.70 is,
or if it's related to the resleeve.com website (which is at 66.96.132.4).
On 6/20/08, Peter C <peter@nosimport.com> wrote:
>
> Dean,
> I too went to the link you posted. All was fine. But then I
> went to the 'HOME" link and got the same virus alert.I did not go
> farther. I don't know how real the alert is/was, but that is what
> happened to me as well.
>
> Peter C.
_______________________________________________
Support Team.Net http://www.team.net/donate.html
http://www.team.net/archive
http://autox.team.net/mailman/listinfo/spridgets
|