[es] - eS access blocked - Mal/HTMLGen-A (Sophos Endpoint Security and Control)

bttp
Vračar

Član broj: 48840
Poruke: 1539
*.dynamic.sbb.rs.

ICQ: 8285806

+155 Profil

eS access blocked - Mal/HTMLGen-A (Sophos Endpoint Security and Control)

^{16.06.2013. u 08:44 - pre 144 meseci}

Evo loga a evo i kako mi izgleda elitesecurity.org naslovna (Madzone isto).

Citat:

****************** Sophos Anti-Virus Log - 16.6.2013 7.42.01 **************

...
20130614 213341 User (NT AUTHORITY\SYSTEM) has started on-access scanning for this machine.
20130614 233340 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitemadzone.org") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130614 233353 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitemadzone.org") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130614 233429 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitemadzone.org/t466129-1") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130614 233641 Blocked web request to "static.elitesecurity.org/strelica_gore.gif" (linked from "www.elitemadzone.org") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130615 102347 User (NT AUTHORITY\SYSTEM) has stopped on-access scanning for this machine.
20130615 102348 Using detection data version 4.90G (detection engine 3.43.0). This version can detect 5196539 items.
20130615 102348 User (NT AUTHORITY\SYSTEM) has started on-access scanning for this machine.
20130615 103819 Blocked web request to "static.elitesecurity.org/banner/housing-by-verat.jpg" (linked from "www.elitemadzone.org") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130615 103822 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitemadzone.org") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130615 103826 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitemadzone.org/pp/inbox") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130615 103841 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitemadzone.org/pp/outbox") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130615 103848 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitemadzone.org/pp/citajsvoju/432499") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130615 103917 Blocked web request to "static.elitesecurity.org/banner/housing-by-verat.jpg" (linked from "www.elitemadzone.org/pp/outbox") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130615 103919 Blocked web request to "static.elitesecurity.org/online.gif" (linked from "www.elitemadzone.org/pp/inbox") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130615 184142 Blocked web request to "static.elitesecurity.org/online.gif" (linked from "www.elitemadzone.org/pp/inbox") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130616 072635 User (NT AUTHORITY\SYSTEM) has stopped on-access scanning for this machine.
20130616 072636 Using detection data version 4.90G (detection engine 3.43.0). This version can detect 5196568 items.
20130616 072637 User (NT AUTHORITY\SYSTEM) has started on-access scanning for this machine.
20130616 073629 Blocked web request to "static.elitesecurity.org/online.gif" (linked from "www.elitemadzone.org/pp/inbox") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130616 073653 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitesecurity.org") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130616 073947 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitesecurity.org/f29-Predlozi-pitanja") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130616 074000 Blocked web request to "static.elitesecurity.org/css/stil1b.css" (linked from "www.elitesecurity.org/poruka/novatema/29") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130616 074003 Blocked web request to "static.elitesecurity.org/banner/uniwebhosting2.gif" (linked from "www.elitesecurity.org/poruka/novatema/29") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
20130616 074043 Blocked web request to "static.elitesecurity.org/progress_active.gif" (linked from "www.elitesecurity.org/poruka/novatema/29") for user ASPIRE\bttp. 'Mal/HTMLGen-A' has been found at this website, reference ID 27617682.
(25 items)

Sell 'crazy' some place else. We're all stocked up here.

Odgovor na temu

X Files
Vladimir Stefanovic
Pozarevac

SuperModerator
Član broj: 15100
Poruke: 4939
*.dynamic.sbb.rs.

+646 Profil

Re: eS access blocked - Mal/HTMLGen-A (Sophos Endpoint Security and Control)

^{02.07.2013. u 20:13 - pre 143 meseci}

Mene zanima da li Sophos ima dilemu u vezi samog ES/EM Web sajta ili je ta dilema u vezi sa nekom tehnologijom u okviru sajta?

Na poslu imamo mrežni Sophos, već nekih 10-tak godina. Posredno pratim njegov razvoj i performanse. Bilo je dana kada je bio lošiji i od najlošijeg Free rešenja. Em je propuštao uljeze, em je prijavljivao False pozitivne. Kada su se pojavili oni čuveni USB autorun uljezi, naravno da je među poslednjima odreagovao. Svojevremeno, valjda da ne bi ispali glupi u društvu, nisu pristali da se okušaju na http://virusscan.jotti.org . Sada ih ima, popravili su se zaista, ali i dalje prijavljuju ogroman broj False pozitivnih.

Konačno, o Sophosu mislim da je baš defanzivan. A možda mu je to i zaštitini znak.

Problem sa pristupom ES/EM-u sam naravno primetio i ja, ali sam mislio da je to samo Policy naše firme. Ukratko, kod nas u firmi ima dosta dokonih IT admina, koji su na crnu listu web sajtova postavili 100-tine domaćih sajtova, portala, foruma. Ne bi me čudilo da je među njima i ES/EM. Sad se pitam da li se ta crna lista nekako sinhronizuje sa matičnim serverom i tu nekako preispituje.

Srećom, moja mašina nije zaključana, pa pre pristupa netu uvek pogasim jedno 7-8 Sophos servisa, i tada je sve u redu. Inače, pristupam "svojim" internetom, jer kompanijski mi je neupotrebljiv.

Odgovor na temu