False Positive in NOD32 for CVE-2011-1250

[Aintaer 0]

Hello,

 

I'm a JavaScript developer for Adobe, operating the behance.net website. Recently we've been getting reports of ESET NOD32 Antivirus flagging our minified JS at

hxxp://a2.behance.net/min/b=assets/js&f=network.js,discover.js&cb=105269302 as JS/Exploit.CVE-2011-1250.A trojan

 

We believe this is a false positive and would like to investigate why this is happening and how to mitigate.

Edited November 8, 2013 by Aintaer

[Veeshush 3]

I just scanned with: https://www.virustotal.com/en/url/29dd5bece916229459336d8992e8323dcefe41ac5bf45550a3e2c940aed04821/analysis/1384181928/

 

And I'm not curently getting anything by visiting that page with ESET Smart Security. Granted it's been a few days since your post so maybe they've fixed it.

Edited November 11, 2013 by Veeshush

[Tal 0]

hxxp://www.d.co.il is also flagged for the same trojan. The JavaScript is minified.

Edited December 24, 2013 by Tal

[Arakasi 549]

https://www.virustotal.com/en/url/08dd7b78674c736ec38a698a6574964493ea73ad9abb05a842a53ac91aa37657/analysis/