hidden javascript in some threads

[sijpie]

Some of the threads provoke the following response from Webwasher which checks the traffic on our firewall:

Request Blocked by Proactive Scanning
Your request to URL http://www.mrexcel.com/forum/showthread.php?t=363250/ 
has been blocked by Webwasher Proactive Scanning. The program could potentially 
perform External Process Access operations, which is not allowed by your administrator 
at this time. 
Malware Name:WW: JavaScript.Unwanted.gen!EP:H
URL:http://www.mrexcel.com/forum/showthread.php?t=363250
File:http://www.mrexcel.com/forum/showthread.php?t=363250/
File Type:-Reputation Level:Neutral

i wonder if one of the board members has javacode hidden in their tag, or so. Or is it perhaps in some advertising?
Can you check?

some of the 'offending' threads:
363250
363173 (which seems to link to thread 1800876)
363284 (which seems to link to thread 1799709)

 

[RoryA]

I would guess it relates to the sample worksheets in those posts and the comboboxes used to change cell references and show the formulas used. I can't see anything harmful there (though I am by no means a web expert).

 

[Von Pookie]

I agree with Rory. The only thing those threads have in common is that someone posted an example using the HTML Maker, which uses javascript in the HTML code it generates.

While the javascript being used is perfectly harmless, it is referenced from the addin author's site, which may be part of the reason the alert is appearing for you. Also, I have removed the HTML examples in the first two threads you listed as they were posted incorrectly.

 

[sijpie]

OK thanks guys. I didn't think it was sinster, but you never know. Now how do I get this through to our proxyserver....