 |
|
11-06-2007, 10:09 AM
|
#1
|
|
Not a Schrub Fan!
Join Date: Oct 2002
Location: Cranbrook, BC
Posts: 288
|
Virus on Equibase??
i don't know where to put this, but lots of folks will see it here!
my Avast virus software catches the CVE-2007-3896 [Expl] virus when I attempt to d/l the ZIA pdf-results chart for Nov 5.
i get the same result from Equibase emailed file.
any others??
brian
__________________
Brian
|
|
|
|
11-06-2007, 11:37 AM
|
#2
|
|
Registered User
Join Date: Nov 2006
Posts: 532
|
I get the same thing for Zia only.
|
|
|
|
|
11-06-2007, 11:53 AM
|
#3
|
|
Not a Schrub Fan!
Join Date: Oct 2002
Location: Cranbrook, BC
Posts: 288
|
Also, it is for ZIA on Nov 5 only.
i contacted Equibase support and they did not 'have a problem'.
so they emailed me a copy of the file. it too was infected.
maybe they need more contact to indicate they have a problem, and it may be with their AntiVirus software.
scary that!!
brian
__________________
Brian
|
|
|
|
|
11-06-2007, 01:20 PM
|
#4
|
|
Not a Schrub Fan!
Join Date: Oct 2002
Location: Cranbrook, BC
Posts: 288
|
Further:
Have scanned HD, not all, but all pdf-files.
found 49 infected files starting with GG on May 27/07
__________________
Brian
|
|
|
|
|
11-06-2007, 02:29 PM
|
#5
|
|
crusty old guy
Join Date: Aug 2003
Location: Snarkytown USA
Posts: 3,925
|
It's an IE vulnerability. Check out the links here:
CVE-2007-3896 Link
|
|
|
|
|
11-06-2007, 02:36 PM
|
#6
|
|
Not a Schrub Fan!
Join Date: Oct 2002
Location: Cranbrook, BC
Posts: 288
|
But it is still a Virus is it not?
that link just tells (to some) how the virus takes advantage of Windows, eh?
__________________
Brian
|
|
|
|
|
11-06-2007, 02:40 PM
|
#7
|
|
Registered User
Join Date: Aug 2005
Posts: 2,924
|
Unless my browser was playing tricks, the results for the 5th were gone and now they are back, maybe they fixed the problem?
I am using IE 6 and they are all passing virus checks.
Jim
|
|
|
|
|
11-06-2007, 02:51 PM
|
#8
|
|
Not a Schrub Fan!
Join Date: Oct 2002
Location: Cranbrook, BC
Posts: 288
|
the problem with that file is gone for me too, must have fixed it! hopefully they got the root of the problem, and we will find no more until the next time.
__________________
Brian
|
|
|
|
|
11-06-2007, 05:11 PM
|
#9
|
|
Registered User
Join Date: Dec 2001
Posts: 6,128
|
Very likely was not a problem with the files, just a false positive with the virus program. That isn't uncommon. The best thing to do if you get a flag that says virus and you got it from what should be a trusted source is to send it to the virus company for further evaluation. Avast must be getting very sensitive lately -- I've had a number of false positives on uninfected files of different types with some of their recent updates...
|
|
|
|
|
11-06-2007, 05:41 PM
|
#10
|
|
Not a Schrub Fan!
Join Date: Oct 2002
Location: Cranbrook, BC
Posts: 288
|
you may be right about false positives, but i got them from two different machines running different operating systems (Win2k and xp). they occurred thrice last nite, again this am, and when the file was emailed to me.
what 'trusted site'?
__________________
Brian
|
|
|
|
|
11-06-2007, 06:22 PM
|
#11
|
|
Registered User
Join Date: Dec 2001
Posts: 6,128
|
Quote:
|
Originally Posted by Brian Flewwelling
you may be right about false positives, but i got them from two different machines running different operating systems (Win2k and xp). they occurred thrice last nite, again this am, and when the file was emailed to me.
what 'trusted site'?
|
Why wouldn't you get them on different machines, etc? It is the virus program you use that counts -- if you are using Avast on all those machines you're going to get the same result.
Equibase in this case would be the "trusted" site -- meaning you don't think Equibase is actually putting viruses in their files on purpose, do you? While it is possible their files are infected for some reason, the most likely explanation is that there are no viruses in those files at all, the virus program is simply in error. ...
|
|
|
|
|
11-07-2007, 10:01 AM
|
#12
|
|
Not a Schrub Fan!
Join Date: Oct 2002
Location: Cranbrook, BC
Posts: 288
|
Quote:
|
Originally Posted by GameTheory
Equibase in this case would be the "trusted" site -- meaning you don't think Equibase is actually putting viruses in their files on purpose, do you? While it is possible their files are infected for some reason, the most likely explanation is that there are no viruses in those files at all, the virus program is simply in error. ...
|
but the false positive disappeared after notifying Equibase that this problem was encountered. So you may be right about the false positive, but i suspect not.
and Equibase corrected the problem, so are not a part of the evil empire despite Mr. Bain's problems ( described last spring)
thank you all for your assistance, but i think this issue is now morte!
__________________
Brian
|
|
|
|
|
11-07-2007, 07:44 PM
|
#13
|
|
DC posts & not banned?
Join Date: Apr 2007
Posts: 728
|
Have you considered a second opinion?
Most of the major anti virus, spyware providers have FREE
online scans using activeX.
Norton.... TrendMicro.... Kaspersky.... Panda.... McAfee.... CA
____________________________________
“Two men were examining the output of the new computer in their department. After an hour or so of analyzing the data, one of them remarked: "Do you realize it would take 400 men at least 250 years to make a mistake this big ?”
|
|
|
|
|
11-08-2007, 12:52 AM
|
#14
|
|
Not a Schrub Fan!
Join Date: Oct 2002
Location: Cranbrook, BC
Posts: 288
|
Another False positive
MED for Wed came up positive.
i can't test the file because my virus checker refuses to download it.
__________________
Brian
|
|
|
|
|
11-08-2007, 07:56 AM
|
#15
|
|
Veteran
Join Date: Sep 2007
Posts: 148
|
ALL OK here
Quote:
|
Originally Posted by Brian Flewwelling
MED for Wed came up positive.
i can't test the file because my virus checker refuses to download it.
|
I downloaded this file (using Windows 2000 Pro and Norton) - NO problems here.
|
|
|
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
|
|
