a friend has a website for his business. on visiting the home page of the
site a virus warning comes up in AVG: (HTML/Framer.BS). he has contacted the
website builder and hosting company but both say that its nothing to do with
them. this only happens in IE and not firefox which is why i'm asking
question here.

any suggestions would be greatly appreciated as his business is being badly
affected.

thanks in advance

What is the URL for that Web site

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"alex01" <alex01@discussions.microsoft.com> wrote in message
news:A1CBFC72-D788-4B47-BD96-D83F9C9B6826@microsoft.com...
>a friend has a website for his business. on visiting the home page of the
> site a virus warning comes up in AVG: (HTML/Framer.BS). he has contacted the
> website builder and hosting company but both say that its nothing to do with
> them. this only happens in IE and not firefox which is why i'm asking
> question here.
>
> any suggestions would be greatly appreciated as his business is being badly
> affected.
>
> thanks in advance

Please do NOT post a clickable URL!!!

Peter Foldes wrote:
> What is the URL for that Web site
>
>
> "alex01" <alex01@discussions.microsoft.com> wrote in message
> news:A1CBFC72-D788-4B47-BD96-D83F9C9B6826@microsoft.com...
>> a friend has a website for his business. on visiting the home page of the
>> site a virus warning comes up in AVG: (HTML/Framer.BS). he has contacted
>> the website builder and hosting company but both say that its nothing to
>> do with them. this only happens in IE and not firefox which is why i'm
>> asking question here.
>>
>> any suggestions would be greatly appreciated as his business is being
>> badly
>> affected.
>>
>> thanks in advance

that's why i did not post originally.

http://www.stringofpearls100.co.uk/

remove the 100 from address.

"PA Bear [MS MVP]" wrote:

> Please do NOT post a clickable URL!!!
>
> Peter Foldes wrote:
> > What is the URL for that Web site
> >
> >
> > "alex01" <alex01@discussions.microsoft.com> wrote in message
> > news:A1CBFC72-D788-4B47-BD96-D83F9C9B6826@microsoft.com...
> >> a friend has a website for his business. on visiting the home page of the
> >> site a virus warning comes up in AVG: (HTML/Framer.BS). he has contacted
> >> the website builder and hosting company but both say that its nothing to
> >> do with them. this only happens in IE and not firefox which is why i'm
> >> asking question here.
> >>
> >> any suggestions would be greatly appreciated as his business is being
> >> badly
> >> affected.
> >>
> >> thanks in advance
>
>

If you are sure that the site is not serving a virus you will need to find out
what element in the page is being flagged and submit it as a false positive to
AVG. You could also update the anti-virus definitions to see if AVG has
discovered the problem elsewhere and corrected it (it may take up to a few weeks
if the problem is not seen by many users).

If you are _NOT_ sure, submit the URL to AVG through their forum or support
system and let _them_ take the risk.

It is possible that you have different scanning settings in Firefox than in IE
or that the site is serving different content based on browser sniffing.

Do you know if users of other anti-virus software are receiving a warning?

--
G. R. Woodring

Date: 7/3/2009 12:17 PM, Author: alex01 Wrote:
> a friend has a website for his business. on visiting the home page of the
> site a virus warning comes up in AVG: (HTML/Framer.BS). he has contacted the
> website builder and hosting company but both say that its nothing to do with
> them. this only happens in IE and not firefox which is why i'm asking
> question here.
>
> any suggestions would be greatly appreciated as his business is being badly
> affected.
>
> thanks in advance

alex01 wrote:

> http:// www. stringofpearls. co. uk/

Maybe your friend should consider REMOVING the Google advertising
scripts.

i should have thought about trying that earlier - yes my business computer
has mcafee installed and it reports blocking a script then reporting it as a
trojan: generic downloader.o in the log.

i'm no expert on web design but the web designer said that it can't a virus
because firefox would pick it up as well, which if true makes me think that
it could false reading in ie.

another point is that both avg and mcafee have a link to find out more about
the object but neither come up with anything.

hope this helps

"G. R. Woodring" wrote:

> If you are sure that the site is not serving a virus you will need to find out
> what element in the page is being flagged and submit it as a false positive to
> AVG. You could also update the anti-virus definitions to see if AVG has
> discovered the problem elsewhere and corrected it (it may take up to a few weeks
> if the problem is not seen by many users).
>
> If you are _NOT_ sure, submit the URL to AVG through their forum or support
> system and let _them_ take the risk.
>
> It is possible that you have different scanning settings in Firefox than in IE
> or that the site is serving different content based on browser sniffing.
>
> Do you know if users of other anti-virus software are receiving a warning?
>
> --
> G. R. Woodring
>
> Date: 7/3/2009 12:17 PM, Author: alex01 Wrote:
> > a friend has a website for his business. on visiting the home page of the
> > site a virus warning comes up in AVG: (HTML/Framer.BS). he has contacted the
> > website builder and hosting company but both say that its nothing to do with
> > them. this only happens in IE and not firefox which is why i'm asking
> > question here.
> >
> > any suggestions would be greatly appreciated as his business is being badly
> > affected.
> >
> > thanks in advance
>

do you think that is what's responsible for this problem? if so i will
certainly make the suggestion with no hesitation.

