And my opinion was the site was passing 3 files as CSS files with the JavaScript contained
within them. Yes good protection does pickup the trojan right away. The fact remains the
page is linking to an infected site with a history of infections.
Tom
Sent from my iPhone
On Aug 10, 2012, at 3:04 PM, Bartosz Dziewoński <matma.rex(a)gmail.com> wrote:
avast! also complains, and gives more specific
information. There is
something definitely wrong with MediaWiki:Print.css page[1] – it seems
to contains HTML <script> element and, in fact, some obfuscated code I
didn't bother to decipher. Of course, this code will not be run anyway
on any halfway decent browser, but *something* is wrong. The code
doesn't appeans on the page in MediaWiki namespace[2].
[1]
http://semeb.com/dpldemo/index.php?title=MediaWiki:Print.css&usemsgcach…
[2]
http://semeb.com/dpldemo/index.php?title=MediaWiki:Print.css
-- Matma Rex
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l(a)lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l