From: Stefan Mahlitz <stefan@...>
Date: 2005-12-03T02:25:56+09:00
Subject: Re: bluecloth 1.0.0 - Test contain trojan ??

itsme213 wrote:
> I just got a very peculiar warning from running McAfee virus scan (XP):
> 
> BlueCloth-1.0.0\tests\15_Contrib.tests.rb is infected by the
>   JS\Exploit-CrossSite trojan.
> 
> Anything to be concerned about here? Or a total red-herring from McAfee?

Antivir (updated 2 hours ago) does not complain.

Perhaps McAffee uses some heuristics to guess whether sth is a virus or not.

Possibly because of the string DangerousHtml (containing <script> tags).

There has been an online-virus-scanner somewhere sometime, but - here it is:

http://www.kaspersky.com/scanforvirus