"VanguardLH" wrote:

> alex01 wrote:
>
> > http:// www. stringofpearls. co. uk/
>
> Maybe your friend should consider REMOVING the Google advertising
> scripts.
>

alex01 wrote:

> do you think that is what's responsible for this problem? if so i will
> certainly make the suggestion with no hesitation.
>
> "VanguardLH" wrote:
>
>> alex01 wrote:
>>
>>> http:// www. stringofpearls. co. uk/
>>
>> Maybe your friend should consider REMOVING the Google advertising
>> scripts.
>>

There isn't much of any content of the web page. The images and text
from the owner is minimal and in a simple table. However, other content
gets delivered from the Google scripts. Why is your friend trying to
accrue income from Google ads?

Do you have an extension installed in Firefox that would be blocking scripts
such as Adblock. That could explain why the threat isn't discovered in Firefox.

As AVG and McAfee each identify a different threat it is likely that they are
using heuristics to detect "virus-like activity", not an actual virus definition
string.

I have saved the website to disk in both IE8 and Firefox 3. ClamAV did not find
a virus in either download.

--
G. R. Woodring

Date: 7/3/2009 2:46 PM, Author: alex01 Wrote:
> i should have thought about trying that earlier - yes my business computer
> has mcafee installed and it reports blocking a script then reporting it as a
> trojan: generic downloader.o in the log.
>
> i'm no expert on web design but the web designer said that it can't a virus
> because firefox would pick it up as well, which if true makes me think that
> it could false reading in ie.
>
> another point is that both avg and mcafee have a link to find out more about
> the object but neither come up with anything.
>
> hope this helps
>
> "G. R. Woodring" wrote:
>
>> If you are sure that the site is not serving a virus you will need to find out
>> what element in the page is being flagged and submit it as a false positive to
>> AVG. You could also update the anti-virus definitions to see if AVG has
>> discovered the problem elsewhere and corrected it (it may take up to a few weeks
>> if the problem is not seen by many users).
>>
>> If you are _NOT_ sure, submit the URL to AVG through their forum or support
>> system and let _them_ take the risk.
>>
>> It is possible that you have different scanning settings in Firefox than in IE
>> or that the site is serving different content based on browser sniffing.
>>
>> Do you know if users of other anti-virus software are receiving a warning?
>>
>> --
>> G. R. Woodring
>>
>> Date: 7/3/2009 12:17 PM, Author: alex01 Wrote:
>>> a friend has a website for his business. on visiting the home page of the
>>> site a virus warning comes up in AVG: (HTML/Framer.BS). he has contacted the
>>> website builder and hosting company but both say that its nothing to do with
>>> them. this only happens in IE and not firefox which is why i'm asking
>>> question here.
>>>
>>> any suggestions would be greatly appreciated as his business is being badly
>>> affected.
>>>
>>> thanks in advance

no there's nothing add on wise in firefox just a fresh default installation.

i agree, both av programs recognise something but just select a nearest
match message as programmed.

the website builder also download the whole content from the server and
scanned but found nothing either.

"G. R. Woodring" wrote:

> Do you have an extension installed in Firefox that would be blocking scripts
> such as Adblock. That could explain why the threat isn't discovered in Firefox.
>
> As AVG and McAfee each identify a different threat it is likely that they are
> using heuristics to detect "virus-like activity", not an actual virus definition
> string.
>
> I have saved the website to disk in both IE8 and Firefox 3. ClamAV did not find
> a virus in either download.
>
> --
> G. R. Woodring
>
> Date: 7/3/2009 2:46 PM, Author: alex01 Wrote:
> > i should have thought about trying that earlier - yes my business computer
> > has mcafee installed and it reports blocking a script then reporting it as a
> > trojan: generic downloader.o in the log.
> >
> > i'm no expert on web design but the web designer said that it can't a virus
> > because firefox would pick it up as well, which if true makes me think that
> > it could false reading in ie.
> >
> > another point is that both avg and mcafee have a link to find out more about
> > the object but neither come up with anything.
> >
> > hope this helps
> >
> > "G. R. Woodring" wrote:
> >
> >> If you are sure that the site is not serving a virus you will need to find out
> >> what element in the page is being flagged and submit it as a false positive to
> >> AVG. You could also update the anti-virus definitions to see if AVG has
> >> discovered the problem elsewhere and corrected it (it may take up to a few weeks
> >> if the problem is not seen by many users).
> >>
> >> If you are _NOT_ sure, submit the URL to AVG through their forum or support
> >> system and let _them_ take the risk.
> >>
> >> It is possible that you have different scanning settings in Firefox than in IE
> >> or that the site is serving different content based on browser sniffing.
> >>
> >> Do you know if users of other anti-virus software are receiving a warning?
> >>
> >> --
> >> G. R. Woodring
> >>
> >> Date: 7/3/2009 12:17 PM, Author: alex01 Wrote:
> >>> a friend has a website for his business. on visiting the home page of the
> >>> site a virus warning comes up in AVG: (HTML/Framer.BS). he has contacted the
> >>> website builder and hosting company but both say that its nothing to do with
> >>> them. this only happens in IE and not firefox which is why i'm asking
> >>> question here.
> >>>
> >>> any suggestions would be greatly appreciated as his business is being badly
> >>> affected.
> >>>
> >>> thanks in advance
>

