Just wanted to let anyone know that they should check their ProgressTM installations.
I found one of them hacked, by editing file /progress/variables.php
by adding this code:
Avast was reporting
HTML-IFrame-KE [Trj]
PS:
Don't worry code above is picture so it's perfectly safe
