| www.ClassicTW.com https://mail.black-squirrel.com/ |
|
| Forum Virus? https://mail.black-squirrel.com/viewtopic.php?f=14&t=32352 |
Page 1 of 1 |
| Author: | Promethius [ Wed Oct 05, 2011 10:48 am ] |
| Post subject: | Forum Virus? |
Last night the site was blocked (loading active topcs) by our corporate firewall with the following partial message (I deleted my IP, userID and company information): The transferred file contained a virus and was therefore blocked. URL: http://www.classictw.com/ Media Type: text/html Virus Name: MGW: Heuristic.BehavesLike.JS.Suspicious.A Categories: Forum/Bulletin Boards I have ran scans on my home computer and nothing has been found. I am running ThreatFire and Microsoft Security Essentials with everything up-to-date on patches. I don't know if the message is a false detection or not. |
|
| Author: | Mongoose [ Thu Oct 06, 2011 10:37 am ] |
| Post subject: | Re: Forum Virus? |
Heuristic detection means it's not a known virus, it's trying to be smart and recognize malicious code by its behavior. Lots of false positives with that. Probably just corporate paranoia. |
|
| Author: | Promethius [ Thu Oct 06, 2011 11:05 am ] |
| Post subject: | Re: Forum Virus? |
Mongoose wrote: Heuristic detection means it's not a known virus, it's trying to be smart and recognize malicious code by its behavior. Lots of false positives with that. Probably just corporate paranoia. Probably correct on the corporate paranoia. Our systems are locked down very tight at work. I figured if there was a chance on it being a valid hit, I should post. |
|
| Author: | John Pritchett [ Thu Oct 06, 2011 3:34 pm ] |
| Post subject: | Re: Forum Virus? |
I'll run a server virus scan anyway just to be sure. It hasn't been that long since the site was hacked and a bunch of racy images were uploaded to a subdirectory. The forum software isn't very secure. |
|
| Author: | Promethius [ Fri Oct 07, 2011 12:32 am ] |
| Post subject: | Re: Forum Virus? |
Hopefully it is a false detection by our network, and nothing else. It bites not being able to login from work with this laptop locking up as it does. New one isn't getting here soon enough. |
|
| Author: | Promethius [ Fri Oct 07, 2011 6:45 pm ] |
| Post subject: | Re: Forum Virus? |
Our corporate firewall is no longer detecting anything on the site. |
|
| Page 1 of 1 | All times are UTC - 5 hours |
| Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |
|