[1st part of site is fine, 2nd part apparently has HTML/ScrInject.B trojan?]

14 minutes ago, Rami said:

No I am not repeating what have been said before in earlier posts , I thought you had a trouble understanding the CAPTCHA and how actually it works , so I tried to describe it to you with my words , all I tried to do is help , it seems that I was no help , it's fine , don't go mad over it

haha, you're definitely repeating what's already been said and you need some ESL classes if that's what you think the CAPTCHA is the issue 🙂

keep trolling though, really shows how smart you are

[1st part of site is fine, 2nd part apparently has HTML/ScrInject.B trojan?]

1 hour ago, Rami said:

Then your problem is with the website after you have been verified as human and taken to the next page and then you get that address is blocked or somekind of detection , then the malicious content is within the page you are visiting , CAPTCHA has nothing to do with it. with or without it you are going to get the same thing.

yes, this has all been established in the earlier posts, thanks for repeating it.

[12.1.31.0]

13 hours ago, cyberWorzx said:

Spoke too soon. Seems to occur every time I log in now after my monitor times out.

same here.

weird how it temporarily solved itself the first time for me, though. almost as if the process was hiding from me or something when I caught it running in Task Manager.

[1st part of site is fine, 2nd part apparently has HTML/ScrInject.B trojan?]

2 hours ago, itman said:

It appears to me Eset is detecting something on the captcha web page and blocking it. My experience with such an occurrence is there might be other malware attempting to be served up from such a web page. So proceeding to enter data, etc. on that web page is done at your own peril.

What you can try is suspending uBlock for that web page and observing what Eset detects on the web page.

 

1 hour ago, Marcos said:

We'll keep the address blocked. If you want to allow access at your own risk, you can add the blocked address to the list of allowed addresses:

guess I'll leave that site alone then. thanks for your replies and advice, appreciate it.

[1st part of site is fine, 2nd part apparently has HTML/ScrInject.B trojan?]

2 hours ago, Rami said:

CAPTCHA's job is to make sure they separate Human visitor from a Bot visitor , it doesn't protect you against malicious contents.

never thought it did, I know what CAPTCHA is. my issue is with the page revealed after completing the CAPTCHA.

[1st part of site is fine, 2nd part apparently has HTML/ScrInject.B trojan?]

On 3/22/2019 at 5:18 AM, Marcos said:

I'll look into it, however, I'm afraid that without unblocking the aggressive ad domains it won't be possible.

any updates? is the page after entering the CAPTCHA safe to traverse through?

[Main "You are protected" screen keeps popping up every few minutes]

21 minutes ago, itman said:

This is not an isolated instance. Another user posted same issue here: https://forum.eset.com/topic/18952-you-are-protected/

Did you install Eset from scratch, or was this an in-program upgrade to ver. 12.1.31? What Eset ver. was installed prior to 12.1.31?

installed ESET Internet Security 2 months ago, always automatically installed the latest updates (so most likely 12.1.30 installed before 12.1.31), and didn't have this problem until a few days ago.

thought it was a "Display Notification/Alert" issue so I turned those off for a bit but I still had this problem.

what's odd is that after reading Marcos' post I went into Task Manager > Details tab, saw egui.exe was running and then it spontaneously ended and removed itself from Task Manager and I haven't had this popping up problem since.

[Main "You are protected" screen keeps popping up every few minutes]

1 hour ago, Marcos said:

Since we have no clue as to what screen you mean, please post a screen shot of it for clarification.

my bad, I meant this screen keeps popping up every few minutes even though I'm not running any scans:

[Main "You are protected" screen keeps popping up every few minutes]

wondering why this has been happening recently.

[1st part of site is fine, 2nd part apparently has HTML/ScrInject.B trojan?]

1 minute ago, Marcos said:

It appears that a lot of ads pop up on the site and the ads urls are blocked. I don't think a normal page should contain more ads than necessary. It's definitely not a behavior desired by users.
 

sorry for that, these URL shortening sites are riddled with those since that's how they make money apparently.

uBlock Origin takes care of 99% of the ads if you have it installed.

but the problem is after entering the CAPTCHA I get the "HTML/ScrInject.B trojan blocked" screen.

I need to get through this blocked screen and I'm wondering if there actually is a trojan on this page or if it's a false positive and I can pause NOD32 protection with uBlock Origin still doing work.

[1st part of site is fine, 2nd part apparently has HTML/ScrInject.B trojan?]

URL shortener site in question: https://tokenfly.pw/medhQB

1st part of site with an "enter the words" CAPTCHA is fine according to NOD32, but after entering the CAPTCHA and the page refreshes (the URL is exactly the same) NOD32 blocks it.

anybody have a virtual machine or a sandbox to determine if there's a false positive in the 2nd part of the site or if it's safe to go through anyway?

thanks in advance.