i will bring the matter to his attention about the scripts and let you know
what they do about it.

with regard to using google to generate enquiries if that's what you mean, i
have not asked him but i believe it is effective otherwise he would not
continue using them.


"VanguardLH" wrote:

> alex01 wrote:
>
> > do you think that is what's responsible for this problem? if so i will
> > certainly make the suggestion with no hesitation.
> >
> > "VanguardLH" wrote:
> >
> >> alex01 wrote:
> >>
> >>> http:// www. stringofpearls. co. uk/
> >>
> >> Maybe your friend should consider REMOVING the Google advertising
> >> scripts.
> >>
>
> There isn't much of any content of the web page. The images and text
> from the owner is minimal and in a simple table. However, other content
> gets delivered from the Google scripts. Why is your friend trying to
> accrue income from Google ads?
>

Doofus!

alex01 wrote:
> that's why i did not post originally.
>
> [MUNGE].stringofpearls100.co.uk/
>
> remove the 100 from address.
>
> "PA Bear [MS MVP]" wrote:
>
>> Please do NOT post a clickable URL!!!
>>
>> Peter Foldes wrote:
>>> What is the URL for that Web site
>>>
>>>
>>> "alex01" <alex01@discussions.microsoft.com> wrote in message
>>> news:A1CBFC72-D788-4B47-BD96-D83F9C9B6826@microsoft.com...
>>>> a friend has a website for his business. on visiting the home page of
>>>> the
>>>> site a virus warning comes up in AVG: (HTML/Framer.BS). he has
>>>> contacted
>>>> the website builder and hosting company but both say that its nothing
>>>> to
>>>> do with them. this only happens in IE and not firefox which is why i'm
>>>> asking question here.
>>>>
>>>> any suggestions would be greatly appreciated as his business is being
>>>> badly
>>>> affected.
>>>>
>>>> thanks in advance

Hello,

He has already munged it by stating 'remove the 100 from address'

__
http://www.bootstrike.com/ComputerService/
Singapore Computer Home Remote On-Site Repair Service
"PA Bear [MS MVP]" <PABearMVP******.com> wrote in message
news:e4YzQGD$JHA.3708@TK2MSFTNGP02.phx.gbl...
> Doofus!
>
> alex01 wrote:
>> that's why i did not post originally.
>>
>> [MUNGE].stringofpearls100.co.uk/
>>
>> remove the 100 from address.
>>
>> "PA Bear [MS MVP]" wrote:
>>
>>> Please do NOT post a clickable URL!!!
>>>
>>> Peter Foldes wrote:
>>>> What is the URL for that Web site
>>>>
>>>>
>>>> "alex01" <alex01@discussions.microsoft.com> wrote in message
>>>> news:A1CBFC72-D788-4B47-BD96-D83F9C9B6826@microsoft.com...
>>>>> a friend has a website for his business. on visiting the home page of
>>>>> the
>>>>> site a virus warning comes up in AVG: (HTML/Framer.BS). he has
>>>>> contacted
>>>>> the website builder and hosting company but both say that its nothing
>>>>> to
>>>>> do with them. this only happens in IE and not firefox which is why i'm
>>>>> asking question here.
>>>>>
>>>>> any suggestions would be greatly appreciated as his business is being
>>>>> badly
>>>>> affected.
>>>>>
>>>>> thanks in advance
>

Hello,

I've seen the page at http://www.stringofpearls100.co.uk/ and there's
nothing malicious I can see in the source.

Also visited it using IE8 and there was no warning

__
http://www.bootstrike.com/ComputerService/
Singapore Computer Home Remote On-Site Repair Service
"alex01" <alex01@discussions.microsoft.com> wrote in message
news:A1CBFC72-D788-4B47-BD96-D83F9C9B6826@microsoft.com...
>a friend has a website for his business. on visiting the home page of the
> site a virus warning comes up in AVG: (HTML/Framer.BS). he has contacted
> the
> website builder and hosting company but both say that its nothing to do
> with
> them. this only happens in IE and not firefox which is why i'm asking
> question here.
>
> any suggestions would be greatly appreciated as his business is being
> badly
> affected.
>
> thanks in advance