trojan clicker

patentinv
patentinv used Ask the Experts™
on
Every time i try to go to certain websites my antivirus stops page from loading and brings up
message:

trojanclicker.iframe.GT.gen Trojan

and  NOD32 eset quarantines it,

How can i stop this from happening?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
This means that on that webpage a malicious script gets loaded in an iframe (= a webpage in a webpage). My recommendation: don't visit that website again unless you want to get infected with a trojan.

Commented:
Agreed with Notexa. If this only happens on certain sites either avoid them, find alternatives, or contact the website administrators.

Author

Commented:
Hi experts,

These are my websites, have no idea how these viruses got there, the website is only used for viewing.

How can i remove these viruses from my websites?

Thanks patentinv
Learn Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

Commented:
can you give an url to your site?
Do you have advertising or pagestatistics code on the page? If so, try disabling them.

Author

Commented:
Yes i have statcounter code it tells me how many people visit my site, I was thinking along that line.
Sorry  about the late responses so busy, work etc,

my url is roofestimator.net and paintestimator.net

Commented:
Those sites seem to load just fine here.
Also checked them with norton: http://safeweb.norton.com/report/show?url=http:%2F%2Froofestimator.net%2F

Try deleting your temporary files in your browser, maybe there's a corrupted file in there.

Commented:
Also, does it happen on all pages, on just the homepage or on a certain page ?

Author

Commented:
Hi Notexa,

It happens only on the homepage, if i disable nod32 eset my antivirus it will not give the error, so for some reason my antivirus is seeing it as a virus I'm just scared it will infect a visitor to my website, is this possible?

I'm going to remove the statcounter code as soon as i get time, been a while since I've logged onto websites and did any changes. Kinda rusty.

Did you say you checked my websites with norton, and did  norton say they were virus free?

Thanks Patentinv

Commented:
Hi younghv and rpggamergirl.  I suspected that code was the culprit giving the warnings on the TS's site.  That's why I posted part of it so that the TS knows what to llook for.  Normally the part I posted isn't capable of infecting your pc, but I'm sorry that your AV's went haywire on it.  I'll be more carefull in the future.
Author of the Year 2011
Top Expert 2006

Commented:
Notexa - thank you for responding.
If you can give "patentinv" some specific advice on getting that web site cleaned up, it would be great.

I appreciate your working with the Asker.
Commented:
Patentiv, the offending code is at the bottom of your index page between script tags. the script is a mix of letters and numbers. Remove that part and your page is ok again.

Check  if this is code you added yourself. If not your sites probably got hacked. In that case, check with your hoster to see what might have happened.

Author

Commented:
Notexa

Great job its now fixed, sorry about advisors.

I'm sending my web host a email asking if these sights are secure.

Thx Patentinv

Author

Commented:
Thx

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial