[Search wiki] HEUR/HTML.Malware [Was: virus ? and some questions]

Rainer Blome rainer.blome at gmx.de
Fri Oct 17 20:57:35 UTC 2008


Simone Search wrote:
> 1. If I  open new mini article from ..wiki/special:createpage    my computer reacts with 
> HEUR/HTML.Malware is there s.o. who could explain?

That is apparently your antivirus program reacting.
My virus scanner issues the same complaint.
Googling for "HEUR/HTML.Malware" and the name of my virus scanner 
immediately yields a description of this detection type.
Probably a false positive, but you need to check this.

When I look at that file, it is a huge, 162 KB script, apparently a 
concatenation of multiple individual JavaScript files.
Looks like it is a WYSIWYG editor in JavaScript.

Bartek, you appear to have modified some of the individual files.
Do you know of any issues with it?
Do you have any idea why the file is flagged?
How is the file constructed?
What can we compare it with to verify that it is benign?
Could it be that there is any shrouding involved?

Rainer


More information about the SearchWiki mailing list