We use sunbelts VIPRE enterprise systems, and I was alerted to almost every computer in the company having this and being quarantined.

Is anyone familiar with addthis_widget.js. It detects it as a trojan.js.redirector.bg , I'm not sure if this is a false positive or if it is actually a threat.

I tried googling it a few different ways but didnt find anything definitive. Does anyone have any experience with this?

  • +1 -We are having the same issue here.
    – Aaron
    Apr 21 '11 at 13:25
  • yeah i started getting emails on my phone roughly starting at 7am this morning with high risk alerts so i got to come in nice and early :|
    – Jeff
    Apr 21 '11 at 13:51

I think it is a false positive. I just found this on the GFI community site:

We disabled this threat late last night to allow for further investigation. Please make sure you have the latest definitions.
Joe Frederick QA Engineer Sunbelt Software


I just got the same thing, 18 computers showing various threats. addthis_widget.js, common.js, friendconnect.js, espn.core.min.js and a couple others. Seems to me there is something in the java script being falsely reported.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.